$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/972083ad-5bb2-352b-aaf4-9c2f8b86edf4.roa File: 972083ad-5bb2-352b-aaf4-9c2f8b86edf4.roa (raw, json) Hash identifier: 7K9rGeRU07RwvbCUr/mL6ZiqjXl7v86JjnDmU7wnS6o= Subject key identifier: 70:E9:7A:A7:BD:F1:6E:45:BD:2F:EA:AA:E7:FD:B8:A6:56:47:E1:53 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584AF2567F96463E8FF21D3E2980 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/972083ad-5bb2-352b-aaf4-9c2f8b86edf4.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 2620:1f7:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7f:96:46:3e:8f:f2:1d:3e:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=8e2ed227-e921-4ca4-8df7-98cf00d168b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d5:3f:4a:af:05:9e:67:32:20:65:2a:af:6a: 4c:47:cb:2e:e7:77:bc:19:38:f8:c6:52:3a:ca:4e: 64:fe:40:65:f2:6c:0a:af:c9:3f:14:7b:16:27:ab: 5e:b9:b7:05:94:27:6c:6d:02:28:1a:a3:02:aa:5f: 11:e2:c9:c1:ee:d8:46:42:52:a0:9f:88:21:a0:0b: ae:78:f0:f6:70:0e:96:a1:c4:b6:33:1f:02:fe:a0: e7:ad:00:e3:71:84:89:91:0a:3c:c4:f3:b9:4f:b3: 44:46:43:36:27:5d:9f:2e:43:7a:61:fb:14:b4:05: 3b:42:ad:2f:a0:63:03:3f:ed:19:7e:d3:2a:73:2c: 68:27:23:ba:c5:e5:fd:f0:18:01:3c:1e:00:be:89: bd:78:c0:7e:bd:3f:0e:ee:c9:91:9b:1b:f4:0a:f9: 0f:e9:df:eb:46:ce:a3:04:c9:0b:9b:b5:73:d7:3f: 31:c0:6b:c7:80:9c:e4:4a:21:c3:d0:ea:70:57:59: d6:bf:20:52:be:8d:f6:b1:cd:d2:a1:f6:9a:e8:04: 78:b0:20:b1:5b:82:3a:76:2a:36:21:84:05:a3:e1: 96:11:fa:b8:be:e5:dc:07:c5:80:e3:82:c6:a9:a2: d2:85:51:e2:ee:ce:bb:84:ca:31:37:f0:3a:ee:45: 14:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E9:7A:A7:BD:F1:6E:45:BD:2F:EA:AA:E7:FD:B8:A6:56:47:E1:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/972083ad-5bb2-352b-aaf4-9c2f8b86edf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1f7:c020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:03:03:15:d8:f2:fc:18:0f:7c:a4:f8:cd:66:df:eb:18:38: db:03:5e:2b:00:83:cc:ec:6d:16:00:3f:42:ea:1f:a7:dc:ee: 58:46:87:af:c1:7a:33:81:83:c4:bf:0d:d6:db:4b:fb:cc:05: 8c:21:b7:28:91:02:b3:0b:f4:e1:84:88:c1:65:bf:63:10:c9: 86:6c:67:92:68:f4:70:52:e4:f8:27:e5:b9:47:8e:25:40:90: 12:3b:1f:d3:4a:8d:1c:62:dd:67:8c:b4:1b:14:6a:8c:00:d3: 30:89:00:c2:78:15:ff:a0:ee:b4:64:ee:26:fe:c7:60:2a:4f: dd:04:d2:4b:7b:84:ce:7e:dc:19:f4:b2:f3:29:5a:34:03:00: 50:09:65:2d:c8:59:e8:47:10:f5:a2:fd:d0:c4:1a:db:d1:70: d7:a2:60:ae:5d:8e:13:76:28:5b:e7:c5:86:19:57:cc:bd:38: 3f:6f:3c:d5:3a:63:77:f1:43:46:18:bb:97:c8:9f:16:6c:0b: 5c:66:84:6c:8e:3a:28:d7:4c:e3:af:df:3b:3f:38:6a:aa:5c: cc:9e:c3:fd:e0:56:ae:ae:fe:f3:7e:6d:26:1a:e9:3b:5b:75: 9c:73:c9:5f:32:f5:3d:f1:47:8f:55:6a:41:1e:bb:36:ed:06: 5f:e2:8b:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEryVn+WRj6P8h0+KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk OGUyZWQyMjctZTkyMS00Y2E0LThkZjctOThjZjAwZDE2OGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtU/Sq8FnmcyIGUqr2pMR8su53e8GTj4xlI6 yk5k/kBl8mwKr8k/FHsWJ6teubcFlCdsbQIoGqMCql8R4snB7thGQlKgn4ghoAuu ePD2cA6WocS2Mx8C/qDnrQDjcYSJkQo8xPO5T7NERkM2J12fLkN6YfsUtAU7Qq0v oGMDP+0ZftMqcyxoJyO6xeX98BgBPB4Avom9eMB+vT8O7smRmxv0CvkP6d/rRs6j BMkLm7Vz1z8xwGvHgJzkSiHD0OpwV1nWvyBSvo32sc3Sofaa6AR4sCCxW4I6dio2 IYQFo+GWEfq4vuXcB8WA44LGqaLShVHi7s67hMoxN/A67kUUXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHDpeqe98W5FvS/qquf9uKZWR+FTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvOTcyMDgzYWQtNWJiMi0z NTJiLWFhZjQtOWMyZjhiODZlZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98Ag MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEYDAxXY8vwYD3yk+M1m3+sYONsDXisAg8zsbRYAP0LqH6fc7lhG h6/BejOBg8S/DdbbS/vMBYwhtyiRArML9OGEiMFlv2MQyYZsZ5Jo9HBS5Pgn5blH jiVAkBI7H9NKjRxi3WeMtBsUaowA0zCJAMJ4Ff+g7rRk7ib+x2AqT90E0kt7hM5+ 3Bn0svMpWjQDAFAJZS3IWehHEPWi/dDEGtvRcNeiYK5djhN2KFvnxYYZV8y9OD9v PNU6Y3fxQ0YYu5fInxZsC1xmhGyOOijXTOOv3zs/OGqqXMyew/3gVq6u/vN+bSYa 6TtbdZxzyV8y9T3xR49VakEeuzbtBl/ii+Q= -----END CERTIFICATE-----Generated at Sat Aug 23 08:16:42 2025 by rpki-client