$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/17ab3a7c-33b1-34e1-940a-935a63494ab3.roa File: 17ab3a7c-33b1-34e1-940a-935a63494ab3.roa (raw, json) Hash identifier: caiy2LUNln6zmEHtKjYS6ZdU16c1e7qYsvHxwnubU3Q= Subject key identifier: 23:2F:F0:46:8E:DF:D9:F4:90:CE:D6:24:3C:37:84:29:CA:05:EF:91 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AD23BB1BA394406825E1A6900 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/17ab3a7c-33b1-34e1-940a-935a63494ab3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 2607:ff00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b1:ba:39:44:06:82:5e:1a:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=026233a9-54f3-4251-943f-aba70f23a382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:be:0a:a4:1e:3f:d2:10:30:79:82:aa:ad: 20:7c:94:21:50:ad:70:fa:f6:ed:63:76:ca:de:6a: 91:57:8b:80:d9:19:64:93:7b:e9:0a:1b:c0:6a:85: e5:a4:cf:48:27:c1:64:1d:ed:c7:36:2f:5b:5a:8d: 80:b8:29:48:76:c4:b8:e6:39:bd:fc:b2:7c:fb:56: 74:2e:17:6e:9f:cd:8f:15:09:92:40:4d:ad:36:58: 07:a0:f2:b4:9e:6c:65:a8:57:4f:85:ae:74:f2:56: 0c:cf:1e:fa:31:2e:01:c6:b4:c2:a3:d8:7f:29:08: c5:13:32:1a:65:ff:df:72:33:f1:19:86:58:3e:5c: 12:e9:7f:2f:0f:83:6d:42:ee:cf:35:65:ed:c4:2e: a7:21:c4:c1:29:aa:4d:22:10:cf:ba:2a:04:80:0f: 8f:e1:54:4d:5b:8c:2d:e4:6a:4d:40:83:9b:05:1c: 3d:2b:ae:8e:90:b7:52:d0:0d:7b:db:e1:a9:5d:1f: 11:69:1f:30:c9:48:a4:bb:9a:d9:52:e2:2e:72:2a: 11:ce:a6:33:f6:cc:68:f1:52:6b:1c:7b:bd:7e:ef: 5a:49:0f:0e:6a:c9:8e:23:64:12:cf:12:97:66:25: 99:c3:9a:ec:af:89:47:2f:2b:34:31:8e:b6:6b:85: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2F:F0:46:8E:DF:D9:F4:90:CE:D6:24:3C:37:84:29:CA:05:EF:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/17ab3a7c-33b1-34e1-940a-935a63494ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv6: 2607:ff00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2e:04:7e:62:e9:79:5b:08:f2:45:8c:10:21:4f:5f:77:0e: 22:93:a8:33:b7:00:08:fe:f1:45:12:4f:93:11:85:66:30:ae: d8:f5:75:88:46:92:22:85:39:fd:9e:f3:69:28:03:84:c5:27: c8:6a:ec:13:f6:27:a4:c1:9a:e3:bf:75:44:8a:8b:6f:71:36: 28:96:fd:18:3a:dc:01:a2:97:cd:22:0b:40:40:7c:4a:42:cf: 7b:08:d7:84:18:21:86:e6:e6:0c:a6:ec:97:e7:8c:d6:2a:e0: 39:2f:5c:fe:f9:84:28:06:a1:0d:9e:2b:4c:01:9a:84:2c:37: 2f:55:dc:a5:60:b7:9b:e3:2c:78:55:72:89:f6:34:59:60:90: bd:0d:ef:a3:8a:3f:e7:cb:74:29:66:ab:e8:16:40:e1:7d:3e: 88:d5:4b:86:f2:15:bd:fc:81:1e:00:75:46:70:ab:3d:da:3f: 43:b1:75:d0:04:f5:c3:10:c0:1c:36:ba:8c:f4:38:a7:1b:8c: fd:a1:fc:cf:28:55:2d:62:3b:83:d0:f5:a4:47:a8:71:f3:ed: df:71:4f:8f:df:0c:42:2b:51:97:dd:d4:6b:d1:73:b2:7c:55: 53:99:c6:0b:9a:b3:5c:2c:bc:5c:fc:82:8c:cc:0d:11:a3:73: f3:13:ba:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErSO7G6OUQGgl4aaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MDI2MjMzYTktNTRmMy00MjUxLTk0M2YtYWJhNzBmMjNhMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYG+CqQeP9IQMHmCqq0gfJQhUK1w+vbtY3bK 3mqRV4uA2Rlkk3vpChvAaoXlpM9IJ8FkHe3HNi9bWo2AuClIdsS45jm9/LJ8+1Z0 Lhdun82PFQmSQE2tNlgHoPK0nmxlqFdPha508lYMzx76MS4BxrTCo9h/KQjFEzIa Zf/fcjPxGYZYPlwS6X8vD4NtQu7PNWXtxC6nIcTBKapNIhDPuioEgA+P4VRNW4wt 5GpNQIObBRw9K66OkLdS0A172+GpXR8RaR8wyUiku5rZUuIucioRzqYz9sxo8VJr HHu9fu9aSQ8OasmOI2QSzxKXZiWZw5rsr4lHLys0MY62a4VhpwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCMv8EaO39n0kM7WJDw3hCnKBe+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTdhYjNhN2MtMzNiMS0z NGUxLTk0MGEtOTM1YTYzNDk0YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf/ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaLgR+Yul5WwjyRYwQIU9fdw4ik6gztwAI/vFFEk+TEYVmMK7Y9XWI RpIihTn9nvNpKAOExSfIauwT9iekwZrjv3VEiotvcTYolv0YOtwBopfNIgtAQHxK Qs97CNeEGCGG5uYMpuyX54zWKuA5L1z++YQoBqENnitMAZqELDcvVdylYLeb4yx4 VXKJ9jRZYJC9De+jij/ny3QpZqvoFkDhfT6I1UuG8hW9/IEeAHVGcKs92j9DsXXQ BPXDEMAcNrqM9DinG4z9ofzPKFUtYjuD0PWkR6hx8+3fcU+P3wxCK1GX3dRr0XOy fFVTmcYLmrNcLLxc/IKMzA0Ro3PzE7oW -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:18 2025 by rpki-client