$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa File: 9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa (raw, json) Hash identifier: tOkLou5eZK3/WeTx6ZfACbtHJgdqqVa3ENk5pcjBImE= Subject key identifier: DC:04:DD:1E:50:13:36:2C:72:01:E0:6D:C2:C8:F1:7E:49:F3:F7:6D Certificate issuer: /CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Certificate serial: 010D0C9F4328584AE4611B9D50A0C315A3AA4340 Authority key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 54082 IP address blocks: 2607:8040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1b:9d:50:a0:c3:15:a3:aa:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=d49f16c3-ab21-4a96-a7ad-e5d0015d9d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3a:3f:fa:08:f3:b8:bb:bc:47:98:90:73:6c: 9a:66:8d:83:53:2a:c3:9a:1a:40:8c:73:41:a0:5d: db:9b:9e:bb:ef:48:9f:85:c2:9a:70:66:6e:29:ff: ac:fa:52:e1:9c:03:77:77:cc:fa:32:bc:c8:2b:14: be:72:d4:67:00:3a:a9:41:d3:6a:11:6d:42:5c:d8: a9:aa:f2:a3:22:46:ef:12:5b:8b:cc:41:e5:47:ed: ae:2b:bb:3a:b4:be:ec:3d:a8:27:58:5e:88:a5:29: b6:c4:3c:d5:9c:11:5a:75:49:e2:b0:9a:8e:31:9a: 1b:51:5d:f0:6b:05:75:1a:e9:c8:6f:86:96:e8:e1: 4c:5b:58:0c:e2:e5:1c:23:c5:76:4c:d7:c7:2b:28: 15:94:ed:92:c0:c9:2a:19:a1:cf:73:c2:fb:cc:55: 76:05:2c:4a:c2:f6:60:e7:c2:4f:e4:5c:38:f8:bd: 13:b3:e0:dd:11:06:0d:bf:4f:35:a7:42:c0:2a:0d: 22:a4:34:11:59:aa:d3:d5:d4:7f:9c:b2:59:fc:db: a7:1c:96:15:0e:72:84:d5:52:73:2f:13:98:77:31: f9:9c:50:43:ea:6d:16:51:42:ea:59:c4:58:fd:29: 62:7f:3b:13:72:b7:46:5b:ed:1c:f9:5c:2b:72:23: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:04:DD:1E:50:13:36:2C:72:01:E0:6D:C2:C8:F1:7E:49:F3:F7:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl X509v3 Authority Key Identifier: keyid:3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:4b:d2:b8:e0:9d:b0:4c:4e:f2:cf:cf:26:6d:4d:1b:d3:a3: 14:59:7f:1b:8b:8f:d6:b8:e9:82:3f:6c:a6:6a:65:9d:4e:57: 79:14:34:16:1c:45:9e:fe:44:e1:3f:1e:77:2a:08:63:12:42: 1f:c3:3e:29:16:62:64:5d:fe:d0:bd:7d:bf:2e:ee:46:d0:1b: 42:c2:d8:1d:7b:80:40:a0:22:4d:28:28:49:18:2c:b2:30:a0: bb:10:89:6b:6f:e5:7f:a0:f1:22:46:23:15:1a:71:80:0e:74: 9e:79:8a:2c:2c:31:f5:c5:62:f5:64:a6:b2:79:67:06:0e:9f: ca:f3:83:a7:05:aa:ee:c8:ac:f7:a7:93:6b:fd:48:6e:68:e8: b9:c1:a0:05:e4:54:a6:07:b5:ae:2c:f1:0c:a7:60:b1:f2:64: 6b:7f:a1:e8:cf:dd:0b:11:00:2d:1c:9b:6b:e6:0b:7b:1d:10: fb:43:0c:24:19:84:f6:90:0f:93:82:78:67:11:f8:19:2d:ca: bc:74:b0:59:dd:6c:18:0e:ac:9b:7a:1a:03:3a:b4:ae:85:d3: c2:c8:b2:74:e2:7a:08:2e:14:13:a0:76:64:cd:75:a7:00:c4: 08:71:23:56:c2:0d:e1:44:46:be:db:4a:7f:b9:24:96:01:f0: 90:41:f1:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErkYRudUKDDFaOqQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxY2RhZTUtYjA0MS00OTkzLTk2M2QtNmY4NTVmNzRl ZmExMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDQ5ZjE2YzMtYWIyMS00YTk2LWE3YWQtZTVkMDAxNWQ5ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Do/+gjzuLu8R5iQc2yaZo2DUyrDmhpAjHNB oF3bm56770ifhcKacGZuKf+s+lLhnAN3d8z6MrzIKxS+ctRnADqpQdNqEW1CXNip qvKjIkbvEluLzEHlR+2uK7s6tL7sPagnWF6IpSm2xDzVnBFadUnisJqOMZobUV3w awV1GunIb4aW6OFMW1gM4uUcI8V2TNfHKygVlO2SwMkqGaHPc8L7zFV2BSxKwvZg 58JP5Fw4+L0Ts+DdEQYNv081p0LAKg0ipDQRWarT1dR/nLJZ/NunHJYVDnKE1VJz LxOYdzH5nFBD6m0WUULqWcRY/SlifzsTcrdGW+0c+VwrciOHnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNwE3R5QEzYscgHgbcLI8X5J8/dtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFj ZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3NGVmYTEvOWViZDU0YTAtZjgyYy0z ZmQ3LWJmYTItZmQ5ZjIxYjk1OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWYxY2RhZTUtYjA0MS00OTkzLTk2 M2QtNmY4NTVmNzRlZmExLzFmMWNkYWU1LWIwNDEtNDk5My05NjNkLTZmODU1Zjc0 ZWZhMS5jcmwwHwYDVR0jBBgwFoAUPqQNj3LysTdkekv3WOeHd1ylvpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1 NWY3NGVmYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeAQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCyS9K44J2wTE7yz88mbU0b06MUWX8bi4/WuOmCP2ymamWdTld5FDQW HEWe/kThPx53KghjEkIfwz4pFmJkXf7QvX2/Lu5G0BtCwtgde4BAoCJNKChJGCyy MKC7EIlrb+V/oPEiRiMVGnGADnSeeYosLDH1xWL1ZKayeWcGDp/K84OnBaruyKz3 p5Nr/UhuaOi5waAF5FSmB7WuLPEMp2Cx8mRrf6Hoz90LEQAtHJtr5gt7HRD7Qwwk GYT2kA+TgnhnEfgZLcq8dLBZ3WwYDqybehoDOrSuhdPCyLJ04noILhQToHZkzXWn AMQIcSNWwg3hREa+20p/uSSWAfCQQfHQ -----END CERTIFICATE-----Generated at Sun Aug 24 04:10:13 2025 by rpki-client