$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa File: 4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa (raw, json) Hash identifier: HpIEzcNrwDcnrxbyX63Fh9sZZ7qkr0Zca36l+zvMIfY= Subject key identifier: 92:0D:6F:19:FC:BE:A3:8E:3E:E9:A4:4D:B1:56:6D:E7:D1:60:E9:95 Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Certificate serial: 010D0C9F4328584ACCA65665B9B628775FAC0600 Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 47069 IP address blocks: 2602:f9df:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:56:65:b9:b6:28:77:5f:ac:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=20bdcb1b-504e-4b47-b167-19df33aefa1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:ba:30:c6:e7:49:1a:d4:4c:a3:32:85:74: 58:06:58:ed:33:5c:21:4e:62:44:8d:7a:4b:49:4a: 70:38:17:0e:6b:e3:28:a0:b7:99:79:51:e6:f9:1d: 6a:b3:97:ba:c3:b1:17:c9:a4:2a:bc:8b:1b:b0:51: b2:22:58:92:c1:5f:8a:e2:ac:ee:6d:47:95:65:82: de:36:00:f1:0b:96:ec:88:01:cc:30:53:60:4d:3b: c8:de:49:83:ac:de:94:78:4b:54:8c:f9:2c:e6:ae: ed:94:96:c0:e5:08:d8:45:ec:c9:ac:24:eb:64:f6: ff:d2:65:3a:c4:c9:95:8f:9e:e9:53:2a:cb:94:35: c0:92:3c:09:f6:1a:dc:aa:a9:a6:c4:fe:8b:19:69: 25:f6:7e:8e:e5:70:b6:ae:41:b6:9f:7f:9f:20:4b: 4a:92:de:5b:67:37:27:98:b9:83:3b:77:09:85:9b: f4:1f:d7:1c:69:f2:d5:13:82:95:91:88:2c:87:21: 9d:f2:7e:a4:21:44:03:8b:71:c0:dd:09:78:08:49: c4:f9:6f:6b:58:52:c8:ec:33:f6:71:53:6d:7f:ac: 13:20:61:45:8c:7b:91:be:db:df:ff:44:4e:ad:a8: 39:0c:92:56:d3:e4:8c:5b:a2:f7:9b:b1:24:d3:71: 1e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0D:6F:19:FC:BE:A3:8E:3E:E9:A4:4D:B1:56:6D:E7:D1:60:E9:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl X509v3 Authority Key Identifier: keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9df:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f8:a0:55:fe:cc:bd:1f:6d:c4:40:c6:97:2a:cf:e6:43:47: f1:b9:32:51:a5:6a:12:34:53:34:4e:39:8b:93:62:6c:32:ca: 09:5b:32:3c:e1:1f:51:dd:bd:2c:57:24:fc:01:0b:7c:ab:91: 64:84:14:a7:a1:df:33:b9:9d:6c:e2:7b:de:2f:84:7a:b5:70: 8d:ff:4c:7a:86:cb:92:9e:91:c8:be:a2:0b:c2:59:b2:64:3a: ce:f6:5b:44:9d:e1:fc:2d:cd:1d:b1:e9:1e:65:a4:c0:21:f3: 7c:b5:d7:38:86:95:84:c8:7a:5a:fe:44:83:0e:35:00:f0:90: 0d:31:f9:2b:52:37:a6:2e:44:a3:fa:21:59:1d:09:40:b5:8d: 12:d2:75:4a:97:df:22:9b:7b:8b:99:75:41:0b:b5:8f:cd:a5: be:01:3c:16:71:93:12:b4:ae:58:84:35:f2:3e:7a:fe:65:46: 69:83:a4:ed:44:e3:ba:11:40:5e:02:97:b8:67:31:c7:08:a5: 8a:de:1f:d0:c6:d4:7c:30:27:b8:29:cc:5e:3d:96:83:c6:b5: 88:d8:50:66:02:f4:6c:35:74:f1:75:9d:6f:7f:97:b5:50:cc: 45:77:5a:74:54:d3:98:d4:bd:ad:ba:92:f9:5f:0b:61:7c:d0: fa:0f:42:3b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErMplZlubYod1+sBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4 ZWJlMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MjBiZGNiMWItNTA0ZS00YjQ3LWIxNjctMTlkZjMzYWVmYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6y6MMbnSRrUTKMyhXRYBljtM1whTmJEjXpL SUpwOBcOa+MooLeZeVHm+R1qs5e6w7EXyaQqvIsbsFGyIliSwV+K4qzubUeVZYLe NgDxC5bsiAHMMFNgTTvI3kmDrN6UeEtUjPks5q7tlJbA5QjYRezJrCTrZPb/0mU6 xMmVj57pUyrLlDXAkjwJ9hrcqqmmxP6LGWkl9n6O5XC2rkG2n3+fIEtKkt5bZzcn mLmDO3cJhZv0H9ccafLVE4KVkYgshyGd8n6kIUQDi3HA3Ql4CEnE+W9rWFLI7DP2 cVNtf6wTIGFFjHuRvtvf/0ROrag5DJJW0+SMW6L3m7Ek03EeaQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJINbxn8vqOOPumkTbFWbefRYOmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvNGMxNTNhMTktZTEwYy0z YTNjLWEzZDAtNmYwZDYwNjBkMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4 OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh ZWQ5ODhlYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL53wMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkvigVf7MvR9txEDGlyrP5kNH8bkyUaVqEjRTNE45i5NibDLKCVsy POEfUd29LFck/AELfKuRZIQUp6HfM7mdbOJ73i+EerVwjf9MeobLkp6RyL6iC8JZ smQ6zvZbRJ3h/C3NHbHpHmWkwCHzfLXXOIaVhMh6Wv5Egw41APCQDTH5K1I3pi5E o/ohWR0JQLWNEtJ1SpffIpt7i5l1QQu1j82lvgE8FnGTErSuWIQ18j56/mVGaYOk 7UTjuhFAXgKXuGcxxwilit4f0MbUfDAnuCnMXj2Wg8a1iNhQZgL0bDV08XWdb3+X tVDMRXdadFTTmNS9rbqS+V8LYXzQ+g9COw== -----END CERTIFICATE-----Generated at Sun Aug 24 00:28:19 2025 by rpki-client