$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/720df317-fc7f-3ff4-8859-a7cb516815f2.roa File: 720df317-fc7f-3ff4-8859-a7cb516815f2.roa (raw, json) Hash identifier: qnboLYfDw/7N7AL14HfUSoHlPHvRHfsBrZljsWFu4iw= Subject key identifier: 20:18:0C:54:21:72:71:15:E4:60:F1:B9:BA:7E:EB:E9:48:56:34:D9 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584AC2E108F813AC98D8899B0D00 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/720df317-fc7f-3ff4-8859-a7cb516815f2.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16462 IP address blocks: 2607:f8f0:c10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:08:f8:13:ac:98:d8:89:9b:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=b9d2553b-58e6-49fd-abfa-669bedaef111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:80:e0:4e:09:27:3b:30:24:3a:e1:3d:ea: a0:29:8b:7f:ab:61:c1:4c:f7:d5:70:65:0a:81:9d: 4d:d8:28:a3:dc:1f:60:2c:bd:8f:9a:5e:15:22:06: ec:3e:6d:e1:71:42:73:5f:37:85:57:56:6a:ca:c2: 35:0f:0e:f8:4d:5e:33:c6:4c:bd:24:74:18:b9:c1: 02:f9:45:a1:91:04:b6:36:58:8a:db:5c:95:6d:46: 3d:e1:0a:3e:33:73:40:fc:90:b5:fc:63:18:39:ef: 0c:f4:f7:34:ea:f1:bb:ce:9d:33:3a:7f:b2:bf:c6: c6:9b:63:f7:89:65:ef:98:44:f1:11:6c:4a:ec:3b: 52:49:78:47:0e:e0:95:f7:13:ec:01:e5:a5:4c:b9: ea:61:16:84:fe:3f:1b:c1:9a:27:77:7b:25:36:fe: c3:07:d8:de:89:64:6e:99:82:2c:be:89:71:ed:07: 73:ca:ca:b2:3d:75:4d:3f:ad:4a:bc:01:00:ba:39: e4:3b:9c:57:e6:d2:6b:a0:08:02:44:65:04:3c:20: 38:01:bd:1b:89:d3:65:59:87:21:d1:3f:8b:e5:ef: be:b1:63:78:fa:4b:98:3b:b9:4d:09:7e:42:85:17: 74:57:c0:e8:dd:7b:87:f6:4a:fc:eb:ac:c7:85:43: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:18:0C:54:21:72:71:15:E4:60:F1:B9:BA:7E:EB:E9:48:56:34:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/720df317-fc7f-3ff4-8859-a7cb516815f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:c10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1b:76:53:b0:0f:44:52:72:2a:9f:40:5f:8c:bb:a2:79:37: 4e:ba:6f:e2:4e:0b:2d:71:48:20:87:ae:3e:83:12:3d:54:ea: 0f:14:1b:98:74:37:b2:a6:f2:00:45:76:e7:6d:e7:7d:94:0a: 59:0c:7c:b7:20:2a:7f:5d:e4:25:b3:c6:0a:cb:96:74:b5:aa: ce:07:05:0b:a6:de:e2:f6:ef:2c:6c:c8:93:0c:f5:d7:bf:60: bc:51:e2:c2:67:53:41:58:4f:1d:e7:24:99:5f:2d:27:f7:75: ea:ea:55:f1:29:e8:54:58:95:40:a8:0e:3c:93:f5:a3:0b:55: ad:bc:b5:78:89:ab:04:21:3b:aa:dd:4d:f5:61:ab:d3:64:03: ff:92:e2:8b:6c:df:29:ac:63:9f:e8:18:c3:15:08:9e:c4:5a: 87:f0:69:63:ec:ad:97:ad:b1:3a:18:90:b2:65:56:70:38:2e: 11:32:7d:42:7c:a2:58:a0:18:d7:b7:9a:06:54:78:8c:f2:bd: db:37:54:6c:21:f0:68:ef:65:e4:87:2f:c9:49:c8:40:84:a0: bc:a2:4d:a6:63:80:e4:b2:3b:9b:f3:0b:56:39:60:79:b1:a8: 07:04:41:d4:29:4b:27:80:8a:c0:91:61:3c:68:09:43:6c:d3: 42:67:bb:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4Qj4E6yY2ImbDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjlkMjU1M2ItNThlNi00OWZkLWFiZmEtNjY5YmVkYWVmMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXGA4E4JJzswJDrhPeqgKYt/q2HBTPfVcGUK gZ1N2Cij3B9gLL2Pml4VIgbsPm3hcUJzXzeFV1ZqysI1Dw74TV4zxky9JHQYucEC +UWhkQS2NliK21yVbUY94Qo+M3NA/JC1/GMYOe8M9Pc06vG7zp0zOn+yv8bGm2P3 iWXvmETxEWxK7DtSSXhHDuCV9xPsAeWlTLnqYRaE/j8bwZond3slNv7DB9jeiWRu mYIsvolx7QdzysqyPXVNP61KvAEAujnkO5xX5tJroAgCRGUEPCA4Ab0bidNlWYch 0T+L5e++sWN4+kuYO7lNCX5ChRd0V8Do3XuH9kr866zHhUMm/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCAYDFQhcnEV5GDxubp+6+lIVjTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvNzIwZGYzMTctZmM3Zi0z ZmY0LTg4NTktYTdjYjUxNjgxNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AwQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMbdlOwD0RSciqfQF+Mu6J5N066b+JOCy1xSCCHrj6DEj1U6g8U G5h0N7Km8gBFdudt532UClkMfLcgKn9d5CWzxgrLlnS1qs4HBQum3uL27yxsyJMM 9de/YLxR4sJnU0FYTx3nJJlfLSf3derqVfEp6FRYlUCoDjyT9aMLVa28tXiJqwQh O6rdTfVhq9NkA/+S4ots3ymsY5/oGMMVCJ7EWofwaWPsrZetsToYkLJlVnA4LhEy fUJ8oligGNe3mgZUeIzyvds3VGwh8GjvZeSHL8lJyECEoLyiTaZjgOSyO5vzC1Y5 YHmxqAcEQdQpSyeAisCRYTxoCUNs00Jnu5I= -----END CERTIFICATE-----Generated at Sat Aug 23 23:00:06 2025 by rpki-client