$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/4a620ec8-b400-32c5-a29e-91f309601139.roa File: 4a620ec8-b400-32c5-a29e-91f309601139.roa (raw, json) Hash identifier: gZRjYCL7K42oyuQZUJbaEO0mHOO6APcP9SCXucEaoA0= Subject key identifier: 37:1C:DE:26:8A:C7:36:11:7C:B1:AF:D2:84:02:F6:7D:49:AC:E1:30 Certificate issuer: /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263 Certificate serial: 010D0C9F4328584AE8911EE0C3D61B5A9A762100 Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/4a620ec8-b400-32c5-a29e-91f309601139.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 396908 IP address blocks: 2602:f956:c0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:1e:e0:c3:d6:1b:5a:9a:76:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=96b64b6e-2700-4904-a89c-23abc28330c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d0:21:02:6a:c4:1c:60:1c:5c:b0:08:63:16: bd:03:a8:9b:7e:22:00:c0:52:b6:46:d0:91:aa:7f: ef:fa:82:5d:d7:7d:6e:54:79:15:46:ce:ff:e1:6f: 96:c1:77:28:37:42:a9:a7:01:8e:86:68:2f:67:59: 01:58:db:75:6a:57:0a:5b:b9:09:56:57:d1:47:78: 1d:06:61:94:d0:bd:e2:56:9c:e4:60:3a:a9:89:dc: dd:06:8f:14:71:17:cb:a6:ab:0c:74:c5:a8:95:6a: 8e:ba:fe:bf:73:2e:c4:89:c7:60:b3:d7:6a:42:dc: 00:82:e0:39:00:64:59:dd:7a:48:3b:a5:77:b8:01: da:c5:34:05:a6:b1:11:da:5c:7b:0b:cc:ec:14:16: 51:e7:0e:83:91:79:ac:70:99:dc:0b:c1:8f:3c:b1: 72:82:59:d2:a5:86:fd:b1:33:ce:74:ce:b6:78:b8: e6:15:f9:74:76:e2:1c:10:99:1b:1b:ab:09:83:b2: 0e:54:05:82:d1:c3:c8:4e:6d:1f:b8:ba:19:cc:76: 11:ae:da:80:db:03:b7:d0:43:e5:b7:f7:9b:2e:e7: 54:3f:8d:9e:c4:ab:38:7f:0a:f6:99:e9:0a:5f:4a: 1e:9a:31:36:f7:e2:98:40:ae:e4:1f:93:e2:27:1a: 08:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1C:DE:26:8A:C7:36:11:7C:B1:AF:D2:84:02:F6:7D:49:AC:E1:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/4a620ec8-b400-32c5-a29e-91f309601139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl X509v3 Authority Key Identifier: keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer sbgp-ipAddrBlock: critical IPv6: 2602:f956:c0::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:31:98:15:a6:f9:81:14:5f:88:9b:d6:61:0d:97:a8:54:81: b2:40:32:39:d8:bc:7e:58:64:f6:0b:f2:b6:8a:6f:a6:2a:f6: ba:03:4b:29:26:b1:72:35:46:40:45:98:e1:dc:4f:95:25:d2: c2:28:49:02:9b:83:6a:ff:e8:4c:81:0b:9f:26:4f:f8:b0:eb: 26:ef:97:8b:4e:cc:88:2b:ad:25:40:e7:27:8e:8a:22:c0:ee: a0:55:e6:59:c8:0c:6a:8b:5b:83:9e:c7:3b:15:21:2f:b6:f4: 03:1a:62:11:11:7d:57:aa:ba:5b:c6:e5:12:05:b5:ed:9f:36: 10:b3:a3:39:41:f2:f2:88:a5:6f:22:8c:39:e2:9c:b6:9d:9c: bb:74:fa:0f:44:c1:47:67:f6:54:a2:7f:6a:45:d2:45:a8:e8: dc:6a:eb:c9:49:19:60:ac:10:a0:2e:02:e5:9a:b4:79:98:98: 91:0a:6f:6a:38:86:3a:2e:22:39:f6:4c:98:ee:ee:19:97:9b: 7f:9e:c0:66:81:68:ca:9d:22:65:e9:7a:36:d9:d0:11:00:28: 82:77:a1:b6:ee:27:f3:9c:3c:dc:d6:21:d2:37:71:21:19:1a: c8:61:9b:11:0d:f2:cf:8a:e1:97:28:89:fb:5d:65:22:40:60: 87:b1:f3:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErokR7gw9YbWpp2IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0 MjYzMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk OTZiNjRiNmUtMjcwMC00OTA0LWE4OWMtMjNhYmMyODMzMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNAhAmrEHGAcXLAIYxa9A6ibfiIAwFK2RtCR qn/v+oJd131uVHkVRs7/4W+WwXcoN0KppwGOhmgvZ1kBWNt1alcKW7kJVlfRR3gd BmGU0L3iVpzkYDqpidzdBo8UcRfLpqsMdMWolWqOuv6/cy7Eicdgs9dqQtwAguA5 AGRZ3XpIO6V3uAHaxTQFprER2lx7C8zsFBZR5w6DkXmscJncC8GPPLFyglnSpYb9 sTPOdM62eLjmFfl0duIcEJkbG6sJg7IOVAWC0cPITm0fuLoZzHYRrtqA2wO30EPl t/ebLudUP42exKs4fwr2mekKX0oemjE29+KYQK7kH5PiJxoI7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDcc3iaKxzYRfLGv0oQC9n1JrOEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJj MjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvNGE2MjBlYzgtYjQwMC0z MmM1LWEyOWUtOTFmMzA5NjAxMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIyYzI3Y2EtZmI3Yy00Y2FkLTlm OWItNGY3NTRmODY0MjYzL2ViMmMyN2NhLWZiN2MtNGNhZC05ZjliLTRmNzU0Zjg2 NDI2My5jcmwwHwYDVR0jBBgwFoAUz7laojwbIP8QynSPJVz1CYmivlEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1 NGY4NjQyNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgL5VgDA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQxmBWm+YEUX4ib1mENl6hUgbJAMjnYvH5YZPYL8raKb6Yq9roD SykmsXI1RkBFmOHcT5Ul0sIoSQKbg2r/6EyBC58mT/iw6ybvl4tOzIgrrSVA5yeO iiLA7qBV5lnIDGqLW4OexzsVIS+29AMaYhERfVequlvG5RIFte2fNhCzozlB8vKI pW8ijDninLadnLt0+g9EwUdn9lSif2pF0kWo6Nxq68lJGWCsEKAuAuWatHmYmJEK b2o4hjouIjn2TJju7hmXm3+ewGaBaMqdImXpejbZ0BEAKIJ3obbuJ/OcPNzWIdI3 cSEZGshhmxEN8s+K4ZcoiftdZSJAYIex89M= -----END CERTIFICATE-----Generated at Sun Aug 24 09:46:13 2025 by rpki-client