$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/315d9381-681b-3acd-9f5e-9794115facf7.roa File: 315d9381-681b-3acd-9f5e-9794115facf7.roa (raw, json) Hash identifier: 14xT/F2gmf4WoyvwuY6Av0+kvGFc/t9ve5DbnA9aW5E= Subject key identifier: 0A:47:15:5F:85:71:B7:0C:C5:E4:64:78:ED:33:44:59:C3:C0:B3:90 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584AF0F130087CC1F5EF083FD200 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/315d9381-681b-3acd-9f5e-9794115facf7.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 32298 IP address blocks: 2600:cc00::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:30:08:7c:c1:f5:ef:08:3f:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=ff8c3d60-4343-4598-83db-7b4e60f4fb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:20:ba:cb:c4:e8:19:23:f0:8e:71:53:cd: 36:f5:92:da:47:76:8f:fd:62:2b:8c:d3:19:d7:bf: a4:7d:13:dc:13:93:07:b2:9e:51:39:cd:83:09:17: 0c:eb:3c:b0:f6:cc:91:2e:0a:3f:cb:b7:f5:ec:bc: a7:11:00:4f:55:1d:2a:56:67:17:e3:a8:5e:5e:d8: 92:53:73:b0:98:e4:5e:09:db:ce:6c:38:af:a6:87: 28:96:78:d2:c4:52:06:d5:9b:2f:2c:9d:c1:0e:af: 6b:87:4d:6d:83:11:b4:5c:51:55:50:8e:c0:c4:3c: 79:c0:3f:b0:83:5c:d8:74:20:49:d6:1f:fb:73:a5: 05:a2:6c:aa:58:bc:90:bb:59:ce:60:c1:67:1e:19: d5:a6:68:88:d5:d9:c7:89:d0:26:bd:f0:7b:51:c5: 09:f8:02:d3:e7:f7:f2:c0:86:f6:de:6b:61:a7:9a: 33:ad:42:18:11:56:bc:a7:c7:b5:28:4b:cf:36:b2: da:02:67:46:e4:3e:34:10:15:c6:22:39:69:c2:d4: a8:88:29:5c:44:b3:30:36:e6:28:18:6e:d8:c4:80: 54:e3:09:e7:07:dd:89:af:7e:8e:9d:a6:66:86:c4: a6:c6:cc:c7:3e:f2:7f:fc:71:bd:49:99:be:ac:b5: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:47:15:5F:85:71:B7:0C:C5:E4:64:78:ED:33:44:59:C3:C0:B3:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/315d9381-681b-3acd-9f5e-9794115facf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv6: 2600:cc00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:22:b1:ca:2f:cc:9d:29:6f:7b:73:71:03:1e:cc:d2:d0:ea: a1:6a:16:c6:9a:50:f5:b3:bd:83:2e:3d:b1:c8:8e:e1:83:45: d0:6a:25:82:b4:2a:92:39:ae:29:c4:33:bf:27:eb:c9:f9:7a: 8e:57:47:84:04:d9:23:e2:58:ce:76:ee:db:cf:29:1f:e4:2a: 3c:98:ed:97:d1:75:a8:83:7c:e1:00:15:e2:12:57:61:94:81: 89:b3:22:7c:c5:86:00:8b:8f:21:0c:d2:0b:24:07:0c:75:45: e3:57:ff:e4:e8:c8:85:6f:ab:38:2e:ad:0b:d4:0e:86:1f:4a: 02:b8:4b:37:4e:bb:ee:06:fa:49:65:49:30:9c:17:21:f2:74: f0:e7:e8:9f:a5:75:2e:55:b8:f1:3e:01:32:44:fa:30:7a:65: e2:eb:75:11:a0:24:16:81:68:bf:ed:43:c3:eb:be:31:21:c4: 1d:03:9f:84:87:da:7e:a9:48:18:e6:f5:b1:f4:29:32:73:1f: a3:8a:46:34:0f:fa:9e:40:56:c2:58:d4:e6:a0:21:ec:74:d7: f1:70:6d:f4:97:42:e7:8e:d2:aa:51:5d:0b:20:36:0f:22:8e: cb:f7:0d:10:10:bf:f4:b6:a5:42:de:0a:66:41:7c:40:20:e6: 59:2d:42:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErw8TAIfMH17wg/0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZmY4YzNkNjAtNDM0My00NTk4LTgzZGItN2I0ZTYwZjRmYjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCcgusvE6Bkj8I5xU8029ZLaR3aP/WIrjNMZ 17+kfRPcE5MHsp5ROc2DCRcM6zyw9syRLgo/y7f17LynEQBPVR0qVmcX46heXtiS U3OwmOReCdvObDivpocolnjSxFIG1ZsvLJ3BDq9rh01tgxG0XFFVUI7AxDx5wD+w g1zYdCBJ1h/7c6UFomyqWLyQu1nOYMFnHhnVpmiI1dnHidAmvfB7UcUJ+ALT5/fy wIb23mthp5ozrUIYEVa8p8e1KEvPNrLaAmdG5D40EBXGIjlpwtSoiClcRLMwNuYo GG7YxIBU4wnnB92Jr36OnaZmhsSmxszHPvJ//HG9SZm+rLU+NwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFApHFV+FcbcMxeRkeO0zRFnDwLOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMzE1ZDkzODEtNjgxYi0z YWNkLTlmNWUtOTc5NDExNWZhY2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgDMADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACIrHKL8ydKW97c3EDHszS0OqhahbGmlD1s72DLj2xyI7hg0XQaiWC tCqSOa4pxDO/J+vJ+XqOV0eEBNkj4ljOdu7bzykf5Co8mO2X0XWog3zhABXiEldh lIGJsyJ8xYYAi48hDNILJAcMdUXjV//k6MiFb6s4Lq0L1A6GH0oCuEs3TrvuBvpJ ZUkwnBch8nTw5+ifpXUuVbjxPgEyRPowemXi63URoCQWgWi/7UPD674xIcQdA5+E h9p+qUgY5vWx9Ckycx+jikY0D/qeQFbCWNTmoCHsdNfxcG30l0LnjtKqUV0LIDYP Io7L9w0QEL/0tqVC3gpmQXxAIOZZLUIb -----END CERTIFICATE-----Generated at Sat Aug 23 18:10:59 2025 by rpki-client