$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/47731c14-7007-3efe-8b97-b32fd08f625e.roa File: 47731c14-7007-3efe-8b97-b32fd08f625e.roa (raw, json) Hash identifier: 9f/XGmSnVJp/HEgVJFZwzltQk51wiOkybxmlEa/f800= Subject key identifier: 21:CC:DA:01:CB:C8:A5:C9:10:40:E6:B5:3A:0C:15:56:9E:CF:F8:CE Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584AF0F12FD3DCF03CFB5965DED0 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/47731c14-7007-3efe-8b97-b32fd08f625e.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 12213 IP address blocks: 2604:7ac0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:2f:d3:dc:f0:3c:fb:59:65:de:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=b1cc93db-eb41-4f47-9c21-12ecd3d77646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:16:3c:bb:85:c0:90:ec:53:23:98:1f:6f: ae:4f:0d:79:a6:49:e8:12:11:3a:b4:aa:de:3f:5e: 93:52:ae:08:3b:65:f2:9b:b7:ba:8d:7e:59:5d:3f: e6:12:3e:a2:1a:24:d7:15:93:ff:15:59:09:5e:0c: a3:e2:28:0c:db:a7:ee:9e:48:77:d2:68:90:28:4d: 83:9c:21:1b:08:be:a3:7c:87:8f:75:98:0e:34:6d: d2:58:bf:5c:78:b7:b7:67:1b:53:fe:6f:03:0d:6c: 69:0c:9a:80:0f:d3:a3:5d:28:52:59:ed:13:97:71: 4c:c9:cb:78:ee:1c:85:15:d9:53:c9:d9:ad:f0:42: 84:f7:a4:d0:ad:51:1d:f9:2c:b7:ab:ae:db:f9:80: 83:27:99:24:9a:a8:85:de:69:5c:09:e0:96:9c:8a: 02:8d:dd:20:ec:54:9e:92:20:b0:9f:b4:b3:e2:dc: ce:79:4f:a3:4c:03:b2:cd:e5:bc:83:77:0d:92:c1: a3:07:05:b2:1f:c1:16:a2:d3:76:3d:9c:73:ed:d9: 61:c0:16:ad:f0:98:f6:07:a5:4e:2f:54:5a:63:bc: 13:e2:7f:8d:7d:ed:7b:86:98:c9:6a:b4:3a:de:c7: 3b:60:61:94:91:e6:a4:e4:6b:3f:a1:6f:d1:65:91: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CC:DA:01:CB:C8:A5:C9:10:40:E6:B5:3A:0C:15:56:9E:CF:F8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/47731c14-7007-3efe-8b97-b32fd08f625e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv6: 2604:7ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c1:4d:47:2a:78:a7:10:f5:ea:96:aa:5a:2f:a9:f0:f2:6a: 3c:ef:14:b1:6d:5b:bf:b8:b4:27:c4:1c:84:a7:e3:f8:e0:c0: 64:c5:dc:6a:10:29:c0:72:b5:91:14:b3:cc:f5:2b:5e:b6:7f: cf:61:d3:4b:c7:82:b0:fa:ae:ac:47:21:4d:34:6d:b0:e4:95: 42:45:38:50:04:97:f0:7a:39:9b:17:3b:03:a8:11:d5:9c:1a: 5b:cc:c0:65:b9:35:22:99:76:c6:e6:c1:69:11:43:ca:95:3c: 88:44:96:6e:43:fd:2f:b3:f9:b3:1b:eb:f3:99:9e:c3:cb:6d: 35:4c:da:ec:17:b6:cb:18:69:0d:a0:c6:72:b0:de:10:ce:ef: 4e:3f:10:0b:b1:05:af:f6:96:4e:44:21:74:33:31:38:65:cd: 04:d3:ca:bf:89:f0:49:c1:1d:e5:fb:12:57:a8:07:d3:30:05: 67:b7:15:1d:ad:3f:ea:ee:4b:ac:55:e2:10:ab:f9:54:d8:cb: e8:d3:ca:1a:dc:cc:c7:b1:bf:3f:26:9d:e2:d6:a8:d2:9d:2e: b4:b7:23:7a:e3:2b:74:38:b0:fd:6d:97:b1:42:bb:34:79:71: f3:48:b1:ef:9b:47:1e:89:50:e0:5e:9d:71:00:4e:f3:0c:01: 2d:be:76:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErw8S/T3PA8+1ll3tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YjFjYzkzZGItZWI0MS00ZjQ3LTljMjEtMTJlY2QzZDc3NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9MWPLuFwJDsUyOYH2+uTw15pknoEhE6tKre P16TUq4IO2Xym7e6jX5ZXT/mEj6iGiTXFZP/FVkJXgyj4igM26funkh30miQKE2D nCEbCL6jfIePdZgONG3SWL9ceLe3ZxtT/m8DDWxpDJqAD9OjXShSWe0Tl3FMyct4 7hyFFdlTydmt8EKE96TQrVEd+Sy3q67b+YCDJ5kkmqiF3mlcCeCWnIoCjd0g7FSe kiCwn7Sz4tzOeU+jTAOyzeW8g3cNksGjBwWyH8EWotN2PZxz7dlhwBat8Jj2B6VO L1RaY7wT4n+Nfe17hpjJarQ63sc7YGGUkeak5Gs/oW/RZZGTIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCHM2gHLyKXJEEDmtToMFVaez/jOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvNDc3MzFjMTQtNzAwNy0z ZWZlLThiOTctYjMyZmQwOGY2MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgR6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQwU1HKninEPXqlqpaL6nw8mo87xSxbVu/uLQnxByEp+P44MBkxdxq ECnAcrWRFLPM9Stetn/PYdNLx4Kw+q6sRyFNNG2w5JVCRThQBJfwejmbFzsDqBHV nBpbzMBluTUimXbG5sFpEUPKlTyIRJZuQ/0vs/mzG+vzmZ7Dy201TNrsF7bLGGkN oMZysN4Qzu9OPxALsQWv9pZORCF0MzE4Zc0E08q/ifBJwR3l+xJXqAfTMAVntxUd rT/q7kusVeIQq/lU2Mvo08oa3MzHsb8/Jp3i1qjSnS60tyN64yt0OLD9bZexQrs0 eXHzSLHvm0ceiVDgXp1xAE7zDAEtvnYG -----END CERTIFICATE-----Generated at Sat Aug 23 18:10:14 2025 by rpki-client