$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ea5defa7-f620-33f1-a6bb-4b6281bf2511.roa File: ea5defa7-f620-33f1-a6bb-4b6281bf2511.roa (raw, json) Hash identifier: zvjpqLDu/3GxC/DyliOihr3eZP1AQ/n/32kk+E6CS2I= Subject key identifier: 54:A9:E0:22:17:9A:47:CA:A2:1B:B1:86:49:26:E2:51:10:BA:58:97 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584AE9F66E6FA6E34374E4DF3D80 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ea5defa7-f620-33f1-a6bb-4b6281bf2511.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 396982 IP address blocks: 2604:b040:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6e:6f:a6:e3:43:74:e4:df:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=16a51ce4-7575-45b2-9901-ab67d210438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:cb:7f:ba:3f:ba:f6:33:bb:07:1c:f1:46: b6:5b:91:0e:d1:db:73:f7:54:51:5c:a6:36:81:fa: a9:fb:e4:e6:f0:e5:7b:3b:bc:05:a7:39:10:09:d4: 3c:6c:f5:d8:5a:37:e6:88:c6:9a:2c:c2:ad:9e:33: d3:56:c8:04:f7:ec:ac:55:d7:29:9b:fb:79:eb:96: 8d:f3:e5:ac:76:bd:d0:87:80:7c:89:50:f1:60:62: ff:98:65:fb:0e:07:9d:0f:85:ec:9b:6f:96:84:8e: 03:6b:91:e3:18:5c:3a:53:0d:10:d5:3c:ab:f1:fb: 41:67:f7:a3:33:34:cd:38:94:18:09:fd:6f:29:08: 90:b6:05:18:e5:ea:dd:dd:c6:2b:7b:ff:8b:7c:45: e6:54:cb:5b:76:eb:96:af:22:3b:86:14:6e:cf:b4: 20:b6:08:d1:4b:65:c5:0b:4c:8c:04:15:3e:1c:f3: 37:43:09:17:14:85:ee:a8:c7:4b:44:47:59:09:d0: 9a:58:8b:2c:f3:28:35:f1:00:47:47:f7:30:cc:76: 64:3f:00:02:eb:39:96:4b:9d:86:a5:5c:18:75:91: ad:70:27:c5:b8:1d:f2:b5:1a:20:04:8f:d3:6c:8f: e4:ba:80:2c:5d:91:e7:4f:8f:2f:ea:bc:67:ab:73: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A9:E0:22:17:9A:47:CA:A2:1B:B1:86:49:26:E2:51:10:BA:58:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ea5defa7-f620-33f1-a6bb-4b6281bf2511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2604:b040:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c1:98:d2:98:8a:67:70:d5:a9:46:de:37:d4:fc:13:de:fd: 07:a4:1d:7a:af:69:c4:45:e7:c0:f1:f3:c2:9b:f5:e4:06:8c: b1:0a:79:91:4e:97:a5:66:be:48:af:b5:ea:70:12:8c:5b:3c: 68:9f:d6:45:f1:94:76:c3:01:f4:01:e7:b1:a3:b6:0d:3f:11: 99:9d:87:21:ea:d1:61:49:b3:44:80:0c:8a:a5:03:aa:d5:32: d6:02:07:1f:a9:09:bf:33:2d:bb:00:28:1e:30:4b:a3:e2:cf: 47:ce:9c:f8:b5:8f:80:83:fc:5f:aa:d1:24:3a:9e:7c:9b:78: fd:0e:ab:97:57:83:d5:0b:3e:bb:25:ed:32:df:ef:80:a2:d7: 93:a3:a1:ba:eb:bc:d1:8a:b8:2c:46:00:6a:46:53:cf:24:b6: 7a:7c:d2:33:a0:20:f2:b6:8f:67:4a:5d:99:a6:22:fa:4e:28: 2d:a2:e4:26:bd:79:02:3b:07:9b:85:ff:0e:dd:a0:ae:62:8d: fe:72:fa:5f:fb:f0:96:66:c5:a4:c0:48:6e:ce:e4:d7:d5:b4: 26:01:80:8c:59:73:b4:ab:73:6f:a8:91:9c:96:b7:ea:59:86: 16:54:43:54:e3:e1:68:5d:1c:33:76:fc:6f:90:35:10:16:23: 16:3e:6f:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErp9m5vpuNDdOTfPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MTZhNTFjZTQtNzU3NS00NWIyLTk5MDEtYWI2N2QyMTA0MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmXLf7o/uvYzuwcc8Ua2W5EO0dtz91RRXKY2 gfqp++Tm8OV7O7wFpzkQCdQ8bPXYWjfmiMaaLMKtnjPTVsgE9+ysVdcpm/t565aN 8+Wsdr3Qh4B8iVDxYGL/mGX7DgedD4Xsm2+WhI4Da5HjGFw6Uw0Q1Tyr8ftBZ/ej MzTNOJQYCf1vKQiQtgUY5erd3cYre/+LfEXmVMtbduuWryI7hhRuz7QgtgjRS2XF C0yMBBU+HPM3QwkXFIXuqMdLREdZCdCaWIss8yg18QBHR/cwzHZkPwAC6zmWS52G pVwYdZGtcCfFuB3ytRogBI/TbI/kuoAsXZHnT48v6rxnq3MAPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFSp4CIXmkfKohuxhkkm4lEQuliXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvZWE1ZGVmYTctZjYyMC0z M2YxLWE2YmItNGI2MjgxYmYyNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSwQAAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILBmNKYimdw1alG3jfU/BPe/QekHXqvacRF58Dx88Kb9eQGjLEK eZFOl6VmvkivtepwEoxbPGif1kXxlHbDAfQB57Gjtg0/EZmdhyHq0WFJs0SADIql A6rVMtYCBx+pCb8zLbsAKB4wS6Piz0fOnPi1j4CD/F+q0SQ6nnybeP0Oq5dXg9UL Prsl7TLf74Ci15OjobrrvNGKuCxGAGpGU88ktnp80jOgIPK2j2dKXZmmIvpOKC2i 5Ca9eQI7B5uF/w7doK5ijf5y+l/78JZmxaTASG7O5NfVtCYBgIxZc7Src2+okZyW t+pZhhZUQ1Tj4WhdHDN2/G+QNRAWIxY+b5U= -----END CERTIFICATE-----Generated at Sat Aug 23 19:55:15 2025 by rpki-client