$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa File: 41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa (raw, json) Hash identifier: owpypwpOSiFqrY3DU8vYnPS6IqI3xtVlSkTFLFpx5L8= Subject key identifier: 58:89:6D:99:BA:48:AA:BD:75:2D:E0:E3:5E:E4:CC:73:23:07:A9:D9 Certificate issuer: /CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7 Certificate serial: 010D0C9F4328584A9FFBA38D04CA37185C0F2880 Authority key identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 32334 IP address blocks: 2620:17:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a3:8d:04:ca:37:18:5c:0f:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=b9f0948a-c979-4466-87ea-9b3cbe84efc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8d:35:3c:ac:6f:34:b5:7d:4a:44:a1:2f:03: 06:37:29:96:88:f0:3f:97:bd:d8:ab:cc:6f:3f:b0: db:af:12:5c:33:5a:13:92:b7:31:5a:15:cc:1d:8d: 9b:b8:04:52:cc:b9:e2:23:63:aa:e5:c8:1a:0b:7b: fc:2a:f3:b8:9b:7b:6f:2a:dc:9f:44:70:72:7f:ec: 2f:cf:a4:09:97:4e:96:ac:34:cc:e1:ab:6c:f1:ec: c9:88:a7:36:21:22:48:e0:e3:9d:c6:3a:13:a7:e4: 8f:13:b2:23:fd:6b:18:ab:31:8b:93:50:df:d9:6d: 8a:e0:2e:12:69:37:86:9f:9b:73:14:cc:b0:db:d9: a2:19:af:5f:7b:ef:e3:e1:04:03:84:64:f7:c3:3c: a8:7c:50:a5:b5:0d:f7:c2:31:52:4b:5c:1b:49:62: 62:a5:e6:5c:55:0d:dd:96:5a:c0:b0:6a:cb:18:e3: c1:d4:0e:11:7e:39:c1:b6:79:84:03:1f:35:1b:fc: dd:90:67:c3:bd:8c:d8:73:bc:7b:3c:07:81:39:de: 1b:28:d5:6b:e2:a6:13:5b:81:23:d3:2c:2e:4a:39: d5:2b:a6:6b:cc:da:df:da:4c:d0:c1:3b:48:e9:b1: 4a:23:73:44:22:72:f5:3b:91:4d:30:60:f6:28:9f: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:89:6D:99:BA:48:AA:BD:75:2D:E0:E3:5E:E4:CC:73:23:07:A9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl X509v3 Authority Key Identifier: keyid:8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer sbgp-ipAddrBlock: critical IPv6: 2620:17:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6a:a4:20:e5:86:e7:32:e9:84:5f:b5:dc:55:07:dc:09:c1: 7a:74:6c:74:34:01:2e:c3:d2:57:24:94:3f:09:98:95:16:90: 0f:14:43:27:1b:c9:81:3d:3e:9c:46:e5:93:da:6d:6c:bf:fe: 55:24:e0:29:b8:e5:9e:0c:de:20:4c:66:ca:0d:05:c9:15:b7: 84:cf:4e:07:cd:c9:1b:df:c3:7c:2a:bb:63:cc:59:cc:6f:9c: cc:ad:1a:f1:e4:63:39:a8:ed:fc:31:56:79:3d:e3:df:33:b2: 71:13:94:72:45:fc:56:49:22:4c:d3:e6:03:63:f9:25:77:64: 69:2b:21:9f:2d:19:b7:b0:6b:e9:f5:0f:8e:07:7f:3c:4b:17: df:83:d2:ce:57:b2:da:5d:0d:64:dd:8b:e8:51:f8:81:17:a1: a7:d7:41:ae:48:bd:df:82:15:65:29:ad:46:df:d7:89:ac:21: 90:15:e3:9a:78:65:19:76:71:ea:38:cc:0a:0f:8c:03:d3:1e: 97:73:89:d4:6b:af:50:63:a6:10:3b:88:b2:24:e3:5e:eb:3d: 55:f1:c1:08:f7:f2:b9:9f:53:aa:a7:4c:73:87:ac:b4:e2:75: 18:9a:4a:f1:f5:50:f8:36:44:90:2d:32:81:53:dd:77:3c:af: d3:36:c0:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf+6ONBMo3GFwPKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0OTM0YzgtNWI3OC00OGQ2LWIyNjEtYjdhMGQxYmM0 YmI3MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk YjlmMDk0OGEtYzk3OS00NDY2LTg3ZWEtOWIzY2JlODRlZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg401PKxvNLV9SkShLwMGNymWiPA/l73Yq8xv P7DbrxJcM1oTkrcxWhXMHY2buARSzLniI2Oq5cgaC3v8KvO4m3tvKtyfRHByf+wv z6QJl06WrDTM4ats8ezJiKc2ISJI4OOdxjoTp+SPE7Ij/WsYqzGLk1Df2W2K4C4S aTeGn5tzFMyw29miGa9fe+/j4QQDhGT3wzyofFCltQ33wjFSS1wbSWJipeZcVQ3d llrAsGrLGOPB1A4RfjnBtnmEAx81G/zdkGfDvYzYc7x7PAeBOd4bKNVr4qYTW4Ej 0ywuSjnVK6ZrzNrf2kzQwTtI6bFKI3NEInL1O5FNMGD2KJ+ARwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFiJbZm6SKq9dS3g417kzHMjB6nZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDQ5 MzRjOC01Yjc4LTQ4ZDYtYjI2MS1iN2EwZDFiYzRiYjcvNDFkNWVkYjItMTBmNy0z ZTBhLWI3ZDMtN2FjMjg0MGI2N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmQ0OTM0YzgtNWI3OC00OGQ2LWIy NjEtYjdhMGQxYmM0YmI3LzJkNDkzNGM4LTViNzgtNDhkNi1iMjYxLWI3YTBkMWJj NGJiNy5jcmwwHwYDVR0jBBgwFoAUjaVzmWc3dFzU/MzrwMLF5wxUSeMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDQ5MzRjOC01Yjc4LTQ4ZDYtYjI2MS1iN2Ew ZDFiYzRiYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAF6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGlqpCDlhucy6YRftdxVB9wJwXp0bHQ0AS7D0lcklD8JmJUWkA8U QycbyYE9PpxG5ZPabWy//lUk4Cm45Z4M3iBMZsoNBckVt4TPTgfNyRvfw3wqu2PM WcxvnMytGvHkYzmo7fwxVnk9498zsnETlHJF/FZJIkzT5gNj+SV3ZGkrIZ8tGbew a+n1D44HfzxLF9+D0s5XstpdDWTdi+hR+IEXoafXQa5Ivd+CFWUprUbf14msIZAV 45p4ZRl2ceo4zAoPjAPTHpdzidRrr1BjphA7iLIk417rPVXxwQj38rmfU6qnTHOH rLTidRiaSvH1UPg2RJAtMoFT3Xc8r9M2wM4= -----END CERTIFICATE-----Generated at Mon Aug 4 19:11:36 2025 by rpki-client