$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa File: 54a4332a-b65d-3502-aaa9-76ed79433c4f.roa (raw, json) Hash identifier: xOHfCugKR7hDuCeXmbLL/9GiEHGITt29cNmTpX6yl5E= Subject key identifier: 28:B0:98:33:5E:B9:24:F8:0B:89:42:DF:3A:3F:2F:79:73:D1:95:65 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584A9900C66DF40ADA3EFA8C7E80 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 33724 IP address blocks: 2604:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c6:6d:f4:0a:da:3e:fa:8c:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=4b594b99-9b71-4241-bdf7-44a946816c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:71:fc:26:78:5a:85:87:f3:22:4e:41:a2:0c: e4:42:b8:1e:f8:a5:e5:4b:08:d4:4f:64:f1:63:e4: b5:cd:3f:2e:08:73:25:e1:09:fd:4e:db:77:2c:b3: 48:5c:9d:27:c3:07:1d:49:b7:9f:13:4b:e6:19:cf: d6:28:64:77:1b:1c:80:60:3b:31:05:c9:a0:82:d5: 7c:2d:b6:c2:b8:53:6e:0c:a4:2c:94:86:ab:a2:b5: 27:60:8c:50:e8:35:12:f7:a0:69:65:8d:50:84:5f: 0f:d6:bd:d5:dd:13:e0:80:c3:a4:ce:17:79:6e:80: ff:20:22:14:8f:c7:da:ba:43:4a:d1:e1:5c:a2:42: bc:d8:de:3c:9f:5a:23:f1:d1:87:89:0d:68:3b:b7: db:33:e2:77:d2:5f:9d:90:6f:ed:12:c1:31:59:94: a5:fd:9f:f3:e2:33:b8:1e:3f:1e:89:df:29:bd:54: 70:fd:42:42:a5:94:a4:9d:65:3f:66:41:60:64:94: 09:7a:1d:54:87:5b:50:1d:a7:94:6c:c2:71:d3:58: 42:33:c1:c9:fb:f4:5d:62:7f:a5:02:bf:71:49:26: fb:17:57:c2:a8:91:73:68:9c:f9:b4:86:6e:7c:2f: 13:8c:bb:40:39:cf:23:40:c2:d8:57:f6:19:11:8f: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B0:98:33:5E:B9:24:F8:0B:89:42:DF:3A:3F:2F:79:73:D1:95:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv6: 2604:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7b:7f:61:e9:e5:8a:56:a0:6a:62:48:ac:fa:6f:99:e3:44: 37:95:34:98:27:ae:21:3f:76:ab:b2:a7:75:93:11:59:93:31: 00:29:26:bf:fe:83:75:ac:61:3e:de:0e:65:bd:39:02:c7:91: 9e:53:58:1c:e1:7a:8a:b6:62:eb:38:28:3d:4d:16:7c:91:92: 48:b2:3f:ee:6b:c6:c2:31:2b:47:28:d0:a6:ef:9f:c3:5f:64: b9:39:53:58:7e:95:30:08:20:a8:38:6c:d3:a3:8f:1d:4f:8a: 0f:82:fe:33:44:21:22:b3:52:7c:25:c8:e0:3a:e9:c8:2b:bd: 94:38:79:e7:15:34:a2:cf:71:d8:5f:35:14:b4:09:d2:15:44: 0a:11:af:75:d1:78:79:c9:13:d5:71:08:d2:88:d8:6f:da:0d: 28:ea:25:05:ef:b6:1b:47:62:a0:06:de:e1:72:e1:8a:ff:16: 60:b0:10:f9:9c:f8:d0:d5:9b:d9:71:d1:dd:df:cd:bc:89:de: d8:ec:88:4c:6e:f8:e4:0d:c5:72:4a:57:db:25:97:1f:5c:64: d8:2c:05:11:d6:39:d0:ca:16:c4:14:db:33:84:70:ee:16:75: e4:b2:2a:d6:7a:95:65:75:4f:73:54:b8:0e:15:ab:33:55:89: 8e:11:1f:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqZAMZt9AraPvqMfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NGI1OTRiOTktOWI3MS00MjQxLWJkZjctNDRhOTQ2ODE2YzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03H8JnhahYfzIk5BogzkQrge+KXlSwjUT2Tx Y+S1zT8uCHMl4Qn9Ttt3LLNIXJ0nwwcdSbefE0vmGc/WKGR3GxyAYDsxBcmggtV8 LbbCuFNuDKQslIarorUnYIxQ6DUS96BpZY1QhF8P1r3V3RPggMOkzhd5boD/ICIU j8faukNK0eFcokK82N48n1oj8dGHiQ1oO7fbM+J30l+dkG/tEsExWZSl/Z/z4jO4 Hj8eid8pvVRw/UJCpZSknWU/ZkFgZJQJeh1Uh1tQHaeUbMJx01hCM8HJ+/RdYn+l Ar9xSSb7F1fCqJFzaJz5tIZufC8TjLtAOc8jQMLYV/YZEY+XpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCiwmDNeuST4C4lC3zo/L3lz0ZVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvNTRhNDMzMmEtYjY1ZC0z NTAyLWFhYTktNzZlZDc5NDMzYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRzQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASe39h6eWKVqBqYkis+m+Z40Q3lTSYJ64hP3arsqd1kxFZkzEAKSa/ /oN1rGE+3g5lvTkCx5GeU1gc4XqKtmLrOCg9TRZ8kZJIsj/ua8bCMStHKNCm75/D X2S5OVNYfpUwCCCoOGzTo48dT4oPgv4zRCEis1J8JcjgOunIK72UOHnnFTSiz3HY XzUUtAnSFUQKEa910Xh5yRPVcQjSiNhv2g0o6iUF77YbR2KgBt7hcuGK/xZgsBD5 nPjQ1ZvZcdHd3828id7Y7IhMbvjkDcVySlfbJZcfXGTYLAUR1jnQyhbEFNszhHDu FnXksirWepVldU9zVLgOFaszVYmOER8V -----END CERTIFICATE-----Generated at Sat Aug 9 10:46:33 2025 by rpki-client