$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa File: a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa (raw, json) Hash identifier: pas5Zrh8PvaQdOaniQFbdPVKpglXn8wWLKTqzuRbVQM= Subject key identifier: D6:0C:76:EB:A9:55:F8:E5:E3:83:BB:BF:D4:29:0E:26:B6:10:B2:4C Certificate issuer: /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Certificate serial: 010D0C9F4328584AC1D840CC28201AB702A48700 Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa Signing time: Tue 05 Aug 2025 16:07:30 +0000 ROA not before: Tue 05 Aug 2025 16:07:30 +0000 ROA not after: Mon 03 Nov 2025 17:07:30 +0000 asID: 5400 IP address blocks: 2606:f100:e600::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:d8:40:cc:28:20:1a:b7:02:a4:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Validity Not Before: Aug 5 16:07:30 2025 GMT Not After : Nov 3 17:07:30 2025 GMT Subject: CN=a43b1bfc-128e-444c-8d19-b2f29368d665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:4a:67:5b:c8:b3:7c:d2:74:2b:e1:d6:a3: 4c:bd:f3:b2:cd:d0:36:50:ef:ac:25:70:51:08:93: 10:e5:2d:dc:c6:7a:b8:78:1a:b6:0d:83:47:ef:e3: d6:2e:84:83:98:45:b2:9a:39:e7:09:09:d3:bb:dd: fa:cd:7d:df:77:8a:36:80:80:2d:6d:4a:9b:06:f1: 49:7d:5d:6f:b8:74:1b:35:9b:e2:93:9b:cd:9f:50: bf:88:b9:83:c8:8c:48:49:99:09:da:94:e4:93:a2: 3e:89:44:5b:6e:ab:da:83:a8:51:41:30:fe:97:c3: 1b:9a:0c:5c:e7:6d:01:74:92:df:23:75:23:dc:31: 7e:57:8e:7c:1a:a9:df:56:de:57:c4:b9:81:8d:1c: 4a:ad:1b:93:00:04:0d:55:4a:c4:e7:85:4b:38:64: 9c:4a:ba:8b:52:6a:f9:31:de:d9:d4:00:a2:69:d6: ff:0c:f2:70:1d:2a:c5:21:6f:f6:08:41:4f:46:0b: 86:e7:63:d6:7e:4a:5e:ec:78:99:6d:e4:d9:94:fc: 6b:3a:6a:6c:a8:b8:5a:06:d1:14:9e:ff:ef:36:19: 5e:11:0f:8a:b3:9c:e6:5e:a2:cd:b2:f1:b5:27:53: 95:9d:35:75:56:ba:07:e7:19:1d:8d:06:d8:f7:4a: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0C:76:EB:A9:55:F8:E5:E3:83:BB:BF:D4:29:0E:26:B6:10:B2:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl X509v3 Authority Key Identifier: keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer sbgp-ipAddrBlock: critical IPv6: 2606:f100:e600::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:52:35:5d:18:58:9f:17:c8:98:b0:dd:40:9c:10:b5:25:a9: 28:8b:48:c9:7c:01:cb:78:19:f6:33:0d:05:a6:05:24:ef:46: 2b:30:3a:38:76:3a:8d:5d:c3:c5:92:9f:1c:88:6f:ce:1c:6c: f0:d4:f2:55:01:b9:08:68:df:b0:ea:7e:cc:94:38:eb:9b:ae: f5:78:9d:fe:a3:af:1f:67:ae:1d:a6:7d:3b:a7:d4:9e:1a:d0: 7f:bf:04:ef:80:c6:ff:a2:41:b8:ef:3b:d3:b2:95:ba:2b:6b: 41:6b:04:8e:af:90:5e:a9:bd:86:5c:be:48:6a:af:c0:aa:55: 7a:ea:5d:0d:c1:8e:09:59:1c:c3:f3:54:31:22:a1:a5:69:63: e8:c1:41:9e:28:ab:bb:23:99:ed:c3:7e:e6:02:47:13:96:d1: 87:26:b8:19:88:32:79:07:15:59:3d:5b:03:17:04:5d:66:91: e0:3d:a2:af:3d:08:1f:11:d6:28:83:a5:bc:86:52:5f:29:aa: 92:0f:b2:23:db:f2:5b:a3:b6:d7:2f:d0:a6:15:f0:b4:3e:20: 53:f1:63:98:09:3e:43:13:b3:75:e6:9d:b9:c0:97:c7:af:88: 99:eb:46:0f:09:c9:c9:a9:d5:d8:11:50:67:bb:d9:ea:85:f3: f9:21:38:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErB2EDMKCAatwKkhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFhMjRhMjItZjhlMi00MzlmLWEyZDUtZDQ5NzUzOGQ3 YmNiMB4XDTI1MDgwNTE2MDczMFoXDTI1MTEwMzE3MDczMFowLzEtMCsGA1UEAxMk YTQzYjFiZmMtMTI4ZS00NDRjLThkMTktYjJmMjkzNjhkNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocxKZ1vIs3zSdCvh1qNMvfOyzdA2UO+sJXBR CJMQ5S3cxnq4eBq2DYNH7+PWLoSDmEWymjnnCQnTu936zX3fd4o2gIAtbUqbBvFJ fV1vuHQbNZvik5vNn1C/iLmDyIxISZkJ2pTkk6I+iURbbqvag6hRQTD+l8Mbmgxc 520BdJLfI3Uj3DF+V458GqnfVt5XxLmBjRxKrRuTAAQNVUrE54VLOGScSrqLUmr5 Md7Z1ACiadb/DPJwHSrFIW/2CEFPRguG52PWfkpe7HiZbeTZlPxrOmpsqLhaBtEU nv/vNhleEQ+Ks5zmXqLNsvG1J1OVnTV1VroH5xkdjQbY90rapwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNYMduupVfjl44O7v9QpDia2ELJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEy NGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3NTM4ZDdiY2IvYTA3MjhjZTMtMmVjOC0z NzY4LWIxMzctN2YxYTRlYmU1ODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzFhMjRhMjItZjhlMi00MzlmLWEy ZDUtZDQ5NzUzOGQ3YmNiLzMxYTI0YTIyLWY4ZTItNDM5Zi1hMmQ1LWQ0OTc1Mzhk N2JjYi5jcmwwHwYDVR0jBBgwFoAUY2JD6lbckFOLXgDzWNjeh2KTioswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEyNGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3 NTM4ZDdiY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgbxAOYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPlI1XRhYnxfImLDdQJwQtSWpKItIyXwBy3gZ9jMNBaYFJO9GKzA6 OHY6jV3DxZKfHIhvzhxs8NTyVQG5CGjfsOp+zJQ465uu9Xid/qOvH2euHaZ9O6fU nhrQf78E74DG/6JBuO8707KVuitrQWsEjq+QXqm9hly+SGqvwKpVeupdDcGOCVkc w/NUMSKhpWlj6MFBniiruyOZ7cN+5gJHE5bRhya4GYgyeQcVWT1bAxcEXWaR4D2i rz0IHxHWKIOlvIZSXymqkg+yI9vyW6O21y/QphXwtD4gU/FjmAk+QxOzdeaducCX x6+ImetGDwnJyanV2BFQZ7vZ6oXz+SE49A== -----END CERTIFICATE-----Generated at Wed Aug 6 16:08:40 2025 by rpki-client