$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa File: d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa (raw, json) Hash identifier: LaOq5qVvhT6GohKL60ObMBHpUJMtMcD78cySP57YCfY= Subject key identifier: 7D:01:38:CE:6B:AA:26:67:FF:7D:57:09:BC:AF:F0:BD:8D:5A:9A:25 Certificate issuer: /CN=675593d5-5ec7-4ba7-9134-6761cde6b601 Certificate serial: 010D0C9F4328584AB7B6254C365F397F6CBC5080 Authority key identifier: 5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 29 IP address blocks: 2604:b200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:25:4c:36:5f:39:7f:6c:bc:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=675593d5-5ec7-4ba7-9134-6761cde6b601 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=1dff619c-f77f-4da4-87d5-8d1dce9d72ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2e:f8:90:67:a0:dc:66:d6:b0:f7:6b:c7:62: 1f:8d:25:7d:41:cf:8a:b3:6d:6d:ac:7a:eb:17:91: c1:f6:a2:8d:12:f2:36:13:f5:d5:be:ad:4e:33:63: 9c:6a:70:70:68:f0:c1:ba:d7:e5:d7:88:b0:61:dc: c9:f7:89:6b:88:dd:36:e0:c1:4c:ee:7f:f0:bc:aa: 40:72:45:8e:40:0a:a8:65:f0:6d:f9:23:f8:04:eb: d0:31:38:92:a0:72:01:b1:75:2c:34:89:6e:8e:d5: 00:7f:82:99:b7:41:5d:44:56:62:12:f2:2c:26:55: 70:ae:85:70:57:81:19:01:e5:84:c7:1e:88:54:12: 58:ab:dd:b1:f1:27:13:da:36:b2:ca:b8:69:f9:f3: 82:96:b9:fc:6c:68:c3:ac:32:e6:10:93:db:c3:01: 6d:f4:8e:ad:f9:53:c6:3e:3e:7d:d3:c5:0a:91:3f: b6:92:32:53:6d:ec:cd:0b:1b:c4:a6:17:a8:af:6b: 5a:56:db:f8:2f:c1:ac:19:63:d0:31:e1:e2:79:7d: c4:2e:c8:96:56:36:9d:c6:94:af:5d:cd:9a:83:31: 1e:16:2a:71:45:a1:98:76:db:2b:02:bb:df:2a:50: 31:00:0a:cd:3f:d2:5b:65:f9:00:c6:4b:06:fe:d4: 93:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:01:38:CE:6B:AA:26:67:FF:7D:57:09:BC:AF:F0:BD:8D:5A:9A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl X509v3 Authority Key Identifier: keyid:5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer sbgp-ipAddrBlock: critical IPv6: 2604:b200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e2:9c:fe:fa:5f:98:25:91:02:cc:53:07:5a:ef:6d:ff:49: 12:00:84:2a:3f:ec:89:04:7b:29:38:65:05:f0:c2:4a:bc:4f: b7:09:81:a4:d2:cf:5c:02:97:4f:8d:b4:6f:73:5c:6d:03:c0: 60:9b:7a:75:26:2d:6d:aa:09:98:37:43:ae:a5:dd:2c:bf:99: 7f:02:8a:a2:e3:9e:98:36:47:7b:67:c9:8a:39:3b:90:76:58: 26:64:14:85:e9:6f:2a:85:6d:97:f0:49:77:a8:a9:61:28:9a: 66:be:09:74:f3:35:bf:69:c0:c4:a9:08:a7:52:e5:78:6d:8f: ed:d0:80:90:85:a7:23:6c:87:06:30:bc:6d:74:de:ea:04:5d: 6a:d7:73:22:96:31:af:86:56:2d:8c:74:d0:56:28:77:bd:11: 37:e4:08:af:f6:11:3c:34:2b:1a:76:56:ab:b5:7e:9b:65:99: 74:7e:eb:54:54:67:65:20:08:06:0c:ae:04:dd:fc:bf:01:03: bf:73:fc:c3:0b:cf:0b:c5:3a:fa:a7:34:58:35:6d:f5:85:52: 8b:d9:91:fa:1b:e5:3b:5d:07:38:0d:da:6b:7a:ea:0d:5f:ce: db:02:e2:9a:19:a2:3c:01:25:9e:e7:8b:c9:bd:e8:9c:c0:64: 85:98:f9:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEq3tiVMNl85f2y8UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc1NTkzZDUtNWVjNy00YmE3LTkxMzQtNjc2MWNkZTZi NjAxMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk MWRmZjYxOWMtZjc3Zi00ZGE0LTg3ZDUtOGQxZGNlOWQ3MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy74kGeg3GbWsPdrx2IfjSV9Qc+Ks21trHrr F5HB9qKNEvI2E/XVvq1OM2OcanBwaPDButfl14iwYdzJ94lriN024MFM7n/wvKpA ckWOQAqoZfBt+SP4BOvQMTiSoHIBsXUsNIlujtUAf4KZt0FdRFZiEvIsJlVwroVw V4EZAeWExx6IVBJYq92x8ScT2jayyrhp+fOClrn8bGjDrDLmEJPbwwFt9I6t+VPG Pj5908UKkT+2kjJTbezNCxvEpheor2taVtv4L8GsGWPQMeHieX3ELsiWVjadxpSv Xc2agzEeFipxRaGYdtsrArvfKlAxAArNP9JbZfkAxksG/tSTHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH0BOM5rqiZn/31XCbyv8L2NWpolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NzU1 OTNkNS01ZWM3LTRiYTctOTEzNC02NzYxY2RlNmI2MDEvZDdhZjdmYmMtNjlkMS0z ZDUyLTljMWQtNDBjOTY4ZmYyNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjc1NTkzZDUtNWVjNy00YmE3LTkx MzQtNjc2MWNkZTZiNjAxLzY3NTU5M2Q1LTVlYzctNGJhNy05MTM0LTY3NjFjZGU2 YjYwMS5jcmwwHwYDVR0jBBgwFoAUWim2d2+LiMuN4g3agBDQL+JE2sMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NzU1OTNkNS01ZWM3LTRiYTctOTEzNC02NzYx Y2RlNmI2MDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSyADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCM4pz++l+YJZECzFMHWu9t/0kSAIQqP+yJBHspOGUF8MJKvE+3CYGk 0s9cApdPjbRvc1xtA8Bgm3p1Ji1tqgmYN0Oupd0sv5l/Aoqi456YNkd7Z8mKOTuQ dlgmZBSF6W8qhW2X8El3qKlhKJpmvgl08zW/acDEqQinUuV4bY/t0ICQhacjbIcG MLxtdN7qBF1q13MiljGvhlYtjHTQVih3vRE35Aiv9hE8NCsadlartX6bZZl0futU VGdlIAgGDK4E3fy/AQO/c/zDC88LxTr6pzRYNW31hVKL2ZH6G+U7XQc4DdpreuoN X87bAuKaGaI8ASWe54vJveicwGSFmPkR -----END CERTIFICATE-----Generated at Fri Aug 8 20:53:14 2025 by rpki-client