$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa File: 17688313-b672-388e-bef1-cd24e224ed7e.roa (raw, json) Hash identifier: sEpHLxYeb1yBG2r3rYY2Te7eux9+l0nWAgQya47Opuc= Subject key identifier: DF:77:3F:C5:C4:53:60:96:D3:A3:F2:12:81:01:A6:40:3E:E6:59:5E Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584A9D30E192276A861A33904400 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 21519 IP address blocks: 2607:4640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e1:92:27:6a:86:1a:33:90:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=90d0bd14-077f-47a1-b170-deba51161731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ca:b6:84:a3:88:9e:f0:6f:91:69:31:d3:96: 51:31:94:c0:04:20:38:2b:5d:58:b5:77:d3:c5:44: e3:94:04:6b:3c:e2:3f:30:a1:39:c7:52:70:26:75: 73:7e:c7:e0:6c:39:a2:dd:f6:57:12:13:5f:df:cb: 1e:f4:ca:76:30:e2:7a:3f:63:70:9b:57:49:7f:dc: 0a:df:e0:5a:ba:7a:f7:a6:df:fe:5d:ac:22:78:f2: 72:54:a7:d7:4a:43:11:89:5b:46:a7:78:94:fe:2d: 15:29:67:27:7c:59:95:21:f5:6f:cb:7b:7f:40:ed: 97:91:bd:58:63:8c:3b:98:99:f9:12:df:05:d7:0c: 63:ad:63:06:fb:5e:01:8e:59:c0:4a:5c:08:87:fd: ca:22:78:48:b8:94:88:8e:37:43:d1:1d:05:14:bb: e3:2d:16:ca:dc:b3:ef:fa:b5:6e:7c:54:2f:39:15: f2:11:06:2c:d4:32:66:88:89:be:b9:1e:7d:09:9e: 8b:b7:38:cc:fd:54:0e:05:0b:24:bb:c2:d7:65:e9: d6:e6:83:98:4c:85:a0:45:00:86:86:7c:1e:b2:54: a6:8a:b7:ac:65:dc:f7:9e:df:0f:4b:1e:af:eb:f5: 33:9d:ee:82:b9:b2:dd:cc:8c:e7:a8:b5:cd:e0:8c: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:77:3F:C5:C4:53:60:96:D3:A3:F2:12:81:01:A6:40:3E:E6:59:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c2:a3:72:64:74:ff:3a:f0:5b:3b:09:e7:52:40:80:5e:bb: b2:2d:07:da:97:f8:82:85:1c:18:2b:84:ad:2d:ba:11:11:a6: f7:20:91:02:12:96:f0:6f:3d:86:b4:7e:85:74:ac:11:7b:36: 79:f2:59:3a:52:a1:5a:dc:70:41:f3:ba:c1:0d:4b:8f:c5:8e: 75:99:1b:ca:17:e9:a3:de:88:b9:c0:4c:f0:74:70:7a:4a:2b: e0:49:4d:64:a9:0a:b2:e7:f5:58:b9:b6:69:6d:d4:d2:25:d4: dc:6b:16:3d:ee:25:bb:5d:bb:8d:01:17:0b:99:e8:f5:c6:d7: ef:08:6d:9d:94:b7:f9:cd:74:ed:2b:5c:31:a1:70:0b:61:79: bb:95:40:3d:ea:09:be:bf:1e:1b:89:d7:c6:1c:18:07:fe:7a: 5c:d3:66:a1:55:94:be:27:a1:3d:6a:8c:21:8c:01:68:69:93: 88:33:19:48:61:90:bf:d3:1b:45:ea:95:b1:28:5f:84:fe:f7: f3:34:1f:51:8c:d1:f1:f6:61:d3:a5:6f:e2:81:1e:99:77:a1: 19:52:26:79:72:8e:74:50:5a:f9:b6:9a:bd:c7:6f:5f:35:31: c9:32:73:50:e1:37:dc:93:a1:36:a3:fc:6a:c5:b0:bc:02:e4: 38:7b:f6:be -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqdMOGSJ2qGGjOQRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk OTBkMGJkMTQtMDc3Zi00N2ExLWIxNzAtZGViYTUxMTYxNzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sq2hKOInvBvkWkx05ZRMZTABCA4K11YtXfT xUTjlARrPOI/MKE5x1JwJnVzfsfgbDmi3fZXEhNf38se9Mp2MOJ6P2Nwm1dJf9wK 3+Baunr3pt/+XawiePJyVKfXSkMRiVtGp3iU/i0VKWcnfFmVIfVvy3t/QO2Xkb1Y Y4w7mJn5Et8F1wxjrWMG+14BjlnASlwIh/3KInhIuJSIjjdD0R0FFLvjLRbK3LPv +rVufFQvORXyEQYs1DJmiIm+uR59CZ6LtzjM/VQOBQsku8LXZenW5oOYTIWgRQCG hnweslSmiresZdz3nt8PSx6v6/Uzne6CubLdzIznqLXN4IzR2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN93P8XEU2CW06PyEoEBpkA+5lleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvMTc2ODgzMTMtYjY3Mi0z ODhlLWJlZjEtY2QyNGUyMjRlZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+wqNyZHT/OvBbOwnnUkCAXruyLQfal/iChRwYK4StLboREab3IJEC Epbwbz2GtH6FdKwRezZ58lk6UqFa3HBB87rBDUuPxY51mRvKF+mj3oi5wEzwdHB6 SivgSU1kqQqy5/VYubZpbdTSJdTcaxY97iW7XbuNARcLmej1xtfvCG2dlLf5zXTt K1wxoXALYXm7lUA96gm+vx4bidfGHBgH/npc02ahVZS+J6E9aowhjAFoaZOIMxlI YZC/0xtF6pWxKF+E/vfzNB9RjNHx9mHTpW/igR6Zd6EZUiZ5co50UFr5tpq9x29f NTHJMnNQ4Tfck6E2o/xqxbC8AuQ4e/a+ -----END CERTIFICATE-----Generated at Sat Aug 9 22:34:54 2025 by rpki-client