$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8ca778b8-ae4f-3d0f-8482-464160f08b8f.roa File: 8ca778b8-ae4f-3d0f-8482-464160f08b8f.roa (raw, json) Hash identifier: r36C02NlrKsUKAoo1aF9ppsO5qVaxCSb4X5I+cjkSVQ= Subject key identifier: B7:6D:7F:4C:92:D4:4F:1D:A4:1C:A1:6D:D6:9F:5B:F6:56:9B:29:0B Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584A6F207F660BB7B3249486CF80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8ca778b8-ae4f-3d0f-8482-464160f08b8f.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 15164 IP address blocks: 2607:da00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:7f:66:0b:b7:b3:24:94:86:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=dda6879d-14fd-4b73-a92d-90c487777e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:07:1e:aa:5b:6d:b9:85:67:da:9a:ec:4a:e3: 21:b8:dc:1a:a5:07:11:6a:48:8e:20:e0:df:b7:12: 57:4c:5d:5d:fa:ff:e1:74:eb:90:f1:f0:ef:a1:8d: fb:af:a2:e3:06:79:1c:57:98:ee:52:32:e6:03:af: f1:b6:37:ce:50:de:16:e6:b6:69:ac:29:c8:e0:ba: 54:c1:41:46:37:81:5d:82:6b:07:fb:75:6e:c3:d2: c0:60:43:33:e0:2a:65:a0:cf:fd:43:0f:34:88:72: 05:45:74:e6:08:e5:78:d7:50:02:b9:e6:95:79:1a: 5a:38:04:5f:d1:1b:73:39:fc:c1:b1:b8:0b:60:2b: 95:42:87:74:1f:a5:f3:e4:93:9c:17:be:c3:30:b6: 7b:4a:1e:ed:2e:c6:6b:96:1b:3e:6d:1f:da:54:8f: a2:68:fe:d8:6f:1a:65:ad:c0:bd:8e:0d:60:2a:31: 0e:81:65:11:88:de:c4:69:b2:96:f7:6f:4f:c0:5a: 41:69:a4:a7:9a:73:da:e5:27:15:2b:a4:2f:a2:47: ca:86:d2:18:0a:00:8c:32:cc:76:84:94:62:00:a0: 13:20:7b:08:3d:b6:02:55:df:9f:20:d1:73:d8:45: a9:c4:a8:97:b2:b0:63:38:57:53:b2:b8:f6:31:7f: 7b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6D:7F:4C:92:D4:4F:1D:A4:1C:A1:6D:D6:9F:5B:F6:56:9B:29:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8ca778b8-ae4f-3d0f-8482-464160f08b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv6: 2607:da00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:31:2d:db:b2:10:55:ba:3d:cc:9c:3f:5e:1a:dc:fe:38:01: 4d:b4:9c:0c:0f:20:0c:88:2b:76:a5:10:c3:ab:76:5b:ea:6a: 19:90:b2:d3:7a:7e:c5:ce:fb:a2:15:05:e5:3b:ab:7a:a0:f2: 81:c5:4c:a0:8b:ae:84:21:fc:61:a1:48:65:fc:4f:8a:ed:54: 4d:3c:07:97:97:ef:61:4e:c4:1b:56:00:d9:79:49:c8:9c:80: 2a:80:39:59:dc:7d:c5:3f:f6:f5:3f:2f:78:fe:c9:46:8f:c8: 33:b4:2d:d9:3b:60:d6:fc:f9:25:9d:a1:e7:67:60:92:33:23: fb:7a:04:b1:aa:83:c6:b2:91:d1:68:72:4b:b4:82:76:41:87: 23:cd:5f:5b:38:ae:08:c8:cb:d0:8a:7e:f6:0b:8e:5f:e8:54: 61:11:f9:5c:4e:3d:e0:ce:e3:93:6b:08:c2:b9:39:ed:b1:f5: 3c:58:b9:9f:0f:5e:4a:bf:90:a0:76:02:a6:68:fa:8d:b3:e9: da:38:bc:fc:24:ea:ba:17:19:e3:d1:e6:5c:92:fb:3a:74:63: ef:d1:19:08:7f:c6:46:61:a6:25:51:ae:92:07:08:31:0f:80: 6b:cf:10:18:ea:8a:9d:fc:db:4a:41:b8:c5:3a:fa:a6:3c:64: b4:db:fa:99 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpvIH9mC7ezJJSGz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZGRhNjg3OWQtMTRmZC00YjczLWE5MmQtOTBjNDg3Nzc3ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gceqlttuYVn2prsSuMhuNwapQcRakiOIODf txJXTF1d+v/hdOuQ8fDvoY37r6LjBnkcV5juUjLmA6/xtjfOUN4W5rZprCnI4LpU wUFGN4FdgmsH+3Vuw9LAYEMz4CploM/9Qw80iHIFRXTmCOV411ACueaVeRpaOARf 0RtzOfzBsbgLYCuVQod0H6Xz5JOcF77DMLZ7Sh7tLsZrlhs+bR/aVI+iaP7Ybxpl rcC9jg1gKjEOgWURiN7EabKW929PwFpBaaSnmnPa5ScVK6QvokfKhtIYCgCMMsx2 hJRiAKATIHsIPbYCVd+fINFz2EWpxKiXsrBjOFdTsrj2MX97lQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLdtf0yS1E8dpByhbdafW/ZWmykLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvOGNhNzc4YjgtYWU0Zi0z ZDBmLTg0ODItNDY0MTYwZjA4YjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfaAAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmTEt27IQVbo9zJw/Xhrc/jgBTbScDA8gDIgrdqUQw6t2W+pqGZCy 03p+xc77ohUF5TureqDygcVMoIuuhCH8YaFIZfxPiu1UTTwHl5fvYU7EG1YA2XlJ yJyAKoA5Wdx9xT/29T8veP7JRo/IM7Qt2Ttg1vz5JZ2h52dgkjMj+3oEsaqDxrKR 0WhyS7SCdkGHI81fWziuCMjL0Ip+9guOX+hUYRH5XE494M7jk2sIwrk57bH1PFi5 nw9eSr+QoHYCpmj6jbPp2ji8/CTquhcZ49HmXJL7OnRj79EZCH/GRmGmJVGukgcI MQ+Aa88QGOqKnfzbSkG4xTr6pjxktNv6mQ== -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:20 2025 by rpki-client