$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa File: 5cf65140-1fa6-3025-943f-30f9ab0055c6.roa (raw, json) Hash identifier: /FoLu+84Yw/AMMvnJ4n41sqw0JxwrIjaUHWS9eObQpk= Subject key identifier: 22:FA:A9:EB:09:AC:72:B5:78:92:30:3B:74:21:10:DC:81:89:42:69 Certificate issuer: /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a Certificate serial: 010D0C9F4328584A9FFBBA65C5F76C9BF7442900 Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 134963 IP address blocks: 2600:3100::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:ba:65:c5:f7:6c:9b:f7:44:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=30db11a4-1b9b-418c-a135-665c8efe838b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:26:e0:ff:52:53:14:ba:27:f2:a3:2b:c5:5a: e6:3c:e8:2e:46:9c:7a:d8:ad:17:f5:cc:0d:56:1c: 18:33:86:01:06:be:0f:31:99:91:d4:0d:c7:be:ea: 73:7a:ef:25:e8:f2:9e:f5:c3:bb:28:af:67:4c:56: 4e:66:13:92:4e:10:7b:c7:71:ab:0c:e6:f4:a0:ea: e7:7b:f9:3e:e3:b9:ea:a3:05:0d:c5:ae:a4:11:c7: b5:f1:ce:a4:94:d8:6d:29:f5:7c:bc:3e:a6:08:14: 37:a0:ff:98:de:55:cb:85:57:02:3b:88:46:0b:8f: 2d:16:84:7e:04:43:85:1c:78:29:3c:c5:bb:62:15: bc:e5:8c:f0:d4:4d:81:ca:b2:5d:48:4d:03:ee:71: a5:30:9e:39:74:bb:e4:f4:ee:fb:c3:35:46:44:ed: 2b:b9:4f:78:bb:59:78:d2:fc:40:2a:e4:67:e4:f0: dc:87:09:5b:e1:88:57:b5:fc:a4:74:e1:59:64:17: 73:c1:53:62:f8:ed:6f:b0:a9:c7:f3:41:2b:91:4c: 8e:27:c8:74:37:73:a3:9a:67:6c:18:1e:f9:50:89: 90:ec:6b:43:82:7f:a4:ae:50:2f:2e:60:16:af:d2: 85:d9:c9:b0:37:dd:d7:13:eb:e1:95:80:ed:96:cb: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FA:A9:EB:09:AC:72:B5:78:92:30:3B:74:21:10:DC:81:89:42:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl X509v3 Authority Key Identifier: keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer sbgp-ipAddrBlock: critical IPv6: 2600:3100::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b7:57:a3:3c:5e:ae:bf:95:d5:5a:0c:0d:47:8a:93:46:d0: 5a:fd:6d:0f:42:ea:3a:c4:eb:24:d1:cb:f9:92:65:da:ef:4c: 0a:8f:fc:10:22:7a:4a:d7:b0:ff:7d:bd:0b:51:99:bf:27:06: 6c:d9:fb:3e:7e:6e:4a:e7:42:30:99:dd:21:28:8e:dc:1b:96: ca:75:20:f9:c2:40:d4:84:62:32:26:36:f8:2f:55:9e:7d:a9: ff:c5:fa:b4:8d:52:90:92:2a:93:47:d6:6e:0f:7d:c5:ed:fb: 63:74:c2:ca:97:c7:31:dc:3c:80:ce:60:25:62:7b:40:63:a2: 31:32:54:8a:91:f1:78:fe:34:ff:05:e3:52:5f:9c:2f:da:8d: e0:25:75:68:f4:cd:6e:32:3f:2e:af:32:2f:34:f3:83:fd:bf: ea:dd:56:a2:3a:e9:bf:0d:d1:c6:73:fb:35:d6:7c:59:a8:5f: 6c:c6:99:80:86:e7:c4:0d:9c:bc:f1:de:15:2f:cc:55:4d:4d: ca:4d:1e:cb:9c:93:15:53:76:ee:23:06:f6:1b:03:d3:e4:e1: b3:85:18:dd:4a:f4:4b:37:c7:32:3e:74:14:30:37:cb:dd:52: e0:40:5b:32:24:80:5c:8f:65:cd:17:39:f6:3f:c3:01:4c:05: 23:f7:4f:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7plxfdsm/dEKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQzMTYxZTQtZGFjMS00MDdiLThmMTYtNTVlNmVmMTAw ZDBhMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MzBkYjExYTQtMWI5Yi00MThjLWExMzUtNjY1YzhlZmU4MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCbg/1JTFLon8qMrxVrmPOguRpx62K0X9cwN VhwYM4YBBr4PMZmR1A3Hvupzeu8l6PKe9cO7KK9nTFZOZhOSThB7x3GrDOb0oOrn e/k+47nqowUNxa6kEce18c6klNhtKfV8vD6mCBQ3oP+Y3lXLhVcCO4hGC48tFoR+ BEOFHHgpPMW7YhW85Yzw1E2ByrJdSE0D7nGlMJ45dLvk9O77wzVGRO0ruU94u1l4 0vxAKuRn5PDchwlb4YhXtfykdOFZZBdzwVNi+O1vsKnH80ErkUyOJ8h0N3Ojmmds GB75UImQ7GtDgn+krlAvLmAWr9KF2cmwN93XE+vhlYDtlss/0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCL6qesJrHK1eJIwO3QhENyBiUJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDMx NjFlNC1kYWMxLTQwN2ItOGYxNi01NWU2ZWYxMDBkMGEvNWNmNjUxNDAtMWZhNi0z MDI1LTk0M2YtMzBmOWFiMDA1NWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQzMTYxZTQtZGFjMS00MDdiLThm MTYtNTVlNmVmMTAwZDBhL2Q0MzE2MWU0LWRhYzEtNDA3Yi04ZjE2LTU1ZTZlZjEw MGQwYS5jcmwwHwYDVR0jBBgwFoAUD636QCJrXbrLDTg1NoyGIMzZXrMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDMxNjFlNC1kYWMxLTQwN2ItOGYxNi01NWU2 ZWYxMDBkMGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAxADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7t1ejPF6uv5XVWgwNR4qTRtBa/W0PQuo6xOsk0cv5kmXa70wKj/wQ InpK17D/fb0LUZm/JwZs2fs+fm5K50Iwmd0hKI7cG5bKdSD5wkDUhGIyJjb4L1We fan/xfq0jVKQkiqTR9ZuD33F7ftjdMLKl8cx3DyAzmAlYntAY6IxMlSKkfF4/jT/ BeNSX5wv2o3gJXVo9M1uMj8urzIvNPOD/b/q3VaiOum/DdHGc/s11nxZqF9sxpmA hufEDZy88d4VL8xVTU3KTR7LnJMVU3buIwb2GwPT5OGzhRjdSvRLN8cyPnQUMDfL 3VLgQFsyJIBcj2XNFzn2P8MBTAUj908j -----END CERTIFICATE-----Generated at Wed Aug 6 10:09:30 2025 by rpki-client