$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3814af87-34eb-3d1b-b0d2-adee47219f87.roa File: 3814af87-34eb-3d1b-b0d2-adee47219f87.roa (raw, json) Hash identifier: Sv7TkKgJxbfBA9q5OUInIILf3BtkEAVwcJ6Ae+DmKaY= Subject key identifier: D3:B7:ED:F2:40:C2:6A:42:0F:65:64:89:B2:A0:75:0E:66:BE:34:11 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96317FDC2BA57D43DBA240 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3814af87-34eb-3d1b-b0d2-adee47219f87.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 2605:a401:8030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:31:7f:dc:2b:a5:7d:43:db:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=2b182235-477d-4888-a938-4b5eb8acddf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cd:1b:e2:f9:77:22:b3:d2:d2:45:ac:08:1e: 07:2d:e3:23:ca:a1:7e:66:0f:e8:6a:27:ab:f0:a6: 56:4b:f4:41:86:e3:a8:a6:74:93:f9:75:e6:89:bd: 6d:bc:73:89:45:1c:c6:f5:bd:15:1b:bd:1b:1e:ff: 87:02:89:56:17:30:54:42:7a:72:0a:33:3b:27:9f: e8:53:b6:e3:35:ed:17:4c:9b:52:79:f4:57:2e:1d: 42:79:17:b6:b4:0d:7f:95:3d:e3:41:ab:48:24:bc: cb:d2:66:8b:24:ce:ac:1e:bf:f6:e8:35:7d:00:7a: 8e:37:05:4f:e1:fd:70:44:f3:01:18:e2:d7:70:d8: db:96:6d:39:06:a2:c8:4a:39:c6:0a:e3:9c:dc:1a: 11:9e:65:65:42:26:da:1d:98:97:70:e2:7b:59:be: 6f:15:ab:ed:b6:bb:a2:ac:61:da:91:26:da:fd:d1: 3b:93:25:63:4b:f3:58:e3:9b:82:b8:f3:7c:b7:68: 9d:d1:be:59:d7:2f:28:ab:33:a8:8c:9a:2a:6b:53: ec:dc:73:8e:9c:9a:98:0e:8f:ea:55:0d:ea:92:a5: 39:b3:bc:c7:5c:27:f4:fb:1b:07:90:b6:09:b4:49: 71:63:90:f6:05:4d:cf:0c:04:cd:4d:59:57:c9:85: ae:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:ED:F2:40:C2:6A:42:0F:65:64:89:B2:A0:75:0E:66:BE:34:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3814af87-34eb-3d1b-b0d2-adee47219f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8030::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a9:06:29:35:61:1e:99:c5:f7:8f:cb:7d:bb:07:d9:6f:bb: d6:90:91:03:8f:ed:1e:91:95:ab:ab:71:3d:0d:b7:54:60:a8: 4e:f1:8f:9d:a5:8b:e2:26:0d:84:81:6d:92:9a:f0:e3:4f:9d: 6b:e7:5e:a9:25:5b:3f:70:d0:1d:10:46:bb:1c:a3:5f:af:e7: a6:52:09:f0:81:5c:1b:7f:39:cf:9a:de:b8:42:ac:eb:ff:22: 38:30:ff:34:f1:49:06:e3:89:ac:e2:45:bb:4d:93:01:47:7e: bb:c1:e2:89:33:fe:31:09:3e:bd:d4:67:b8:1a:ec:99:81:ff: 20:93:95:c4:4f:f7:6a:5e:98:5e:e6:ec:92:06:50:16:75:f7: c1:b2:22:1a:9a:83:a4:59:f8:18:d8:15:16:1c:6f:21:56:47: 98:72:c8:29:04:51:e1:a4:73:f8:ed:a2:fe:66:51:1c:27:2e: 78:1b:5a:08:33:36:9a:f3:ac:97:b0:9a:5a:23:24:da:34:3b: 6e:36:cc:ca:4e:6d:eb:e9:16:25:1c:f4:42:8f:e5:74:72:71: df:29:37:60:ad:3a:1b:46:71:b0:02:d4:7a:64:e7:62:4b:eb: a3:17:4b:57:4a:a9:78:29:4c:bc:13:db:29:a5:51:01:2d:e9: eb:9e:16:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqeljF/3CulfUPbokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MmIxODIyMzUtNDc3ZC00ODg4LWE5MzgtNGI1ZWI4YWNkZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM0b4vl3IrPS0kWsCB4HLeMjyqF+Zg/oaier 8KZWS/RBhuOopnST+XXmib1tvHOJRRzG9b0VG70bHv+HAolWFzBUQnpyCjM7J5/o U7bjNe0XTJtSefRXLh1CeRe2tA1/lT3jQatIJLzL0maLJM6sHr/26DV9AHqONwVP 4f1wRPMBGOLXcNjblm05BqLISjnGCuOc3BoRnmVlQibaHZiXcOJ7Wb5vFavttrui rGHakSba/dE7kyVjS/NY45uCuPN8t2id0b5Z1y8oqzOojJoqa1Ps3HOOnJqYDo/q VQ3qkqU5s7zHXCf0+xsHkLYJtElxY5D2BU3PDATNTVlXyYWuTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNO37fJAwmpCD2VkibKgdQ5mvjQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzgxNGFmODctMzRlYi0z ZDFiLWIwZDItYWRlZTQ3MjE5Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICpBik1YR6ZxfePy327B9lvu9aQkQOP7R6RlaurcT0Nt1RgqE7x j52li+ImDYSBbZKa8ONPnWvnXqklWz9w0B0QRrsco1+v56ZSCfCBXBt/Oc+a3rhC rOv/Ijgw/zTxSQbjiaziRbtNkwFHfrvB4okz/jEJPr3UZ7ga7JmB/yCTlcRP92pe mF7m7JIGUBZ198GyIhqag6RZ+BjYFRYcbyFWR5hyyCkEUeGkc/jtov5mURwnLngb WggzNprzrJewmlojJNo0O242zMpObevpFiUc9EKP5XRycd8pN2CtOhtGcbAC1Hpk 52JL66MXS1dKqXgpTLwT2ymlUQEt6eueFvk= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:18 2025 by rpki-client