$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/40f524fa-8246-33ca-bdf9-7b4ce2163043.roa File: 40f524fa-8246-33ca-bdf9-7b4ce2163043.roa (raw, json) Hash identifier: wAvUrKRtP9q6OK3Z+3fjl5P7SRmiGNxTiIcKhJ+5ZEo= Subject key identifier: F7:19:3C:7B:09:36:78:E5:A8:06:DE:B8:1B:1B:CB:59:20:86:EA:F0 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96543AE5C9CBD798410D80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/40f524fa-8246-33ca-bdf9-7b4ce2163043.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 2603:9008::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:54:3a:e5:c9:cb:d7:98:41:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=0fb61912-89a1-4c81-bb2b-59fab9550db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cd:ec:fd:92:4b:28:29:78:df:84:a5:e2:27: 0e:37:df:ed:7e:45:5b:c0:9a:8a:a4:96:61:bf:a1: 0f:d2:79:e2:45:ce:52:93:80:ec:f6:b8:a1:c6:13: c9:37:8a:f9:7a:ca:ad:14:31:28:e9:00:58:31:83: 2a:d8:47:97:0f:58:f4:ca:05:78:8c:39:fd:38:2a: 2d:52:24:ca:1b:b9:74:6d:7d:ed:b2:07:35:1d:c9: 97:c0:b9:7b:be:76:f8:3d:69:a3:31:50:9b:45:af: 5f:00:62:ea:cf:7e:e3:da:c6:77:80:ba:4c:91:66: bc:92:e8:20:be:07:71:82:28:0e:5c:b2:40:61:bf: f9:0d:41:57:83:e1:a6:3a:87:21:e2:fe:bf:ff:ac: 00:a8:08:e9:c0:05:02:ab:29:71:98:46:d7:4f:3c: c7:74:cc:95:12:af:a3:a1:8a:47:b0:ee:9f:39:71: d4:00:8f:c1:e4:fd:ff:6c:f4:e5:13:ce:fd:37:e0: 42:26:8d:35:ec:89:91:ad:25:bd:72:ce:1a:31:2a: e7:58:84:b6:ee:0a:65:4c:06:41:1a:c6:54:04:55: 67:be:d2:6f:62:dc:cd:43:c6:97:8d:cc:08:dd:1c: a3:f5:d2:09:fd:1c:8d:12:72:39:ac:07:e9:58:20: 68:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:19:3C:7B:09:36:78:E5:A8:06:DE:B8:1B:1B:CB:59:20:86:EA:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/40f524fa-8246-33ca-bdf9-7b4ce2163043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2603:9008::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6f:86:ff:ca:01:9c:37:3f:98:0f:14:1f:8c:c1:82:cd:3b: 92:fa:a6:98:ac:90:bb:4a:8c:3b:ef:0c:c2:77:a8:0b:d7:fb: 3c:3d:8a:d7:c6:20:a7:c1:70:92:0c:ef:67:6b:1e:1e:d3:92: 03:d1:09:94:74:03:ea:90:bd:30:58:c8:6f:8f:c2:ea:9a:28: 0a:0f:01:04:45:17:b3:25:b8:cf:26:ab:5c:15:4c:2a:7e:dd: 43:06:dd:aa:af:53:62:0f:14:02:7c:e7:45:a1:04:19:52:51: a4:b5:66:13:a8:8a:50:76:50:d2:99:8b:21:c6:ed:58:53:3f: 00:b8:a1:ae:fe:77:48:e4:c1:25:67:03:ed:72:d3:2b:c1:cf: c7:12:64:e2:55:24:a0:9a:fa:64:ef:da:0b:4b:c0:66:49:f9: cb:86:39:d0:2e:d0:c0:25:4e:90:15:69:16:04:ea:85:bb:bd: 2e:3c:72:57:54:4f:4f:09:4f:ef:a1:ba:50:e0:d3:97:1f:4e: b5:29:3e:a6:d2:1c:51:7b:ba:7e:f4:e8:eb:73:02:6b:63:22: 95:de:2f:dd:21:7a:68:d2:69:bc:77:e7:3c:05:d1:9e:06:bb: b6:24:1e:7d:06:a8:da:09:b2:19:14:bb:ec:50:6c:ed:57:64: db:45:3f:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqellQ65cnL15hBDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MGZiNjE5MTItODlhMS00YzgxLWJiMmItNTlmYWI5NTUwZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi83s/ZJLKCl434Sl4icON9/tfkVbwJqKpJZh v6EP0nniRc5Sk4Ds9rihxhPJN4r5esqtFDEo6QBYMYMq2EeXD1j0ygV4jDn9OCot UiTKG7l0bX3tsgc1HcmXwLl7vnb4PWmjMVCbRa9fAGLqz37j2sZ3gLpMkWa8kugg vgdxgigOXLJAYb/5DUFXg+GmOoch4v6//6wAqAjpwAUCqylxmEbXTzzHdMyVEq+j oYpHsO6fOXHUAI/B5P3/bPTlE879N+BCJo017ImRrSW9cs4aMSrnWIS27gplTAZB GsZUBFVnvtJvYtzNQ8aXjcwI3Ryj9dIJ/RyNEnI5rAfpWCBoVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPcZPHsJNnjlqAbeuBsby1kghurwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNDBmNTI0ZmEtODI0Ni0z M2NhLWJkZjktN2I0Y2UyMTYzMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgOQCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhb4b/ygGcNz+YDxQfjMGCzTuS+qaYrJC7Sow77wzCd6gL1/s8PYrX xiCnwXCSDO9nax4e05ID0QmUdAPqkL0wWMhvj8LqmigKDwEERRezJbjPJqtcFUwq ft1DBt2qr1NiDxQCfOdFoQQZUlGktWYTqIpQdlDSmYshxu1YUz8AuKGu/ndI5MEl ZwPtctMrwc/HEmTiVSSgmvpk79oLS8BmSfnLhjnQLtDAJU6QFWkWBOqFu70uPHJX VE9PCU/vobpQ4NOXH061KT6m0hxRe7p+9OjrcwJrYyKV3i/dIXpo0mm8d+c8BdGe Bru2JB59BqjaCbIZFLvsUGztV2TbRT8Q -----END CERTIFICATE-----Generated at Wed Aug 6 11:09:00 2025 by rpki-client