$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8cf600b5-a78c-31ad-9585-1136957f1b31.roa File: 8cf600b5-a78c-31ad-9585-1136957f1b31.roa (raw, json) Hash identifier: EGJLsguoH6HfLSjRV+bIP90XU+8vXMJwbf1LiX3PEy8= Subject key identifier: E9:A4:37:D4:C9:5F:B1:B0:06:D1:25:38:D0:6B:B9:52:47:13:04:A7 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96564D0F9298876D240F80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8cf600b5-a78c-31ad-9585-1136957f1b31.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 2603:9031:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:56:4d:0f:92:98:87:6d:24:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=81f987aa-06d5-4a1d-b4df-5a941ceedb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d0:1b:4b:76:3f:60:74:5d:c3:3f:06:38:d2: aa:76:8c:7c:44:d7:72:d0:a9:ef:b7:09:8a:06:45: e6:22:76:c8:b7:42:d5:ca:5b:65:26:28:06:d8:e5: 89:30:cf:b8:67:a9:cc:da:75:fc:f8:0d:4c:52:1f: a1:4f:5e:92:91:c7:8d:d0:29:b8:22:ce:31:ac:45: 46:af:ab:d7:6e:e4:43:5e:2b:50:4e:f0:8d:16:51: c5:e8:7c:e4:3f:e7:5b:d1:51:a3:a7:f2:c4:12:66: 62:64:a8:fc:ea:4d:ba:93:83:6b:98:31:dc:33:9d: 02:aa:a8:87:b4:66:04:e4:ac:06:36:2e:f7:eb:72: ec:e2:d5:10:cf:3c:b2:a6:cf:f8:78:ed:3b:87:a5: a1:6e:b8:71:a9:2b:25:3f:72:2e:c3:c2:31:b2:40: 31:5b:d6:5e:96:3b:7c:57:72:a8:63:7e:b0:e2:37: 2e:ad:7e:b2:63:52:62:6c:6a:08:9d:86:01:dd:e4: b0:47:2b:c7:1c:59:81:a4:34:ac:42:7e:c4:48:59: c3:23:6f:1e:08:78:ad:e7:0c:59:12:27:b5:2d:1a: 3f:5f:37:c1:b6:41:50:a7:aa:d7:d2:cf:a6:2f:42: b8:ce:c6:a5:33:b5:a1:b2:10:43:71:27:32:78:3a: 41:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A4:37:D4:C9:5F:B1:B0:06:D1:25:38:D0:6B:B9:52:47:13:04:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8cf600b5-a78c-31ad-9585-1136957f1b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2603:9031:60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b5:d2:d0:12:5d:c0:8a:90:e0:18:59:f5:12:e3:89:1a:5f: a0:a6:a5:f4:dd:dc:ad:b8:d3:cd:d0:60:b4:ca:87:68:ef:33: 77:c0:9b:34:82:f3:cf:51:61:b8:31:46:5a:7c:9a:ae:9d:10: 67:3c:f3:fd:12:86:8c:90:f2:fa:70:84:ec:95:69:80:8f:b1: 78:a7:a1:7f:11:90:b6:e8:03:7a:5c:d9:09:f8:d6:cf:0c:c3: 20:39:6f:84:1e:f2:b0:2e:8e:01:de:c1:05:68:ac:f5:ce:e2: 13:52:94:13:7e:96:fd:2d:af:51:e4:58:66:da:df:04:ae:cd: d3:6f:f8:22:20:45:35:36:f5:1b:ca:ab:8c:44:8f:eb:a2:5f: 95:8f:24:40:c8:61:b6:d5:f7:51:0d:b8:c1:46:ef:dc:11:0d: 5c:5e:2e:69:49:06:fd:9a:c0:16:7b:ad:ad:59:5e:48:57:d7: a9:25:e0:83:cc:12:65:70:20:2a:97:96:a7:1b:fc:e7:40:95: 16:82:a6:9c:f7:b7:3f:5d:a0:54:68:1c:6d:68:06:84:ef:b7: 2b:ae:62:29:b4:0c:5b:a2:c8:2f:94:8d:8c:cd:5d:0b:c0:11: e4:17:70:5b:50:a3:9a:52:ae:69:0e:5c:a0:22:fc:fd:9e:75: eb:68:94:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqellZND5KYh20kD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ODFmOTg3YWEtMDZkNS00YTFkLWI0ZGYtNWE5NDFjZWVkYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldAbS3Y/YHRdwz8GONKqdox8RNdy0KnvtwmK BkXmInbIt0LVyltlJigG2OWJMM+4Z6nM2nX8+A1MUh+hT16SkceN0Cm4Is4xrEVG r6vXbuRDXitQTvCNFlHF6HzkP+db0VGjp/LEEmZiZKj86k26k4NrmDHcM50CqqiH tGYE5KwGNi7363Ls4tUQzzyyps/4eO07h6WhbrhxqSslP3Iuw8IxskAxW9Zeljt8 V3KoY36w4jcurX6yY1JibGoInYYB3eSwRyvHHFmBpDSsQn7ESFnDI28eCHit5wxZ Eie1LRo/XzfBtkFQp6rX0s+mL0K4zsalM7WhshBDcScyeDpBtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOmkN9TJX7GwBtElONBruVJHEwSnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGNmNjAwYjUtYTc4Yy0z MWFkLTk1ODUtMTEzNjk1N2YxYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgOQMQBg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJS10tASXcCKkOAYWfUS44kaX6CmpfTd3K24083QYLTKh2jvM3fA mzSC889RYbgxRlp8mq6dEGc88/0ShoyQ8vpwhOyVaYCPsXinoX8RkLboA3pc2Qn4 1s8MwyA5b4Qe8rAujgHewQVorPXO4hNSlBN+lv0tr1HkWGba3wSuzdNv+CIgRTU2 9RvKq4xEj+uiX5WPJEDIYbbV91ENuMFG79wRDVxeLmlJBv2awBZ7ra1ZXkhX16kl 4IPMEmVwICqXlqcb/OdAlRaCppz3tz9doFRoHG1oBoTvtyuuYim0DFuiyC+UjYzN XQvAEeQXcFtQo5pSrmkOXKAi/P2edetolE8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:30 2025 by rpki-client