$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aae20cc4-3ea3-3394-98f2-ce910522a7e2.roa File: aae20cc4-3ea3-3394-98f2-ce910522a7e2.roa (raw, json) Hash identifier: zQpOt+Mtsb9v6cDUThu2PCHK5iEeMM1JjSDHfPf5UnU= Subject key identifier: E7:C2:FE:07:29:F8:32:58:D0:DC:AF:30:D4:59:B1:45:FE:F2:23:EA Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96618DC4DCC4C65040DE80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aae20cc4-3ea3-3394-98f2-ce910522a7e2.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 2605:a401:8a3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:61:8d:c4:dc:c4:c6:50:40:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=bc2707ce-9fda-4b9f-9f8e-e7e90db4ce2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:50:e7:6a:59:7c:1a:ec:ce:7d:67:d8:be:45: 77:3b:ae:df:17:ee:84:9f:65:7d:da:1c:24:82:2a: a6:ea:cd:6a:2a:1d:02:8b:1f:af:15:81:f7:8e:f4: 01:8e:1a:24:52:31:a7:a1:33:70:85:1f:70:44:fd: 4d:ed:22:af:5d:30:b5:b3:c8:ba:8a:24:fb:82:6a: 08:44:3e:0d:eb:92:3d:32:af:c0:0d:82:ef:a9:c6: e4:9d:09:46:47:0e:93:3b:86:8b:4b:1a:79:4f:85: ba:81:d3:eb:cf:a6:af:a4:2a:23:74:53:d8:17:27: 52:7e:dc:be:f3:cb:6a:6b:e4:63:ff:fb:93:51:df: 45:70:9e:5e:12:9f:4d:d2:84:ee:9e:e7:da:6d:41: e5:ed:07:cc:2c:7c:ef:db:e3:2b:b1:01:20:01:a9: 81:a9:c2:e4:7e:60:29:5a:98:3a:40:b6:ec:14:46: cd:3f:cf:77:bc:61:e9:f1:a8:be:74:1a:17:e3:41: 35:1c:24:72:c2:89:11:49:71:05:2b:e9:66:b4:38: 93:17:c7:ed:b8:95:c4:eb:8e:ab:0d:9b:52:6c:a5: 14:6b:a8:46:c0:3b:ba:06:e0:72:60:98:09:ca:da: 93:23:a0:d2:cf:e6:50:3d:db:a6:7b:09:35:ff:d8: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:FE:07:29:F8:32:58:D0:DC:AF:30:D4:59:B1:45:FE:F2:23:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aae20cc4-3ea3-3394-98f2-ce910522a7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8a3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7c:51:d5:e2:29:ef:f1:70:1b:77:e2:f7:d8:27:88:b6:f2: 51:73:1a:5a:82:67:9e:67:f4:8f:49:0b:b5:6c:0e:74:51:ec: 9f:58:2a:c7:55:41:9c:8f:c1:da:c0:11:b8:a6:56:69:57:ee: c8:8a:cb:51:e7:94:07:94:42:a7:5e:37:07:ab:ab:3a:74:6e: 31:9f:50:8a:44:6d:af:a8:72:9e:d9:b6:f5:1d:43:5d:c1:5f: 1b:ce:bc:e8:8b:78:bc:17:08:f6:4c:ea:fb:a8:99:8c:97:eb: 66:80:fa:7c:25:12:17:3f:5d:68:1b:09:d0:ee:7e:8e:1d:c3: 1b:7f:93:35:cc:06:30:e2:d1:b3:a6:0a:76:d7:52:cb:9f:73: 95:53:4e:dc:b4:13:1e:eb:93:34:59:42:03:94:7c:5b:df:8e: d4:7d:92:29:05:1d:12:20:b0:47:38:6a:6b:42:c9:ce:92:7a: f2:32:18:7c:f1:0e:62:8d:6f:db:20:b9:49:91:6a:26:77:75: c6:cb:02:76:c9:d9:35:33:28:ef:8c:d1:a6:49:e7:4b:e7:92: 59:59:1a:0f:2c:d3:c2:53:f1:a6:4e:d7:29:8c:5d:fa:b9:d8: 87:8d:db:b8:6c:b6:b8:04:f7:32:e2:b8:31:71:02:09:50:f5: 76:35:51:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqelmGNxNzExlBA3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk YmMyNzA3Y2UtOWZkYS00YjlmLTlmOGUtZTdlOTBkYjRjZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFDnall8GuzOfWfYvkV3O67fF+6En2V92hwk giqm6s1qKh0Cix+vFYH3jvQBjhokUjGnoTNwhR9wRP1N7SKvXTC1s8i6iiT7gmoI RD4N65I9Mq/ADYLvqcbknQlGRw6TO4aLSxp5T4W6gdPrz6avpCojdFPYFydSfty+ 88tqa+Rj//uTUd9FcJ5eEp9N0oTunufabUHl7QfMLHzv2+MrsQEgAamBqcLkfmAp Wpg6QLbsFEbNP893vGHp8ai+dBoX40E1HCRywokRSXEFK+lmtDiTF8ftuJXE646r DZtSbKUUa6hGwDu6BuByYJgJytqTI6DSz+ZQPdumewk1/9jXPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOfC/gcp+DJY0NyvMNRZsUX+8iPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWFlMjBjYzQtM2VhMy0z Mzk0LTk4ZjItY2U5MTA1MjJhN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYo9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADl8UdXiKe/xcBt34vfYJ4i28lFzGlqCZ55n9I9JC7VsDnRR7J9Y KsdVQZyPwdrAEbimVmlX7siKy1HnlAeUQqdeNwerqzp0bjGfUIpEba+ocp7ZtvUd Q13BXxvOvOiLeLwXCPZM6vuomYyX62aA+nwlEhc/XWgbCdDufo4dwxt/kzXMBjDi 0bOmCnbXUsufc5VTTty0Ex7rkzRZQgOUfFvfjtR9kikFHRIgsEc4amtCyc6SevIy GHzxDmKNb9sguUmRaiZ3dcbLAnbJ2TUzKO+M0aZJ50vnkllZGg8s08JT8aZO1ymM Xfq52IeN27hstrgE9zLiuDFxAglQ9XY1UbY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:36 2025 by rpki-client