$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa File: cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa (raw, json) Hash identifier: 9AbAA8xgdlsgDgPJNdlS1tCfuPQ5DZxTSGXlsCK/Cjs= Subject key identifier: FE:CD:B3:22:F8:DF:12:49:03:55:7D:4A:1C:8B:71:DB:77:C5:34:CA Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96545EADDDF7D56097EC80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 2603:9000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:54:5e:ad:dd:f7:d5:60:97:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=b46e77f2-bcf4-4fa7-91c7-9508dd50c987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:53:14:29:ff:dc:1e:f4:92:9f:e2:29:52:cd: 77:c9:32:7a:59:95:bf:93:39:8c:a0:74:3a:c5:95: 0f:8d:3d:72:bf:bf:3c:c0:99:b7:35:a4:49:1c:65: 6f:0d:fc:ef:ac:1b:f1:de:89:9c:e1:07:d1:23:35: 64:a6:fd:11:01:c0:7e:bf:15:65:3a:ce:60:0a:1c: 53:13:31:39:b2:29:b0:32:9a:d9:5b:55:0a:fd:bb: 43:a4:91:b6:32:44:c3:aa:ff:12:43:31:23:df:9e: 0a:3c:bd:56:59:25:73:0b:0c:5c:f2:93:ae:fa:3a: 24:a0:8a:2d:33:f8:f9:31:b0:d5:d7:26:92:b1:5e: af:da:98:49:4c:4c:66:d3:75:61:c7:23:70:17:37: 45:1b:1b:68:81:58:ae:58:e2:16:76:15:10:fa:77: 70:c9:f9:e5:a0:97:52:6a:8a:4c:ad:62:e3:45:f0: 2f:b3:c8:b8:b7:1b:41:ab:bb:7f:26:de:e2:96:68: 99:bb:3a:9e:16:73:3c:d5:25:1b:05:ce:75:de:e1: 5e:25:1d:e6:f6:6c:a6:eb:87:88:85:82:9f:23:05: f6:e1:36:e1:6c:f3:c6:c0:3f:19:1f:fd:4b:6c:28: 55:fc:a9:e2:fa:93:58:25:96:5c:ca:25:d2:33:f5: d2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CD:B3:22:F8:DF:12:49:03:55:7D:4A:1C:8B:71:DB:77:C5:34:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2603:9000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:3e:a8:c1:e9:a1:20:9b:f6:c2:36:6b:87:48:1f:1a:61:a7: 42:81:63:6d:cd:52:bf:72:04:6e:ee:cf:24:0d:5c:7d:cf:ab: 55:f3:e0:98:bc:42:8a:98:5f:17:c9:85:62:f3:90:bc:aa:41: 60:34:f1:60:52:f6:e9:88:47:fb:8c:3d:9b:f7:4d:6b:97:76: 55:b9:9f:68:9a:42:e4:d4:8c:0a:26:5b:d9:1b:69:65:67:db: 07:2d:4b:fa:c4:fd:fa:18:d3:44:c6:fc:bf:f1:fd:7f:fa:ee: e7:bf:1e:b8:3f:8d:38:1e:23:d8:29:07:2b:61:44:28:62:0a: 96:b9:2b:31:00:4d:68:42:3e:c4:b3:68:d2:5b:bb:c8:05:66: 99:03:b5:3d:5c:d1:e4:83:df:aa:f1:07:7e:56:b9:8d:3f:14: 87:f5:ae:34:eb:81:c7:70:3f:1e:2d:c2:18:99:cf:2a:e1:dc: 3d:fa:63:09:ea:9c:eb:1c:3c:94:6b:12:fc:8e:ac:77:91:23: b8:ff:fa:8e:6a:cc:bc:e9:4a:26:af:d7:3b:6e:42:1f:48:23: 09:fd:c6:b4:23:a0:52:15:8d:b5:fb:41:9e:aa:0c:98:fa:ca: a4:49:74:52:26:a2:ff:5f:7d:2e:c4:20:58:8a:c8:9c:00:66: b3:ed:b1:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqellRerd331WCX7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk YjQ2ZTc3ZjItYmNmNC00ZmE3LTkxYzctOTUwOGRkNTBjOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1MUKf/cHvSSn+IpUs13yTJ6WZW/kzmMoHQ6 xZUPjT1yv788wJm3NaRJHGVvDfzvrBvx3omc4QfRIzVkpv0RAcB+vxVlOs5gChxT EzE5simwMprZW1UK/btDpJG2MkTDqv8SQzEj354KPL1WWSVzCwxc8pOu+jokoIot M/j5MbDV1yaSsV6v2phJTExm03VhxyNwFzdFGxtogViuWOIWdhUQ+ndwyfnloJdS aopMrWLjRfAvs8i4txtBq7t/Jt7ilmiZuzqeFnM81SUbBc513uFeJR3m9mym64eI hYKfIwX24TbhbPPGwD8ZH/1LbChV/Kni+pNYJZZcyiXSM/XSfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP7NsyL43xJJA1V9ShyLcdt3xTTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2ZjMmMzYzEtYjk5ZC0z ODkwLTk0YzMtYmVkMGRhMjc1ZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgOQADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+PqjB6aEgm/bCNmuHSB8aYadCgWNtzVK/cgRu7s8kDVx9z6tV8+CY vEKKmF8XyYVi85C8qkFgNPFgUvbpiEf7jD2b901rl3ZVuZ9omkLk1IwKJlvZG2ll Z9sHLUv6xP36GNNExvy/8f1/+u7nvx64P404HiPYKQcrYUQoYgqWuSsxAE1oQj7E s2jSW7vIBWaZA7U9XNHkg9+q8Qd+VrmNPxSH9a4064HHcD8eLcIYmc8q4dw9+mMJ 6pzrHDyUaxL8jqx3kSO4//qOasy86Uomr9c7bkIfSCMJ/ca0I6BSFY21+0GeqgyY +sqkSXRSJqL/X30uxCBYisicAGaz7bHy -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:36 2025 by rpki-client