$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e4396324-a547-3631-a057-e60bd47b6529.roa File: e4396324-a547-3631-a057-e60bd47b6529.roa (raw, json) Hash identifier: GsieXOJQyjDuFrv4rl/R4a05U0UDJzLT4dzmlF8PAfE= Subject key identifier: 9E:AC:90:57:F7:FD:5F:81:B9:15:A8:37:41:D0:EB:50:D6:AC:78:28 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96584875AF129FEF73D400 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e4396324-a547-3631-a057-e60bd47b6529.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 2605:a401:805c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:58:48:75:af:12:9f:ef:73:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=cb6d4aa2-7089-44e3-92c8-a745f1a3f9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:4a:be:ee:fb:ff:a1:01:74:1b:69:7f:b6: 1b:df:52:40:16:75:12:0e:b0:42:2f:da:42:f6:d5: 4f:6d:98:4f:60:e3:d5:30:59:8e:c5:47:58:41:31: d8:ff:bd:35:d1:a1:e8:29:11:29:e4:d1:c6:9c:3e: 59:98:15:f8:54:52:02:ef:2b:10:c5:55:1f:bf:65: 1c:2d:4d:a0:bd:25:96:1c:4d:19:c2:93:6b:63:78: ee:a8:49:c6:40:26:85:06:f1:96:07:fc:ce:fe:2d: da:85:8a:20:6f:97:df:14:da:99:0e:d4:f2:f2:14: 44:72:53:1d:42:e0:81:d1:78:09:38:24:1b:e3:53: 54:f4:f6:47:c1:6d:29:4d:6e:51:ce:48:59:b2:b0: 3f:f8:48:02:a1:39:cd:04:0b:57:cd:ef:3a:cb:50: 1e:2e:d2:2b:97:b2:d7:4f:f2:12:84:c6:2a:9d:a1: 5a:a2:f3:c2:c8:42:e0:88:a9:48:92:84:e0:23:f8: 0e:5a:f8:f3:a1:e8:69:c7:de:4e:aa:d1:6f:f3:c4: bf:40:1f:d2:99:0d:fd:60:86:75:07:05:b2:e5:52: e9:a6:6e:fb:c8:43:a1:1e:f2:72:43:6b:49:e0:0e: 63:e6:5b:ae:dd:d2:ab:6c:b5:8e:1e:36:58:06:de: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AC:90:57:F7:FD:5F:81:B9:15:A8:37:41:D0:EB:50:D6:AC:78:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e4396324-a547-3631-a057-e60bd47b6529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:805c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0d:83:c0:4d:53:e9:2c:48:34:b1:48:b8:7b:20:5b:c4:be: 77:f3:a4:45:f6:14:8f:37:89:22:d1:7b:b0:1f:8c:1e:47:10: 83:ce:73:0e:62:cf:89:2c:fc:af:40:8d:59:e9:61:ac:68:35: 8a:b1:89:8c:9e:c3:45:e8:58:6d:8d:cb:84:95:61:bd:34:1a: 0a:74:5b:4a:6e:28:c6:ea:79:fd:a8:7b:8c:8a:b7:99:9e:33: 85:da:b3:02:cb:e8:5f:aa:69:1e:1b:a6:61:cc:b3:8a:91:7d: f7:ec:d0:cf:8a:5f:29:03:62:a4:6f:b1:66:2e:9e:46:24:91: 53:9f:dc:04:c3:f8:aa:8a:0a:1f:c9:28:82:a5:b5:81:4a:7e: 00:0b:27:be:db:ae:5d:29:6e:b9:dc:32:65:88:77:83:8c:69: 69:38:cf:5a:80:2a:03:34:d3:f1:f3:a1:ad:15:d1:2f:44:36: 16:c0:97:d6:eb:41:ad:31:1e:87:7a:5c:82:da:67:73:2e:b4: bd:e3:95:52:fe:39:4b:a4:87:e2:1c:23:49:f1:db:c6:cf:bf: 86:94:24:3a:59:0d:56:8f:7d:a5:a6:1d:01:86:5f:6f:ca:10: 80:ba:8d:18:dd:50:fa:11:5a:ed:cb:a0:1f:1f:56:86:60:58: 6a:31:c8:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqellhIda8Sn+9z1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk Y2I2ZDRhYTItNzA4OS00NGUzLTkyYzgtYTc0NWYxYTNmOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUBKvu77/6EBdBtpf7Yb31JAFnUSDrBCL9pC 9tVPbZhPYOPVMFmOxUdYQTHY/7010aHoKREp5NHGnD5ZmBX4VFIC7ysQxVUfv2Uc LU2gvSWWHE0ZwpNrY3juqEnGQCaFBvGWB/zO/i3ahYogb5ffFNqZDtTy8hREclMd QuCB0XgJOCQb41NU9PZHwW0pTW5RzkhZsrA/+EgCoTnNBAtXze86y1AeLtIrl7LX T/IShMYqnaFaovPCyELgiKlIkoTgI/gOWvjzoehpx95OqtFv88S/QB/SmQ39YIZ1 BwWy5VLppm77yEOhHvJyQ2tJ4A5j5luu3dKrbLWOHjZYBt57xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ6skFf3/V+BuRWoN0HQ61DWrHgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTQzOTYzMjQtYTU0Ny0z NjMxLWEwNTctZTYwYmQ0N2I2NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYBc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkNg8BNU+ksSDSxSLh7IFvEvnfzpEX2FI83iSLRe7AfjB5HEIPO cw5iz4ks/K9AjVnpYaxoNYqxiYyew0XoWG2Ny4SVYb00Ggp0W0puKMbqef2oe4yK t5meM4XaswLL6F+qaR4bpmHMs4qRfffs0M+KXykDYqRvsWYunkYkkVOf3ATD+KqK Ch/JKIKltYFKfgALJ77brl0pbrncMmWId4OMaWk4z1qAKgM00/Hzoa0V0S9ENhbA l9brQa0xHod6XILaZ3MutL3jlVL+OUukh+IcI0nx28bPv4aUJDpZDVaPfaWmHQGG X2/KEIC6jRjdUPoRWu3LoB8fVoZgWGoxyII= -----END CERTIFICATE-----Generated at Mon Aug 4 19:12:48 2025 by rpki-client