$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa File: 9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa (raw, json) Hash identifier: RrRIzq/yz7epQUD0zfOf02A/OQCd6WtLVR8cNa0mM9E= Subject key identifier: 71:04:FA:94:1A:13:8D:0B:49:E8:E8:A2:62:6B:D0:04:B6:A1:6D:E1 Certificate issuer: /CN=7afae497-a3f6-4f52-abeb-632cca8db94a Certificate serial: 010D0C9F4328584A9A663404E0DF9C6140092430 Authority key identifier: 4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 7029 IP address blocks: 2606:40c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:34:04:e0:df:9c:61:40:09:24:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afae497-a3f6-4f52-abeb-632cca8db94a Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=a99f5df9-3902-4d68-8a8b-f301dee05376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:52:1b:96:50:5f:25:71:52:a0:2c:b1:23: 01:4b:f2:b8:70:b2:2d:9a:55:e0:30:df:fc:27:13: 0a:62:04:77:a0:44:64:76:0f:d3:b9:77:dc:8f:e1: 99:07:60:16:48:de:4b:12:09:d7:40:3e:58:d2:44: c4:6f:63:77:9d:b9:10:e7:e5:4b:ca:74:71:d6:fa: 96:3c:dd:a2:0d:ab:a0:7e:4e:13:ea:ba:d0:d6:64: bb:d8:31:e2:10:42:97:6e:f7:35:62:cb:4b:fd:a6: 27:3f:2f:4b:b4:0c:28:7e:ae:52:91:43:8f:bd:10: 5c:af:49:e8:92:f7:18:f2:34:76:d2:83:1d:8e:09: 5f:a0:3a:a0:a5:1e:7d:cb:4a:db:76:c1:cb:fc:e5: 20:4b:8b:18:ac:d1:cd:72:15:3b:39:52:7d:97:b8: 80:a1:8e:91:d6:47:1c:9f:04:ca:d9:45:20:43:30: 13:8b:ce:3c:35:f5:5b:99:f1:1c:cf:58:e5:7a:4a: ce:9b:aa:d0:bc:46:f0:40:ee:e1:53:ff:71:d3:cd: 38:7c:10:9d:e4:46:53:a6:71:3a:1b:34:93:f4:17: 4d:68:f0:da:79:b1:74:ef:91:66:fa:29:5d:30:c9: 07:f5:75:c1:ba:61:c2:5e:e1:10:b9:2d:98:9e:76: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:04:FA:94:1A:13:8D:0B:49:E8:E8:A2:62:6B:D0:04:B6:A1:6D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.crl X509v3 Authority Key Identifier: keyid:4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer sbgp-ipAddrBlock: critical IPv6: 2606:40c0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:1a:a3:5b:bc:ea:c9:1b:52:b3:3e:e4:87:0c:00:5a:0f:0d: 73:de:e1:9d:12:9d:ee:05:93:fc:47:76:dd:89:fc:96:f2:24: 5a:53:ac:01:83:4d:52:3e:fb:c5:a2:af:2f:58:31:35:ee:12: 34:23:6a:8a:83:6b:d6:6c:4b:36:3b:c6:c8:c6:80:2f:9e:4b: b1:2a:0d:df:7d:bb:80:b5:af:57:a6:71:76:06:9c:d2:60:f8: 55:dd:c9:81:3b:53:73:39:ef:79:49:86:a7:77:30:fc:de:a2: 05:02:64:63:27:2c:e7:1a:7b:49:32:02:78:3d:89:07:d4:e6: 4f:a4:4c:5e:07:75:3a:c0:5d:08:26:c6:43:74:3f:b3:7c:89: 90:74:64:9a:9b:48:c4:3c:67:5d:97:07:97:bd:e5:6d:fb:86: 54:4a:69:69:34:bf:f7:ce:e3:34:9f:a3:48:b9:08:18:a3:8f: 31:c7:61:63:f5:36:3f:bc:3f:c7:4b:c7:a2:67:77:17:2d:65: 11:d7:a3:a0:52:29:3e:72:b2:32:f7:38:8a:62:07:86:cc:42: 8e:c5:95:83:79:17:f1:ff:64:63:6f:bd:ab:e2:a0:a9:61:04: 65:d9:c3:b3:e4:06:46:fb:26:23:40:e8:82:52:8e:17:c5:5e: a5:ae:c5:76 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqaZjQE4N+cYUAJJDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmYWU0OTctYTNmNi00ZjUyLWFiZWItNjMyY2NhOGRi OTRhMB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk YTk5ZjVkZjktMzkwMi00ZDY4LThhOGItZjMwMWRlZTA1Mzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwJSG5ZQXyVxUqAssSMBS/K4cLItmlXgMN/8 JxMKYgR3oERkdg/TuXfcj+GZB2AWSN5LEgnXQD5Y0kTEb2N3nbkQ5+VLynRx1vqW PN2iDaugfk4T6rrQ1mS72DHiEEKXbvc1YstL/aYnPy9LtAwofq5SkUOPvRBcr0no kvcY8jR20oMdjglfoDqgpR59y0rbdsHL/OUgS4sYrNHNchU7OVJ9l7iAoY6R1kcc nwTK2UUgQzATi848NfVbmfEcz1jlekrOm6rQvEbwQO7hU/9x0804fBCd5EZTpnE6 GzST9BdNaPDaebF075Fm+ildMMkH9XXBumHCXuEQuS2YnnZH5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHEE+pQaE40LSejoomJr0AS2oW3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZh ZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJjY2E4ZGI5NGEvOTkxNmMwZjMtZGNiOS0z ZDZiLWIxZDEtYmQ3M2M4NDJiZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2FmYWU0OTctYTNmNi00ZjUyLWFi ZWItNjMyY2NhOGRiOTRhLzdhZmFlNDk3LWEzZjYtNGY1Mi1hYmViLTYzMmNjYThk Yjk0YS5jcmwwHwYDVR0jBBgwFoAUTIK9Kz+UIIP/5GhOY7dkVcLLeaQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZhZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJj Y2E4ZGI5NGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgZAwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPGqNbvOrJG1KzPuSHDABaDw1z3uGdEp3uBZP8R3bdifyW8iRaU6wB g01SPvvFoq8vWDE17hI0I2qKg2vWbEs2O8bIxoAvnkuxKg3ffbuAta9XpnF2BpzS YPhV3cmBO1NzOe95SYandzD83qIFAmRjJyznGntJMgJ4PYkH1OZPpExeB3U6wF0I JsZDdD+zfImQdGSam0jEPGddlweXveVt+4ZUSmlpNL/3zuM0n6NIuQgYo48xx2Fj 9TY/vD/HS8eiZ3cXLWUR16OgUik+crIy9ziKYgeGzEKOxZWDeRfx/2Rjb72r4qCp YQRl2cOz5AZG+yYjQOiCUo4XxV6lrsV2 -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:50 2025 by rpki-client