$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa File: 0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa (raw, json) Hash identifier: yP4mQb36fSvnYqfEa7U+/EQ0oXHNata+3FVn0VS8YTU= Subject key identifier: 99:93:C2:F5:DE:2F:B2:56:39:27:78:D6:6F:DB:8B:19:3B:A4:77:B2 Certificate issuer: /CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6 Certificate serial: 010D0C9F4328584AB91B9384B41E051F4E68D400 Authority key identifier: 95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 14585 IP address blocks: 2604:65c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:93:84:b4:1e:05:1f:4e:68:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=fc13c178-b417-4d72-9762-4aa80a7b13dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:f3:04:11:53:f0:e0:08:b3:1e:2b:41:95: 19:c3:bb:ff:3f:80:cb:9b:a1:11:6d:fc:e9:8a:e8: 20:d6:55:f6:99:8a:8c:ac:a5:aa:7a:f7:ac:24:67: 28:7d:57:3c:fd:4a:1c:06:99:75:d8:d4:f5:6d:82: 9f:04:af:a2:72:67:e3:3c:1a:8e:35:e1:3c:b3:04: 41:62:75:56:c3:63:77:36:51:c5:12:7d:1b:fc:34: 3e:ea:70:15:ce:a8:d9:ba:e6:51:dd:86:c8:24:d7: b0:ad:94:2f:b7:fc:86:c6:76:fe:19:d9:23:f1:fd: 32:ad:5e:a4:5d:dd:5b:4d:47:8c:d7:65:81:87:02: 1b:e2:53:e4:8f:ab:f2:ea:8f:27:5f:2f:83:14:ec: 5a:3b:6d:4c:45:5c:bb:e3:bf:41:dc:38:0d:5d:0b: 98:0a:7f:14:ef:33:4d:01:ef:70:85:e2:fc:21:aa: 01:56:c1:f0:aa:e5:fe:bb:f3:63:4e:4b:5e:fa:b8: 64:ce:bc:e7:1e:c2:1a:30:e0:e5:3d:6c:07:11:ae: 82:26:fa:14:14:25:ec:43:2e:dc:13:1c:53:81:08: 0f:ba:f2:68:c4:00:45:13:93:35:a4:7d:9d:46:d9: 18:19:62:9e:fb:eb:f1:dc:b4:71:2d:2a:29:48:0a: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:93:C2:F5:DE:2F:B2:56:39:27:78:D6:6F:DB:8B:19:3B:A4:77:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl X509v3 Authority Key Identifier: keyid:95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer sbgp-ipAddrBlock: critical IPv6: 2604:65c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:63:4b:e0:f9:30:d3:20:ff:c3:9c:e3:0e:82:c1:04:c7:0b: 19:5e:af:1a:35:d0:d3:b0:53:40:ac:2b:dd:f2:56:77:5e:5c: 4a:bf:a6:a7:64:10:01:ce:30:6e:88:08:88:f9:b8:5b:b4:2c: e6:0a:93:42:61:af:6e:10:18:7c:1a:2a:31:9d:50:e2:31:d9: 6a:2c:1c:17:36:b0:45:f5:cb:4f:5f:3d:d7:b4:1b:9d:ec:85: 40:91:18:b7:9e:51:d3:b9:b1:76:aa:f8:bc:07:a0:ec:04:17: 1a:4a:04:00:f8:17:15:29:58:08:3a:80:17:25:75:a1:4b:01: 8e:cb:75:ae:33:46:c3:42:44:27:e0:13:3f:10:6f:34:35:a8: f2:c8:d3:31:a8:27:b1:40:da:7d:2d:30:51:8c:94:4b:d8:95: a8:c4:da:84:0d:3f:83:5c:97:27:fc:5c:a9:df:6e:f0:f4:08: 79:a2:dd:44:2a:36:a0:14:bf:95:a5:48:bb:69:5c:35:4d:d8: 31:5c:05:c8:5d:ee:75:ec:99:61:35:e4:c6:24:5c:9a:da:1e: 6b:d9:f7:31:3d:49:fe:62:24:be:d1:09:6c:85:a0:c2:f0:69: 0e:5b:12:6f:b4:37:59:62:da:70:f6:a3:bc:0a:ed:ab:f4:aa: 27:da:df:a0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEq5G5OEtB4FH05o1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QzODE2MjYtMGI3MC00YmJjLWIyZjEtMGVhYzRmMDgw MWY2MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZmMxM2MxNzgtYjQxNy00ZDcyLTk3NjItNGFhODBhN2IxM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkzzBBFT8OAIsx4rQZUZw7v/P4DLm6ERbfzp iugg1lX2mYqMrKWqevesJGcofVc8/UocBpl12NT1bYKfBK+icmfjPBqONeE8swRB YnVWw2N3NlHFEn0b/DQ+6nAVzqjZuuZR3YbIJNewrZQvt/yGxnb+Gdkj8f0yrV6k Xd1bTUeM12WBhwIb4lPkj6vy6o8nXy+DFOxaO21MRVy7479B3DgNXQuYCn8U7zNN Ae9wheL8IaoBVsHwquX+u/NjTkte+rhkzrznHsIaMODlPWwHEa6CJvoUFCXsQy7c ExxTgQgPuvJoxABFE5M1pH2dRtkYGWKe++vx3LRxLSopSAq13wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJmTwvXeL7JWOSd41m/bixk7pHeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDM4 MTYyNi0wYjcwLTRiYmMtYjJmMS0wZWFjNGYwODAxZjYvMGUxN2Y2YTEtOWYyNi0z OGYxLTkzYmMtMGMwYTZkYTY4MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2QzODE2MjYtMGI3MC00YmJjLWIy ZjEtMGVhYzRmMDgwMWY2L2NkMzgxNjI2LTBiNzAtNGJiYy1iMmYxLTBlYWM0ZjA4 MDFmNi5jcmwwHwYDVR0jBBgwFoAUleDTwKqq2PWm8uGCyVlyFvBiUfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDM4MTYyNi0wYjcwLTRiYmMtYjJmMS0wZWFj NGYwODAxZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAY0vg+TDTIP/DnOMOgsEExwsZXq8aNdDTsFNArCvd8lZ3XlxKv6an ZBABzjBuiAiI+bhbtCzmCpNCYa9uEBh8GioxnVDiMdlqLBwXNrBF9ctPXz3XtBud 7IVAkRi3nlHTubF2qvi8B6DsBBcaSgQA+BcVKVgIOoAXJXWhSwGOy3WuM0bDQkQn 4BM/EG80NajyyNMxqCexQNp9LTBRjJRL2JWoxNqEDT+DXJcn/Fyp327w9Ah5ot1E KjagFL+VpUi7aVw1TdgxXAXIXe517JlhNeTGJFya2h5r2fcxPUn+YiS+0QlshaDC 8GkOWxJvtDdZYtpw9qO8Cu2r9Kon2t+g -----END CERTIFICATE-----Generated at Tue Aug 5 16:37:15 2025 by rpki-client