$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa File: 9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa (raw, json) Hash identifier: RR8RMTZRxqsx2r6LnAyo6uSKyopgAbzuPItv6cAamio= Subject key identifier: 5E:91:80:2B:81:0D:66:9A:BC:7D:82:C9:EE:F6:7D:1B:AF:56:17:EC Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584A7D15FB32B6CC32560212A480 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 11067 IP address blocks: 2605:d800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:fb:32:b6:cc:32:56:02:12:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=0b62885a-1e3e-4bdc-9827-4ddc00f1d4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8b:97:24:b1:2b:2b:f4:4f:75:e1:c3:15:8d: b0:19:2b:16:14:d8:e5:fb:ba:14:8d:a0:a2:40:52: 11:5c:f0:e7:3b:fe:2b:86:f2:8c:31:b5:ea:aa:bf: 62:23:16:82:5a:fc:9c:32:de:a9:91:b5:f4:4c:41: 89:60:2d:1f:91:1b:4d:a3:93:e7:9e:c9:27:ea:60: 15:48:81:6c:6e:65:56:10:21:81:97:27:04:ab:a2: a9:89:fa:10:56:39:a3:9f:5a:99:97:5d:c8:02:2d: db:4f:56:72:89:52:bc:23:53:74:96:44:22:63:6c: 47:42:b8:81:6b:45:b4:78:6e:31:ac:15:38:54:32: 44:1f:9c:9c:83:6f:be:5d:4c:52:67:40:97:49:8b: ac:a8:54:cc:be:4a:dc:be:ec:29:b7:56:fc:55:dd: c7:dd:b9:e2:f9:4c:28:38:de:3c:f7:c3:8b:25:59: 5d:bc:15:cb:dc:09:24:be:82:88:69:7b:16:a6:f5: 51:09:8d:ee:45:49:db:91:50:a8:ed:21:9a:19:77: 0f:8c:d3:cf:fe:ab:ae:57:20:fe:65:37:b5:2f:b3: d6:59:b7:50:fe:88:3e:ac:26:a7:3d:37:c7:51:0f: eb:c1:65:c6:67:40:c5:a6:cc:65:8e:15:bc:47:d2: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:91:80:2B:81:0D:66:9A:BC:7D:82:C9:EE:F6:7D:1B:AF:56:17:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:d800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:68:31:4e:95:0d:10:81:b7:f7:a5:de:23:c6:e6:98:2a:ec: 48:c1:70:27:7a:85:f5:bf:5c:09:86:46:db:31:51:96:09:59: 3d:3c:90:43:68:91:5c:f3:52:b8:89:e4:ee:0b:f3:ed:47:b3: 1a:11:51:e0:80:13:f1:18:c4:0f:4b:1d:78:8d:67:c7:28:14: fd:b8:1b:75:4d:26:c1:31:19:65:f2:d8:27:3a:bd:dc:e6:e4: 91:a0:82:c4:5b:4b:71:b3:c8:43:42:04:f2:5a:cd:51:36:eb: 91:18:42:3d:85:97:f8:54:3d:80:71:d9:ab:fe:43:6b:64:98: 9c:1d:55:75:62:bb:49:5d:c7:46:85:fa:00:da:ab:1e:2e:b1: 29:4c:49:7d:21:b8:22:bb:03:62:2c:02:c8:64:e8:eb:43:d4: 2d:3f:db:cd:c3:90:0e:8d:de:52:4d:dd:6d:2e:1e:34:98:c9: c9:2e:4e:59:89:b2:83:24:c1:82:17:69:82:2b:13:c3:2f:9f: 67:5b:68:5e:d8:29:6f:47:bc:08:12:7e:79:31:80:2c:9a:f0: a9:a8:15:02:c5:04:d2:95:5b:1d:6d:0c:70:fc:f9:e5:48:db: 18:a3:a0:88:5c:da:c7:a6:e0:ff:d9:8e:fa:05:3e:cd:10:4e: 57:a4:40:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp9FfsytswyVgISpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MGI2Mjg4NWEtMWUzZS00YmRjLTk4MjctNGRkYzAwZjFkNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ouXJLErK/RPdeHDFY2wGSsWFNjl+7oUjaCi QFIRXPDnO/4rhvKMMbXqqr9iIxaCWvycMt6pkbX0TEGJYC0fkRtNo5Pnnskn6mAV SIFsbmVWECGBlycEq6KpifoQVjmjn1qZl13IAi3bT1ZyiVK8I1N0lkQiY2xHQriB a0W0eG4xrBU4VDJEH5ycg2++XUxSZ0CXSYusqFTMvkrcvuwpt1b8Vd3H3bni+Uwo ON4898OLJVldvBXL3AkkvoKIaXsWpvVRCY3uRUnbkVCo7SGaGXcPjNPP/quuVyD+ ZTe1L7PWWbdQ/og+rCanPTfHUQ/rwWXGZ0DFpsxljhW8R9LCTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF6RgCuBDWaavH2Cye72fRuvVhfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvOWRhNWFmNGUtZGFlNi0z YTEwLTk2ZTMtZTgzZWE0YzkwNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRaDFOlQ0Qgbf3pd4jxuaYKuxIwXAneoX1v1wJhkbbMVGWCVk9PJBD aJFc81K4ieTuC/PtR7MaEVHggBPxGMQPSx14jWfHKBT9uBt1TSbBMRll8tgnOr3c 5uSRoILEW0txs8hDQgTyWs1RNuuRGEI9hZf4VD2Acdmr/kNrZJicHVV1YrtJXcdG hfoA2qseLrEpTEl9IbgiuwNiLALIZOjrQ9QtP9vNw5AOjd5STd1tLh40mMnJLk5Z ibKDJMGCF2mCKxPDL59nW2he2ClvR7wIEn55MYAsmvCpqBUCxQTSlVsdbQxw/Pnl SNsYo6CIXNrHpuD/2Y76BT7NEE5XpEDC -----END CERTIFICATE-----Generated at Wed Aug 6 18:49:30 2025 by rpki-client