$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/57d0c5fd-bfe0-3190-9a2b-130747e288d7.roa File: 57d0c5fd-bfe0-3190-9a2b-130747e288d7.roa (raw, json) Hash identifier: i3BKdEumhY+ky7BN49ldT+iEa9KlvT74RH9vZn1UffI= Subject key identifier: 13:E9:DA:80:9A:6B:A7:27:0B:61:69:5E:68:4F:C7:AF:08:96:53:45 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F56E680F4F4DD35D3D00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/57d0c5fd-bfe0-3190-9a2b-130747e288d7.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 134351 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f5:6e:68:0f:4f:4d:d3:5d:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=185da81f-6f00-4c8e-9622-d7003582b28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:56:9d:d4:42:cb:cb:45:af:c4:48:c9:ec:2c: c1:70:39:1f:7a:c2:88:02:e1:fb:cc:2e:d3:05:ae: a5:e1:f4:dc:f3:2d:1e:b8:0c:6c:23:e7:1c:3a:94: ca:a2:92:57:94:1a:f7:86:a3:2c:4c:67:32:99:6f: 5f:58:1c:6b:af:e7:60:6c:32:68:59:85:56:a6:e6: 7b:e1:b8:f0:60:3f:13:f3:91:44:10:ad:46:97:91: 13:ae:a1:5f:88:52:ef:3a:21:25:fa:1e:aa:93:bb: 10:6b:e7:5b:07:fd:77:ef:3b:27:30:b6:9b:91:c9: a4:b3:15:55:72:58:81:bc:6c:e5:73:b1:80:99:63: 4e:8c:c8:ed:a9:b6:8f:61:d0:e8:b9:fd:f4:c1:f4: a0:c4:c3:69:62:f8:f9:f1:ac:29:2f:31:f4:61:6a: 37:b2:56:9f:65:a9:0d:43:14:75:2d:6a:0a:a6:18: 0d:d8:79:cf:27:cc:78:df:35:4a:c7:a9:ca:90:76: d7:9e:c3:2f:a1:0c:89:79:1d:e0:08:ce:a2:8e:6e: 3c:c0:38:f3:1c:c5:e9:18:72:55:61:77:28:dc:7c: 58:63:e4:85:2a:cc:d3:58:61:01:06:f6:be:35:d5: de:e4:8a:66:e7:de:b3:5f:15:86:57:a1:21:81:96: 35:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E9:DA:80:9A:6B:A7:27:0B:61:69:5E:68:4F:C7:AF:08:96:53:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/57d0c5fd-bfe0-3190-9a2b-130747e288d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b9:44:95:db:37:49:ff:22:e3:82:06:8f:98:6c:80:1d:64: f2:3f:11:69:dc:b5:3c:96:04:f5:0c:c5:58:34:e8:15:16:96: b6:34:3f:68:66:cc:aa:fc:ad:b3:59:c8:e1:34:5d:ee:12:b3: ca:2c:cf:d7:ee:74:1f:5d:93:47:28:4f:10:eb:4b:d4:99:b9: aa:db:25:15:25:b4:83:93:cc:11:71:0a:b0:c1:d4:6f:ef:67: 18:6a:1d:4b:11:59:3d:e2:74:b2:85:d5:51:3a:8c:aa:19:76: 83:91:7c:9d:b3:e5:42:23:ce:59:36:cd:93:78:b2:0c:6c:86: 68:2b:fe:80:79:4b:60:6c:0c:8a:26:16:dd:8f:e5:77:36:60: 98:ec:02:0f:84:24:a2:a8:9a:0d:02:fb:0d:0a:e4:f1:2a:47: 47:96:52:cd:e5:5e:89:42:61:ff:4f:20:22:01:68:5f:5e:ac: 47:9c:4f:e5:17:78:fd:6a:4b:68:a3:96:88:3e:39:42:40:02: b3:18:04:67:c0:a5:dd:07:f0:13:3d:f5:9b:b6:fd:ce:6e:8f: e7:51:0e:2c:7b:87:55:03:eb:38:83:45:f7:cb:64:3c:85:5c: b7:49:c4:81:77:1e:aa:d3:9b:63:58:13:4b:83:3a:2b:fd:22: 06:06:fd:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq2UPVuaA9PTdNdPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MTg1ZGE4MWYtNmYwMC00YzhlLTk2MjItZDcwMDM1ODJiMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFad1ELLy0WvxEjJ7CzBcDkfesKIAuH7zC7T Ba6l4fTc8y0euAxsI+ccOpTKopJXlBr3hqMsTGcymW9fWBxrr+dgbDJoWYVWpuZ7 4bjwYD8T85FEEK1Gl5ETrqFfiFLvOiEl+h6qk7sQa+dbB/137zsnMLabkcmksxVV cliBvGzlc7GAmWNOjMjtqbaPYdDouf30wfSgxMNpYvj58awpLzH0YWo3slafZakN QxR1LWoKphgN2HnPJ8x43zVKx6nKkHbXnsMvoQyJeR3gCM6ijm48wDjzHMXpGHJV YXco3HxYY+SFKszTWGEBBva+NdXe5Ipm596zXxWGV6EhgZY1KQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPp2oCaa6cnC2FpXmhPx68IllNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNTdkMGM1ZmQtYmZlMC0z MTkwLTlhMmItMTMwNzQ3ZTI4OGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC65RJXbN0n/IuOCBo+YbIAdZPI/EWnctTyWBPUMxVg06BUWlrY0 P2hmzKr8rbNZyOE0Xe4Ss8osz9fudB9dk0coTxDrS9SZuarbJRUltIOTzBFxCrDB 1G/vZxhqHUsRWT3idLKF1VE6jKoZdoORfJ2z5UIjzlk2zZN4sgxshmgr/oB5S2Bs DIomFt2P5Xc2YJjsAg+EJKKomg0C+w0K5PEqR0eWUs3lXolCYf9PICIBaF9erEec T+UXeP1qS2ijlog+OUJAArMYBGfApd0H8BM99Zu2/c5uj+dRDix7h1UD6ziDRffL ZDyFXLdJxIF3HqrTm2NYE0uDOiv9IgYG/Z8= -----END CERTIFICATE-----Generated at Tue Aug 5 23:04:36 2025 by rpki-client