$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa File: b8f00c80-28df-3bec-8197-b1c1cd901f79.roa (raw, json) Hash identifier: 4aCtnO06MPjPEDTO4a1XkhX7fu6GmvEkDwux+OMx6FU= Subject key identifier: E2:07:A2:B4:62:62:47:DD:52:AC:D1:01:3F:91:5F:5F:C4:EA:8C:D3 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F5C868D92C97C6CEEE80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 136988 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f5:c8:68:d9:2c:97:c6:ce:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=905d1524-18b7-4c80-b64f-b8e0528de451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:12:f2:5b:69:f4:12:dd:cc:fd:ad:5d:d3:15: 30:ff:1f:9c:a0:e8:26:17:c1:f1:00:ba:77:99:e5: 92:4c:5f:54:7e:22:25:b5:0b:71:94:59:42:49:1a: e0:53:ea:15:5a:71:16:20:d2:8e:1c:38:79:cc:58: 41:ba:c5:a7:d7:45:23:53:35:33:34:16:cf:9c:ba: 40:31:0c:e1:45:10:03:81:db:0c:23:49:e7:7b:a4: ae:7f:0c:fb:a1:d6:39:ff:c2:f9:96:26:f3:5e:11: 8d:b9:7b:f4:66:79:99:73:4b:6e:8f:a2:84:57:a5: 76:19:46:92:df:15:fa:8e:5c:b5:89:0e:21:ce:83: 8e:3b:d0:68:26:52:7a:53:91:80:24:4f:82:43:55: 76:c5:16:66:ab:ce:43:8a:ff:50:38:32:b2:33:b8: 89:d9:25:0b:cf:51:85:3c:3a:38:f3:ec:5c:d7:85: da:d4:b8:f6:26:dd:6c:b4:40:dd:d3:20:61:96:5e: 1c:9f:94:db:07:32:7e:e3:83:3c:14:27:7a:da:62: 3b:0c:a2:99:c2:24:04:f9:a4:ec:cc:5e:17:a2:99: a4:5c:89:76:5d:7e:67:e4:2e:ea:e2:8b:30:aa:f3: 8b:cc:2f:7c:68:b9:1e:86:5d:18:16:dc:9b:d1:b1: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:07:A2:B4:62:62:47:DD:52:AC:D1:01:3F:91:5F:5F:C4:EA:8C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:cb:fd:0d:30:e3:4c:87:e2:77:54:47:ce:8f:6c:12:01:ed: 60:9d:fe:5d:4e:f5:a6:52:07:37:c9:0a:f3:97:ce:bd:2d:98: c9:6c:9e:f9:8d:21:4f:3e:68:8e:14:9e:e5:e0:76:44:0c:af: dd:20:d5:40:bf:08:3d:16:c9:dd:9b:26:3d:1b:42:50:8f:5c: 02:e2:1f:8f:93:90:66:69:6d:51:9d:36:d9:9a:59:39:a9:9d: 6b:3d:8f:2d:9f:d0:15:b9:97:49:15:3f:1a:95:ed:09:0f:1b: c5:35:7a:33:79:67:c8:38:82:09:cb:e9:c9:be:76:8d:ca:66: 74:cd:28:13:ad:ab:80:a6:48:c5:5c:8b:c9:95:a5:35:57:18: fd:d6:e0:06:7b:b2:87:dc:1f:1a:bf:7c:47:65:ba:8c:58:1b: ce:f1:e4:94:ee:ee:f8:6b:71:f2:b6:3f:ec:c8:8e:66:ea:11: 90:a1:95:f6:8d:1f:da:6e:8b:7e:7c:19:54:bc:23:df:8a:39: 32:bd:47:c6:e8:34:f8:20:3e:27:d9:71:dc:54:16:9b:6e:56: da:02:63:e5:14:b2:18:65:21:4a:85:2f:cb:ed:53:d8:a5:db: 6f:e6:9a:fe:01:c7:e3:fe:d2:91:90:2e:65:b3:cf:d4:ae:01: 4f:e7:1f:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq2UPXIaNksl8bO7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk OTA1ZDE1MjQtMThiNy00YzgwLWI2NGYtYjhlMDUyOGRlNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhLyW2n0Et3M/a1d0xUw/x+coOgmF8HxALp3 meWSTF9UfiIltQtxlFlCSRrgU+oVWnEWINKOHDh5zFhBusWn10UjUzUzNBbPnLpA MQzhRRADgdsMI0nne6Sufwz7odY5/8L5libzXhGNuXv0ZnmZc0tuj6KEV6V2GUaS 3xX6jly1iQ4hzoOOO9BoJlJ6U5GAJE+CQ1V2xRZmq85Div9QODKyM7iJ2SULz1GF PDo48+xc14Xa1Lj2Jt1stEDd0yBhll4cn5TbBzJ+44M8FCd62mI7DKKZwiQE+aTs zF4XopmkXIl2XX5n5C7q4oswqvOLzC98aLkehl0YFtyb0bHTfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOIHorRiYkfdUqzRAT+RX1/E6ozTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjhmMDBjODAtMjhkZi0z YmVjLTgxOTctYjFjMWNkOTAxZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADnL/Q0w40yH4ndUR86PbBIB7WCd/l1O9aZSBzfJCvOXzr0tmMls nvmNIU8+aI4UnuXgdkQMr90g1UC/CD0Wyd2bJj0bQlCPXALiH4+TkGZpbVGdNtma WTmpnWs9jy2f0BW5l0kVPxqV7QkPG8U1ejN5Z8g4ggnL6cm+do3KZnTNKBOtq4Cm SMVci8mVpTVXGP3W4AZ7sofcHxq/fEdluoxYG87x5JTu7vhrcfK2P+zIjmbqEZCh lfaNH9pui358GVS8I9+KOTK9R8boNPggPifZcdxUFptuVtoCY+UUshhlIUqFL8vt U9il22/mmv4Bx+P+0pGQLmWzz9SuAU/nH0w= -----END CERTIFICATE-----Generated at Tue Aug 5 17:23:38 2025 by rpki-client