$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa File: daf96070-358c-3dc7-bf23-2e15b668b39e.roa (raw, json) Hash identifier: 3IDSprsa+Wzu6ARXZcVRGmFCu4MsVGnLJoS5fGGabkw= Subject key identifier: 16:EE:71:F2:2B:34:92:88:83:7A:52:B3:E7:2F:19:79:5E:2D:24:9C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F691817B94F136E092E0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 59253 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f6:91:81:7b:94:f1:36:e0:92:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=2169c011-c1d7-4b64-ba36-7f1b27b8c5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:59:3e:6d:e6:23:5b:82:52:96:aa:29:85:6f: 38:32:9e:19:2c:87:48:c0:2e:a5:d8:9a:f6:2d:f6: ca:75:e6:eb:27:d4:56:36:47:bf:9a:67:f4:d5:68: 19:c6:02:5c:0c:a9:ff:04:dc:5b:66:1d:5c:c8:b9: 20:1e:3b:01:e3:b6:c4:34:21:7a:54:9c:3f:33:9c: ff:0d:41:9b:41:8e:77:ed:57:c6:64:37:49:e6:7e: c8:ee:79:8e:e9:47:a2:1c:a7:b4:46:92:53:e0:06: 33:41:9c:df:92:f7:3a:fc:86:53:de:1e:44:2b:02: 2b:48:96:42:de:9b:eb:5f:2f:21:4a:24:6f:5a:bd: a4:97:2a:47:02:75:8b:b4:c5:e8:82:fb:d9:3b:ec: 60:7a:5b:83:9e:ed:e0:36:c2:a0:3b:7b:25:2f:1e: 92:2b:6e:fb:ba:52:83:2a:9a:06:a7:e7:a4:0a:be: 39:3e:be:a8:76:a3:68:a2:6d:86:61:00:10:52:e9: 12:7a:84:eb:b2:96:4d:47:61:c5:0b:17:8c:9b:91: b9:90:d1:6b:2c:39:8f:27:dd:b0:dc:42:bf:24:c9: 70:5f:06:06:ae:a1:23:e1:2d:42:44:73:2c:e8:03: a5:70:de:9a:6b:93:ec:f5:c4:3e:fb:32:cf:93:82: c3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EE:71:F2:2B:34:92:88:83:7A:52:B3:E7:2F:19:79:5E:2D:24:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:98:f2:0c:73:dc:c4:00:85:c2:04:14:60:2b:7c:c1:17:8a: 49:3a:f1:8c:77:29:fd:1d:c1:26:33:86:f7:59:c1:1f:4d:ca: f5:06:d8:61:45:02:29:9d:b1:fb:92:b0:81:11:7d:78:50:7c: 74:1b:b2:f9:f4:f5:d5:2a:d2:5a:1f:6f:5a:31:e3:83:76:f8: 67:9f:c0:ae:7a:09:05:dd:e3:52:b5:89:2f:c0:2a:e8:51:96: 02:d4:0a:a8:53:b9:84:97:13:37:c4:b5:23:28:ef:32:c7:69: 40:4b:a3:67:07:3f:07:88:f2:d6:75:a9:c8:68:a7:2f:1d:7f: 02:07:f2:06:71:0e:e6:61:32:61:1d:d0:16:ae:86:62:09:69: 2f:84:f6:07:44:94:43:1a:c8:78:7f:79:93:75:00:a5:86:9a: d3:10:84:af:df:4a:56:71:7c:37:a0:1f:ce:46:ed:39:d2:b6: a4:72:65:12:4c:66:ae:71:27:ea:46:63:bf:6a:61:e5:3e:12: 91:22:85:3c:b4:ef:16:cb:03:26:db:d6:94:58:6e:a6:5a:9e: 51:bc:4e:6c:2f:22:a3:df:b9:05:32:dd:2f:15:32:2f:18:e6: 3b:3f:31:c3:40:51:3f:a1:4b:5c:40:93:24:f3:37:63:43:0c: 1c:a3:f3:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq2UPaRgXuU8TbgkuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MjE2OWMwMTEtYzFkNy00YjY0LWJhMzYtN2YxYjI3YjhjNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFk+beYjW4JSlqophW84Mp4ZLIdIwC6l2Jr2 LfbKdebrJ9RWNke/mmf01WgZxgJcDKn/BNxbZh1cyLkgHjsB47bENCF6VJw/M5z/ DUGbQY537VfGZDdJ5n7I7nmO6UeiHKe0RpJT4AYzQZzfkvc6/IZT3h5EKwIrSJZC 3pvrXy8hSiRvWr2klypHAnWLtMXogvvZO+xgeluDnu3gNsKgO3slLx6SK277ulKD KpoGp+ekCr45Pr6odqNoom2GYQAQUukSeoTrspZNR2HFCxeMm5G5kNFrLDmPJ92w 3EK/JMlwXwYGrqEj4S1CRHMs6AOlcN6aa5Ps9cQ++zLPk4LDjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBbucfIrNJKIg3pSs+cvGXleLSScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGFmOTYwNzAtMzU4Yy0z ZGM3LWJmMjMtMmUxNWI2NjhiMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKCY8gxz3MQAhcIEFGArfMEXikk68Yx3Kf0dwSYzhvdZwR9NyvUG 2GFFAimdsfuSsIERfXhQfHQbsvn09dUq0lofb1ox44N2+GefwK56CQXd41K1iS/A KuhRlgLUCqhTuYSXEzfEtSMo7zLHaUBLo2cHPweI8tZ1qchopy8dfwIH8gZxDuZh MmEd0BauhmIJaS+E9gdElEMayHh/eZN1AKWGmtMQhK/fSlZxfDegH85G7TnStqRy ZRJMZq5xJ+pGY79qYeU+EpEihTy07xbLAybb1pRYbqZanlG8TmwvIqPfuQUy3S8V Mi8Y5js/McNAUT+hS1xAkyTzN2NDDByj80A= -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:45 2025 by rpki-client