$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa File: f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa (raw, json) Hash identifier: fZGQSuW3/7MhjXZeRm+PytsEoFi62t+kTvKRs3ukdDQ= Subject key identifier: 11:72:AB:25:F3:19:6E:45:FE:1E:B5:57:88:B4:DD:1F:42:94:E0:1C Certificate issuer: /CN=c17eacde-68de-455f-97dc-4d67847c03ff Certificate serial: 010D0C9F4328584AA85BB7D090E47C3FA47F2500 Authority key identifier: 34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 21577 IP address blocks: 2604:d580::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b7:d0:90:e4:7c:3f:a4:7f:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c17eacde-68de-455f-97dc-4d67847c03ff Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=7e54aaa9-ad72-4484-bc83-2f4f59027e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:57:41:78:3c:28:a2:5b:a5:12:b8:72:cd:2e: b0:e6:40:cd:28:3d:c0:6d:3c:67:bf:ba:f4:17:9c: e9:b6:b5:7d:db:8c:03:69:9d:5b:e4:60:24:cf:eb: 20:36:d9:6e:8c:e2:41:b1:39:d2:b9:45:16:3a:eb: 79:94:69:0d:8e:9d:f5:c1:bd:eb:8b:f6:1b:e7:d0: e0:74:5d:fc:7a:a7:06:03:e5:b8:2f:cc:89:23:10: 45:4f:12:a6:b0:1e:ae:41:08:b2:8e:c9:ff:60:85: 3d:36:03:30:f8:84:7b:4c:9e:fd:cb:f8:7a:c7:9c: 97:7b:86:8c:4c:db:df:8d:d0:ba:57:5c:58:33:fe: 58:03:de:6d:38:c9:30:e1:86:ce:b7:02:75:2e:4b: 2c:38:05:78:d3:43:45:f7:bb:47:24:18:ef:9d:fa: 85:63:43:59:6b:a7:19:ad:31:f9:2c:f7:26:c6:42: 0a:34:36:66:8c:4f:20:61:29:1e:de:4e:e9:ea:f5: 59:d5:9e:cd:db:82:18:81:2c:db:3b:bc:11:c9:f3: 6b:88:79:6e:3f:39:f8:fa:1b:fc:ac:bd:ed:0f:d4: 09:ec:f1:f0:07:0d:ba:19:f3:44:97:f6:d4:eb:73: 40:d1:44:91:e6:37:6f:57:b0:a7:27:05:60:a4:d8: f4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:72:AB:25:F3:19:6E:45:FE:1E:B5:57:88:B4:DD:1F:42:94:E0:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl X509v3 Authority Key Identifier: keyid:34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:d580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:03:ec:92:71:3f:ac:02:68:06:5f:f3:92:38:32:1d:a8:c4: c4:67:bf:1e:1b:a2:1b:f9:82:30:a6:68:9c:6c:69:c9:4b:50: d6:90:ca:30:77:14:a4:4e:30:ba:88:18:1a:59:0f:be:83:52: 2a:59:20:10:16:cb:df:dd:95:ed:d0:74:5d:f3:b6:d2:08:10: a8:75:53:ea:64:10:03:0a:66:a5:01:bd:4b:93:1a:7e:f6:38: 16:b4:88:ff:4d:85:3f:3d:da:e4:2c:df:79:32:fa:30:fe:fd: 2b:a8:79:cf:5a:0a:e2:e4:33:36:71:54:cb:6c:08:97:64:23: 2d:97:7a:cb:b2:5a:92:96:12:da:44:30:20:81:24:a4:a8:4f: 80:27:64:e9:d9:a0:b9:e0:b2:79:f1:5b:5c:13:dc:a2:1f:17: d1:f2:71:a7:36:49:c8:51:45:c6:60:42:6e:ad:5f:9c:b4:1a: f4:41:67:1b:75:19:2d:9d:f5:93:21:19:04:ac:9f:59:07:f6: 3f:1a:9a:d9:c5:9c:1e:2f:4d:0f:8f:c0:e2:9a:05:89:45:37: 91:aa:3e:0e:2c:54:2c:1b:23:a3:a4:a6:5a:38:cc:5b:2c:1a: a2:99:06:39:9e:7d:28:55:9e:1f:2b:b3:9e:c7:65:7a:17:27: 61:63:29:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqoW7fQkOR8P6R/JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3ZWFjZGUtNjhkZS00NTVmLTk3ZGMtNGQ2Nzg0N2Mw M2ZmMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk N2U1NGFhYTktYWQ3Mi00NDg0LWJjODMtMmY0ZjU5MDI3ZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ldBeDwoolulErhyzS6w5kDNKD3AbTxnv7r0 F5zptrV924wDaZ1b5GAkz+sgNtlujOJBsTnSuUUWOut5lGkNjp31wb3ri/Yb59Dg dF38eqcGA+W4L8yJIxBFTxKmsB6uQQiyjsn/YIU9NgMw+IR7TJ79y/h6x5yXe4aM TNvfjdC6V1xYM/5YA95tOMkw4YbOtwJ1LkssOAV400NF97tHJBjvnfqFY0NZa6cZ rTH5LPcmxkIKNDZmjE8gYSke3k7p6vVZ1Z7N24IYgSzbO7wRyfNriHluPzn4+hv8 rL3tD9QJ7PHwBw26GfNEl/bU63NA0USR5jdvV7CnJwVgpNj0YwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBFyqyXzGW5F/h61V4i03R9ClOAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdl YWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3ODQ3YzAzZmYvZjFhYjc5ZDgtOWJhOC0z NDFmLWI0YWUtMTY1Y2RiOTY5YTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzE3ZWFjZGUtNjhkZS00NTVmLTk3 ZGMtNGQ2Nzg0N2MwM2ZmL2MxN2VhY2RlLTY4ZGUtNDU1Zi05N2RjLTRkNjc4NDdj MDNmZi5jcmwwHwYDVR0jBBgwFoAUNPoZkyy8mDwALlB7+J68csnzvK8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdlYWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3 ODQ3YzAzZmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTVgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMA+yScT+sAmgGX/OSODIdqMTEZ78eG6Ib+YIwpmicbGnJS1DWkMow dxSkTjC6iBgaWQ++g1IqWSAQFsvf3ZXt0HRd87bSCBCodVPqZBADCmalAb1Lkxp+ 9jgWtIj/TYU/PdrkLN95Mvow/v0rqHnPWgri5DM2cVTLbAiXZCMtl3rLslqSlhLa RDAggSSkqE+AJ2Tp2aC54LJ58VtcE9yiHxfR8nGnNknIUUXGYEJurV+ctBr0QWcb dRktnfWTIRkErJ9ZB/Y/GprZxZweL00Pj8DimgWJRTeRqj4OLFQsGyOjpKZaOMxb LBqimQY5nn0oVZ4fK7Oex2V6FydhYymC -----END CERTIFICATE-----Generated at Wed Aug 6 19:26:15 2025 by rpki-client