$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa File: d0ee2888-029d-3033-aaf8-55220aa70a0a.roa (raw, json) Hash identifier: TFdFqPnMMKpX9P0PJzxH++oMAzZrGGrYM7D+xcyILXg= Subject key identifier: 09:55:0E:8D:97:2E:6C:C8:6B:EF:94:61:BB:A4:80:79:69:BA:52:F7 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A90A0AEE5FFEE7528C7F8A000 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 16433 IP address blocks: 2605:f00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ae:e5:ff:ee:75:28:c7:f8:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=5d72d00d-b3cf-4d1f-818c-bd25b18e8afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1f:7c:cc:5a:03:46:a6:64:77:f8:b6:da:ac: 11:b8:7d:55:3c:d5:dd:25:4b:1a:66:a1:d2:27:34: cb:8b:0f:b5:97:a0:3e:a5:0f:09:e0:73:b1:b8:a4: 63:8c:25:97:cb:61:6a:2a:a4:1e:30:45:03:e0:be: f9:6c:57:fd:ef:4c:e5:45:50:eb:59:b5:ce:a1:25: 73:d1:18:8b:4e:05:08:ca:99:be:f8:df:fb:0c:29: 77:c8:58:2c:99:32:3c:63:30:6f:9d:24:32:0e:28: 58:4a:40:e2:a5:ce:bc:b4:d9:43:74:bf:e1:66:ee: c8:8a:26:4a:51:30:51:9f:dd:b6:4d:eb:48:24:c0: ba:61:bd:03:1e:2c:c6:d7:2d:39:e8:84:61:3d:1a: 62:0d:74:ab:38:45:9d:e2:ab:58:b4:21:b8:88:49: a2:ef:fb:56:26:4f:c8:fb:01:77:e7:64:b9:20:d4: dd:bb:a9:67:e5:30:d9:ec:b6:0c:18:5c:0f:db:4b: 36:5b:8e:4c:6f:83:bc:21:94:f3:22:3f:41:74:84: d3:59:94:f4:9e:da:10:aa:a0:6b:ea:f5:44:c0:48: bc:95:3c:82:f0:19:ff:f3:47:90:e9:9c:9f:af:ed: 2c:1d:72:4b:fa:a0:8c:9d:46:9c:b0:63:bc:bf:3a: ab:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:55:0E:8D:97:2E:6C:C8:6B:EF:94:61:BB:A4:80:79:69:BA:52:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv6: 2605:f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6e:c6:97:b1:12:85:1d:5c:e0:ba:19:09:63:73:2f:73:5d: cb:2b:4f:95:b8:af:8f:38:1b:c4:49:f6:a8:bb:8c:46:b0:2d: 6c:7a:a8:bc:a8:78:97:80:ab:a4:1d:35:d5:4a:cf:7b:51:52: 1a:b8:07:80:04:92:01:42:49:54:e4:b2:f7:4d:71:2b:99:0d: f9:2b:10:83:1d:b3:fb:f7:22:ea:36:df:56:b1:63:60:f8:c3: 4b:4d:65:36:9d:cd:7d:54:76:0e:8b:c0:bf:11:20:52:d7:c0: 6f:18:a9:08:6a:3b:79:1c:6b:83:cc:a6:75:fb:55:a4:0e:1b: f9:db:61:f3:10:6c:17:50:f6:c1:2d:cc:fd:b7:77:1c:ad:ba: 87:c3:b9:19:8f:a2:63:7b:3d:bf:2b:81:b4:00:2e:34:19:0f: e4:61:e7:79:de:e3:00:17:9a:eb:dd:b8:a3:11:03:e6:05:d9: 7f:16:47:5d:20:ec:5d:e9:7c:d1:ed:0c:88:c0:8d:2a:b5:25: 3d:28:b7:86:e0:ed:d8:ed:28:a6:be:27:35:3e:dc:ae:7f:22: 65:81:99:ba:d0:58:87:cc:fa:70:9e:4b:cd:6c:f5:ea:f3:a3: 82:15:1c:ab:f8:cd:db:45:f9:34:c3:d0:cc:66:8a:63:fe:7e: 26:b1:4c:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqQoK7l/+51KMf4oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NWQ3MmQwMGQtYjNjZi00ZDFmLTgxOGMtYmQyNWIxOGU4YWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih98zFoDRqZkd/i22qwRuH1VPNXdJUsaZqHS JzTLiw+1l6A+pQ8J4HOxuKRjjCWXy2FqKqQeMEUD4L75bFf970zlRVDrWbXOoSVz 0RiLTgUIypm++N/7DCl3yFgsmTI8YzBvnSQyDihYSkDipc68tNlDdL/hZu7IiiZK UTBRn922TetIJMC6Yb0DHizG1y056IRhPRpiDXSrOEWd4qtYtCG4iEmi7/tWJk/I +wF352S5INTdu6ln5TDZ7LYMGFwP20s2W45Mb4O8IZTzIj9BdITTWZT0ntoQqqBr 6vVEwEi8lTyC8Bn/80eQ6Zyfr+0sHXJL+qCMnUacsGO8vzqrOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAlVDo2XLmzIa++UYbukgHlpulL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvZDBlZTI4ODgtMDI5ZC0z MDMzLWFhZjgtNTUyMjBhYTcwYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUPADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQbsaXsRKFHVzguhkJY3Mvc13LK0+VuK+POBvESfaou4xGsC1seqi8 qHiXgKukHTXVSs97UVIauAeABJIBQklU5LL3TXErmQ35KxCDHbP79yLqNt9WsWNg +MNLTWU2nc19VHYOi8C/ESBS18BvGKkIajt5HGuDzKZ1+1WkDhv522HzEGwXUPbB Lcz9t3ccrbqHw7kZj6Jjez2/K4G0AC40GQ/kYed53uMAF5rr3bijEQPmBdl/Fkdd IOxd6XzR7QyIwI0qtSU9KLeG4O3Y7Simvic1PtyufyJlgZm60FiHzPpwnkvNbPXq 86OCFRyr+M3bRfk0w9DMZopj/n4msUzC -----END CERTIFICATE-----Generated at Wed Aug 6 00:36:01 2025 by rpki-client