$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa File: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (raw, json) Hash identifier: Ss5rQLyFMvXNlO+ymPelSKlx/h5dphuZNFWp66yZFRk= Subject key identifier: 83:C9:50:D5:5B:45:7C:AC:43:EF:C9:87:17:7E:AE:FC:02:3E:74:7B Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e Certificate serial: 010D0C9F4328584AADF11ED820FEC3F1EF482D00 Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13325 IP address blocks: 2620:167::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1e:d8:20:fe:c3:f1:ef:48:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=4c53a94d-268b-41f1-a2db-3e34f2698136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:e3:ad:1f:21:4d:b5:e4:69:bf:64:29:3f: 5d:ee:97:5d:9c:15:34:72:6b:86:29:28:ce:ee:af: af:e9:34:8c:f4:4c:8c:72:b7:b2:03:53:e5:78:a1: dc:ea:ee:98:2a:3c:4f:7f:00:44:32:83:09:16:18: d8:04:2a:ff:f4:05:15:87:91:f1:77:5c:d8:74:36: 07:1e:eb:4e:4b:ed:c0:52:11:9e:66:a6:2e:38:7c: 36:b7:a0:3c:f8:57:92:2f:8e:85:62:1f:4b:a2:f7: d4:5e:d0:a5:db:2c:5a:db:85:fd:c3:54:79:28:94: 6f:90:db:5f:4c:ed:d0:11:2d:23:2b:2c:f4:9c:b9: 8a:2c:ae:c3:69:32:70:0d:11:30:68:71:85:7f:d1: f5:c4:3c:8f:f4:d2:19:7f:4a:ca:05:14:f2:22:d7: 59:0d:b7:25:2e:ac:8d:7c:e7:34:46:98:bd:1b:47: 80:e2:07:b4:85:af:2e:df:00:f9:37:da:f7:de:08: 57:53:95:1a:6f:37:7c:de:be:5f:2b:1c:66:30:99: bf:37:71:8a:68:e8:54:07:6d:48:0f:c0:3f:19:37: 9b:94:f4:75:91:c8:45:58:f2:76:7b:7e:9a:95:87: bc:78:fb:db:7e:b8:eb:45:b9:d8:38:d3:7d:bb:9b: 6a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C9:50:D5:5B:45:7C:AC:43:EF:C9:87:17:7E:AE:FC:02:3E:74:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl X509v3 Authority Key Identifier: keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer sbgp-ipAddrBlock: critical IPv6: 2620:167::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ca:e1:25:05:43:e9:0b:9d:b3:c9:17:36:42:b5:84:68:fc: 85:0e:71:f8:d1:24:c3:cc:c2:23:60:93:f4:2d:17:70:85:4d: ad:1b:5c:bf:96:3c:51:5d:88:d8:5a:e6:e5:d2:7f:fa:e3:75: fe:51:4a:74:f9:fc:0b:c3:a9:40:e6:2a:b6:99:96:96:c7:f1: 60:98:f7:9f:c2:a0:97:b3:f4:0b:90:70:77:97:63:c6:4f:8e: 07:cd:9e:d6:f7:a9:f6:a1:8b:19:ec:70:0d:34:4a:a6:58:6d: bb:1c:64:f8:74:cb:53:ed:12:b8:96:66:25:95:df:1f:ac:8a: 6b:c1:b5:52:53:94:4e:ed:0e:92:4f:bd:bc:87:8a:81:c5:03: f1:77:f4:7d:9f:7a:18:26:a0:97:95:7f:48:5b:f5:e7:2b:52: 3b:fd:68:7e:54:17:bf:45:de:b8:95:ec:8b:b0:02:47:76:38: 9f:db:33:ee:70:36:91:15:a7:03:20:e5:09:58:58:fc:42:cf: 61:85:15:62:5e:48:54:63:c3:19:d2:73:48:80:2d:bc:43:8f: 52:41:e2:e4:ca:97:eb:3e:87:25:a4:83:1f:4e:6d:8b:67:fc: 1f:9a:71:1c:af:a0:b2:ee:ac:6f:68:a2:49:02:54:1c:e3:13: 81:5b:ef:0c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqt8R7YIP7D8e9ILQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz MjJlMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NGM1M2E5NGQtMjY4Yi00MWYxLWEyZGItM2UzNGYyNjk4MTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzObjrR8hTbXkab9kKT9d7pddnBU0cmuGKSjO 7q+v6TSM9EyMcreyA1PleKHc6u6YKjxPfwBEMoMJFhjYBCr/9AUVh5Hxd1zYdDYH HutOS+3AUhGeZqYuOHw2t6A8+FeSL46FYh9LovfUXtCl2yxa24X9w1R5KJRvkNtf TO3QES0jKyz0nLmKLK7DaTJwDREwaHGFf9H1xDyP9NIZf0rKBRTyItdZDbclLqyN fOc0Rpi9G0eA4ge0ha8u3wD5N9r33ghXU5Uabzd83r5fKxxmMJm/N3GKaOhUB21I D8A/GTeblPR1kchFWPJ2e36alYe8ePvbfrjrRbnYONN9u5tqpwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIPJUNVbRXysQ+/Jhxd+rvwCPnR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvYTFmZTZiOTgtOGNhOC0z YmQ0LWIxMDgtNjM0NWM1MmNmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjMrhJQVD6Quds8kXNkK1hGj8hQ5x+NEkw8zCI2CT9C0XcIVNrRtc v5Y8UV2I2Frm5dJ/+uN1/lFKdPn8C8OpQOYqtpmWlsfxYJj3n8Kgl7P0C5Bwd5dj xk+OB82e1vep9qGLGexwDTRKplhtuxxk+HTLU+0SuJZmJZXfH6yKa8G1UlOUTu0O kk+9vIeKgcUD8Xf0fZ96GCagl5V/SFv15ytSO/1oflQXv0XeuJXsi7ACR3Y4n9sz 7nA2kRWnAyDlCVhY/ELPYYUVYl5IVGPDGdJzSIAtvEOPUkHi5MqX6z6HJaSDH05t i2f8H5pxHK+gsu6sb2iiSQJUHOMTgVvvDA== -----END CERTIFICATE-----Generated at Thu Aug 7 11:19:18 2025 by rpki-client