$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa File: a43a41c8-9815-3189-85dc-d60e1985a8f9.roa (raw, json) Hash identifier: pOxN0j+Ptth+BSnWuDDeU2KFLBFzCKe1Ltxr122o48A= Subject key identifier: 37:1F:65:E4:CD:B1:FF:9A:16:EF:06:82:AF:CB:13:06:7C:B5:E2:C9 Certificate issuer: /CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Certificate serial: 010D0C9F4328584AA42B888E64C6D496F59E8300 Authority key identifier: CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16430 IP address blocks: 2620:f4:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:88:8e:64:c6:d4:96:f5:9e:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=8c39be5c-bb7d-4e9e-a08e-6070c378d199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:76:c7:e0:1c:c7:b9:92:44:d8:87:3a:94:f1: 16:46:9a:66:4e:8c:f5:f5:9a:e3:eb:70:89:0b:6a: dd:ef:4c:01:58:a3:e5:8c:05:b0:29:13:98:5e:38: c6:15:e1:ca:81:6a:05:15:4b:9e:4e:09:18:88:4d: 12:90:a7:07:f5:ed:5c:d4:e1:ab:7a:45:b5:32:d4: 9c:38:18:2c:5c:9b:b9:d1:c3:6a:16:30:08:d5:e3: 6d:35:9f:e8:37:ba:79:41:17:48:d8:e2:db:0d:7d: 59:5b:75:5f:ae:a2:9d:01:d0:3d:9e:89:9b:c8:99: 35:a6:f9:76:72:e0:98:6a:6e:36:63:34:f0:1f:3c: eb:d3:b8:35:cc:78:29:b3:e3:75:fa:84:b9:2e:7e: 73:9b:43:94:a2:6e:67:74:3d:2c:5a:98:cc:e7:bd: 6f:2b:2d:b9:d6:fe:b8:62:c1:bd:b5:83:eb:e3:98: f0:f7:d8:7f:34:f8:ab:af:64:ef:4c:e9:25:e7:2f: 40:ef:51:2a:f8:a0:18:78:56:fb:13:8a:f7:5f:1e: 6e:ac:59:af:09:5b:88:fc:6d:23:ae:8d:13:97:91: 08:fd:ad:c6:7f:8f:e1:45:08:eb:bb:6e:4e:fc:6d: 27:14:80:97:f9:cf:ce:00:9b:5c:de:92:1b:7b:51: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1F:65:E4:CD:B1:FF:9A:16:EF:06:82:AF:CB:13:06:7C:B5:E2:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl X509v3 Authority Key Identifier: keyid:CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:f4:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3a:0d:a1:cc:08:b2:1b:14:85:26:7e:b9:b9:e3:55:92:1f: 82:7b:4e:d0:fe:4c:df:e0:4d:e2:67:4b:53:85:b0:8d:14:8b: c1:88:e5:c1:ca:af:0a:0c:e5:f4:79:f3:40:74:6e:b7:38:6a: c0:6a:6b:93:79:df:46:8c:d1:d9:d6:f4:fe:4c:63:2c:ed:51: e7:f2:7c:dc:51:c5:4f:12:26:65:c3:32:d9:1b:2b:53:9f:8c: ea:c3:b1:10:ed:7b:35:53:c2:ba:df:e4:3a:00:b0:c8:40:03: 64:a6:f2:d5:59:69:9a:b3:73:6e:3f:6a:2a:70:6c:cd:70:68: be:14:b9:53:9c:8c:a9:78:f9:b2:b8:83:0d:d0:4b:7a:5d:25: e3:bc:36:53:ea:ae:63:92:36:25:30:70:be:eb:06:3b:f5:cb: 1b:fb:62:0d:c3:e1:65:e0:58:79:28:c8:2a:1c:9b:3f:fc:55: 6d:93:4a:88:c3:ad:55:00:4d:d6:07:e7:ac:1d:06:45:8d:b4: ff:57:db:d1:ca:2e:38:3e:d1:96:d0:d3:e9:a8:48:05:ba:2a: be:ed:26:77:03:5f:ab:b3:fc:2d:c9:1d:6c:77:53:98:6b:f8: d8:1d:f4:30:13:d9:9b:76:e4:d0:af:31:d4:70:f2:3f:86:20: 61:85:70:f6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqkK4iOZMbUlvWegwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU3OTcxYjUtODgyZi00OGNjLWIxMjMtYjg0ZDdiOWI4 YzViMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk OGMzOWJlNWMtYmI3ZC00ZTllLWEwOGUtNjA3MGMzNzhkMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXbH4BzHuZJE2Ic6lPEWRppmToz19Zrj63CJ C2rd70wBWKPljAWwKROYXjjGFeHKgWoFFUueTgkYiE0SkKcH9e1c1OGrekW1MtSc OBgsXJu50cNqFjAI1eNtNZ/oN7p5QRdI2OLbDX1ZW3VfrqKdAdA9nombyJk1pvl2 cuCYam42YzTwHzzr07g1zHgps+N1+oS5Ln5zm0OUom5ndD0sWpjM571vKy251v64 YsG9tYPr45jw99h/NPirr2TvTOkl5y9A71Eq+KAYeFb7E4r3Xx5urFmvCVuI/G0j ro0Tl5EI/a3Gf4/hRQjru25O/G0nFICX+c/OAJtc3pIbe1HUbwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDcfZeTNsf+aFu8Ggq/LEwZ8teLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5 NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRkN2I5YjhjNWIvYTQzYTQxYzgtOTgxNS0z MTg5LTg1ZGMtZDYwZTE5ODVhOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmU3OTcxYjUtODgyZi00OGNjLWIx MjMtYjg0ZDdiOWI4YzViL2ZlNzk3MWI1LTg4MmYtNDhjYy1iMTIzLWI4NGQ3Yjli OGM1Yi5jcmwwHwYDVR0jBBgwFoAUy5bUIW8WkMzqeX0Tn+eTv/wdqUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRk N2I5YjhjNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAA9EAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATDoNocwIshsUhSZ+ubnjVZIfgntO0P5M3+BN4mdLU4WwjRSLwYjl wcqvCgzl9HnzQHRutzhqwGprk3nfRozR2db0/kxjLO1R5/J83FHFTxImZcMy2Rsr U5+M6sOxEO17NVPCut/kOgCwyEADZKby1VlpmrNzbj9qKnBszXBovhS5U5yMqXj5 sriDDdBLel0l47w2U+quY5I2JTBwvusGO/XLG/tiDcPhZeBYeSjIKhybP/xVbZNK iMOtVQBN1gfnrB0GRY20/1fb0couOD7RltDT6ahIBboqvu0mdwNfq7P8LckdbHdT mGv42B30MBPZm3bk0K8x1HDyP4YgYYVw9g== -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:30 2025 by rpki-client