$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/381c74d2-a63e-3218-af39-42c9efe0a48b.roa File: 381c74d2-a63e-3218-af39-42c9efe0a48b.roa (raw, json) Hash identifier: VVVMTKshjgazlNGenYBsgTgcquFsF08nf+WFkfumg84= Subject key identifier: AA:FC:88:5C:54:ED:45:0F:36:A2:43:9C:7F:1E:83:70:ED:93:89:30 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584A90A0A57F9C820CD2C0569980 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/381c74d2-a63e-3218-af39-42c9efe0a48b.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 21782 IP address blocks: 2605:af00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:a5:7f:9c:82:0c:d2:c0:56:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=10a8b53a-d3c7-4159-936f-0eabfd38d8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:ff:27:57:f9:09:31:66:7d:40:40:66:c5: a8:3a:86:f9:03:3e:d1:d0:94:02:02:a5:f6:a0:7f: c8:23:ae:42:cf:cf:18:7b:c5:21:57:ca:16:8d:b3: 36:74:36:7c:71:00:1a:46:ca:29:16:13:08:bd:40: ca:c6:0a:94:64:73:bf:84:b3:f0:21:af:0d:f8:19: 97:db:b9:88:15:b4:7b:a2:7a:5f:85:1d:75:2a:95: ee:79:c9:56:09:b0:4d:a7:e4:ef:f2:60:bf:74:78: 5a:5b:5f:95:85:d0:7b:36:63:36:a3:15:a1:a5:5a: 22:c9:cf:6f:c5:82:b8:38:4f:ac:ab:f9:0c:20:61: 38:dd:db:38:82:78:3c:fb:ae:30:05:a2:f3:93:40: ab:ce:e1:2d:57:da:15:c6:af:d9:ff:7c:07:61:7d: cc:46:8a:f2:29:47:51:69:3a:af:35:90:eb:4d:38: 3e:e1:c8:54:b1:dc:51:5d:05:70:63:f0:06:4e:76: 28:71:0e:a8:5e:58:52:8d:ca:db:82:21:14:d9:c9: 94:4e:2f:8d:8c:6e:5f:90:3a:5b:6e:a1:98:46:75: 8d:39:54:30:7b:b9:d7:dc:2c:9a:76:58:39:24:fe: c7:ec:70:a5:6c:d7:85:7a:4f:93:29:3d:4d:b5:4b: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FC:88:5C:54:ED:45:0F:36:A2:43:9C:7F:1E:83:70:ED:93:89:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/381c74d2-a63e-3218-af39-42c9efe0a48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv6: 2605:af00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:29:78:7e:e7:40:8c:c4:b0:8c:fe:c8:10:86:0d:90:72:75: f3:10:6b:7d:0e:40:c0:0a:dd:87:22:77:6e:64:10:e5:76:7a: 0e:fd:3f:2c:89:d7:be:f5:5d:a8:80:b5:9f:7b:94:65:07:22: 85:97:3f:24:65:34:36:1d:f6:e0:f8:c3:fa:15:c5:61:f8:8f: 41:b5:fe:00:86:29:d0:7f:14:7a:0a:6e:7d:43:8e:ea:b4:39: 8d:32:a6:1c:2a:07:c0:d0:b0:91:48:df:a9:6f:92:cf:f2:db: 32:d0:dd:f0:c7:5e:12:1d:ce:f7:c9:ad:69:fd:aa:c9:58:91: d9:49:8e:ae:bc:fa:aa:9d:91:6c:69:6e:2d:d8:ff:d7:e5:32: d1:8d:aa:e8:b3:b2:c9:00:6d:f0:be:41:4f:83:8f:de:cc:22: fd:cf:be:0d:de:9d:6d:58:42:40:9b:17:a7:f7:3b:8e:24:e0: 88:23:fc:fe:84:44:43:28:39:5a:c4:55:29:30:53:a2:b6:69: 95:5d:e8:82:25:4b:d0:48:34:ac:60:a5:ad:15:d3:fc:a7:fd: 88:0f:6f:31:e3:48:f1:a4:a6:69:c1:46:0e:9e:2b:c1:82:e0: ba:c3:6a:65:6d:7f:1d:b4:f6:22:b0:7a:9a:40:95:03:25:4c: 90:d2:99:22 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqQoKV/nIIM0sBWmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MTBhOGI1M2EtZDNjNy00MTU5LTkzNmYtMGVhYmZkMzhkOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AT/J1f5CTFmfUBAZsWoOob5Az7R0JQCAqX2 oH/II65Cz88Ye8UhV8oWjbM2dDZ8cQAaRsopFhMIvUDKxgqUZHO/hLPwIa8N+BmX 27mIFbR7onpfhR11KpXueclWCbBNp+Tv8mC/dHhaW1+VhdB7NmM2oxWhpVoiyc9v xYK4OE+sq/kMIGE43ds4gng8+64wBaLzk0CrzuEtV9oVxq/Z/3wHYX3MRoryKUdR aTqvNZDrTTg+4chUsdxRXQVwY/AGTnYocQ6oXlhSjcrbgiEU2cmUTi+NjG5fkDpb bqGYRnWNOVQwe7nX3Cyadlg5JP7H7HClbNeFek+TKT1NtUsJvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKr8iFxU7UUPNqJDnH8eg3Dtk4kwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvMzgxYzc0ZDItYTYzZS0z MjE4LWFmMzktNDJjOWVmZTBhNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWvADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7KXh+50CMxLCM/sgQhg2QcnXzEGt9DkDACt2HInduZBDldnoO/T8s ide+9V2ogLWfe5RlByKFlz8kZTQ2Hfbg+MP6FcVh+I9Btf4AhinQfxR6Cm59Q47q tDmNMqYcKgfA0LCRSN+pb5LP8tsy0N3wx14SHc73ya1p/arJWJHZSY6uvPqqnZFs aW4t2P/X5TLRjaros7LJAG3wvkFPg4/ezCL9z74N3p1tWEJAmxen9zuOJOCII/z+ hERDKDlaxFUpMFOitmmVXeiCJUvQSDSsYKWtFdP8p/2ID28x40jxpKZpwUYOnivB guC6w2plbX8dtPYisHqaQJUDJUyQ0pki -----END CERTIFICATE-----Generated at Mon Aug 4 15:07:25 2025 by rpki-client