$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa File: 7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa (raw, json) Hash identifier: nWtNAUECAbphwlw1BSmEhS1Kb/LnfzazfviRgdn/Rng= Subject key identifier: C4:70:5A:4E:0E:7E:41:3B:C3:90:FF:E1:44:13:02:9E:2C:FC:38:05 Certificate issuer: /CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Certificate serial: 010D0C9F4328584A9BCB75BAFA68629B30E33080 Authority key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 401523 IP address blocks: 2620:d0:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:75:ba:fa:68:62:9b:30:e3:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=8fe920e2-a305-49fd-94ec-3aa5bfef057f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:30:3e:67:9e:a1:19:65:43:cd:fc:ea:36: 34:a9:e6:1b:31:29:50:46:72:31:33:9d:e5:ec:e9: b9:94:84:d3:e6:57:e9:6e:c6:5d:93:16:9b:4e:f0: c8:31:f2:d1:d3:3b:95:92:45:7d:00:07:0f:0f:cd: 3a:db:eb:48:2e:3a:96:1a:f7:30:42:f2:42:17:1a: 26:b0:73:e2:ff:d9:a7:68:05:2d:c1:61:90:a8:c6: 8f:46:49:4c:77:a2:d8:d6:5b:05:59:f0:1a:aa:0e: 46:eb:3e:0e:cd:44:15:d8:1b:f3:e1:4f:23:6b:a1: 56:cb:6d:20:69:36:c3:18:cb:5b:82:6d:b5:9e:24: 2b:9b:3e:2b:ec:03:de:38:b8:4d:6e:05:78:90:a5: 61:0c:6d:50:40:8f:c0:84:3a:90:52:4e:42:83:37: 72:7c:e5:f1:7f:bd:d2:6c:db:e5:8b:c7:0a:c2:38: f2:14:d4:49:76:e5:f9:e7:a1:6f:c3:92:cf:04:98: 81:f4:43:86:64:27:27:3a:1b:6f:9c:10:70:ee:da: 25:ed:ad:54:1f:23:3b:c1:18:fc:fb:62:7e:21:8d: ea:13:ec:e7:fd:95:e9:89:59:60:e4:7a:4f:9c:30: 0e:de:65:90:39:99:24:dd:fe:e2:f9:0a:86:ed:44: 6b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:70:5A:4E:0E:7E:41:3B:C3:90:FF:E1:44:13:02:9E:2C:FC:38:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl X509v3 Authority Key Identifier: keyid:5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer sbgp-ipAddrBlock: critical IPv6: 2620:d0:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:1e:ca:32:85:82:c3:8e:c0:a7:aa:9c:6c:f1:4b:ef:b0:e7: 1f:80:00:cd:86:10:6c:09:dc:c7:49:c0:4f:55:75:37:9e:92: 02:a7:a4:3f:93:a5:a1:71:9e:63:c0:80:5c:97:2f:fc:2b:9a: 42:24:4e:61:96:87:d7:d0:f4:f4:1a:9d:8c:90:a9:f4:30:37: 4f:8c:b7:cb:a9:fc:ed:ee:10:73:3b:71:38:1f:af:e1:94:3e: ab:dc:6f:ca:21:b6:f1:77:e0:3e:50:79:8d:bf:ad:b1:f6:e6: 93:92:7d:b8:22:39:e0:f4:d9:58:8e:68:a2:95:a8:8b:a5:0d: b9:37:10:36:4e:d0:aa:2e:d6:b3:15:df:da:76:64:3f:03:63: 7d:9f:7a:ee:8f:99:f7:fe:c0:6d:03:d8:a2:61:8d:d4:2f:d6: ab:c9:a1:07:a1:94:a7:5e:03:4f:2e:86:a2:4a:b5:c8:8a:e0: 33:23:5d:7e:c4:42:17:6c:55:7c:8e:ce:69:4f:42:49:a8:8d: e9:b2:60:42:65:67:9d:e4:ba:05:8e:dd:e8:cd:21:23:f0:66: 0d:be:11:97:c3:59:59:53:9b:c9:7a:73:75:47:d5:2f:78:5b: 3f:40:3c:5e:91:ca:be:59:6c:81:21:f8:f7:37:f1:65:7b:88: 87:2e:2b:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqby3W6+mhimzDjMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzEyMzgtMzIwMi00MGY2LThmZGQtZDk1MDVjNWE4 NjM1MB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk OGZlOTIwZTItYTMwNS00OWZkLTk0ZWMtM2FhNWJmZWYwNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm44wPmeeoRllQ8386jY0qeYbMSlQRnIxM53l 7Om5lITT5lfpbsZdkxabTvDIMfLR0zuVkkV9AAcPD8062+tILjqWGvcwQvJCFxom sHPi/9mnaAUtwWGQqMaPRklMd6LY1lsFWfAaqg5G6z4OzUQV2Bvz4U8ja6FWy20g aTbDGMtbgm21niQrmz4r7APeOLhNbgV4kKVhDG1QQI/AhDqQUk5CgzdyfOXxf73S bNvli8cKwjjyFNRJduX556Fvw5LPBJiB9EOGZCcnOhtvnBBw7tol7a1UHyM7wRj8 +2J+IY3qE+zn/ZXpiVlg5HpPnDAO3mWQOZkk3f7i+QqG7URrOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMRwWk4OfkE7w5D/4UQTAp4s/DgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3 MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUwNWM1YTg2MzUvN2QzOGZhNzMtYWQwNS0z OWI0LThlZTgtODNhODNiMmE5OTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZhNzEyMzgtMzIwMi00MGY2LThm ZGQtZDk1MDVjNWE4NjM1L2FmYTcxMjM4LTMyMDItNDBmNi04ZmRkLWQ5NTA1YzVh ODYzNS5jcmwwHwYDVR0jBBgwFoAUW/ZhncTKVAoh8pFd4s6e+B64eY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUw NWM1YTg2MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA0OAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK4eyjKFgsOOwKeqnGzxS++w5x+AAM2GEGwJ3MdJwE9VdTeekgKn pD+TpaFxnmPAgFyXL/wrmkIkTmGWh9fQ9PQanYyQqfQwN0+Mt8up/O3uEHM7cTgf r+GUPqvcb8ohtvF34D5QeY2/rbH25pOSfbgiOeD02ViOaKKVqIulDbk3EDZO0Kou 1rMV39p2ZD8DY32feu6Pmff+wG0D2KJhjdQv1qvJoQehlKdeA08uhqJKtciK4DMj XX7EQhdsVXyOzmlPQkmojemyYEJlZ53kugWO3ejNISPwZg2+EZfDWVlTm8l6c3VH 1S94Wz9APF6Ryr5ZbIEh+Pc38WV7iIcuK9s= -----END CERTIFICATE-----Generated at Thu Aug 7 20:11:56 2025 by rpki-client