$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa File: 724a3de3-fa7b-350e-9620-6cb73ca032ec.roa (raw, json) Hash identifier: IVc3IcAohuicDHXKyWSko1/Uk3Sk5QqegUPjg6twrow= Subject key identifier: D4:D8:2A:DF:BC:1C:A7:1C:B9:CF:2B:D5:2E:9B:BF:D4:A5:19:F0:E7 Certificate issuer: /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Certificate serial: 010D0C9F4328584AB91B8BD33B81A82260F73A80 Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 395823 IP address blocks: 2602:fce8::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:8b:d3:3b:81:a8:22:60:f7:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=7c69b6fa-e193-4374-8d2f-e2a18524cfd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:ac:d1:1c:8e:de:55:2c:17:8a:d1:0b:7b: 0b:ec:d0:e1:b9:46:a5:a1:6e:26:6b:8c:b0:f0:0f: 47:61:76:fa:92:84:47:b1:fb:37:3c:67:9e:5b:f1: 95:e8:56:22:4a:34:dc:32:12:fb:bd:26:57:47:cb: 8a:4a:f6:f4:08:d1:08:9e:4d:cc:5e:01:c3:95:d5: a9:a8:8c:45:e5:c3:8e:09:ee:a3:d1:0b:17:55:9d: 37:d3:5d:8f:33:e2:65:1e:29:81:ff:24:c8:15:c4: d1:99:8d:b1:49:17:c6:68:53:03:c9:b7:3b:ce:ee: 7f:f3:8c:d8:5e:40:17:97:57:d0:06:90:c7:ad:51: e0:e1:39:bf:78:04:ec:88:c0:6f:96:e8:58:e5:39: 6c:79:5e:0f:74:3e:5b:66:fb:49:c2:4b:13:d8:a2: 9c:6d:6c:43:b2:4b:00:d1:f4:1e:4c:ed:84:af:f8: 76:d5:ed:6d:ee:f7:b8:bc:6c:68:78:f1:40:cb:43: a5:27:ec:d3:2d:9c:50:2a:79:6f:ca:ca:d5:10:ea: 82:84:69:f2:7e:6f:68:9b:db:cc:10:c5:1e:02:0d: c0:4e:5c:d9:25:a7:f7:15:a8:18:f5:7a:1f:4c:c6: f0:0a:48:39:cc:f9:29:c2:a0:07:e6:dd:ac:89:2b: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D8:2A:DF:BC:1C:A7:1C:B9:CF:2B:D5:2E:9B:BF:D4:A5:19:F0:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl X509v3 Authority Key Identifier: keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer sbgp-ipAddrBlock: critical IPv6: 2602:fce8::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:de:d7:a5:55:7b:f5:f9:11:4b:79:27:70:e5:11:60:60:d0: 7e:b6:a9:0a:3f:ce:60:ab:3f:fc:b5:50:f5:38:4e:3c:20:47: be:92:f3:0a:fb:3e:02:75:08:94:7f:25:ee:b9:af:e9:cf:e3: 35:2b:f2:b4:98:fc:d7:9d:eb:67:63:90:ac:5c:9d:aa:af:d2: 86:c3:a0:d2:6e:74:14:23:0b:7a:4f:39:ad:ae:be:41:3a:f7: 1e:51:93:64:7e:38:1e:65:f9:61:0a:0a:a0:be:bc:0d:8a:c5: ce:d0:de:a1:27:09:d6:ac:4a:2e:4f:c0:3e:35:a1:d9:9a:6e: aa:dc:3c:ba:9a:99:58:7e:8d:25:e0:8b:9c:38:bc:eb:09:22: 1a:3d:6b:45:9c:ee:ff:a0:a0:0a:63:77:f2:c5:a0:4e:6e:2e: 36:cd:79:06:a2:ad:e4:f7:08:b0:b2:a7:ba:a3:7c:d9:7a:e0: f8:67:a9:39:fe:b8:9e:31:b5:12:d0:62:76:2f:ce:1c:ed:a8: 3e:a5:99:49:6d:bd:54:ae:09:e4:2b:e4:4d:11:5e:b2:bb:15: df:6a:f5:8b:8a:39:a3:9d:44:b0:ce:c0:b3:ff:ad:42:ee:5e: 5f:9e:a9:e5:c5:5a:51:d9:3e:43:57:a5:b8:48:df:25:1e:03: 67:32:9e:54 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq5G4vTO4GoImD3OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ZTVlNjctNDE2MS00YTJkLWJkNzMtMmRlYjVmMWQ4 ZjUxMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk N2M2OWI2ZmEtZTE5My00Mzc0LThkMmYtZTJhMTg1MjRjZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMCs0RyO3lUsF4rRC3sL7NDhuUaloW4ma4yw 8A9HYXb6koRHsfs3PGeeW/GV6FYiSjTcMhL7vSZXR8uKSvb0CNEInk3MXgHDldWp qIxF5cOOCe6j0QsXVZ03012PM+JlHimB/yTIFcTRmY2xSRfGaFMDybc7zu5/84zY XkAXl1fQBpDHrVHg4Tm/eATsiMBvluhY5TlseV4PdD5bZvtJwksT2KKcbWxDsksA 0fQeTO2Er/h21e1t7ve4vGxoePFAy0OlJ+zTLZxQKnlvysrVEOqChGnyfm9om9vM EMUeAg3ATlzZJaf3FagY9XofTMbwCkg5zPkpwqAH5t2siStQWwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNTYKt+8HKccuc8r1S6bv9SlGfDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRl NWU2Ny00MTYxLTRhMmQtYmQ3My0yZGViNWYxZDhmNTEvNzI0YTNkZTMtZmE3Yi0z NTBlLTk2MjAtNmNiNzNjYTAzMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE0ZTVlNjctNDE2MS00YTJkLWJk NzMtMmRlYjVmMWQ4ZjUxL2UxNGU1ZTY3LTQxNjEtNGEyZC1iZDczLTJkZWI1ZjFk OGY1MS5jcmwwHwYDVR0jBBgwFoAUG9dxIb6YBpSp8yztchxJVEi+aecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRlNWU2Ny00MTYxLTRhMmQtYmQ3My0yZGVi NWYxZDhmNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL86AAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPd7XpVV79fkRS3kncOURYGDQfrapCj/OYKs//LVQ9ThOPCBHvpLz Cvs+AnUIlH8l7rmv6c/jNSvytJj8153rZ2OQrFydqq/ShsOg0m50FCMLek85ra6+ QTr3HlGTZH44HmX5YQoKoL68DYrFztDeoScJ1qxKLk/APjWh2Zpuqtw8upqZWH6N JeCLnDi86wkiGj1rRZzu/6CgCmN38sWgTm4uNs15BqKt5PcIsLKnuqN82Xrg+Gep Of64njG1EtBidi/OHO2oPqWZSW29VK4J5CvkTRFesrsV32r1i4o5o51EsM7As/+t Qu5eX56p5cVaUdk+Q1eluEjfJR4DZzKeVA== -----END CERTIFICATE-----Generated at Mon Aug 4 18:29:14 2025 by rpki-client