$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa File: 2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa (raw, json) Hash identifier: 0pTyl1gyFdlN6tdqHJo9oOA6J3WNwe7aeQNmRNQDRfE= Subject key identifier: 15:DE:5B:B4:E5:73:81:49:73:94:1F:AA:A6:3F:2F:36:BD:72:50:70 Certificate issuer: /CN=4a595a80-2106-455a-be91-2aa623280126 Certificate serial: 010D0C9F4328584AAE0897C7DE42C6ABD9CA5700 Authority key identifier: 52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa Signing time: Tue 29 Jul 2025 03:02:37 +0000 ROA not before: Tue 29 Jul 2025 03:02:37 +0000 ROA not after: Mon 27 Oct 2025 03:02:37 +0000 asID: 16509 IP address blocks: 2604:11a0:1000::/40 maxlen: 48 2604:11a0:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ae:08:97:c7:de:42:c6:ab:d9:ca:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a595a80-2106-455a-be91-2aa623280126 Validity Not Before: Jul 29 03:02:37 2025 GMT Not After : Oct 27 03:02:37 2025 GMT Subject: CN=bd3c86bd-c2d2-4b02-9dac-22782cfb070c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:14:9d:5d:de:87:8d:25:f0:9a:0c:4f:63: 52:24:6b:11:f8:35:68:b4:ea:98:60:d6:63:b3:71: 23:68:bc:25:9f:76:72:5b:21:d4:9f:19:89:9f:44: b2:75:59:a5:83:94:e0:16:7c:b2:fe:0c:57:18:6e: 50:bb:cc:95:71:1d:d4:31:20:72:c1:dc:e1:55:8f: b7:ca:e4:c3:4e:58:de:11:0a:95:d8:2e:e6:ea:01: 70:a0:01:1f:02:6c:99:4c:1d:c0:0c:83:04:58:6d: e8:de:62:1d:8e:c4:41:55:d0:4f:18:7d:0c:f8:c6: 92:50:12:75:a1:f8:88:45:3e:fb:48:7d:9a:87:52: 80:02:03:39:57:6d:65:ea:b4:ed:ec:a1:18:03:05: 5f:a8:6f:1a:e9:25:51:b5:e8:d8:c6:9f:ab:ac:ce: 31:d5:85:ce:44:01:fe:07:50:fd:75:b8:2e:df:a3: 33:8d:1f:0d:07:bc:0f:fa:6e:b7:a8:13:40:84:f4: 32:fb:e5:bd:a4:f0:6e:63:8d:0b:76:76:69:c0:1e: f2:b8:38:df:bd:07:4e:6c:5d:ac:2f:52:7e:24:f4: 33:28:75:43:c9:69:df:1c:79:47:2e:e0:9c:9b:08: e3:aa:df:a9:b2:ad:9f:03:cf:f4:0c:e1:be:31:96: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DE:5B:B4:E5:73:81:49:73:94:1F:AA:A6:3F:2F:36:BD:72:50:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl X509v3 Authority Key Identifier: keyid:52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer sbgp-ipAddrBlock: critical IPv6: 2604:11a0:1000::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:50:a8:cd:12:46:c4:95:94:02:33:7a:b3:d7:03:07:3c:e5: 71:3e:4d:26:a7:11:f5:59:6e:eb:43:6e:6e:44:3c:e4:6c:5f: 5a:2d:75:67:af:c1:ba:57:5b:40:41:96:e2:a7:6b:7e:0c:ca: 25:d5:94:2d:38:62:68:10:27:82:88:61:4a:bb:77:eb:4e:ea: b9:36:b3:4b:16:04:86:c8:f9:36:9f:80:d4:ea:71:1c:fa:ce: d9:b4:dd:39:99:5e:0a:54:b0:76:98:1f:27:00:9d:57:54:fc: 70:f5:73:fc:c4:42:66:a5:7e:d8:b8:ad:18:cb:a6:c0:79:7e: f9:94:27:d5:96:fd:5f:8b:eb:9d:20:25:1b:b3:1c:9d:b4:3d: 3d:4e:b1:0b:77:d9:9e:8e:16:8d:72:a0:05:30:e0:ad:2d:33: 25:dc:37:db:14:f4:d3:43:0e:04:f9:1f:6d:37:42:5f:63:d7: ca:41:5d:0e:f3:5a:31:4d:8f:09:46:50:95:20:ba:35:07:a7: 72:1f:7e:97:9b:a5:97:5b:08:bf:39:13:7e:41:26:ef:65:3b: bd:e0:65:10:fc:63:c0:40:30:74:49:28:6e:63:fe:ac:fc:55: d8:9b:6b:c6:b0:df:a1:1e:7b:fa:87:03:1b:62:b1:13:79:c3: 9a:47:0a:8c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEquCJfH3kLGq9nKVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE1OTVhODAtMjEwNi00NTVhLWJlOTEtMmFhNjIzMjgw MTI2MB4XDTI1MDcyOTAzMDIzN1oXDTI1MTAyNzAzMDIzN1owLzEtMCsGA1UEAxMk YmQzYzg2YmQtYzJkMi00YjAyLTlkYWMtMjI3ODJjZmIwNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn8UnV3eh40l8JoMT2NSJGsR+DVotOqYYNZj s3EjaLwln3ZyWyHUnxmJn0SydVmlg5TgFnyy/gxXGG5Qu8yVcR3UMSBywdzhVY+3 yuTDTljeEQqV2C7m6gFwoAEfAmyZTB3ADIMEWG3o3mIdjsRBVdBPGH0M+MaSUBJ1 ofiIRT77SH2ah1KAAgM5V21l6rTt7KEYAwVfqG8a6SVRtejYxp+rrM4x1YXORAH+ B1D9dbgu36MzjR8NB7wP+m63qBNAhPQy++W9pPBuY40LdnZpwB7yuDjfvQdObF2s L1J+JPQzKHVDyWnfHHlHLuCcmwjjqt+psq2fA8/0DOG+MZa6GwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBXeW7Tlc4FJc5QfqqY/Lza9clBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YTU5 NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2MjMyODAxMjYvMmE0YWRiYzYtYzk5Ny0z ZDJmLWJlOGQtMTMxNGU4YTQ0NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGE1OTVhODAtMjEwNi00NTVhLWJl OTEtMmFhNjIzMjgwMTI2LzRhNTk1YTgwLTIxMDYtNDU1YS1iZTkxLTJhYTYyMzI4 MDEyNi5jcmwwHwYDVR0jBBgwFoAUUtbV5rISIADa5K6P/GUha7XbT7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YTU5NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2 MjMyODAxMjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgQRoBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiFCozRJGxJWUAjN6s9cDBzzlcT5NJqcR9Vlu60NubkQ85GxfWi11 Z6/BuldbQEGW4qdrfgzKJdWULThiaBAngohhSrt3607quTazSxYEhsj5Np+A1Opx HPrO2bTdOZleClSwdpgfJwCdV1T8cPVz/MRCZqV+2LitGMumwHl++ZQn1Zb9X4vr nSAlG7McnbQ9PU6xC3fZno4WjXKgBTDgrS0zJdw32xT000MOBPkfbTdCX2PXykFd DvNaMU2PCUZQlSC6NQench9+l5ull1sIvzkTfkEm72U7veBlEPxjwEAwdEkobmP+ rPxV2JtrxrDfoR57+ocDG2KxE3nDmkcKjA== -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:22 2025 by rpki-client