$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa File: f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa (raw, json) Hash identifier: GfbR2xlWdNRGIJ+XE4CzUMGZqGnDa6eoiG6wU/gZGao= Subject key identifier: 21:2A:74:A3:C7:C1:3C:37:B4:D2:F8:43:2A:D6:EC:1B:BF:3F:ED:DE Certificate issuer: /CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Certificate serial: 010D0C9F4328584AB3F9B3BFD239B0760566DCC0 Authority key identifier: 13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa Signing time: Thu 31 Jul 2025 16:53:35 +0000 ROA not before: Thu 31 Jul 2025 16:53:35 +0000 ROA not after: Wed 29 Oct 2025 16:53:35 +0000 asID: 25635 IP address blocks: 2605:5640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:f9:b3:bf:d2:39:b0:76:05:66:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Validity Not Before: Jul 31 16:53:35 2025 GMT Not After : Oct 29 16:53:35 2025 GMT Subject: CN=9470fec9-b799-4538-92d0-076f35ecc3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e7:d5:78:e2:4e:88:99:2d:ed:60:29:03:07: cf:ff:a8:02:d7:38:1a:c1:35:6a:1d:00:6b:2e:c2: d5:9a:1a:58:52:f3:ae:5b:08:3a:76:a2:e4:ab:b2: d9:c5:39:5d:cf:4d:0d:32:ba:1a:35:e2:92:a3:d2: 48:33:94:58:8d:26:49:1c:76:e7:73:73:cf:bb:5e: 17:31:f7:fa:bc:f6:16:5e:93:cd:a5:71:fb:ff:0f: 4d:1e:0f:49:bd:ef:29:d4:b2:a0:68:fa:79:be:17: b5:9f:30:66:00:91:54:bd:e0:ba:bc:b9:75:69:e3: ca:6c:60:5c:bc:12:d7:e0:c0:d8:35:6a:ec:c7:7b: 58:5f:33:67:a4:38:e6:9d:03:67:8d:89:86:53:80: 09:0a:99:3f:b9:9b:5d:a3:9b:af:46:22:8f:12:1e: d1:3b:85:55:74:8c:f8:f9:38:16:ff:6a:e4:59:4f: 4c:ce:cc:b0:28:34:7f:91:91:ce:e7:04:2c:9b:05: 0f:d0:07:eb:94:36:65:0a:13:bd:ca:18:9d:35:30: d3:05:f4:df:e4:27:02:ea:ff:98:42:1a:15:78:29: 82:eb:5b:f3:81:2b:90:1e:9e:5f:6a:da:c1:7d:a3: 9f:64:cf:6d:9c:4c:10:7c:34:db:e7:fe:17:0c:ac: 21:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:74:A3:C7:C1:3C:37:B4:D2:F8:43:2A:D6:EC:1B:BF:3F:ED:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl X509v3 Authority Key Identifier: keyid:13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer sbgp-ipAddrBlock: critical IPv6: 2605:5640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:54:cf:19:35:f3:29:d0:8f:2e:4c:0b:73:0f:ab:55:08:51: 3b:d7:36:a6:4a:67:29:71:88:01:7f:8d:72:54:e5:34:ee:5f: ce:97:59:af:8e:82:1e:df:b6:eb:0a:c5:81:c7:39:f0:02:b0: be:c5:fe:79:73:42:34:7c:93:ff:f9:7c:36:ed:bc:0b:10:5a: ce:0a:ed:39:2f:e8:13:3a:44:e4:c5:6c:15:40:86:81:b1:11: 4f:06:56:eb:d1:b0:99:f8:73:96:44:53:9b:b7:55:b0:bd:33: 80:7f:12:1b:f7:26:b1:04:55:79:00:e6:74:4b:e4:06:0b:43: a6:32:a1:27:45:02:cc:b9:e1:46:e0:6a:f8:c0:4d:b5:9b:64: 26:e7:b0:ad:83:04:98:0b:45:e7:27:8c:ce:d9:34:e6:b3:03: 78:04:19:68:f3:ef:c8:ee:f2:1e:a7:aa:9b:8b:dd:92:5c:0b: 58:75:93:a4:1b:0d:b8:78:af:f1:50:af:bd:82:60:dc:55:01: b8:a6:fe:4b:5e:dd:fd:57:3c:34:0e:54:2f:34:9c:bb:05:9c: 34:93:17:69:f1:47:ec:33:7f:50:86:7c:24:21:51:65:5c:d8: d2:cf:7a:c0:ef:89:73:cf:7a:fb:21:3a:8b:e1:c6:8f:59:d6: ed:ec:9b:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqz+bO/0jmwdgVm3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMxYTQ2M2MtYTBjZC00MTBhLThhYWItMGZhZGZlOTdj NjlmMB4XDTI1MDczMTE2NTMzNVoXDTI1MTAyOTE2NTMzNVowLzEtMCsGA1UEAxMk OTQ3MGZlYzktYjc5OS00NTM4LTkyZDAtMDc2ZjM1ZWNjM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+fVeOJOiJkt7WApAwfP/6gC1zgawTVqHQBr LsLVmhpYUvOuWwg6dqLkq7LZxTldz00NMroaNeKSo9JIM5RYjSZJHHbnc3PPu14X Mff6vPYWXpPNpXH7/w9NHg9Jve8p1LKgaPp5vhe1nzBmAJFUveC6vLl1aePKbGBc vBLX4MDYNWrsx3tYXzNnpDjmnQNnjYmGU4AJCpk/uZtdo5uvRiKPEh7RO4VVdIz4 +TgW/2rkWU9MzsywKDR/kZHO5wQsmwUP0AfrlDZlChO9yhidNTDTBfTf5CcC6v+Y QhoVeCmC61vzgSuQHp5fatrBfaOfZM9tnEwQfDTb5/4XDKwhwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCEqdKPHwTw3tNL4QyrW7Bu/P+3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFh NDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFkZmU5N2M2OWYvZjQzMzg2MWUtZWY3My0z YzVhLWEzYTUtZTdiYTU1Nzg2ODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDMxYTQ2M2MtYTBjZC00MTBhLThh YWItMGZhZGZlOTdjNjlmL2QzMWE0NjNjLWEwY2QtNDEwYS04YWFiLTBmYWRmZTk3 YzY5Zi5jcmwwHwYDVR0jBBgwFoAUE3aKKJem3bdRqlpY097adqzaZmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFhNDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFk ZmU5N2M2OWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBiVM8ZNfMp0I8uTAtzD6tVCFE71zamSmcpcYgBf41yVOU07l/Ol1mv joIe37brCsWBxznwArC+xf55c0I0fJP/+Xw27bwLEFrOCu05L+gTOkTkxWwVQIaB sRFPBlbr0bCZ+HOWRFObt1WwvTOAfxIb9yaxBFV5AOZ0S+QGC0OmMqEnRQLMueFG 4Gr4wE21m2Qm57CtgwSYC0XnJ4zO2TTmswN4BBlo8+/I7vIep6qbi92SXAtYdZOk Gw24eK/xUK+9gmDcVQG4pv5LXt39Vzw0DlQvNJy7BZw0kxdp8UfsM39QhnwkIVFl XNjSz3rA74lzz3r7ITqL4caPWdbt7JuZ -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:01 2025 by rpki-client