$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa File: df87bb72-dc52-3639-a0af-dcba3509be30.roa (raw, json) Hash identifier: 7Pi+nti2bYDRF1VgAHtm8NE0xdIKMHHBzlvVOivsS58= Subject key identifier: AB:AF:D1:72:A6:EA:DE:7A:37:C2:98:BF:86:9B:56:9A:B3:FB:23:D7 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584AF0F1349719400ECC97022C00 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36236 IP address blocks: 2620:49:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:34:97:19:40:0e:cc:97:02:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=2c0c3e7e-9072-4dd3-a9b1-fe61636c90bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:97:72:70:c3:3c:3f:23:7e:62:f8:7c:0e: 72:ab:74:49:35:22:ff:86:73:c7:05:0e:79:aa:d9: 19:40:4c:0b:26:b9:5e:a6:ad:fc:52:ea:17:a2:97: 7e:d1:30:46:bf:f9:58:f6:2b:65:a6:b9:d0:07:52: a5:63:3f:ab:87:2c:b3:c4:a1:c8:29:a5:47:4f:54: 56:c2:c9:3c:dc:72:b0:7b:e2:8b:d1:e9:cc:78:87: c5:ea:dc:dc:e2:45:03:49:28:a5:95:83:d2:6d:12: 73:ec:07:38:6b:6c:4a:48:2b:06:45:31:83:ba:28: 3f:06:b0:48:ea:2b:23:c7:7d:f4:ce:7a:6f:82:1a: 0b:c6:b4:c1:c2:1f:33:4a:90:79:6a:9f:71:10:80: d7:c5:3d:5c:c5:55:68:4a:80:a4:1d:81:31:bd:e9: b8:00:5c:83:81:55:b4:ef:5b:17:2a:26:a3:82:01: d1:07:3b:36:39:5d:f7:08:d6:3c:11:6d:47:8e:ce: 7e:96:83:ae:80:c8:aa:d1:ae:b9:f8:af:c3:47:f9: 91:dd:0f:33:f5:0a:c8:a4:33:cd:9e:1a:a6:e2:7c: bc:ba:7c:b0:b8:fd:17:d5:9c:8d:4a:6b:aa:9c:64: 13:a6:08:00:ea:1b:07:6e:3e:df:e6:57:d9:a2:9c: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AF:D1:72:A6:EA:DE:7A:37:C2:98:BF:86:9B:56:9A:B3:FB:23:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv6: 2620:49:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:cc:b5:3c:de:00:0e:4b:1c:9c:50:98:65:c0:7f:ab:55:13: af:a8:46:a6:f9:54:fd:06:43:ad:8f:7e:3f:b9:67:6f:ec:b2: c2:81:ea:52:00:f6:a5:d5:46:1a:d4:99:8b:db:14:a0:56:7c: 87:04:ab:3b:f0:bb:d7:ea:ef:a8:e9:92:61:b4:ba:da:32:64: 53:1c:84:47:38:23:8b:b5:01:4d:ac:0c:3f:74:50:81:55:ca: b0:c2:be:05:89:af:e7:97:79:e7:78:96:59:3c:1c:48:73:20: 0e:c2:f2:87:24:ee:80:86:aa:f2:44:99:dc:a5:e3:19:fd:c5: 1c:7c:bd:0a:3b:66:43:c9:b5:34:6f:34:42:f7:99:ad:d8:70: 8f:37:a5:57:ea:32:ac:de:73:1f:35:f3:ce:90:5c:99:4a:90: 0f:14:da:66:47:d5:a8:37:bd:29:62:1c:05:79:fe:5c:5f:6a: 25:56:2a:fd:c5:a1:22:db:ba:cc:62:42:ef:60:e2:f0:e1:56: b5:88:1f:51:34:81:11:44:ca:d1:40:20:db:b0:57:d1:15:49: ff:d6:82:48:08:e4:0e:87:ac:6e:6b:78:8b:14:29:01:54:d7: e2:d4:59:42:d1:9b:82:c4:b3:55:7c:c0:6c:28:7e:39:d9:28: f3:92:dc:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8TSXGUAOzJcCLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MmMwYzNlN2UtOTA3Mi00ZGQzLWE5YjEtZmU2MTYzNmM5MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbCXcnDDPD8jfmL4fA5yq3RJNSL/hnPHBQ55 qtkZQEwLJrlepq38UuoXopd+0TBGv/lY9itlprnQB1KlYz+rhyyzxKHIKaVHT1RW wsk83HKwe+KL0enMeIfF6tzc4kUDSSillYPSbRJz7Ac4a2xKSCsGRTGDuig/BrBI 6isjx330znpvghoLxrTBwh8zSpB5ap9xEIDXxT1cxVVoSoCkHYExvem4AFyDgVW0 71sXKiajggHRBzs2OV33CNY8EW1Hjs5+loOugMiq0a65+K/DR/mR3Q8z9QrIpDPN nhqm4ny8unywuP0X1ZyNSmuqnGQTpggA6hsHbj7f5lfZopyuLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKuv0XKm6t56N8KYv4abVpqz+yPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvZGY4N2JiNzItZGM1Mi0z NjM5LWEwYWYtZGNiYTM1MDliZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjMtTzeAA5LHJxQmGXAf6tVE6+oRqb5VP0GQ62Pfj+5Z2/sssKB 6lIA9qXVRhrUmYvbFKBWfIcEqzvwu9fq76jpkmG0utoyZFMchEc4I4u1AU2sDD90 UIFVyrDCvgWJr+eXeed4llk8HEhzIA7C8ock7oCGqvJEmdyl4xn9xRx8vQo7ZkPJ tTRvNEL3ma3YcI83pVfqMqzecx81886QXJlKkA8U2mZH1ag3vSliHAV5/lxfaiVW Kv3FoSLbusxiQu9g4vDhVrWIH1E0gRFEytFAINuwV9EVSf/WgkgI5A6HrG5reIsU KQFU1+LUWULRm4LEs1V8wGwofjnZKPOS3N0= -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:15 2025 by rpki-client