$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa File: da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa (raw, json) Hash identifier: FafHdnJ1YXWEkUZ4jLPAhj5FfR+odQT7Ske2SlIFsco= Subject key identifier: 38:ED:F5:84:99:0C:C7:4A:FF:F2:C0:2C:9A:C1:D2:D2:3B:5F:19:5D Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F4328584AF0F13383B0ABA12A89961780 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 14263 IP address blocks: 2607:f578::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:33:83:b0:ab:a1:2a:89:96:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=1665de97-e91d-404a-b0b2-54cc0f0b1e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:20:ac:2a:c1:bb:a6:91:b9:5f:9b:ef:48: d0:6d:37:9e:5a:b6:a2:be:b2:c3:6d:93:5b:d4:85: 1c:7e:6e:5e:61:f4:be:66:a2:c1:f2:0d:64:d5:03: c3:42:98:d0:42:09:4a:fc:ae:db:bd:45:ff:02:09: ec:21:07:f9:ea:dc:33:ca:fe:23:ca:20:d1:01:f9: ba:5c:cb:94:5e:c4:a0:09:61:3f:77:6b:1b:3e:ae: 35:78:22:b9:31:9e:62:f6:85:61:b0:ab:50:28:60: bb:b9:5e:ba:63:79:a1:dd:04:ad:3f:7e:44:66:35: 15:97:18:ae:8f:dc:61:1e:df:8b:96:d4:15:0b:bc: fa:fe:4a:0b:42:9e:4b:bd:e4:eb:8b:42:62:17:42: ef:97:fb:56:7b:97:c5:80:51:57:c2:05:b8:86:4a: 47:fa:2f:b9:40:34:03:06:a6:25:7f:10:50:c3:fc: 8d:a9:3e:72:00:87:1b:a5:ab:4e:9c:2e:c9:74:61: d8:d4:4f:04:97:19:89:d1:73:99:8f:25:15:89:dc: d8:91:69:47:b1:79:ba:aa:2f:17:6b:c2:40:68:3a: 1b:66:8f:4f:fa:1e:93:3e:bf:90:9b:8a:9a:00:f7: 4c:89:de:27:95:6f:99:37:56:96:c4:fb:95:2c:e5: 23:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:ED:F5:84:99:0C:C7:4A:FF:F2:C0:2C:9A:C1:D2:D2:3B:5F:19:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv6: 2607:f578::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:23:74:79:43:90:d9:99:43:92:49:2a:27:99:42:9e:b1:56: 51:18:38:d5:6f:2c:d8:ca:8f:df:52:b0:53:df:27:c9:88:fd: 43:af:d3:47:e6:fe:cd:2a:7c:d6:ca:ce:8d:15:9d:dc:a4:c0: 7f:f1:48:f1:6a:8a:f3:d0:33:08:e3:76:1b:23:47:8b:1a:55: 95:e6:e4:69:fa:53:b4:6f:86:a4:4e:af:e7:f0:ca:6f:d3:3c: 3b:8b:cc:21:5b:01:8c:4c:c7:a6:ba:36:61:5b:cc:13:eb:c7: 59:d3:e6:00:f4:de:a8:b1:1d:ba:50:1a:fe:c0:3e:ea:90:f5: 77:14:a7:54:f6:99:38:f0:d7:7f:a6:c9:7a:29:b0:16:15:a2: 56:98:2b:a8:29:f5:38:d2:a0:a2:30:81:22:bc:79:3a:19:6f: fa:ad:22:31:08:a8:a6:ed:33:65:e6:0f:61:83:10:61:8e:ca: 6f:11:4d:ca:5f:e7:7e:ed:0e:7f:4c:27:59:b9:f2:48:5e:7c: ee:25:3f:19:79:fa:83:b0:26:16:7e:a7:38:c3:bb:ad:44:6a: e6:69:02:68:a3:df:f0:bf:41:5a:a2:53:19:0c:e4:3a:23:84: d4:e4:48:f6:95:94:5a:b7:be:a7:b8:c8:84:c8:74:a7:23:ee: d1:34:3f:2d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErw8TODsKuhKomWF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MTY2NWRlOTctZTkxZC00MDRhLWIwYjItNTRjYzBmMGIxZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyMgrCrBu6aRuV+b70jQbTeeWraivrLDbZNb 1IUcfm5eYfS+ZqLB8g1k1QPDQpjQQglK/K7bvUX/AgnsIQf56twzyv4jyiDRAfm6 XMuUXsSgCWE/d2sbPq41eCK5MZ5i9oVhsKtQKGC7uV66Y3mh3QStP35EZjUVlxiu j9xhHt+LltQVC7z6/koLQp5LveTri0JiF0Lvl/tWe5fFgFFXwgW4hkpH+i+5QDQD BqYlfxBQw/yNqT5yAIcbpatOnC7JdGHY1E8ElxmJ0XOZjyUVidzYkWlHsXm6qi8X a8JAaDobZo9P+h6TPr+Qm4qaAPdMid4nlW+ZN1aWxPuVLOUjYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDjt9YSZDMdK//LALJrB0tI7XxldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvZGEyZTk1NDAtZjEwNi0z ZmVmLWE1MTgtM2EyYWE5YjFmZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1eDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGI3R5Q5DZmUOSSSonmUKesVZRGDjVbyzYyo/fUrBT3yfJiP1Dr9NH 5v7NKnzWys6NFZ3cpMB/8Ujxaorz0DMI43YbI0eLGlWV5uRp+lO0b4akTq/n8Mpv 0zw7i8whWwGMTMemujZhW8wT68dZ0+YA9N6osR26UBr+wD7qkPV3FKdU9pk48Nd/ psl6KbAWFaJWmCuoKfU40qCiMIEivHk6GW/6rSIxCKim7TNl5g9hgxBhjspvEU3K X+d+7Q5/TCdZufJIXnzuJT8ZefqDsCYWfqc4w7utRGrmaQJoo9/wv0FaolMZDOQ6 I4TU5Ej2lZRat76nuMiEyHSnI+7RND8t -----END CERTIFICATE-----Generated at Sun Aug 24 04:08:51 2025 by rpki-client