$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa File: f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa (raw, json) Hash identifier: xAJs49PBbmwSjdVC2vmtja2J6OzVKRTtaZbXBeOm6Go= Subject key identifier: E8:0D:55:77:85:D3:3C:09:AB:53:5C:9A:DB:E2:01:DE:88:FA:3B:4B Certificate issuer: /CN=a04b5188-7d31-4ad3-8474-090b809c8408 Certificate serial: 010D0C9F4328584A9A66333DF1D72F124F47EF40 Authority key identifier: B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 54235 IP address blocks: 2604:d980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:33:3d:f1:d7:2f:12:4f:47:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04b5188-7d31-4ad3-8474-090b809c8408 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=86df7b3a-998b-4ee8-9dd2-170bdc028485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:bd:d3:86:60:e0:65:b8:fc:ce:87:83:1f: 08:3a:d0:3b:d4:97:64:31:20:c2:f2:c2:f6:e4:98: ac:54:7d:27:85:3a:b1:bb:93:1e:43:7b:66:b3:b7: 33:a5:97:c4:f0:d7:0f:62:99:3d:bf:e4:d2:54:c6: 79:aa:b3:df:ba:13:f5:cb:11:30:26:46:cb:fd:9a: dc:a7:26:91:00:f0:fd:77:b5:49:c5:4c:0b:8b:aa: d5:dc:41:e6:2b:5a:34:64:09:54:3e:0b:f7:4e:9d: a1:f7:6d:c0:d6:ec:25:05:cc:c5:2d:14:60:02:3c: 33:f8:b2:ab:14:6e:5c:5e:c7:2e:72:a0:05:da:0a: 2f:2e:e5:8d:5c:b8:e7:7b:90:ca:21:fc:8d:28:e3: be:a1:53:e7:c4:4f:76:06:1a:0e:e7:9b:09:3f:f6: 49:ce:70:04:5b:4a:d2:01:3a:99:dc:c8:93:13:27: 27:9e:72:60:fd:4a:7d:a5:cd:f4:05:a4:10:c6:dc: a5:20:9c:49:f2:22:82:09:e9:3a:13:d3:48:4e:b7: 7f:0f:83:e6:2f:a7:16:ab:06:cc:f3:2d:6b:c7:c3: 9a:1a:86:50:82:13:1c:00:1a:f9:09:35:93:49:20: 4f:fb:64:cf:4f:ad:a0:0f:aa:7b:5e:6a:d7:61:cd: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0D:55:77:85:D3:3C:09:AB:53:5C:9A:DB:E2:01:DE:88:FA:3B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl X509v3 Authority Key Identifier: keyid:B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer sbgp-ipAddrBlock: critical IPv6: 2604:d980::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9a:89:44:e5:63:f3:19:95:ec:d1:c2:fe:c0:65:95:1c:91: be:b7:f2:1c:80:71:d6:d2:35:0a:5e:70:bd:8e:35:07:71:32: be:db:d2:d9:3c:d0:b6:03:20:dc:3a:27:33:a3:3b:65:93:b7: bf:21:ec:7a:37:9a:d1:e1:cb:46:d3:b8:96:56:14:ee:a5:99: 76:bf:86:18:83:4b:6b:e6:85:11:6f:5a:b8:26:9c:9d:eb:a9: 0f:d8:4b:70:e9:69:10:98:9b:78:9a:d7:b4:26:02:2d:07:3e: 7b:3e:0c:ca:23:d1:57:21:54:f6:21:9b:57:68:aa:b9:15:8e: f6:27:91:f8:76:d5:fc:a5:d6:0a:69:d9:f9:59:d8:fb:64:b1: db:5b:90:cd:f5:2c:2e:f2:9f:16:2d:1f:e5:a2:bd:fc:fd:a7: 57:bf:24:cd:82:a0:3b:d8:88:13:fa:6d:02:59:10:59:12:8d: 98:7f:b7:3f:34:08:4d:6f:6b:ec:4e:e1:77:b9:7a:35:f9:77: 37:2b:f7:d5:38:de:fa:cb:89:1a:58:dd:32:e2:de:f2:29:3a: 5f:21:01:82:ee:99:47:08:00:5d:d1:af:8a:81:5b:ec:9d:b7: 16:d9:5c:27:c6:d4:39:37:2c:3f:a7:96:68:b0:30:71:84:aa: df:93:50:d4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqaZjM98dcvEk9H70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA0YjUxODgtN2QzMS00YWQzLTg0NzQtMDkwYjgwOWM4 NDA4MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk ODZkZjdiM2EtOTk4Yi00ZWU4LTlkZDItMTcwYmRjMDI4NDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW+904Zg4GW4/M6Hgx8IOtA71JdkMSDC8sL2 5JisVH0nhTqxu5MeQ3tms7czpZfE8NcPYpk9v+TSVMZ5qrPfuhP1yxEwJkbL/Zrc pyaRAPD9d7VJxUwLi6rV3EHmK1o0ZAlUPgv3Tp2h923A1uwlBczFLRRgAjwz+LKr FG5cXscucqAF2govLuWNXLjne5DKIfyNKOO+oVPnxE92BhoO55sJP/ZJznAEW0rS ATqZ3MiTEycnnnJg/Up9pc30BaQQxtylIJxJ8iKCCek6E9NITrd/D4PmL6cWqwbM 8y1rx8OaGoZQghMcABr5CTWTSSBP+2TPT62gD6p7XmrXYc0B8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOgNVXeF0zwJq1NcmtviAd6I+jtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMDRi NTE4OC03ZDMxLTRhZDMtODQ3NC0wOTBiODA5Yzg0MDgvZjJkMzdiNmMtMDFkYi0z OGYyLWE3ZDYtYzJlMTNmN2MzY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTA0YjUxODgtN2QzMS00YWQzLTg0 NzQtMDkwYjgwOWM4NDA4L2EwNGI1MTg4LTdkMzEtNGFkMy04NDc0LTA5MGI4MDlj ODQwOC5jcmwwHwYDVR0jBBgwFoAUsBhgLgFx2lIbU9PBAiEKyUM8+LAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMDRiNTE4OC03ZDMxLTRhZDMtODQ3NC0wOTBi ODA5Yzg0MDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTZgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBImolE5WPzGZXs0cL+wGWVHJG+t/IcgHHW0jUKXnC9jjUHcTK+29LZ PNC2AyDcOiczoztlk7e/Iex6N5rR4ctG07iWVhTupZl2v4YYg0tr5oURb1q4Jpyd 66kP2Etw6WkQmJt4mte0JgItBz57PgzKI9FXIVT2IZtXaKq5FY72J5H4dtX8pdYK adn5Wdj7ZLHbW5DN9Swu8p8WLR/lor38/adXvyTNgqA72IgT+m0CWRBZEo2Yf7c/ NAhNb2vsTuF3uXo1+Xc3K/fVON76y4kaWN0y4t7yKTpfIQGC7plHCABd0a+KgVvs nbcW2VwnxtQ5Nyw/p5ZosDBxhKrfk1DU -----END CERTIFICATE-----Generated at Sun Aug 24 05:26:52 2025 by rpki-client