$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa File: 935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa (raw, json) Hash identifier: 9m4lrBSXj5wtkWLzc2r2R42NNrlw0q97gT5zHArq6lE= Subject key identifier: 60:C9:A2:34:B3:A7:A9:69:F9:A4:0A:15:9F:2B:C1:4F:63:66:DF:68 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584A6C55D234F4064CE504640CA0 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 33000 IP address blocks: 2605:fdc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d2:34:f4:06:4c:e5:04:64:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=cf641db9-f167-486c-87ba-c3e31f90f338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1e:82:d5:80:d4:99:11:6e:b7:07:ba:7b:f1: c8:92:43:33:b0:f9:89:8b:58:5f:f4:4b:8e:d2:58: 16:cf:9d:d6:14:59:7b:91:e7:48:6e:fd:b3:c6:36: 4d:1b:73:a2:4a:1b:1f:43:dc:fb:76:61:04:12:9f: 25:0c:25:38:02:96:43:ab:36:7d:7a:93:87:d0:ae: 34:72:db:5c:bd:b4:f7:10:c3:57:98:ce:f3:8a:88: 63:11:97:b7:64:b2:f8:3e:03:61:10:ee:4c:a8:cd: bc:be:4c:3b:54:96:ef:38:b0:cf:1b:41:65:64:49: 11:34:76:9e:e7:c5:41:37:5d:e5:c0:be:2c:00:d3: a3:b0:8a:35:83:3d:7e:b9:6c:ab:ce:5d:bb:d2:d7: 66:04:76:66:d1:3f:84:7b:f4:f5:5d:89:9d:2b:cc: 5f:e0:08:86:d2:56:cb:68:8f:83:ac:5e:c2:1e:02: bb:f8:be:70:5c:5d:77:36:c3:8e:a8:d7:17:2e:dc: 0a:3e:e6:cd:91:17:2f:70:06:06:23:4f:9f:f9:84: bc:85:72:a7:31:6a:2a:21:21:90:8e:8a:20:4e:e9: 3f:b9:1c:17:3f:43:6e:01:a7:db:e4:42:34:97:6a: 3b:5b:71:a7:ec:0f:01:1c:82:73:a5:99:55:d2:4c: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C9:A2:34:B3:A7:A9:69:F9:A4:0A:15:9F:2B:C1:4F:63:66:DF:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv6: 2605:fdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:34:1b:c8:1c:de:3c:10:49:32:32:47:94:4c:30:53:5e:83: a9:35:b9:ac:6d:27:9b:d5:50:35:d3:97:55:40:e8:c9:81:92: 07:3c:15:12:e6:69:d0:dc:03:3b:1e:dc:53:f8:4b:89:86:52: 57:96:20:90:2f:6f:52:45:2a:2a:68:85:75:dd:3f:65:d5:38: fd:71:a3:3d:aa:99:87:02:46:62:63:73:f7:f3:39:b8:0a:ce: ea:a1:6f:1b:3e:e7:24:0d:5f:51:6e:24:a5:2e:e2:63:c0:c4: 48:59:e9:a8:bb:cb:8e:94:76:ef:f7:98:2c:5f:8b:2f:e9:eb: f1:c4:c3:d6:50:be:49:04:b2:3e:37:7a:7a:34:84:43:eb:b2: fe:a9:d3:6a:ed:40:a2:b5:e8:48:99:71:cc:02:95:10:7d:e7: 17:e3:ff:f6:7b:48:ed:19:0b:eb:2a:87:4b:48:65:0d:c6:e3: 38:82:a2:fe:f1:55:15:d9:9c:ef:e6:9c:a5:d8:fc:f4:22:5a: 24:1b:d7:98:ae:de:51:ad:8a:7a:7a:d8:36:87:65:c2:19:f0: a7:ea:ec:01:fc:f1:5b:a9:c4:e3:4e:b0:8b:14:77:a4:fe:bb: 49:74:e4:02:e3:ef:fb:e2:00:ca:18:47:a7:86:5b:b6:83:96: 41:41:e8:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpsVdI09AZM5QRkDKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk Y2Y2NDFkYjktZjE2Ny00ODZjLTg3YmEtYzNlMzFmOTBmMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB6C1YDUmRFutwe6e/HIkkMzsPmJi1hf9EuO 0lgWz53WFFl7kedIbv2zxjZNG3OiShsfQ9z7dmEEEp8lDCU4ApZDqzZ9epOH0K40 cttcvbT3EMNXmM7ziohjEZe3ZLL4PgNhEO5MqM28vkw7VJbvOLDPG0FlZEkRNHae 58VBN13lwL4sANOjsIo1gz1+uWyrzl270tdmBHZm0T+Ee/T1XYmdK8xf4AiG0lbL aI+DrF7CHgK7+L5wXF13NsOOqNcXLtwKPubNkRcvcAYGI0+f+YS8hXKnMWoqISGQ joogTuk/uRwXP0NuAafb5EI0l2o7W3Gn7A8BHIJzpZlV0kw9MQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGDJojSzp6lp+aQKFZ8rwU9jZt9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvOTM1MzkzYTktY2FiOC0z MzRmLWFmZDMtMGVhZjNmZmNiNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX9wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8NBvIHN48EEkyMkeUTDBTXoOpNbmsbSeb1VA105dVQOjJgZIHPBUS 5mnQ3AM7HtxT+EuJhlJXliCQL29SRSoqaIV13T9l1Tj9caM9qpmHAkZiY3P38zm4 Cs7qoW8bPuckDV9RbiSlLuJjwMRIWemou8uOlHbv95gsX4sv6evxxMPWUL5JBLI+ N3p6NIRD67L+qdNq7UCitehImXHMApUQfecX4//2e0jtGQvrKodLSGUNxuM4gqL+ 8VUV2Zzv5pyl2Pz0IlokG9eYrt5RrYp6etg2h2XCGfCn6uwB/PFbqcTjTrCLFHek /rtJdOQC4+/74gDKGEenhlu2g5ZBQeix -----END CERTIFICATE-----Generated at Mon Jul 21 23:20:27 2025 by rpki-client