$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa File: f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa (raw, json) Hash identifier: d9iQthITtpTfEzgzlVGqfjB1nDHaTx31lEghFdNuV/w= Subject key identifier: 2B:C7:BC:90:BF:B9:6E:07:81:CC:51:9D:BE:1A:AC:29:95:B4:FA:D1 Certificate issuer: /CN=908b5814-2031-4b54-b9e1-bc5eaacf8745 Certificate serial: 010D0C9F4328584A94D0D43D73439B46DA096E20 Authority key identifier: C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 401167 IP address blocks: 2602:f8a1::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d4:3d:73:43:9b:46:da:09:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908b5814-2031-4b54-b9e1-bc5eaacf8745 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=3a540bb9-931c-48ff-a18d-667ee3593572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:aa:a5:af:79:7b:e6:35:4e:e1:e6:41:52: d3:0d:78:01:e2:e3:1f:92:89:80:1e:38:d9:95:d0: 09:2d:c8:f2:17:59:24:89:58:4d:56:de:38:62:32: ee:28:4b:e6:c6:ae:53:85:ad:2d:42:5b:93:40:87: cc:35:71:2a:b4:af:34:e1:a6:75:94:c5:c7:8d:af: 13:98:31:9f:41:53:60:ca:6a:6f:3a:0a:f1:89:d3: ca:da:d7:85:f6:76:29:f5:93:a1:8d:e3:df:86:dc: c9:76:e9:5f:cc:a1:b6:aa:48:3c:2f:ca:f1:d7:98: 7f:2b:63:3e:ec:b9:cb:07:cd:0a:67:12:23:a2:0d: fb:f0:5b:c8:c9:15:34:24:4b:99:9a:d4:21:2b:72: 32:2e:75:bc:36:f7:c2:c5:11:42:a2:74:02:58:2b: 02:42:28:d4:fe:61:e9:78:49:6a:8c:fa:df:1c:5a: ab:b4:5b:1e:94:8f:c8:39:d0:75:15:39:ca:af:c1: 86:9e:ca:4b:d5:ee:75:a3:cb:cc:82:61:2d:0c:7d: 61:ac:35:24:41:c2:2e:4d:97:e0:b0:18:f1:de:a3: 81:66:16:f2:40:b3:fd:2e:96:58:d2:ec:87:03:1e: bb:83:3e:49:ee:17:e6:73:ef:3b:ea:88:56:ca:92: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C7:BC:90:BF:B9:6E:07:81:CC:51:9D:BE:1A:AC:29:95:B4:FA:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl X509v3 Authority Key Identifier: keyid:C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8a1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:46:a1:e4:18:a6:e7:44:6b:40:68:7c:98:0c:02:c2:b4:2d: cf:19:78:ee:fc:5e:ee:c6:da:ed:42:f3:19:33:5b:64:aa:e9: 80:85:39:ff:ec:e3:0a:19:65:0b:ab:82:ed:79:36:0b:70:67: c0:3c:76:1e:2d:66:8b:4b:df:ef:1a:85:14:55:f3:9c:fb:3a: 23:ae:1e:82:33:66:11:eb:91:ee:4b:fc:49:e9:85:b3:cf:a5: d1:3e:fc:67:22:45:85:1d:73:57:83:dc:15:32:7d:1c:e1:4d: 70:5e:78:07:15:06:07:d9:53:b2:bb:f7:3d:5e:70:f3:bd:f7: df:98:9b:e9:15:e9:3e:64:92:ab:2e:94:0b:6b:0c:23:bc:df: 33:44:6c:f1:84:e2:8e:2b:6a:e5:fa:5a:d9:cd:69:0d:3b:1e: 9b:dd:13:fd:5a:65:d7:d1:64:09:8a:8f:88:6c:89:76:45:a8: 7f:30:e7:8f:fa:5a:02:5a:f7:4c:b2:14:5c:7a:a2:f9:42:69: 8e:90:8e:62:f6:f3:fb:52:8e:d6:d3:cb:c2:99:20:e3:84:39: c6:19:3d:e6:51:e5:66:4e:23:7d:c3:f6:8b:df:55:f3:b6:c2: e2:44:dc:9b:c0:db:b5:5f:ef:46:29:76:4c:62:20:2d:ab:a3: d0:a0:7e:cd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqU0NQ9c0ObRtoJbiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4YjU4MTQtMjAzMS00YjU0LWI5ZTEtYmM1ZWFhY2Y4 NzQ1MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk M2E1NDBiYjktOTMxYy00OGZmLWExOGQtNjY3ZWUzNTkzNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIqqpa95e+Y1TuHmQVLTDXgB4uMfkomAHjjZ ldAJLcjyF1kkiVhNVt44YjLuKEvmxq5Tha0tQluTQIfMNXEqtK804aZ1lMXHja8T mDGfQVNgympvOgrxidPK2teF9nYp9ZOhjePfhtzJdulfzKG2qkg8L8rx15h/K2M+ 7LnLB80KZxIjog378FvIyRU0JEuZmtQhK3IyLnW8NvfCxRFConQCWCsCQijU/mHp eElqjPrfHFqrtFselI/IOdB1FTnKr8GGnspL1e51o8vMgmEtDH1hrDUkQcIuTZfg sBjx3qOBZhbyQLP9LpZY0uyHAx67gz5J7hfmc+876ohWypJPtwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCvHvJC/uW4HgcxRnb4arCmVtPrRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDhi NTgxNC0yMDMxLTRiNTQtYjllMS1iYzVlYWFjZjg3NDUvZjEzN2IyYjctZTRhNi0z Y2IxLWI3OWItYzZjYzNjN2I0MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4YjU4MTQtMjAzMS00YjU0LWI5 ZTEtYmM1ZWFhY2Y4NzQ1LzkwOGI1ODE0LTIwMzEtNGI1NC1iOWUxLWJjNWVhYWNm ODc0NS5jcmwwHwYDVR0jBBgwFoAUxy0jB/tZ7sD5Nm2VELDdECfr/HwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDhiNTgxNC0yMDMxLTRiNTQtYjllMS1iYzVl YWFjZjg3NDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4oQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAakah5Bim50RrQGh8mAwCwrQtzxl47vxe7sba7ULzGTNbZKrpgIU5 /+zjChllC6uC7Xk2C3BnwDx2Hi1mi0vf7xqFFFXznPs6I64egjNmEeuR7kv8SemF s8+l0T78ZyJFhR1zV4PcFTJ9HOFNcF54BxUGB9lTsrv3PV5w873335ib6RXpPmSS qy6UC2sMI7zfM0Rs8YTijitq5fpa2c1pDTsem90T/Vpl19FkCYqPiGyJdkWofzDn j/paAlr3TLIUXHqi+UJpjpCOYvbz+1KO1tPLwpkg44Q5xhk95lHlZk4jfcP2i99V 87bC4kTcm8DbtV/vRil2TGIgLauj0KB+zQ== -----END CERTIFICATE-----Generated at Sat Aug 2 05:25:08 2025 by rpki-client