$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa File: aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa (raw, json) Hash identifier: m0t9suvVIRk4uaHqNu3lW5UPsODv8vH4rL7eI7AMngA= Subject key identifier: 7D:87:C3:7C:B1:79:6D:3C:BA:75:EE:46:C0:84:0C:A6:25:F8:47:4D Certificate issuer: /CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Certificate serial: 010D0C9F4328584ADA9BB586E22A6E1D16D85300 Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2620:85:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b5:86:e2:2a:6e:1d:16:d8:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=8986b5d1-5deb-4655-8efa-9e8e93f30e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:aa:24:90:bf:cf:9f:82:fe:26:dc:22:3e: 14:00:78:47:8f:3a:3c:74:b1:b2:f7:76:2a:69:c0: 6e:08:d9:31:44:84:c2:62:31:ee:8d:b7:0d:9c:8c: 69:7b:a0:38:f6:ba:7a:d5:7c:f8:4f:79:96:5e:49: a6:1e:a8:57:1d:97:09:f3:76:0a:ad:dc:d8:52:65: f8:17:e2:a3:af:c2:64:1f:15:70:f8:d8:6c:ec:65: 1a:93:96:41:58:77:35:c0:3a:99:ee:f1:45:fc:a6: 5a:17:4c:96:b1:d5:56:aa:a3:68:e6:99:8c:af:d3: 4c:f6:fb:df:70:43:ac:56:55:eb:f1:4a:e9:ab:15: 65:4b:e4:d2:a1:1b:da:f8:0b:8a:bc:2f:45:f6:ca: b8:27:08:a3:f1:b9:c7:4e:2e:c9:9e:10:3b:12:0a: 4e:7b:fa:12:3e:89:5c:30:9e:05:63:61:49:17:69: 3e:51:18:b6:25:3b:2a:96:a9:7f:d8:3a:39:e2:99: 05:d6:6e:24:f4:36:ed:c7:fb:95:e5:d8:0f:2f:8a: 8b:9a:ea:e5:3d:94:be:d3:42:5b:05:71:89:39:15: 4a:36:3b:26:4e:6c:44:e4:79:72:4f:8a:97:80:38: 59:22:38:72:1a:d7:5b:36:1c:7a:55:ba:eb:78:1a: 17:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:87:C3:7C:B1:79:6D:3C:BA:75:EE:46:C0:84:0C:A6:25:F8:47:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl X509v3 Authority Key Identifier: keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer sbgp-ipAddrBlock: critical IPv6: 2620:85:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:08:ff:f7:2e:00:e5:74:28:28:28:87:0a:a7:de:19:aa:57: 94:4f:7a:95:e7:48:45:58:b9:09:5e:40:a2:a2:a9:35:48:66: f0:bc:6d:84:3d:25:9d:aa:2e:68:78:1c:b6:d1:22:31:ac:a1: b5:a6:36:8d:df:50:e8:51:91:2a:69:ea:c7:44:41:c7:62:fa: 8d:53:32:37:6b:3e:34:8b:de:56:a0:66:b1:6e:de:83:11:f4: 43:81:6b:f7:10:7f:76:79:b7:f8:53:40:51:f6:0b:8b:67:fe: 46:ff:ea:5b:51:6f:0d:a1:d7:d4:84:99:18:3c:d9:de:5c:eb: 79:d7:27:3e:b5:07:ea:23:07:18:9f:01:6c:29:b3:ff:2b:0b: 14:86:8c:03:c8:c0:b4:34:81:aa:5e:d9:83:52:d0:a2:27:68: ad:00:72:cd:dd:8f:59:f6:a2:96:f6:0e:73:80:d8:b3:38:96: 4c:c2:82:a4:68:ed:5f:dc:8d:63:5b:37:60:ba:c0:07:fa:fd: 7c:62:43:5c:48:a5:e4:4e:42:98:c6:0e:99:f4:28:6a:1e:7c: 72:bf:1a:9a:47:58:4c:79:32:68:92:3a:61:ca:ad:18:7f:7f: 3a:a5:f7:63:54:20:02:54:0c:78:61:98:d3:fb:97:29:ce:36: ae:5a:f3:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEram7WG4ipuHRbYUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYy NmIxMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ODk4NmI1ZDEtNWRlYi00NjU1LThlZmEtOWU4ZTkzZjMwZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQKqJJC/z5+C/ibcIj4UAHhHjzo8dLGy93Yq acBuCNkxRITCYjHujbcNnIxpe6A49rp61Xz4T3mWXkmmHqhXHZcJ83YKrdzYUmX4 F+Kjr8JkHxVw+Nhs7GUak5ZBWHc1wDqZ7vFF/KZaF0yWsdVWqqNo5pmMr9NM9vvf cEOsVlXr8UrpqxVlS+TSoRva+AuKvC9F9sq4Jwij8bnHTi7JnhA7EgpOe/oSPolc MJ4FY2FJF2k+URi2JTsqlql/2Do54pkF1m4k9Dbtx/uV5dgPL4qLmurlPZS+00Jb BXGJORVKNjsmTmxE5HlyT4qXgDhZIjhyGtdbNhx6VbrreBoXpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH2Hw3yxeW08unXuRsCEDKYl+EdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEy MWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvYWE3Y2E1ZmMtMmNhOC0z YjFmLTg5YmUtOTIzYzVhNzIyMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2VhMjFhN2ItNTk2Yy00NWY4LTg5 OWUtNjg3OTgxNWYyNmIxLzdlYTIxYTdiLTU5NmMtNDVmOC04OTllLTY4Nzk4MTVm MjZiMS5jcmwwHwYDVR0jBBgwFoAUWNXVMusQAMS/ihkzzuqjhi139KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5 ODE1ZjI2YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwI//cuAOV0KCgohwqn3hmqV5RPepXnSEVYuQleQKKiqTVIZvC8 bYQ9JZ2qLmh4HLbRIjGsobWmNo3fUOhRkSpp6sdEQcdi+o1TMjdrPjSL3lagZrFu 3oMR9EOBa/cQf3Z5t/hTQFH2C4tn/kb/6ltRbw2h19SEmRg82d5c63nXJz61B+oj BxifAWwps/8rCxSGjAPIwLQ0gape2YNS0KInaK0Acs3dj1n2opb2DnOA2LM4lkzC gqRo7V/cjWNbN2C6wAf6/XxiQ1xIpeROQpjGDpn0KGoefHK/GppHWEx5MmiSOmHK rRh/fzql92NUIAJUDHhhmNP7lynONq5a864= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:02 2025 by rpki-client