$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e90b9eb1-f57d-3856-a9d3-fe485da65673.roa File: e90b9eb1-f57d-3856-a9d3-fe485da65673.roa (raw, json) Hash identifier: qErQfPEbZfYYyX5x4hacYXSc5hEK4MTTSHh39AZMAgI= Subject key identifier: 13:CF:A3:BE:CA:B4:6B:D1:65:AE:32:ED:21:47:53:89:22:0C:01:4E Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B1814334D1F8D30A68E001480 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e90b9eb1-f57d-3856-a9d3-fe485da65673.roa Signing time: Fri 05 Sep 2025 13:27:48 +0000 ROA not before: Fri 05 Sep 2025 13:27:48 +0000 ROA not after: Thu 04 Dec 2025 14:27:48 +0000 asID: 22516 IP address blocks: 2605:a408:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:14:33:4d:1f:8d:30:a6:8e:00:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Sep 5 13:27:48 2025 GMT Not After : Dec 4 14:27:48 2025 GMT Subject: CN=d6f04e9f-f4b5-4528-a645-3a837944c61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:de:3c:21:88:21:23:46:25:81:b9:ed:d3: f2:5e:42:f5:85:6e:58:50:0a:cd:57:13:74:f4:15: 5e:21:60:a0:54:fb:86:7e:37:4f:cc:65:ce:48:09: a7:35:a8:3c:df:8d:57:ac:5b:b0:1f:76:a2:7f:37: 74:b0:31:ff:69:b9:ab:06:89:30:e4:be:b8:ee:91: 3c:e7:37:a5:93:d2:b6:ca:c4:59:59:cd:7c:56:af: f6:07:3d:e3:01:1e:25:1a:f5:76:35:a5:9c:29:c8: be:af:fb:df:03:5c:c5:f7:f9:05:06:56:d0:76:7a: a7:0c:4f:30:37:39:9a:4c:e0:c8:93:d0:b7:a5:4c: f3:85:16:27:7d:85:94:2d:46:99:98:b9:28:6c:04: bf:e0:06:40:18:52:94:ef:c8:8f:6b:6f:f8:75:ff: fa:2f:e2:c2:d1:87:d2:7f:80:35:f6:b5:7e:13:f4: bd:2c:89:50:5a:31:51:8b:32:be:74:b5:e8:1c:3e: 7e:5b:9f:e0:ee:77:dc:a9:3a:75:c1:36:2f:a3:79: f8:af:7a:43:d8:17:3a:00:88:9b:ab:53:5d:07:c4: 0f:73:9a:08:6f:ac:85:d6:12:f2:cc:8f:bc:18:c1: f8:24:dc:39:f9:20:67:b7:e9:80:43:31:f1:dc:f8: 36:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CF:A3:BE:CA:B4:6B:D1:65:AE:32:ED:21:47:53:89:22:0C:01:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e90b9eb1-f57d-3856-a9d3-fe485da65673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a408:a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d9:28:d3:be:59:f5:c7:7f:8e:a1:08:f6:cd:1a:91:25:34: d9:4a:2b:a8:1c:68:9a:83:c6:e4:09:22:2f:e0:89:90:4a:45: 9b:52:58:87:e6:39:82:cb:fe:07:13:07:2a:fe:d8:d8:24:71: 5c:0a:9f:a2:2b:63:b3:c2:62:8f:c1:c9:1c:06:6c:0f:3d:7f: 45:dc:d7:a7:b8:5c:f1:9f:b8:ce:5d:33:27:86:49:ca:ed:76: fc:ed:47:c1:9d:3a:d3:b8:eb:3a:69:f1:93:24:46:29:e3:79: 5f:44:b4:6d:98:37:a9:63:c7:cc:04:cc:c3:40:67:f0:40:9b: 64:12:95:e4:09:36:97:0b:0a:2b:f1:8f:24:ac:bf:32:02:a2: 81:2f:e2:df:cd:4a:49:61:6d:42:7c:da:4f:79:13:04:49:9e: e9:27:a2:fa:b7:f5:73:b0:e9:2d:1e:fb:17:25:1c:15:65:df: 86:c7:63:ad:ed:c5:f4:93:d4:50:63:a7:e3:42:63:da:91:e7: 3e:3d:f9:e2:22:08:96:16:69:fd:86:c2:8f:b8:8c:02:e6:6d: 86:e0:d9:b8:4b:81:88:1a:e7:50:7f:44:f0:dd:3c:a9:21:e9: 56:9d:3f:1c:7a:99:22:6f:40:c0:66:a2:65:e2:a9:e6:98:23: 46:ae:4e:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYFDNNH40wpo4AFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDkwNTEzMjc0OFoXDTI1MTIwNDE0Mjc0OFowLzEtMCsGA1UEAxMk ZDZmMDRlOWYtZjRiNS00NTI4LWE2NDUtM2E4Mzc5NDRjNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08LePCGIISNGJYG57dPyXkL1hW5YUArNVxN0 9BVeIWCgVPuGfjdPzGXOSAmnNag8341XrFuwH3aifzd0sDH/abmrBokw5L647pE8 5zelk9K2ysRZWc18Vq/2Bz3jAR4lGvV2NaWcKci+r/vfA1zF9/kFBlbQdnqnDE8w NzmaTODIk9C3pUzzhRYnfYWULUaZmLkobAS/4AZAGFKU78iPa2/4df/6L+LC0YfS f4A19rV+E/S9LIlQWjFRizK+dLXoHD5+W5/g7nfcqTp1wTYvo3n4r3pD2Bc6AIib q1NdB8QPc5oIb6yF1hLyzI+8GMH4JNw5+SBnt+mAQzHx3Pg2dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPPo77KtGvRZa4y7SFHU4kiDAFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTkwYjllYjEtZjU3ZC0z ODU2LWE5ZDMtZmU0ODVkYTY1NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkCACi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABfZKNO+WfXHf46hCPbNGpElNNlKK6gcaJqDxuQJIi/giZBKRZtS WIfmOYLL/gcTByr+2NgkcVwKn6IrY7PCYo/ByRwGbA89f0Xc16e4XPGfuM5dMyeG ScrtdvztR8GdOtO46zpp8ZMkRinjeV9EtG2YN6ljx8wEzMNAZ/BAm2QSleQJNpcL CivxjySsvzICooEv4t/NSklhbUJ82k95EwRJnuknovq39XOw6S0e+xclHBVl34bH Y63txfST1FBjp+NCY9qR5z49+eIiCJYWaf2Gwo+4jALmbYbg2bhLgYga51B/RPDd PKkh6VadPxx6mSJvQMBmomXiqeaYI0auTsg= -----END CERTIFICATE-----Generated at Sat Sep 6 02:12:24 2025 by rpki-client