$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa File: 02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa (raw, json) Hash identifier: vdNhwbC2LWaq45D54iSvD/a5f/+HXYWI8GQijHLego8= Subject key identifier: 22:CF:5E:DE:0E:4E:54:C0:5C:01:28:F3:A4:F2:9C:05:7C:E9:DB:E1 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584AF0F1528D43A060D4F561F580 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 398014 IP address blocks: 2604:7ac0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:52:8d:43:a0:60:d4:f5:61:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=91bc4082-83d5-4cad-bbb4-9e491559edde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:4c:cf:db:d6:c1:f3:91:48:18:ea:c7:9c: 41:f4:ec:bc:ea:5c:5c:c3:7e:05:ce:fe:f3:e6:b8: 11:1d:2c:e3:3d:0d:bb:62:a3:38:c0:b4:6f:68:57: 16:7c:ac:c4:7f:c4:76:84:39:3e:bc:86:44:02:42: b9:b3:02:d5:1d:50:cc:54:eb:01:b0:08:12:07:c4: c6:09:92:fc:e2:e8:70:5d:6e:63:44:68:e3:23:4d: 18:78:62:36:cd:3f:94:b7:70:77:73:4f:ae:73:e4: 09:9b:b6:9b:21:21:2b:82:8e:0b:64:8a:d5:b4:eb: 35:71:d7:4e:b0:5c:69:9e:4f:13:be:8e:c7:04:d0: fb:11:d8:87:3e:2d:ed:ad:72:8a:bd:5b:ac:39:f5: 5f:dd:4e:26:d2:35:d8:54:27:8b:9e:b0:68:1c:98: 44:98:f7:c6:59:54:16:fe:7e:8e:53:61:04:9e:ff: 19:ed:23:d9:2b:8e:b9:da:ed:26:1f:74:f9:3b:51: 0c:70:fb:82:3e:c2:ac:2d:c0:b3:fa:8c:39:ec:5f: dd:a8:41:98:7c:f5:dc:8f:37:da:72:fa:a7:16:a3: e5:2a:db:b1:0c:76:90:0a:62:a1:03:b0:98:49:9d: f5:d6:a6:18:15:34:23:09:77:4b:53:cb:09:8a:76: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CF:5E:DE:0E:4E:54:C0:5C:01:28:F3:A4:F2:9C:05:7C:E9:DB:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv6: 2604:7ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:90:d1:88:f7:58:6a:d8:c8:de:77:d5:b0:2b:bb:e2:c2:53: 11:82:bd:98:4d:a8:2f:3e:50:21:32:c2:c8:76:ea:a6:3e:20: 24:95:4d:14:de:63:c4:dc:42:a4:23:b4:cb:27:ef:98:e5:79: d5:14:33:a5:8f:80:e8:4c:2d:fd:f8:79:72:75:36:62:f6:3f: 36:55:57:7a:d5:77:1b:20:6a:d6:0a:ee:be:ea:ea:b4:a9:93: a1:c2:08:39:3f:21:13:eb:3c:18:b0:3b:5b:89:c0:fb:b0:cc: 81:33:56:dd:cc:b6:2d:46:ba:56:99:17:f9:71:07:b0:16:3b: ad:46:bf:f3:27:e4:4c:7f:a7:68:f5:19:51:6c:9f:c6:a5:94: 8d:5c:ea:9b:a8:b7:90:26:fe:ca:cf:d1:f8:fe:c1:4f:3b:4f: 31:c9:50:10:a9:8d:7f:8b:11:ba:5f:37:a9:1d:b0:b7:40:04: e1:ba:a1:10:bc:bb:8e:ba:2c:3d:1e:03:df:14:89:db:12:f9: d2:bf:88:70:22:81:2f:a2:52:ea:ae:1d:1e:6a:0b:5f:97:b9: 83:c0:d0:a8:88:93:f1:43:f8:99:39:86:4d:bc:74:f7:b2:6d: 4d:fe:2e:e1:af:b7:fe:1a:09:84:bb:8f:4e:01:83:79:d0:4d: 04:8b:de:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErw8VKNQ6Bg1PVh9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OTFiYzQwODItODNkNS00Y2FkLWJiYjQtOWU0OTE1NTllZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt61Mz9vWwfORSBjqx5xB9Oy86lxcw34Fzv7z 5rgRHSzjPQ27YqM4wLRvaFcWfKzEf8R2hDk+vIZEAkK5swLVHVDMVOsBsAgSB8TG CZL84uhwXW5jRGjjI00YeGI2zT+Ut3B3c0+uc+QJm7abISErgo4LZIrVtOs1cddO sFxpnk8Tvo7HBND7EdiHPi3trXKKvVusOfVf3U4m0jXYVCeLnrBoHJhEmPfGWVQW /n6OU2EEnv8Z7SPZK4652u0mH3T5O1EMcPuCPsKsLcCz+ow57F/dqEGYfPXcjzfa cvqnFqPlKtuxDHaQCmKhA7CYSZ311qYYFTQjCXdLU8sJinblmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCLPXt4OTlTAXAEo86TynAV86dvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMDJhNTNlZGItMDVmZC0z MmZkLTljZDktYmNkOWMxZTg4Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgR6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkkNGI91hq2Mjed9WwK7viwlMRgr2YTagvPlAhMsLIduqmPiAklU0U 3mPE3EKkI7TLJ++Y5XnVFDOlj4DoTC39+HlydTZi9j82VVd61XcbIGrWCu6+6uq0 qZOhwgg5PyET6zwYsDtbicD7sMyBM1bdzLYtRrpWmRf5cQewFjutRr/zJ+RMf6do 9RlRbJ/GpZSNXOqbqLeQJv7Kz9H4/sFPO08xyVAQqY1/ixG6XzepHbC3QAThuqEQ vLuOuiw9HgPfFInbEvnSv4hwIoEvolLqrh0eagtfl7mDwNCoiJPxQ/iZOYZNvHT3 sm1N/i7hr7f+GgmEu49OAYN50E0Ei95y -----END CERTIFICATE-----Generated at Sun Oct 26 22:48:39 2025 by rpki-client