$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa File: df71ebf9-f641-3f00-b880-4b494a56937e.roa (raw, json) Hash identifier: kxgb7v/Ivx+C7f4HO8okj4B5yOwgKwRoT0plxSnohGc= Subject key identifier: 21:D2:F6:7B:EA:26:3E:CB:F3:53:EC:84:FE:33:96:0F:F6:E4:AA:5B Certificate issuer: /CN=84071564-b087-4d9c-88d0-6fa5a30617a3 Certificate serial: 010D0C9F4328584B0E414921723435188802CB80 Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 16717 IP address blocks: 2607:d580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:49:21:72:34:35:18:88:02:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=a1deccb2-33fb-4749-a705-83239ec512d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:c8:1a:37:cc:7f:97:a7:23:36:ce:71:96: 7f:84:2e:0c:45:65:73:1c:37:7c:fd:89:03:88:cd: 3a:69:8e:15:04:27:12:4e:1f:20:e7:74:9d:99:c3: 52:7d:09:3f:28:0e:78:35:10:12:e7:66:f0:c3:28: 6f:c7:86:00:e7:73:16:42:b4:ca:d1:e0:da:51:8e: 22:ec:13:f3:87:93:76:fe:7d:52:0f:ef:8f:56:98: a6:a7:2e:b8:8a:04:c0:cd:40:d3:9f:30:ae:23:0e: 9b:f4:aa:af:23:ea:65:48:3d:5a:20:c8:4a:e1:1c: 2a:7e:d1:2c:7a:d6:7c:cf:10:fa:e3:b4:5f:74:d5: 12:97:f8:ac:14:3f:29:ed:e5:a0:ce:5d:7e:73:9d: aa:fe:f6:ef:59:9a:f8:62:35:81:7c:0d:c2:76:47: 32:5d:4b:35:b8:a3:04:ee:7f:34:9f:2a:31:c5:40: 76:65:d4:b7:7d:e6:44:8a:8c:87:42:d9:02:61:95: b6:1d:9d:91:39:c9:a5:9e:6c:ff:91:b4:04:41:a5: a6:ed:65:fe:b9:14:47:8c:19:36:21:37:a2:76:95: 9c:6c:61:11:7e:ca:23:3b:0a:56:5f:43:5a:03:79: d1:c6:80:34:6d:31:ac:06:5d:bf:8d:21:68:2e:3c: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D2:F6:7B:EA:26:3E:CB:F3:53:EC:84:FE:33:96:0F:F6:E4:AA:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl X509v3 Authority Key Identifier: keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:d580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c2:04:41:2b:4b:8b:ed:8a:10:a2:63:58:e3:94:1c:d1:fc: 02:1b:74:3e:b7:6c:a9:d0:ff:fb:80:1f:f7:a6:d3:c1:8b:f4: 19:64:29:16:c0:fd:f6:07:61:ed:d8:2b:11:a9:09:c8:5d:9c: b1:c3:15:42:be:89:0c:b0:52:5b:32:e4:6f:38:6e:57:de:e4: 26:92:7a:b0:ed:d9:18:24:e5:d6:b7:5b:aa:66:4d:9e:a6:de: 71:35:7e:73:65:ac:dd:74:e5:db:81:e5:b6:84:f3:2f:81:12: fa:c2:80:eb:b7:24:bb:ad:08:79:84:04:18:2d:d9:28:33:a2: a6:65:a2:61:4f:ff:1b:67:ff:38:a7:2e:c7:a7:30:59:47:60: 7a:d6:e7:f2:a3:bb:3b:f7:c0:9d:ab:c5:88:51:b8:2a:dc:ee: d7:5f:86:ab:78:9c:1b:eb:de:23:4d:1b:90:b9:6f:be:95:f2: 26:e5:c3:fa:3b:ec:73:19:d9:e9:66:2d:37:95:c7:da:6a:40: 7b:80:80:85:ae:8b:f8:23:0f:68:24:ee:e6:81:f4:04:37:03: b2:f0:0c:b5:e2:09:d6:cd:d7:69:59:1e:93:a7:12:2a:33:d6: 54:a0:f1:0f:50:e1:8d:38:5e:9d:2a:3e:09:2f:06:c0:e4:a6: 28:a2:e3:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsOQUkhcjQ1GIgCy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQwNzE1NjQtYjA4Ny00ZDljLTg4ZDAtNmZhNWEzMDYx N2EzMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTFkZWNjYjItMzNmYi00NzQ5LWE3MDUtODMyMzllYzUxMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2DIGjfMf5enIzbOcZZ/hC4MRWVzHDd8/YkD iM06aY4VBCcSTh8g53SdmcNSfQk/KA54NRAS52bwwyhvx4YA53MWQrTK0eDaUY4i 7BPzh5N2/n1SD++PVpimpy64igTAzUDTnzCuIw6b9KqvI+plSD1aIMhK4RwqftEs etZ8zxD647RfdNUSl/isFD8p7eWgzl1+c52q/vbvWZr4YjWBfA3CdkcyXUs1uKME 7n80nyoxxUB2ZdS3feZEioyHQtkCYZW2HZ2ROcmlnmz/kbQEQaWm7WX+uRRHjBk2 ITeidpWcbGERfsojOwpWX0NaA3nRxoA0bTGsBl2/jSFoLjy8xQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCHS9nvqJj7L81PshP4zlg/25KpbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA3 MTU2NC1iMDg3LTRkOWMtODhkMC02ZmE1YTMwNjE3YTMvZGY3MWViZjktZjY0MS0z ZjAwLWI4ODAtNGI0OTRhNTY5MzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNzE1NjQtYjA4Ny00ZDljLTg4 ZDAtNmZhNWEzMDYxN2EzLzg0MDcxNTY0LWIwODctNGQ5Yy04OGQwLTZmYTVhMzA2 MTdhMy5jcmwwHwYDVR0jBBgwFoAUg1G3/dVTLU7Rye2vJPGeQS1+FaswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA3MTU2NC1iMDg3LTRkOWMtODhkMC02ZmE1 YTMwNjE3YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfVgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCcwgRBK0uL7YoQomNY45Qc0fwCG3Q+t2yp0P/7gB/3ptPBi/QZZCkW wP32B2Ht2CsRqQnIXZyxwxVCvokMsFJbMuRvOG5X3uQmknqw7dkYJOXWt1uqZk2e pt5xNX5zZazddOXbgeW2hPMvgRL6woDrtyS7rQh5hAQYLdkoM6KmZaJhT/8bZ/84 py7HpzBZR2B61ufyo7s798Cdq8WIUbgq3O7XX4areJwb694jTRuQuW++lfIm5cP6 O+xzGdnpZi03lcfaakB7gICFrov4Iw9oJO7mgfQENwOy8Ay14gnWzddpWR6TpxIq M9ZUoPEPUOGNOF6dKj4JLwbA5KYoouOn -----END CERTIFICATE-----Generated at Tue Sep 16 02:32:49 2025 by rpki-client