$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa File: 308fdebd-55e3-3c5a-99b7-a06760224d7a.roa (raw, json) Hash identifier: LbPMyKTPkERyMDjgfom3WOBthmjaUQMElD32q1oO5ug= Subject key identifier: 4A:A4:59:DE:FE:00:CD:41:A6:19:60:45:F4:1F:45:40:D8:C6:9B:FF Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584AC2E0FC5E060F127D3061D880 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 400097 IP address blocks: 2606:3d40:5d01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fc:5e:06:0f:12:7d:30:61:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=c78b59e4-4725-4d87-b873-ce32e6727cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:77:28:a2:d8:33:9d:9f:fb:be:a5:b2:a0: 1d:bd:d6:90:c9:62:b2:8b:9b:f9:b6:ab:6f:2e:2b: 3c:9f:98:be:65:ee:fb:26:d0:e8:34:55:60:a5:58: d4:c4:a4:99:8c:98:f1:25:97:e8:1f:3d:8e:1e:8d: c8:ed:66:f8:20:a6:da:03:42:18:53:c3:b3:cd:07: 10:62:1b:5b:aa:ef:21:d7:5c:d0:29:13:09:52:51: 3c:33:5e:11:a0:5d:c8:e5:d8:3b:67:cb:cb:8c:17: 75:0d:33:3e:89:15:de:00:21:35:fc:b8:50:69:4d: e8:ce:f4:eb:62:90:73:3c:02:b9:ce:9a:ce:08:af: bf:50:f9:0f:53:e5:b1:d0:fb:02:4c:65:9a:8d:50: 15:b8:73:c0:51:30:ae:a6:7f:56:64:88:25:26:31: 87:6d:e0:7f:0f:70:74:3e:3f:c3:9b:3f:87:24:e4: 21:07:ff:57:f2:39:42:44:43:c6:dd:5b:0a:79:d4: 2b:45:43:ea:0c:f8:d1:1f:08:a1:3f:04:b9:19:f9: 59:fd:7d:a9:fe:f2:01:c9:32:8d:c3:03:a1:7f:59: ef:2c:a8:ce:1d:29:33:e9:66:a4:ab:ff:53:a8:2a: 2a:48:0d:9c:6c:ad:e6:69:38:1d:6c:2d:bf:ed:79: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A4:59:DE:FE:00:CD:41:A6:19:60:45:F4:1F:45:40:D8:C6:9B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:5d01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7f:57:ba:f0:d6:96:51:1e:50:d2:c3:45:0c:0a:0f:9d:04: 75:70:c1:c9:85:20:0c:bd:79:fe:7d:f1:ca:b2:eb:50:c0:05: 39:44:f4:7f:18:7d:fe:45:c4:75:f8:b8:3b:e8:a5:b0:4a:e1: c4:59:79:84:83:3b:a6:c8:00:2c:7a:ec:d6:12:56:26:4e:a0: 92:00:fa:f4:4d:1a:02:29:16:86:e6:7e:41:53:c5:81:7c:2c: ad:d9:0b:3f:21:e2:d5:d9:12:56:cd:a6:1c:9a:39:bb:a4:d3: 3c:cf:f0:36:dd:d1:67:38:ba:d4:f1:9b:e1:59:c1:d4:ce:41: 4c:48:50:b1:8c:40:05:02:f2:d7:d4:a0:a8:36:18:2e:d7:e0: 74:de:31:ed:28:a4:e3:36:b3:ce:0b:c6:8d:cd:7b:41:bc:60: 59:49:1a:3f:ff:e4:09:c7:ba:82:05:6d:9a:9d:ca:9c:6e:48: 1d:d6:d9:ca:4d:3f:fd:da:eb:23:cc:63:82:d0:10:26:d4:1a: c0:43:77:8f:34:c1:d7:0c:c8:da:02:58:37:4e:1f:d5:b9:b5: db:ac:4f:dd:38:c0:b2:fb:8f:36:0c:d3:44:92:49:06:db:d9: b2:88:ed:c0:d7:3f:ff:1b:49:7d:d3:18:a5:f3:07:d2:10:7d: 79:b0:2a:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4PxeBg8SfTBh2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Yzc4YjU5ZTQtNDcyNS00ZDg3LWI4NzMtY2UzMmU2NzI3Y2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinl3KKLYM52f+76lsqAdvdaQyWKyi5v5tqtv Lis8n5i+Ze77JtDoNFVgpVjUxKSZjJjxJZfoHz2OHo3I7Wb4IKbaA0IYU8OzzQcQ Yhtbqu8h11zQKRMJUlE8M14RoF3I5dg7Z8vLjBd1DTM+iRXeACE1/LhQaU3ozvTr YpBzPAK5zprOCK+/UPkPU+Wx0PsCTGWajVAVuHPAUTCupn9WZIglJjGHbeB/D3B0 Pj/Dmz+HJOQhB/9X8jlCREPG3VsKedQrRUPqDPjRHwihPwS5GflZ/X2p/vIByTKN wwOhf1nvLKjOHSkz6Wakq/9TqCoqSA2cbK3maTgdbC2/7XmhMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqkWd7+AM1BphlgRfQfRUDYxpv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvMzA4ZmRlYmQtNTVlMy0z YzVhLTk5YjctYTA2NzYwMjI0ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0B MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEh/V7rw1pZRHlDSw0UMCg+dBHVwwcmFIAy9ef598cqy61DABTlE 9H8Yff5FxHX4uDvopbBK4cRZeYSDO6bIACx67NYSViZOoJIA+vRNGgIpFobmfkFT xYF8LK3ZCz8h4tXZElbNphyaObuk0zzP8Dbd0Wc4utTxm+FZwdTOQUxIULGMQAUC 8tfUoKg2GC7X4HTeMe0opOM2s84Lxo3Ne0G8YFlJGj//5AnHuoIFbZqdypxuSB3W 2cpNP/3a6yPMY4LQECbUGsBDd480wdcMyNoCWDdOH9W5tdusT904wLL7jzYM00SS SQbb2bKI7cDXP/8bSX3TGKXzB9IQfXmwKlc= -----END CERTIFICATE-----Generated at Sat Aug 23 23:26:44 2025 by rpki-client