$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24db6b21-169e-3ac2-a756-84b57cee90c6.roa File: 24db6b21-169e-3ac2-a756-84b57cee90c6.roa (raw, json) Hash identifier: HpKb0A7yFdLQPyUPxRbKCXH5zrOe88maZqTUOSryYTo= Subject key identifier: C0:8D:90:94:63:3A:73:11:1F:B2:08:4D:81:55:06:C7:B7:2E:E0:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3C364918FC8C5C7AD6EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24db6b21-169e-3ac2-a756-84b57cee90c6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2603:208a::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:c3:64:91:8f:c8:c5:c7:ad:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3c966ce0-2874-4627-8f91-cef86a0db63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:4e:93:d8:5c:06:c9:f0:90:cf:c6:1e:c5: 28:b6:6f:03:04:8d:bf:e0:64:36:5d:79:af:5a:26: b1:6f:99:1a:9a:ab:7d:1e:c7:3b:0c:3b:7b:53:a2: 99:77:c1:ac:e6:80:b3:e4:de:c9:ba:5c:aa:5b:ae: 5d:93:4a:d1:bb:b6:cf:64:0a:62:27:a6:72:25:a8: 3f:c7:1a:4a:55:0e:54:bb:3d:80:a8:c1:3b:87:cf: 98:73:70:99:25:aa:e9:d3:6e:b3:e7:d3:15:02:c3: 8b:49:00:4d:e5:33:1f:93:68:08:dd:dd:41:9a:78: f1:0e:9e:79:21:f3:ab:87:f8:96:74:9b:31:cc:dc: 38:e3:e6:c8:9d:ca:8e:f2:a4:a0:fa:7a:68:a5:f6: 1a:ae:27:e4:1e:db:bf:1d:85:8d:b9:d3:f9:de:f2: e2:0d:42:1c:1a:cb:e0:1a:2f:af:8c:f5:de:92:01: 62:20:01:30:1d:41:ae:7a:93:0f:c5:fc:8c:5c:fd: e8:ab:de:06:a9:c6:23:1a:20:d5:ce:cf:f5:f1:46: 57:ac:5a:9e:b9:c1:76:92:0e:84:e1:64:15:4e:49: 18:95:61:cc:e2:b1:86:30:98:30:f0:7f:e5:18:eb: f5:e1:4e:81:55:eb:bd:d8:67:f6:4d:38:3d:a8:f8: cc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8D:90:94:63:3A:73:11:1F:B2:08:4D:81:55:06:C7:B7:2E:E0:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24db6b21-169e-3ac2-a756-84b57cee90c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:208a::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a3:77:05:d1:0a:a2:74:8f:bb:0a:68:df:73:d0:ad:82:b4: 9f:b8:04:23:e7:21:29:45:64:fb:49:b6:46:3d:f2:f0:1a:ac: aa:c3:28:45:1e:9c:50:0d:32:2c:49:d2:00:90:b8:3f:b2:5d: c5:88:4a:e9:74:ae:a5:a7:9e:a2:ff:cc:5e:a5:64:66:d7:6a: 32:13:89:0e:6f:18:87:1e:b4:6a:04:e6:6a:4a:62:5c:0f:3d: b6:cf:21:5e:d3:65:db:0d:9c:93:00:7d:1e:71:6e:53:4b:11: 7b:c9:3b:57:82:26:33:ca:32:71:59:c5:88:8e:49:51:5f:08: b8:3e:ee:01:fb:ab:45:3f:49:71:6a:49:2f:8e:cc:9b:77:b5: f9:cf:11:46:dd:91:0a:fb:f0:11:8c:4f:45:28:d8:03:d7:cf: 3b:e7:9d:21:1c:ba:35:d6:8b:df:c6:6a:8b:e0:52:52:db:29: c0:fb:07:df:12:40:98:a7:4c:d3:46:09:52:57:c3:25:a7:81: c7:ae:f3:29:a0:c0:64:16:ca:9c:09:78:d9:f3:ab:62:a5:d4: 5b:de:51:12:01:04:5f:84:78:fa:97:da:ca:d3:0f:10:36:46: 0c:31:1c:5a:73:41:db:8b:35:9f:72:8a:ed:6d:65:98:51:27: ff:37:7e:34 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErsw8NkkY/IxcetbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2M5NjZjZTAtMjg3NC00NjI3LThmOTEtY2VmODZhMGRiNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw1Ok9hcBsnwkM/GHsUotm8DBI2/4GQ2XXmv Wiaxb5kamqt9Hsc7DDt7U6KZd8Gs5oCz5N7JulyqW65dk0rRu7bPZApiJ6ZyJag/ xxpKVQ5Uuz2AqME7h8+Yc3CZJarp026z59MVAsOLSQBN5TMfk2gI3d1BmnjxDp55 IfOrh/iWdJsxzNw44+bIncqO8qSg+npopfYarifkHtu/HYWNudP53vLiDUIcGsvg Gi+vjPXekgFiIAEwHUGuepMPxfyMXP3oq94GqcYjGiDVzs/18UZXrFqeucF2kg6E 4WQVTkkYlWHM4rGGMJgw8H/lGOv14U6BVeu92Gf2TTg9qPjMgQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMCNkJRjOnMRH7IITYFVBse3LuDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjRkYjZiMjEtMTY5ZS0z YWMyLWE3NTYtODRiNTdjZWU5MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgigAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKqN3BdEKonSPuwpo33PQrYK0n7gEI+chKUVk+0m2Rj3y8BqsqsMo RR6cUA0yLEnSAJC4P7JdxYhK6XSupaeeov/MXqVkZtdqMhOJDm8Yhx60agTmakpi XA89ts8hXtNl2w2ckwB9HnFuU0sRe8k7V4ImM8oycVnFiI5JUV8IuD7uAfurRT9J cWpJL47Mm3e1+c8RRt2RCvvwEYxPRSjYA9fPO+edIRy6NdaL38Zqi+BSUtspwPsH 3xJAmKdM00YJUlfDJaeBx67zKaDAZBbKnAl42fOrYqXUW95REgEEX4R4+pfaytMP EDZGDDEcWnNB24s1n3KK7W1lmFEn/zd+NA== -----END CERTIFICATE-----Generated at Sat Aug 23 23:27:53 2025 by rpki-client