$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ab1f3a3-db91-3b85-8304-9e9a78d0a01e.roa File: 2ab1f3a3-db91-3b85-8304-9e9a78d0a01e.roa (raw, json) Hash identifier: dTmAjwR9gFAPZQG/tw1Jy0UiSl9ReZsVA8bbtXF7gic= Subject key identifier: E7:A1:2D:B8:96:C2:ED:3C:C0:10:41:5E:24:6B:C7:99:2B:53:D4:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2E8A2461F06715B3745E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ab1f3a3-db91-3b85-8304-9e9a78d0a01e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2603:3024:1d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:e8:a2:46:1f:06:71:5b:37:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ccb70ddf-5ee8-4852-ac5c-b0dc62fbad39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:da:a7:ed:a7:77:07:fe:14:6a:e7:c2:5e: f5:e9:c1:2d:07:d4:4d:aa:62:ad:24:fb:cc:03:fa: 43:d9:bd:d1:da:60:16:39:34:29:4a:e4:ac:a0:3e: 6a:32:d2:c2:16:de:fd:db:93:8e:d8:27:d3:ae:0c: de:f5:de:11:84:3c:65:ba:87:3f:47:f3:7f:0a:73: c4:e1:32:55:8f:1f:39:29:25:3b:76:c5:24:ce:70: 74:28:0a:94:b6:2c:e9:ee:1a:b9:f3:fb:b4:97:1d: 41:f4:ea:86:3a:7a:32:b1:88:65:aa:40:75:4b:c9: 4b:d5:cf:18:18:43:ae:bf:e5:df:87:14:0c:5f:2d: d2:0d:c8:23:44:1d:3d:27:f2:bf:f5:20:63:1e:b0: a8:e1:13:a5:66:4d:19:10:e1:5a:90:bf:b1:fa:d9: b7:cb:44:71:72:ed:40:34:f6:7b:dc:9a:64:4f:83: 45:c7:65:2d:79:8d:99:8e:30:3f:c2:98:32:75:5c: ed:cf:92:c4:08:3c:8c:7b:48:58:b5:0e:19:1f:c9: 2d:80:07:c6:ac:43:da:e2:bc:5d:a6:9e:c3:f8:d2: 23:0c:a5:a3:03:aa:8f:0d:61:cf:aa:b8:9e:7a:b4: b9:e4:68:4f:33:3e:75:e1:4e:82:4c:a0:cf:26:56: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A1:2D:B8:96:C2:ED:3C:C0:10:41:5E:24:6B:C7:99:2B:53:D4:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ab1f3a3-db91-3b85-8304-9e9a78d0a01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3024:1d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e6:50:e4:98:45:1c:33:b0:c2:6f:da:fa:66:98:39:23:1b: 12:5a:23:5d:5f:af:7f:36:c1:65:d3:e9:a8:ed:20:d4:a8:6a: a9:da:99:cc:3b:bc:c4:31:26:9c:d0:d3:6d:6d:f9:06:77:ed: 8f:c4:32:30:03:b5:1c:58:67:40:8a:a7:a5:32:f7:fb:e7:b9: 79:2e:5c:e4:e7:1b:dc:a4:40:14:9a:f3:6c:8d:3e:8f:1b:9d: 0d:b8:ea:c7:d3:ea:cc:74:9b:6a:4b:86:0f:b1:77:b0:ed:9d: 60:49:f4:62:16:dc:08:aa:e1:6a:4d:03:14:86:1f:53:7a:ad: 91:8d:01:0f:67:ea:68:8c:a8:12:f9:de:1d:10:91:db:5d:66: ee:34:83:1f:1f:62:98:38:6a:7a:a5:e8:e1:d3:6f:8d:c7:04: 56:7d:b5:4f:21:5d:90:4b:14:46:fb:c3:fa:6f:8a:61:95:95: 96:27:ab:60:71:4b:d5:69:8f:a0:6f:85:c7:1b:ac:d5:10:5a: 48:83:39:7f:bd:dd:68:55:2b:36:eb:27:3b:f1:7e:1d:a9:09: 52:9f:fa:4e:37:bf:84:8e:40:11:62:6c:f7:c8:00:23:30:f8: a4:fb:7c:45:ee:25:c5:32:54:a9:ef:f0:9d:71:ab:2b:f7:dc: 1a:f8:4a:f0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErswuiiRh8GcVs3ReAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2NiNzBkZGYtNWVlOC00ODUyLWFjNWMtYjBkYzYyZmJhZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd7ap+2ndwf+FGrnwl716cEtB9RNqmKtJPvM A/pD2b3R2mAWOTQpSuSsoD5qMtLCFt7925OO2CfTrgze9d4RhDxluoc/R/N/CnPE 4TJVjx85KSU7dsUkznB0KAqUtizp7hq58/u0lx1B9OqGOnoysYhlqkB1S8lL1c8Y GEOuv+XfhxQMXy3SDcgjRB09J/K/9SBjHrCo4ROlZk0ZEOFakL+x+tm3y0Rxcu1A NPZ73JpkT4NFx2UteY2ZjjA/wpgydVztz5LECDyMe0hYtQ4ZH8ktgAfGrEPa4rxd pp7D+NIjDKWjA6qPDWHPqrieerS55GhPMz514U6CTKDPJlYCLQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOehLbiWwu08wBBBXiRrx5krU9RFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFiMWYzYTMtZGI5MS0z Yjg1LTgzMDQtOWU5YTc4ZDBhMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwJB0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATeZQ5JhFHDOwwm/a+maYOSMbElojXV+vfzbBZdPpqO0g1KhqqdqZ zDu8xDEmnNDTbW35Bnftj8QyMAO1HFhnQIqnpTL3++e5eS5c5Ocb3KRAFJrzbI0+ jxudDbjqx9PqzHSbakuGD7F3sO2dYEn0YhbcCKrhak0DFIYfU3qtkY0BD2fqaIyo EvneHRCR211m7jSDHx9imDhqeqXo4dNvjccEVn21TyFdkEsURvvD+m+KYZWVlier YHFL1WmPoG+Fxxus1RBaSIM5f73daFUrNusnO/F+HakJUp/6Tje/hI5AEWJs98gA IzD4pPt8Re4lxTJUqe/wnXGrK/fcGvhK8A== -----END CERTIFICATE-----Generated at Sun Aug 24 03:54:07 2025 by rpki-client