$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3658a549-2043-377f-a8dc-161ae4a9fd65.roa File: 3658a549-2043-377f-a8dc-161ae4a9fd65.roa (raw, json) Hash identifier: CS2PgjB7xV5nSlVINnCPF8cjdg/MVqT7NTzRvnytLJ0= Subject key identifier: 89:F9:2F:25:B4:21:23:5A:0C:4A:4F:68:95:B5:00:1C:7D:CE:1F:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5037FD5668E0087AB3D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3658a549-2043-377f-a8dc-161ae4a9fd65.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2601:642:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:03:7f:d5:66:8e:00:87:ab:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b361acf8-7922-4743-91c5-60684e8e1c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:23:2f:b0:81:51:20:ed:29:ba:5d:bb:59: 7e:73:2b:fa:d1:fd:1a:49:a1:cf:49:5a:e7:7a:c6: cc:22:99:d1:6f:d6:62:f5:e1:e1:54:af:38:6e:2a: ba:1c:a7:01:ec:03:48:d2:70:68:cf:19:d5:6a:c8: 9e:9a:67:2b:5d:ee:ab:31:21:68:51:7b:68:fb:c9: c4:45:be:e5:e7:62:e9:20:23:0e:bd:9b:87:c0:ac: b7:4d:f7:f1:00:b2:86:a7:32:c3:4e:9c:6f:ce:c5: e3:94:48:e1:01:92:09:df:85:f7:c7:f0:f0:52:92: 71:c1:07:3b:86:09:ea:9d:9f:66:42:6e:4b:94:89: e1:70:ae:66:58:59:8c:cb:34:dc:bc:f9:ae:2c:01: bd:3c:dd:af:ac:4b:fa:27:48:46:e5:38:5a:88:f7: 2a:db:15:84:12:b4:3b:f1:62:d5:b8:97:36:52:cf: e6:8c:ca:88:cd:9e:70:86:16:9d:ea:86:2d:6f:9e: b8:ef:97:77:4d:6f:ef:62:db:37:20:d9:c8:e0:37: e0:a4:e2:4e:c6:38:46:ae:19:b9:4e:69:34:15:2e: 3a:cf:51:03:d6:ad:f3:e3:81:f3:26:90:ef:eb:31: 20:24:ba:32:3d:ee:d1:46:4d:b8:fa:16:56:01:42: 9d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:2F:25:B4:21:23:5A:0C:4A:4F:68:95:B5:00:1C:7D:CE:1F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3658a549-2043-377f-a8dc-161ae4a9fd65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:642:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:48:47:a5:06:27:ae:4f:42:28:eb:3a:e5:82:8d:e1:d6:6e: 6a:6c:4e:a0:03:63:03:ce:46:de:f2:f2:35:60:86:b9:5f:bf: 30:c2:e4:0f:40:25:6f:3d:1a:f7:68:77:61:9d:20:79:8b:b7: 6b:0b:b6:21:16:81:ad:8e:92:59:2a:bc:df:81:af:52:ef:6e: 30:f6:47:99:e4:a3:ea:42:9d:f8:4e:65:9f:d0:88:2e:2d:7d: 8c:a6:22:7d:07:96:06:04:30:c6:d2:51:2f:38:cc:7d:36:99: 20:11:48:fa:d0:b4:7b:f3:3c:e9:4b:6b:7b:b0:67:73:c4:56: 24:73:1f:d3:16:92:b8:c6:a0:57:8f:64:01:e8:3f:5f:d4:98: 58:ae:dc:39:84:7e:0f:45:04:59:91:b7:b5:01:6e:56:fc:74: b7:d6:d1:2a:78:3c:17:1b:89:b5:a1:6e:09:cd:c2:56:62:cd: 0b:14:ac:fa:79:3f:2f:27:9f:a7:5e:fb:31:eb:46:5b:89:6e: 09:2e:e0:4b:4c:ed:40:ce:9d:5b:f7:e9:57:fe:04:28:46:44: 76:81:a1:21:6e:f5:8b:ec:8f:1d:e7:13:45:66:57:0b:fa:df: ff:e8:13:f7:b9:b7:1b:74:33:61:89:d7:d2:80:e3:3a:f8:be: df:f8:0c:6f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErsxQN/1WaOAIerPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjM2MWFjZjgtNzkyMi00NzQzLTkxYzUtNjA2ODRlOGUxYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qEjL7CBUSDtKbpdu1l+cyv60f0aSaHPSVrn esbMIpnRb9Zi9eHhVK84biq6HKcB7ANI0nBozxnVasiemmcrXe6rMSFoUXto+8nE Rb7l52LpICMOvZuHwKy3TffxALKGpzLDTpxvzsXjlEjhAZIJ34X3x/DwUpJxwQc7 hgnqnZ9mQm5LlInhcK5mWFmMyzTcvPmuLAG9PN2vrEv6J0hG5ThaiPcq2xWEErQ7 8WLVuJc2Us/mjMqIzZ5whhad6oYtb56475d3TW/vYts3INnI4DfgpOJOxjhGrhm5 Tmk0FS46z1ED1q3z44HzJpDv6zEgJLoyPe7RRk24+hZWAUKdNwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIn5LyW0ISNaDEpPaJW1ABx9zh+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzY1OGE1NDktMjA0My0z NzdmLWE4ZGMtMTYxYWU0YTlmZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEGQkAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA10hHpQYnrk9CKOs65YKN4dZuamxOoANjA85G3vLyNWCGuV+/MMLk D0Albz0a92h3YZ0geYu3awu2IRaBrY6SWSq834GvUu9uMPZHmeSj6kKd+E5ln9CI Li19jKYifQeWBgQwxtJRLzjMfTaZIBFI+tC0e/M86Utre7Bnc8RWJHMf0xaSuMag V49kAeg/X9SYWK7cOYR+D0UEWZG3tQFuVvx0t9bRKng8FxuJtaFuCc3CVmLNCxSs +nk/Lyefp177MetGW4luCS7gS0ztQM6dW/fpV/4EKEZEdoGhIW71i+yPHecTRWZX C/rf/+gT97m3G3QzYYnX0oDjOvi+3/gMbw== -----END CERTIFICATE-----Generated at Sat Aug 23 23:34:19 2025 by rpki-client