$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436daea9-ebc2-3428-94b6-cfa304aa9755.roa File: 436daea9-ebc2-3428-94b6-cfa304aa9755.roa (raw, json) Hash identifier: HXMNYhxDqb9VQLlnXfEGmcIZIycasCMfcAmP/mnN2IM= Subject key identifier: 16:F3:F0:42:75:9C:00:B0:7D:74:35:23:F2:94:D0:72:CC:BE:AE:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3C512FBF46E3D609A4F7E Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436daea9-ebc2-3428-94b6-cfa304aa9755.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2603:301b:2d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:c5:12:fb:f4:6e:3d:60:9a:4f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6cd2b7ad-1b2a-4d16-a643-4b3df29722a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b9:63:fd:e6:95:c7:6e:2e:10:bf:87:2e:d7: d3:e3:a5:08:12:c7:f6:d3:c4:69:01:65:c7:77:a8: 44:19:e0:fd:44:c3:05:5d:65:70:38:84:eb:79:db: bf:8c:b3:af:45:f0:88:6a:e2:e0:b7:8a:e9:a6:f1: 2d:32:11:ee:8c:3b:fe:bf:97:f3:03:fd:7d:26:20: 0b:b5:18:5b:da:8c:60:d3:d3:b8:a0:81:37:b7:19: f3:b2:8d:b3:2e:57:a0:a4:f8:b7:1b:54:d8:7d:a0: 9e:ec:cf:25:70:21:c8:44:83:2a:d3:58:dc:d7:aa: fb:27:09:0e:43:2c:13:ae:1b:94:89:42:93:28:35: 58:83:98:c3:6d:3a:08:dd:69:3d:03:07:de:fe:a9: eb:1d:f2:9e:5d:bc:55:27:2a:8a:cd:34:6e:bb:9f: 16:4b:e5:6b:7f:fa:31:12:13:bb:a9:eb:95:74:79: 45:51:84:3c:61:f1:2d:c1:69:07:fa:1e:40:86:8e: 44:a0:fc:5f:9b:17:05:6c:06:e1:ba:91:7f:d1:1b: b8:da:87:8b:91:e5:91:7c:7f:9f:73:ee:39:cd:b5: 55:d3:1a:6f:54:85:5a:c1:4c:e7:a7:ff:df:fc:79: 18:d5:a8:de:b1:62:3f:d3:4d:59:d8:00:9e:06:8b: 2b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F3:F0:42:75:9C:00:B0:7D:74:35:23:F2:94:D0:72:CC:BE:AE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436daea9-ebc2-3428-94b6-cfa304aa9755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:301b:2d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:58:4e:0d:ad:0c:de:3c:11:c0:68:1c:54:c9:49:ea:e5:c7: f6:94:1a:1b:a9:98:b4:14:de:e5:3d:fc:85:fa:b6:99:ff:93: 73:9d:eb:eb:88:0b:e1:b3:e1:69:62:a7:09:28:64:da:5d:19: bd:b0:0a:4b:f3:87:02:23:a3:74:16:48:3a:2d:ba:11:9b:60: 46:92:39:00:e8:9e:56:98:c6:6f:40:2c:d8:cd:ad:a9:35:91: 40:ef:cb:46:b2:51:94:60:e1:4b:c1:9c:3f:0c:30:4d:1b:fb: a3:ac:bd:21:62:96:34:ef:1f:31:97:fb:f2:e4:94:03:2d:a8: b8:ae:35:e2:0e:95:ae:a7:54:d4:78:59:d1:b0:11:a9:67:88: 88:75:0e:3d:ca:65:ab:cd:24:5a:e6:86:82:3a:30:7b:18:51: c3:51:fd:e8:97:25:bf:6f:fa:b8:cb:f6:83:08:09:c4:d2:7c: ab:57:e7:b6:55:a6:e3:d4:26:dd:ed:3e:6e:54:d2:db:94:c1: da:44:9f:4a:24:87:fc:b6:26:5f:8d:62:e2:d0:08:74:53:3b: a4:60:2e:9c:8d:d6:46:f8:93:ca:9a:88:1e:64:1d:55:8d:13: 46:a4:eb:7a:d0:cb:a9:34:6a:f3:88:a6:7a:c6:60:25:a5:d9: 4e:67:e5:2b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErsw8US+/RuPWCaT34wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmNkMmI3YWQtMWIyYS00ZDE2LWE2NDMtNGIzZGYyOTcyMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLlj/eaVx24uEL+HLtfT46UIEsf208RpAWXH d6hEGeD9RMMFXWVwOITredu/jLOvRfCIauLgt4rppvEtMhHujDv+v5fzA/19JiAL tRhb2oxg09O4oIE3txnzso2zLlegpPi3G1TYfaCe7M8lcCHIRIMq01jc16r7JwkO QywTrhuUiUKTKDVYg5jDbToI3Wk9Awfe/qnrHfKeXbxVJyqKzTRuu58WS+Vrf/ox EhO7qeuVdHlFUYQ8YfEtwWkH+h5Aho5EoPxfmxcFbAbhupF/0Ru42oeLkeWRfH+f c+45zbVV0xpvVIVawUznp//f/HkY1ajesWI/001Z2ACeBosrOwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBbz8EJ1nACwfXQ1I/KU0HLMvq6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM2ZGFlYTktZWJjMi0z NDI4LTk0YjYtY2ZhMzA0YWE5NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwGy0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZVhODa0M3jwRwGgcVMlJ6uXH9pQaG6mYtBTe5T38hfq2mf+Tc53r 64gL4bPhaWKnCShk2l0ZvbAKS/OHAiOjdBZIOi26EZtgRpI5AOieVpjGb0As2M2t qTWRQO/LRrJRlGDhS8GcPwwwTRv7o6y9IWKWNO8fMZf78uSUAy2ouK414g6VrqdU 1HhZ0bARqWeIiHUOPcplq80kWuaGgjowexhRw1H96Jclv2/6uMv2gwgJxNJ8q1fn tlWm49Qm3e0+blTS25TB2kSfSiSH/LYmX41i4tAIdFM7pGAunI3WRviTypqIHmQd VY0TRqTretDLqTRq84imesZgJaXZTmflKw== -----END CERTIFICATE-----Generated at Sat Aug 23 23:30:28 2025 by rpki-client