$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa File: 5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa (raw, json) Hash identifier: P5nyxoQvyMA3HDN3W++s/Faohq60qH5OwZlWaFGwUGY= Subject key identifier: 69:CA:C6:1A:2D:7E:99:89:A4:A9:2A:4B:3C:C6:B4:D1:A0:84:BB:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2E61256ADBB6E93DF7AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2601:642::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:e6:12:56:ad:bb:6e:93:df:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e28a6428-8916-48ea-bd2c-8c78ef9bbca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:3c:47:d4:0e:35:31:64:d4:35:7d:9a:9a: ac:1e:4a:f4:16:3a:f9:a9:10:5d:74:ec:5d:49:ce: f9:2e:9a:52:63:60:e7:90:2a:03:6c:68:92:00:b9: 2b:93:32:0b:c2:e8:66:22:5a:7c:04:eb:1a:ca:fb: fd:d1:ea:7d:99:55:e8:06:2c:ee:8d:33:5a:2e:39: 58:ca:de:b6:9a:fd:8e:11:1a:59:f0:d7:58:25:86: 2c:53:c6:40:38:0c:a5:5b:1e:95:27:f7:69:10:cc: f6:e0:50:75:9b:53:e5:3c:92:c3:6c:04:23:6b:af: 74:77:25:ba:67:29:fe:24:dd:bf:c3:41:a6:a7:38: 1e:0b:6b:b0:d7:24:3b:b8:ea:3a:23:01:07:b6:27: fd:d6:97:9d:6c:d5:36:a0:19:aa:7a:ff:1c:f6:fd: ef:e6:b4:64:64:49:4d:29:b8:40:98:47:96:e6:9c: 1d:7f:f1:f1:76:72:b2:23:67:32:db:9c:66:8b:0d: 84:f2:de:55:98:db:9e:86:f4:fe:04:5a:b8:76:db: 6a:b3:1c:7f:08:4f:96:59:b2:61:61:63:b7:0d:41: 6d:fa:de:9d:db:b1:df:c8:9c:40:76:26:e4:f4:ab: 72:08:8f:91:60:e7:5e:f5:ee:ae:ee:1f:85:fa:1a: d7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CA:C6:1A:2D:7E:99:89:A4:A9:2A:4B:3C:C6:B4:D1:A0:84:BB:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:642::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c3:67:49:47:19:21:ee:25:b8:5f:c0:38:42:00:17:09:34: 1b:09:f8:7d:4a:17:10:f5:e3:1b:79:5f:41:bd:53:31:11:4d: 01:c1:93:13:e5:66:3e:8e:0b:c6:c2:ea:2e:9c:9b:b7:7d:40: f7:d4:91:bb:2f:dd:ed:8a:c3:c3:c1:47:33:03:e4:3e:46:36: 03:8c:e9:95:42:9c:81:4d:68:90:81:71:4d:97:bc:8a:f8:00: b9:12:8d:06:91:dd:76:4f:fd:6d:d7:30:68:6e:42:af:e9:38: f8:16:34:13:18:b4:ee:98:8f:45:f4:27:96:5a:87:d8:3f:ad: 97:00:ec:3f:a1:d2:a6:08:99:7f:06:7a:97:a7:c4:ce:b7:ba: c3:4d:fa:5c:33:af:8e:04:23:3a:f1:c8:2d:d2:1b:90:e4:14: b4:38:a5:05:19:8c:5c:8c:93:ab:4f:ea:06:72:b6:f0:26:e8: 2d:da:fe:14:45:82:b5:d3:17:15:11:fa:d9:19:6e:15:29:4e: 38:62:28:f9:8d:9e:1c:a5:1f:b8:ab:d0:07:2a:25:a5:52:d3: 28:34:dd:5b:c5:50:82:a0:0e:cb:8a:db:01:70:7f:50:c1:db: ac:c5:8d:77:70:bf:43:63:58:29:9d:f3:5f:64:b7:ed:54:0b: a2:b3:32:80 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErswuYSVq27bpPfesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTI4YTY0MjgtODkxNi00OGVhLWJkMmMtOGM3OGVmOWJiY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggY8R9QONTFk1DV9mpqsHkr0Fjr5qRBddOxd Sc75LppSY2DnkCoDbGiSALkrkzILwuhmIlp8BOsayvv90ep9mVXoBizujTNaLjlY yt62mv2OERpZ8NdYJYYsU8ZAOAylWx6VJ/dpEMz24FB1m1PlPJLDbAQja690dyW6 Zyn+JN2/w0GmpzgeC2uw1yQ7uOo6IwEHtif91pedbNU2oBmqev8c9v3v5rRkZElN KbhAmEeW5pwdf/HxdnKyI2cy25xmiw2E8t5VmNuehvT+BFq4dttqsxx/CE+WWbJh YWO3DUFt+t6d27HfyJxAdibk9KtyCI+RYOde9e6u7h+F+hrXwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGnKxhotfpmJpKkqSzzGtNGghLtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJhZjdjYjctOThiZS0z YTk3LThhMTktMmE1YWE2M2MyOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEGQgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANcNnSUcZIe4luF/AOEIAFwk0Gwn4fUoXEPXjG3lfQb1TMRFNAcGT E+VmPo4LxsLqLpybt31A99SRuy/d7YrDw8FHMwPkPkY2A4zplUKcgU1okIFxTZe8 ivgAuRKNBpHddk/9bdcwaG5Cr+k4+BY0Exi07piPRfQnllqH2D+tlwDsP6HSpgiZ fwZ6l6fEzre6w036XDOvjgQjOvHILdIbkOQUtDilBRmMXIyTq0/qBnK28CboLdr+ FEWCtdMXFRH62RluFSlOOGIo+Y2eHKUfuKvQByolpVLTKDTdW8VQgqAOy4rbAXB/ UMHbrMWNd3C/Q2NYKZ3zX2S37VQLorMygA== -----END CERTIFICATE-----Generated at Sun Aug 24 04:00:20 2025 by rpki-client