$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/895615a3-2066-32be-93aa-c6e25826ea0a.roa File: 895615a3-2066-32be-93aa-c6e25826ea0a.roa (raw, json) Hash identifier: YiZ+MUCg3E8cDccF7KEzPY7xx4HKW6cx+t305r7gDT4= Subject key identifier: 9A:7F:CC:F5:FE:3C:3A:57:6B:A3:39:7F:D1:90:52:2A:70:BB:99:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE0313B6625ADE91B159C5352 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/895615a3-2066-32be-93aa-c6e25826ea0a.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7725 IP address blocks: 2601:cc::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:3b:66:25:ad:e9:1b:15:9c:53:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=5d2fbc9c-fa99-4781-9104-f80415a01cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:de:8d:dd:22:af:c0:5b:18:49:4d:23:5e: db:b3:ca:39:86:54:b7:7d:56:6f:ed:4f:87:d8:3f: 5d:97:32:e5:ad:b2:e1:89:b4:81:c6:48:af:5f:4c: 03:7a:7e:26:b2:30:7e:ca:91:05:88:f4:d0:1b:16: a0:73:73:a9:a0:c7:23:a3:8a:8b:3c:55:82:4a:5e: 03:01:f0:79:6b:8e:1f:82:71:e5:1c:9d:85:fa:35: 08:27:26:aa:df:94:55:aa:5f:7a:70:40:f1:6d:ca: 17:6b:03:4c:39:cf:6b:63:e0:fa:25:f7:7c:92:19: 8c:76:d9:81:c0:12:09:f8:68:32:65:44:ca:b5:85: 0b:83:ea:eb:fc:ed:a9:32:4d:4c:b3:eb:59:34:69: 4b:c6:38:b1:9b:d5:0d:61:ce:f0:9e:88:c4:51:98: 4e:6b:ec:a1:42:ba:8d:9d:1a:42:fb:d6:2b:51:93: a6:d2:c2:eb:84:61:76:30:d7:49:b0:80:39:3d:39: 8c:92:00:e9:61:e7:46:95:32:ed:0c:58:6e:e3:e7: 29:60:40:18:10:ff:7c:8a:37:0c:17:83:ab:5b:b9: 88:e5:75:74:5b:48:4c:5a:77:29:76:b0:25:db:37: 3b:48:c8:e8:fe:08:52:5b:c6:9d:24:f4:9f:25:6f: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7F:CC:F5:FE:3C:3A:57:6B:A3:39:7F:D1:90:52:2A:70:BB:99:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/895615a3-2066-32be-93aa-c6e25826ea0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:cc::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ed:72:f0:b2:0d:09:1a:d9:4e:2b:0d:fd:03:bb:b1:49:11: 67:28:d5:66:f8:dd:8a:d8:9e:55:40:97:27:f6:5d:8a:ef:f3: ff:f2:41:6e:3f:69:3a:40:eb:d9:53:dd:86:f9:5d:48:74:7d: 7d:02:fd:de:3e:ff:0f:74:f1:a6:c9:46:7b:ef:bf:2a:67:f1: 29:55:cf:09:10:0e:64:24:7f:c8:e5:96:14:8a:1a:d6:82:d6: e0:13:fa:a7:7c:5b:67:9b:34:71:3b:e9:22:59:f5:1b:a9:64: 30:84:e4:13:de:55:cc:8d:77:c0:a8:59:c9:47:ce:a0:0c:d3: 5f:c1:09:7d:af:58:62:8f:7e:ac:ef:bc:29:d1:43:c3:1c:4e: bb:10:8e:4c:1a:ff:36:45:53:2c:43:d1:e8:ec:6a:e3:bf:1f: f5:95:05:12:f7:70:f1:75:91:f9:0e:ae:30:12:0b:43:27:21: 19:11:cd:fc:96:98:f6:39:62:be:bf:fa:95:4f:20:66:58:6e: e3:94:42:80:eb:be:88:82:ef:5c:7d:78:01:14:82:91:1e:a7: 27:ab:c7:72:c8:bf:5a:ce:a7:02:2c:49:4a:00:18:3b:a2:3b: 94:de:3f:96:c5:37:3e:15:0a:22:50:55:00:93:02:00:45:76: 6d:f3:60:04 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErgMTtmJa3pGxWcU1IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk NWQyZmJjOWMtZmE5OS00NzgxLTkxMDQtZjgwNDE1YTAxY2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhLejd0ir8BbGElNI17bs8o5hlS3fVZv7U+H 2D9dlzLlrbLhibSBxkivX0wDen4msjB+ypEFiPTQGxagc3OpoMcjo4qLPFWCSl4D AfB5a44fgnHlHJ2F+jUIJyaq35RVql96cEDxbcoXawNMOc9rY+D6Jfd8khmMdtmB wBIJ+GgyZUTKtYULg+rr/O2pMk1Ms+tZNGlLxjixm9UNYc7wnojEUZhOa+yhQrqN nRpC+9YrUZOm0sLrhGF2MNdJsIA5PTmMkgDpYedGlTLtDFhu4+cpYEAYEP98ijcM F4OrW7mI5XV0W0hMWncpdrAl2zc7SMjo/ghSW8adJPSfJW9w0wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJp/zPX+PDpXa6M5f9GQUipwu5n0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk1NjE1YTMtMjA2Ni0z MmJlLTkzYWEtYzZlMjU4MjZlYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAzAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFe1y8LINCRrZTisN/QO7sUkRZyjVZvjditieVUCXJ/Zdiu/z//JB bj9pOkDr2VPdhvldSHR9fQL93j7/D3TxpslGe++/KmfxKVXPCRAOZCR/yOWWFIoa 1oLW4BP6p3xbZ5s0cTvpIln1G6lkMITkE95VzI13wKhZyUfOoAzTX8EJfa9YYo9+ rO+8KdFDwxxOuxCOTBr/NkVTLEPR6Oxq478f9ZUFEvdw8XWR+Q6uMBILQychGRHN /JaY9jlivr/6lU8gZlhu45RCgOu+iILvXH14ARSCkR6nJ6vHcsi/Ws6nAixJSgAY O6I7lN4/lsU3PhUKIlBVAJMCAEV2bfNgBA== -----END CERTIFICATE-----Generated at Sat Aug 23 23:40:55 2025 by rpki-client