$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a0ca981-893f-32b0-871b-f7f85a8be1ad.roa File: 9a0ca981-893f-32b0-871b-f7f85a8be1ad.roa (raw, json) Hash identifier: XtWJhR3wGjQAGI5Cz9FSOJyg2Ud6rEEihoiqwceIL14= Subject key identifier: E0:C8:2D:A5:27:E7:CB:3E:91:22:D9:02:2D:DC:40:24:E6:BB:50:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2E96005186B6C03E76940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a0ca981-893f-32b0-871b-f7f85a8be1ad.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2603:3024:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:e9:60:05:18:6b:6c:03:e7:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=648c947b-6a47-4efe-bcd0-554b496131cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c2:2c:f1:05:f9:71:26:88:25:d7:c7:14:a9: d7:aa:1b:48:bd:39:50:c3:e9:9a:0b:71:e4:4d:60: 68:ea:f2:cb:ca:fe:b5:93:33:e4:b0:2d:fb:76:2d: 1e:92:a9:86:8c:1e:4f:6b:67:eb:3a:d6:b5:bc:a3: 84:38:d1:1e:6c:47:14:11:18:cf:c2:3a:45:67:19: 39:97:1a:b2:36:26:f5:da:aa:a2:8d:90:0f:32:08: 9a:9f:12:ab:8b:df:50:1a:42:7e:bf:42:32:3b:4c: 95:b7:2b:9a:6e:ca:6a:35:c9:e2:9c:0e:6d:73:22: 5d:0e:69:94:e7:1b:26:3e:0e:93:d8:83:8f:e5:3f: 5f:8d:5b:a7:be:59:f5:69:7c:36:4e:de:d7:02:ee: 71:8a:26:fb:b0:86:76:92:e3:85:0d:1b:e6:05:0f: ea:3c:2c:29:14:c0:cd:2e:76:58:32:3b:d4:75:0e: ae:6f:12:28:b2:f4:7c:66:0f:80:e9:f5:07:b0:b1: f5:2c:23:18:b7:86:de:89:d6:11:1e:ef:49:04:e4: 67:7c:4d:ee:7d:a2:35:31:ae:ab:d3:62:a5:00:3e: 42:7a:de:54:45:41:31:74:ff:60:67:63:ec:18:ea: 3e:66:40:c8:4e:1a:0a:fb:cf:44:32:5c:02:44:8b: 39:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C8:2D:A5:27:E7:CB:3E:91:22:D9:02:2D:DC:40:24:E6:BB:50:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a0ca981-893f-32b0-871b-f7f85a8be1ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3024:600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:78:96:24:d0:b7:33:a0:74:28:65:d5:c3:a8:57:da:f4:e5: 64:41:a5:60:a7:cc:6a:af:7e:b7:2e:cc:76:0f:8b:62:75:14: ac:2f:ac:93:d2:ee:a4:75:24:a7:44:61:8d:20:8b:09:89:72: 02:9d:a4:4f:34:93:f1:3a:79:b3:71:f0:76:28:1f:98:4b:d7: 87:92:fd:2c:36:97:37:6e:10:ba:e4:41:a7:b7:9b:17:82:e6: da:65:c7:f5:b5:b8:77:4d:68:b2:91:49:e4:1a:50:47:51:f3: 97:ef:ee:1a:91:7e:ae:86:58:38:e9:ff:9d:a0:d9:66:e3:ec: fc:be:dd:f7:0d:e0:6a:d2:a9:76:54:10:04:87:cc:ac:fc:cf: f1:20:f7:b3:20:22:45:ba:4b:86:b8:1c:f8:47:4b:6f:84:3c: c8:03:9a:b2:6d:84:88:8c:bd:63:87:ae:1e:87:7d:a2:f1:cd: a9:4b:18:cb:6d:c1:88:89:b6:59:29:76:5b:ea:a1:20:4d:d7: 8d:c6:5d:8e:a2:a9:f7:82:f3:f8:60:0b:34:87:af:29:03:a7: bd:19:e9:39:1a:80:33:c0:e0:e8:a3:1d:a2:7a:c5:b8:00:74: 4e:1c:b5:b1:48:f3:96:8e:a4:b0:9b:fd:f1:f1:3c:f4:9c:66: b5:59:0b:df -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErswulgBRhrbAPnaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjQ4Yzk0N2ItNmE0Ny00ZWZlLWJjZDAtNTU0YjQ5NjEzMWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksIs8QX5cSaIJdfHFKnXqhtIvTlQw+maC3Hk TWBo6vLLyv61kzPksC37di0ekqmGjB5Pa2frOta1vKOEONEebEcUERjPwjpFZxk5 lxqyNib12qqijZAPMgianxKri99QGkJ+v0IyO0yVtyuabspqNcninA5tcyJdDmmU 5xsmPg6T2IOP5T9fjVunvln1aXw2Tt7XAu5xiib7sIZ2kuOFDRvmBQ/qPCwpFMDN LnZYMjvUdQ6ubxIosvR8Zg+A6fUHsLH1LCMYt4beidYRHu9JBORnfE3ufaI1Ma6r 02KlAD5Cet5URUExdP9gZ2PsGOo+ZkDIThoK+89EMlwCRIs5qwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFODILaUn58s+kSLZAi3cQCTmu1AaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWEwY2E5ODEtODkzZi0z MmIwLTg3MWItZjdmODVhOGJlMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwJAYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAvHiWJNC3M6B0KGXVw6hX2vTlZEGlYKfMaq9+ty7Mdg+LYnUUrC+s k9LupHUkp0RhjSCLCYlyAp2kTzST8Tp5s3HwdigfmEvXh5L9LDaXN24QuuRBp7eb F4Lm2mXH9bW4d01ospFJ5BpQR1Hzl+/uGpF+roZYOOn/naDZZuPs/L7d9w3gatKp dlQQBIfMrPzP8SD3syAiRbpLhrgc+EdLb4Q8yAOasm2EiIy9Y4euHod9ovHNqUsY y23BiIm2WSl2W+qhIE3XjcZdjqKp94Lz+GALNIevKQOnvRnpORqAM8Dg6KMdonrF uAB0Thy1sUjzlo6ksJv98fE89JxmtVkL3w== -----END CERTIFICATE-----Generated at Sat Aug 23 22:56:58 2025 by rpki-client