$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c55adfab-e50c-314b-ba1f-028abaf1af2d.roa File: c55adfab-e50c-314b-ba1f-028abaf1af2d.roa (raw, json) Hash identifier: QLHxh8xvenSS//rAwPf8E4YwHh8JvV7qC5Kq/UP03cM= Subject key identifier: D1:E7:39:32:0D:C3:34:64:65:37:4C:B4:E2:D0:65:D1:61:14:75:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1C8CFEAAA36E5787DD880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c55adfab-e50c-314b-ba1f-028abaf1af2d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2603:301b:2600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:c8:cf:ea:aa:36:e5:78:7d:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=aa768c89-a935-4f52-84f2-bb2a022bd8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:34:0c:4e:dd:51:c3:9c:14:05:5f:12:39: ac:67:02:70:ee:93:5a:98:7f:26:f0:da:71:c7:8e: b3:d7:60:7b:9f:0d:0f:e0:17:d0:62:90:d6:51:a0: 44:de:a1:22:b3:ed:14:ad:57:1d:98:94:64:0c:c4: 29:7f:0c:3e:b9:6e:9e:5b:f3:a9:14:34:f9:e5:88: 02:85:6b:39:fe:ba:33:5d:90:ba:6f:b5:fb:5f:e6: c4:14:a1:e2:fa:f7:29:38:5b:57:41:2e:d8:20:05: 18:d0:79:b3:7b:41:38:c4:3e:27:36:51:ee:65:0f: 76:3a:0a:84:53:84:85:c3:14:44:eb:e1:ad:ac:e7: 6c:a4:eb:4d:96:31:81:c4:22:1b:f9:27:68:23:76: 70:59:c4:dc:d9:40:c7:3c:11:09:66:f8:76:2b:77: e9:c5:58:bf:fe:7a:51:45:f4:a1:e8:f7:cf:c5:dd: 79:10:53:b8:c2:47:68:56:56:b6:39:30:dd:88:d8: fd:79:3c:70:1f:79:fe:fe:fd:74:c0:29:b3:e1:c0: 9b:92:56:f7:35:41:df:a5:7f:02:a2:f8:49:7a:6f: 0e:88:70:17:a3:04:a8:cd:b0:2a:84:9e:60:b9:f0: af:1d:b7:92:77:61:f3:3a:f0:1e:86:c9:df:86:d7: fd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E7:39:32:0D:C3:34:64:65:37:4C:B4:E2:D0:65:D1:61:14:75:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c55adfab-e50c-314b-ba1f-028abaf1af2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:301b:2600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a8:dc:25:5a:fa:d7:dc:84:db:11:c7:9e:87:ea:98:a5:3b: 91:41:ed:91:b3:da:54:f8:3e:d3:6d:a8:9c:68:8c:60:05:49: 01:77:22:14:1d:52:b8:8c:f9:74:68:26:30:c5:50:36:42:9a: 86:9b:38:a6:69:20:d2:60:01:79:fc:7a:08:06:b5:eb:22:29: 2c:1e:53:87:24:5e:f9:10:4f:e3:cc:6b:39:ad:56:7f:21:7e: 3c:4c:76:9d:70:02:7e:5f:df:75:34:2e:20:e4:b6:e7:a1:56: 6d:87:b5:98:54:1e:4b:e7:47:e2:31:18:f9:8e:c4:61:6d:ac: 14:56:a5:4d:0b:4a:64:38:da:1f:b4:f6:32:8f:93:5f:4b:6e: e9:ff:32:0c:39:1d:de:54:38:07:a0:5c:d4:5f:5f:03:34:7e: 79:3d:2e:54:a7:9d:a3:16:a3:dd:a5:a2:f4:2b:a3:84:83:0e: 07:12:e6:0e:70:05:26:a4:60:73:4b:66:2a:81:49:2e:61:f8: e9:e7:c3:89:a7:f3:10:e4:93:a0:e3:48:f9:4a:7b:e8:4b:c5: be:49:aa:a3:14:bb:7f:70:62:29:a7:75:65:ea:93:1f:f0:99: d2:f1:90:f3:19:94:f3:b0:49:ed:e2:72:c5:4a:16:b5:e9:35: 33:5d:55:82 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErswcjP6qo25Xh92IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWE3NjhjODktYTkzNS00ZjUyLTg0ZjItYmIyYTAyMmJkOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyQ0DE7dUcOcFAVfEjmsZwJw7pNamH8m8Npx x46z12B7nw0P4BfQYpDWUaBE3qEis+0UrVcdmJRkDMQpfww+uW6eW/OpFDT55YgC hWs5/rozXZC6b7X7X+bEFKHi+vcpOFtXQS7YIAUY0Hmze0E4xD4nNlHuZQ92OgqE U4SFwxRE6+GtrOdspOtNljGBxCIb+SdoI3ZwWcTc2UDHPBEJZvh2K3fpxVi//npR RfSh6PfPxd15EFO4wkdoVla2OTDdiNj9eTxwH3n+/v10wCmz4cCbklb3NUHfpX8C ovhJem8OiHAXowSozbAqhJ5gufCvHbeSd2HzOvAehsnfhtf9hwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNHnOTINwzRkZTdMtOLQZdFhFHXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzU1YWRmYWItZTUwYy0z MTRiLWJhMWYtMDI4YWJhZjFhZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwGyYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiKjcJVr619yE2xHHnofqmKU7kUHtkbPaVPg+022onGiMYAVJAXci FB1SuIz5dGgmMMVQNkKahps4pmkg0mABefx6CAa16yIpLB5ThyRe+RBP48xrOa1W fyF+PEx2nXACfl/fdTQuIOS256FWbYe1mFQeS+dH4jEY+Y7EYW2sFFalTQtKZDja H7T2Mo+TX0tu6f8yDDkd3lQ4B6Bc1F9fAzR+eT0uVKedoxaj3aWi9CujhIMOBxLm DnAFJqRgc0tmKoFJLmH46efDiafzEOSToONI+Up76EvFvkmqoxS7f3BiKad1ZeqT H/CZ0vGQ8xmU87BJ7eJyxUoWtek1M11Vgg== -----END CERTIFICATE-----Generated at Sat Aug 23 23:05:41 2025 by rpki-client