$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca161375-8099-31a7-a49d-96e47de73d94.roa File: ca161375-8099-31a7-a49d-96e47de73d94.roa (raw, json) Hash identifier: 7CMpzNMH3HfHYIINHpeG0cbljro8Yql8KvqCZvL+eCo= Subject key identifier: 89:AC:33:4A:60:01:CE:52:68:32:FD:85:AE:1C:9B:F8:B8:11:29:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC40FFBD042D9F8EEE9B270 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca161375-8099-31a7-a49d-96e47de73d94.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2603:2048:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:0f:fb:d0:42:d9:f8:ee:e9:b2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3a396278-62dc-4307-ae24-6af16d88f0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6b:cf:5c:64:b9:f0:1f:47:b9:0d:2d:52:b2: 31:21:59:48:99:80:17:95:5b:a0:32:1a:a9:87:f6: 51:21:35:8e:a2:01:eb:b0:80:92:f4:f8:ba:63:91: 75:39:cd:f9:f2:b9:48:c8:27:fc:0f:75:05:3a:09: da:5b:fb:ed:41:57:3f:e9:a3:fb:08:3f:ad:2d:7b: 18:38:5b:60:89:a2:cf:13:5e:65:65:26:b5:51:f1: 44:b3:aa:1d:d6:e6:da:e3:41:39:93:1d:37:c0:f7: c1:1a:29:bb:1c:e5:8b:1f:be:46:71:3e:b1:4a:5a: 43:da:96:83:c2:22:de:f1:5e:32:b0:76:26:c4:92: 51:01:20:49:34:37:b4:92:d0:01:8d:0e:53:e2:70: 4b:7e:46:7a:55:42:13:fb:b8:d4:7e:1e:13:b1:eb: 3c:45:e5:c2:30:55:53:35:d5:03:f8:1f:77:69:71: d4:31:b7:8b:31:9b:4f:4a:e0:25:18:53:b7:79:52: d7:d8:d4:23:8f:8d:57:06:18:f9:8e:8d:5e:0f:d8: 61:6a:e6:57:91:99:cb:e7:ef:15:2a:9f:31:17:98: d0:9d:15:36:94:3d:4c:f2:d8:a7:48:06:84:ec:57: 37:8c:39:96:30:1c:d9:6a:0c:bf:39:3b:78:92:4a: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AC:33:4A:60:01:CE:52:68:32:FD:85:AE:1C:9B:F8:B8:11:29:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca161375-8099-31a7-a49d-96e47de73d94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2048:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:52:d9:2a:7e:8a:2c:63:b1:51:6f:15:6b:7f:af:64:84:d4: b8:84:bc:71:7f:0b:71:06:41:b3:ca:9f:c7:d2:54:e8:8c:8e: 9f:d6:d2:b5:fa:9c:b4:0f:0e:8c:1d:54:a8:80:14:13:69:2d: 49:e3:b1:76:96:d7:8c:3c:c1:f3:8a:b9:f3:51:6d:30:40:5d: c3:b9:77:f2:52:cc:d7:89:5e:fd:58:61:a9:02:00:43:25:fd: 0a:41:ec:a1:9e:58:5b:01:b9:38:0d:82:6c:9f:c2:1b:56:68: 8f:1f:74:b8:4b:69:51:6b:6f:9e:90:89:d9:0c:9b:f5:0b:6b: 6a:4c:99:7f:7c:a2:2f:31:0f:45:ea:48:e8:af:15:0a:f7:4c: 10:98:ee:89:97:5b:dc:ee:f1:72:5d:28:89:b7:2b:64:a3:60: c4:de:e4:e4:83:5b:5c:ef:f7:1d:bb:ca:be:2c:c8:08:ed:c4: f6:5d:55:be:c8:e9:41:61:9e:ec:40:a0:bd:58:26:ea:c0:4f: 70:c8:08:39:55:23:69:53:a1:0a:30:ab:ac:e4:e0:2b:fd:84: ca:2b:a2:9b:a6:16:b1:9a:57:ae:47:f2:c2:69:cf:e4:7a:34: 70:28:64:30:3f:6f:46:dd:e8:54:08:81:b5:2a:55:f3:34:f4: 72:49:b9:96 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErsxA/70ELZ+O7psnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2EzOTYyNzgtNjJkYy00MzA3LWFlMjQtNmFmMTZkODhmMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGvPXGS58B9HuQ0tUrIxIVlImYAXlVugMhqp h/ZRITWOogHrsICS9Pi6Y5F1Oc358rlIyCf8D3UFOgnaW/vtQVc/6aP7CD+tLXsY OFtgiaLPE15lZSa1UfFEs6od1uba40E5kx03wPfBGim7HOWLH75GcT6xSlpD2paD wiLe8V4ysHYmxJJRASBJNDe0ktABjQ5T4nBLfkZ6VUIT+7jUfh4Tses8ReXCMFVT NdUD+B93aXHUMbeLMZtPSuAlGFO3eVLX2NQjj41XBhj5jo1eD9hhauZXkZnL5+8V Kp8xF5jQnRU2lD1M8tinSAaE7Fc3jDmWMBzZagy/OTt4kkqFCQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFImsM0pgAc5SaDL9ha4cm/i4ESm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ExNjEzNzUtODA5OS0z MWE3LWE0OWQtOTZlNDdkZTczZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgSMAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAglLZKn6KLGOxUW8Va3+vZITUuIS8cX8LcQZBs8qfx9JU6IyOn9bS tfqctA8OjB1UqIAUE2ktSeOxdpbXjDzB84q581FtMEBdw7l38lLM14le/VhhqQIA QyX9CkHsoZ5YWwG5OA2CbJ/CG1Zojx90uEtpUWtvnpCJ2Qyb9QtrakyZf3yiLzEP RepI6K8VCvdMEJjuiZdb3O7xcl0oibcrZKNgxN7k5INbXO/3HbvKvizICO3E9l1V vsjpQWGe7ECgvVgm6sBPcMgIOVUjaVOhCjCrrOTgK/2Eyiuim6YWsZpXrkfywmnP 5Ho0cChkMD9vRt3oVAiBtSpV8zT0ckm5lg== -----END CERTIFICATE-----Generated at Sun Aug 24 01:19:56 2025 by rpki-client