$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc67f9ab-92bb-37a6-9be3-44e2e8f25f3b.roa File: dc67f9ab-92bb-37a6-9be3-44e2e8f25f3b.roa (raw, json) Hash identifier: mWWAsPQgykSVslAVLqFLdSa6DZ9dH48Jzw6ABnxs0+c= Subject key identifier: F5:0C:06:F3:67:F9:45:E2:B2:B1:57:53:70:53:8C:B8:36:0B:A0:36 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1C66E97A0FA5DA5DC6500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc67f9ab-92bb-37a6-9be3-44e2e8f25f3b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2601:83:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:c6:6e:97:a0:fa:5d:a5:dc:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=658f3c18-7e72-489b-9bef-d23726fb0196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:41:22:54:3c:01:e5:4e:cc:bb:15:42:c3:29: 88:fc:72:b4:01:cb:88:bc:09:44:63:38:6e:7c:9c: 38:ba:ab:dd:53:7f:f1:42:61:63:33:11:f6:42:03: 1e:c9:91:fa:f8:60:9f:09:88:6d:ce:12:53:a0:73: 9e:8e:bd:63:ca:5e:b2:d9:47:61:08:1f:f1:eb:c0: aa:46:d1:96:34:cf:85:d0:eb:4b:55:35:99:bf:4e: 45:a1:58:88:38:b2:56:eb:df:d1:2d:7a:37:e2:db: 4a:79:9c:b2:ee:54:5e:7d:35:d2:78:f7:99:46:ab: 66:65:ae:89:d8:89:4e:41:ec:d8:7b:7c:be:04:6d: 4d:1b:bf:64:11:5d:21:9d:0f:a7:d3:41:6a:4b:c8: 09:d4:a0:f1:5d:9d:2d:9c:de:88:57:b9:18:b5:89: d0:ec:6a:dd:92:cc:f9:89:3b:5f:bf:f9:b0:ae:2b: 67:e3:60:4b:23:57:d7:15:88:8b:1d:06:7c:db:6e: 75:cc:28:56:58:cd:e7:3f:d0:55:ae:f9:e6:38:c5: f3:54:7e:d7:e2:38:20:b9:12:87:b6:11:73:44:e3: 39:35:a7:46:d9:34:14:e0:07:26:61:71:34:83:e6: 2f:b3:c4:66:9a:be:8b:2e:19:c5:0b:1f:be:4c:32: 76:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0C:06:F3:67:F9:45:E2:B2:B1:57:53:70:53:8C:B8:36:0B:A0:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc67f9ab-92bb-37a6-9be3-44e2e8f25f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:83:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:89:aa:85:aa:f6:55:16:28:70:4c:a2:e9:78:2b:05:35:c5: 09:78:ca:36:88:33:47:95:4c:20:19:45:ea:1f:10:77:b5:5f: a4:fd:91:8a:14:70:2e:92:b3:60:21:61:31:85:2c:e3:58:24: 61:81:bb:ef:51:7b:06:dc:4b:0d:3f:fd:37:5f:ce:a8:ed:a4: a2:35:3f:f4:b7:aa:65:05:7d:a5:78:e1:40:ad:5d:9d:bf:d6: d0:d0:db:0a:0d:f8:02:1e:90:c2:9f:bf:27:f0:20:d5:9e:54: 2b:64:4d:56:d8:56:b1:41:ac:c3:b1:6d:24:ad:b9:f7:ba:51: 28:52:3b:ad:db:14:44:d1:e2:f4:6d:b9:45:ac:70:48:f3:b9: 1b:8a:8a:f2:0f:00:bb:4a:98:34:26:f4:b7:c0:04:01:72:6d: 08:79:11:a9:54:1b:c0:1f:57:89:79:4d:ae:98:9c:d0:5b:0f: e6:1b:15:55:91:2e:e8:41:85:9e:1f:c4:92:53:76:d8:ee:f7: a0:74:31:9a:80:88:60:36:a6:46:68:44:88:85:05:e5:c5:9e: ca:e7:a6:8a:7c:92:ec:47:c9:e2:3d:18:0d:16:be:58:fb:6d: 61:d1:ad:38:4f:0e:e2:02:e5:d1:7f:cd:06:b7:6b:30:10:a9: 48:73:5d:28 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErswcZul6D6XaXcZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjU4ZjNjMTgtN2U3Mi00ODliLTliZWYtZDIzNzI2ZmIwMTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEEiVDwB5U7MuxVCwymI/HK0AcuIvAlEYzhu fJw4uqvdU3/xQmFjMxH2QgMeyZH6+GCfCYhtzhJToHOejr1jyl6y2UdhCB/x68Cq RtGWNM+F0OtLVTWZv05FoViIOLJW69/RLXo34ttKeZyy7lRefTXSePeZRqtmZa6J 2IlOQezYe3y+BG1NG79kEV0hnQ+n00FqS8gJ1KDxXZ0tnN6IV7kYtYnQ7Grdksz5 iTtfv/mwritn42BLI1fXFYiLHQZ82251zChWWM3nP9BVrvnmOMXzVH7X4jgguRKH thFzROM5NadG2TQU4AcmYXE0g+Yvs8Rmmr6LLhnFCx++TDJ2RQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPUMBvNn+UXisrFXU3BTjLg2C6A2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGM2N2Y5YWItOTJiYi0z N2E2LTliZTMtNDRlMmU4ZjI1ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAg0Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAm4mqhar2VRYocEyi6XgrBTXFCXjKNogzR5VMIBlF6h8Qd7VfpP2R ihRwLpKzYCFhMYUs41gkYYG771F7BtxLDT/9N1/OqO2kojU/9LeqZQV9pXjhQK1d nb/W0NDbCg34Ah6Qwp+/J/Ag1Z5UK2RNVthWsUGsw7FtJK2597pRKFI7rdsURNHi 9G25RaxwSPO5G4qK8g8Au0qYNCb0t8AEAXJtCHkRqVQbwB9XiXlNrpic0FsP5hsV VZEu6EGFnh/EklN22O73oHQxmoCIYDamRmhEiIUF5cWeyueminyS7EfJ4j0YDRa+ WPttYdGtOE8O4gLl0X/NBrdrMBCpSHNdKA== -----END CERTIFICATE-----Generated at Sun Aug 24 01:22:45 2025 by rpki-client