$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/616a82f0-d85f-312e-8300-21e89d1b0b01.roa File: 616a82f0-d85f-312e-8300-21e89d1b0b01.roa (raw, json) Hash identifier: PkLs/28bIGH3lLAgvIqakoBbfozJDSvjKvKBe2sqeLs= Subject key identifier: F2:B6:34:1E:43:E8:D3:94:A6:3B:2F:E4:87:CE:24:1D:00:B6:68:82 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584AF256AA2D010BAC9250EBEA00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/616a82f0-d85f-312e-8300-21e89d1b0b01.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 6079 IP address blocks: 2601:2008::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:aa:2d:01:0b:ac:92:50:eb:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=fe3e6ff8-aba3-4efd-9c42-9e6aba409b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ce:d2:01:df:cb:ca:97:a3:31:8f:17:f3:9e: d5:cb:3f:01:95:08:04:10:18:3a:91:89:1e:30:86: e8:8b:22:b1:53:69:e3:78:42:af:cb:ca:aa:d6:60: d1:16:9f:26:ea:e7:58:e4:87:cc:1a:0a:f3:a2:8f: bd:b7:7d:b0:e0:23:20:a2:06:f2:42:34:4e:34:3a: d8:63:95:31:a7:24:3e:cb:1d:8c:c5:d5:96:16:30: 0f:56:07:e5:54:38:ae:cb:e7:9a:3d:9e:73:9b:cf: 64:24:9d:ca:93:1e:37:85:6e:5f:64:26:48:b1:ef: 1a:af:76:2a:a5:e1:60:1b:3f:cd:4b:82:5e:81:eb: 45:7e:58:15:04:74:f0:2a:6b:72:10:77:e7:11:c0: 25:d8:c0:db:4d:8a:e6:da:2b:dc:65:2d:89:8a:5f: 9f:0c:d4:48:45:d1:6f:65:83:6f:85:91:96:29:a5: 6c:ec:46:69:cd:fd:cb:4c:5e:cb:cf:02:fc:5c:b2: 94:59:9f:eb:d9:f2:b9:20:33:1c:bc:43:19:4d:61: f7:18:4e:91:79:6e:20:64:75:60:b8:b7:b4:aa:e3: 2a:8f:ea:95:f4:26:ad:05:68:0c:62:f1:c1:07:26: f5:03:05:b8:ca:d1:4d:07:8f:be:de:fe:2e:75:d8: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B6:34:1E:43:E8:D3:94:A6:3B:2F:E4:87:CE:24:1D:00:B6:68:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/616a82f0-d85f-312e-8300-21e89d1b0b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:2008::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:48:51:92:44:56:7e:76:e7:c1:2d:9d:6e:f4:cd:9a:ab:51: d8:65:90:f7:4c:a9:20:67:bc:a4:58:1b:77:8e:37:93:33:19: 08:fa:54:9f:67:bf:cd:54:49:9f:cd:c0:0f:73:72:9e:07:23: 72:f4:aa:4d:a0:29:8d:c3:46:dc:33:7a:44:9d:99:09:9d:93: 22:07:28:06:8e:d3:04:2e:bc:71:25:2f:ea:cb:9a:18:5e:0a: ae:20:b7:0f:17:74:2f:3a:3c:cc:82:56:85:d6:6b:80:6c:de: 20:90:4c:c5:5a:a9:e6:69:d3:37:98:9a:b6:9e:a5:e4:af:b9: 58:dc:49:46:f9:00:83:43:ac:8a:0b:d6:ca:59:47:76:a1:f4: f9:89:e6:22:b3:48:07:8b:e3:63:43:9f:29:52:47:1c:b6:32: bc:29:bf:c0:75:b8:ac:70:57:f7:96:b4:95:db:d4:ad:10:dd: 79:4b:56:05:22:a9:2b:95:46:19:06:c9:8a:76:3e:ea:38:c7: f2:3e:52:c4:59:64:9e:97:84:84:79:64:d5:0d:1b:a3:0f:5c: 8c:38:bc:4b:b4:86:f5:6f:bc:19:d5:fd:b4:6a:23:e0:da:26: 76:b0:c2:9a:86:74:9e:e3:ec:da:62:98:8c:46:a8:c1:4b:a7: b8:5e:64:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEryVqotAQusklDr6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZmUzZTZmZjgtYWJhMy00ZWZkLTljNDItOWU2YWJhNDA5Yjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls7SAd/LypejMY8X857Vyz8BlQgEEBg6kYke MIboiyKxU2njeEKvy8qq1mDRFp8m6udY5IfMGgrzoo+9t32w4CMgogbyQjRONDrY Y5UxpyQ+yx2MxdWWFjAPVgflVDiuy+eaPZ5zm89kJJ3Kkx43hW5fZCZIse8ar3Yq peFgGz/NS4JegetFflgVBHTwKmtyEHfnEcAl2MDbTYrm2ivcZS2Jil+fDNRIRdFv ZYNvhZGWKaVs7EZpzf3LTF7LzwL8XLKUWZ/r2fK5IDMcvEMZTWH3GE6ReW4gZHVg uLe0quMqj+qV9CatBWgMYvHBByb1AwW4ytFNB4++3v4uddhBkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPK2NB5D6NOUpjsv5IfOJB0AtmiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNjE2YTgyZjAtZDg1Zi0z MTJlLTgzMDAtMjFlODlkMWIwYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgEgCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBSFGSRFZ+dufBLZ1u9M2aq1HYZZD3TKkgZ7ykWBt3jjeTMxkI+lSf Z7/NVEmfzcAPc3KeByNy9KpNoCmNw0bcM3pEnZkJnZMiBygGjtMELrxxJS/qy5oY XgquILcPF3QvOjzMglaF1muAbN4gkEzFWqnmadM3mJq2nqXkr7lY3ElG+QCDQ6yK C9bKWUd2ofT5ieYis0gHi+NjQ58pUkcctjK8Kb/AdbiscFf3lrSV29StEN15S1YF IqkrlUYZBsmKdj7qOMfyPlLEWWSel4SEeWTVDRujD1yMOLxLtIb1b7wZ1f20aiPg 2iZ2sMKahnSe4+zaYpiMRqjBS6e4XmRD -----END CERTIFICATE-----Generated at Sat Aug 23 15:59:37 2025 by rpki-client