$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0291cd35-6af9-3492-9090-6d13e01a79d4.roa File: 0291cd35-6af9-3492-9090-6d13e01a79d4.roa (raw, json) Hash identifier: wtGZihiJleiVN4H4KZK9bL/CRS1KNuEcpmUzcBZoyec= Subject key identifier: E3:14:17:CC:D4:7D:DC:16:2B:4A:50:BF:27:25:C3:99:C2:7F:3D:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD93672521D0390EB55717900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0291cd35-6af9-3492-9090-6d13e01a79d4.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 2606:4700:3114::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:72:52:1d:03:90:eb:55:71:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=c002a07d-735f-4a82-bd61-a71960d454f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:98:08:31:e9:89:b3:19:f1:26:9e:e4:c1: 83:38:b4:8f:a8:62:23:20:a8:d3:fc:31:fa:fb:f4: 6b:de:69:bd:2e:03:45:dc:e2:44:e9:19:e4:93:2b: 9c:b6:fc:2b:0b:72:81:8a:6e:18:91:b2:31:43:33: b2:ed:36:c2:09:fe:dd:d9:7d:3c:6b:69:44:72:12: cc:f6:84:ab:41:55:34:40:d9:32:9c:60:8e:f2:de: b7:a5:e2:2d:f6:ce:3a:d4:35:b1:20:df:90:1c:9f: 4a:05:85:2d:d0:09:e5:2a:8b:1d:bb:46:95:0a:17: 56:ab:57:a1:ea:f6:71:2e:62:72:79:76:69:ce:22: bd:80:c5:ab:fd:f2:b7:0a:dd:f4:3d:22:60:ce:12: 66:a5:02:ac:7c:9e:db:68:3b:e2:5c:07:f3:1d:98: ae:f3:61:19:f1:28:8a:b7:a6:3e:52:64:cb:21:b0: eb:b7:3c:85:53:a3:87:40:f2:2a:b5:1d:7e:da:7e: c0:9d:8b:8a:26:f2:42:60:25:88:e8:7c:b5:6b:9f: 81:1a:99:35:2c:a8:90:da:a1:5e:c8:b6:82:60:e1: fd:6b:b4:57:ca:14:89:3a:04:70:3b:e6:fa:5f:6e: 9c:f0:c7:52:c2:1b:e8:ee:50:0d:90:ad:22:38:37: c7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:14:17:CC:D4:7D:DC:16:2B:4A:50:BF:27:25:C3:99:C2:7F:3D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0291cd35-6af9-3492-9090-6d13e01a79d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3114::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:01:d3:0e:37:66:ff:15:32:81:3a:47:16:ba:a6:b2:97:40: bd:53:b4:02:4f:48:3d:08:35:2e:fa:11:0d:d8:c3:a4:f8:4e: 1c:4b:d9:18:60:ab:91:88:c6:62:8e:9c:b4:4f:28:24:0b:f1: c3:b4:8b:90:31:59:70:fb:91:38:49:d9:7e:a9:53:a4:b7:37: 64:21:06:84:5b:41:e0:7f:61:0f:74:3c:c9:67:37:22:d3:66: 25:d5:1b:f9:39:7a:dd:ae:0e:82:41:2d:ea:50:dc:f4:4b:6d: dc:07:56:46:ed:c0:a2:6e:9b:5c:da:6c:6b:6d:61:b2:5a:88: e3:74:2c:21:29:7e:3a:d4:4f:6b:ac:cb:67:df:30:6d:ef:8a: f2:7b:fb:17:86:17:d5:8c:ac:01:64:b4:9e:f0:0c:18:f5:7b: 35:26:44:4b:b4:61:98:57:b0:84:ca:62:d6:56:cf:cc:fa:55: 3d:96:ac:1a:ae:2c:42:a8:1d:87:ed:8a:77:ff:14:a9:37:28: db:60:34:ff:8d:35:64:fe:0d:03:ab:87:bd:89:44:0d:59:7b: 52:5b:0d:d1:93:90:50:4f:0d:20:fb:e8:23:59:a1:d9:f4:20: 7b:45:bf:16:a7:73:18:c4:30:8f:ea:50:c4:c7:8a:96:27:be: ae:16:f5:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErZNnJSHQOQ61VxeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YzAwMmEwN2QtNzM1Zi00YTgyLWJkNjEtYTcxOTYwZDQ1NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7OYCDHpibMZ8Sae5MGDOLSPqGIjIKjT/DH6 +/Rr3mm9LgNF3OJE6RnkkyuctvwrC3KBim4YkbIxQzOy7TbCCf7d2X08a2lEchLM 9oSrQVU0QNkynGCO8t63peIt9s461DWxIN+QHJ9KBYUt0AnlKosdu0aVChdWq1eh 6vZxLmJyeXZpziK9gMWr/fK3Ct30PSJgzhJmpQKsfJ7baDviXAfzHZiu82EZ8SiK t6Y+UmTLIbDrtzyFU6OHQPIqtR1+2n7AnYuKJvJCYCWI6Hy1a5+BGpk1LKiQ2qFe yLaCYOH9a7RXyhSJOgRwO+b6X26c8MdSwhvo7lANkK0iODfHswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOMUF8zUfdwWK0pQvyclw5nCfz1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDI5MWNkMzUtNmFmOS0z NDkyLTkwOTAtNmQxM2UwMWE3OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADEU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIwB0w43Zv8VMoE6Rxa6prKXQL1TtAJPSD0INS76EQ3Yw6T4ThxL 2Rhgq5GIxmKOnLRPKCQL8cO0i5AxWXD7kThJ2X6pU6S3N2QhBoRbQeB/YQ90PMln NyLTZiXVG/k5et2uDoJBLepQ3PRLbdwHVkbtwKJum1zabGttYbJaiON0LCEpfjrU T2usy2ffMG3vivJ7+xeGF9WMrAFktJ7wDBj1ezUmREu0YZhXsITKYtZWz8z6VT2W rBquLEKoHYftinf/FKk3KNtgNP+NNWT+DQOrh72JRA1Ze1JbDdGTkFBPDSD76CNZ odn0IHtFvxancxjEMI/qUMTHipYnvq4W9Tg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:16:16 2025 by rpki-client