$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0bc896b5-fa8b-3f4a-8ec4-37f4596e40df.roa File: 0bc896b5-fa8b-3f4a-8ec4-37f4596e40df.roa (raw, json) Hash identifier: eFRdmCHmDOYFxWjkBwPAO2QpCLczlh2RZhhjY9zA2G8= Subject key identifier: B7:EA:6C:1F:D8:81:B4:71:32:88:EF:A7:D7:7C:97:87:85:28:97:6E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D14DE28B04C78DD1D3D910 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0bc896b5-fa8b-3f4a-8ec4-37f4596e40df.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 2606:4700:4049::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:4d:e2:8b:04:c7:8d:d1:d3:d9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=b00fcf7c-45a9-4c09-b307-0c520f3b7f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:08:e5:a9:63:96:95:8b:0c:ac:eb:4f:f8: d1:4d:06:27:08:0c:49:0e:fc:16:4b:93:0f:8b:da: d2:13:ba:37:25:a5:70:06:c8:b3:4f:6a:13:eb:4d: 93:4b:be:78:9e:ed:1c:39:60:57:fa:ae:9a:96:4f: bd:54:e9:3a:f0:20:44:91:f6:5b:ba:7c:34:fa:40: 59:ec:c4:85:b0:03:75:23:94:50:8e:06:d2:9c:a7: 67:f3:45:f0:1c:91:40:44:db:5d:1c:7d:9d:15:bf: b4:d9:5f:ca:bb:22:36:b3:e2:2d:5f:4d:b4:f1:64: d8:91:a2:50:e2:41:c1:ad:32:7f:d8:46:da:6e:fb: c3:c3:ff:95:31:43:ee:b8:a3:70:ad:eb:6f:cb:e8: a7:55:1b:49:63:f1:06:c6:8b:f8:eb:eb:92:e8:c7: 60:38:09:6d:15:d8:dd:f7:78:6f:c0:75:ed:52:4f: d3:dd:6b:2d:5f:b6:77:6c:49:a4:f8:ac:d6:46:b1: a2:60:6c:c6:d2:3d:cf:ff:59:10:93:ec:25:5c:79: b1:9e:2a:97:59:67:1f:fa:59:92:bb:c9:a7:3c:68: 39:e7:9a:b4:43:49:97:e6:ec:cc:46:35:57:94:3b: c5:72:c4:f1:3d:49:27:7a:cf:32:e8:f8:fe:ec:fd: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EA:6C:1F:D8:81:B4:71:32:88:EF:A7:D7:7C:97:87:85:28:97:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0bc896b5-fa8b-3f4a-8ec4-37f4596e40df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4049::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:77:5a:fc:6c:32:8d:1a:22:34:da:96:df:9a:9c:ab:1d:f5: 63:ea:22:5b:ac:76:71:1b:c9:c5:81:0e:fd:b6:14:c2:30:62: df:b1:b7:70:25:57:56:f6:7f:fd:ca:a8:7f:5a:d0:eb:1e:be: ce:ea:b8:2c:be:6a:0b:21:5d:13:03:cd:5d:25:d3:4c:c1:80: ca:f4:d4:55:ca:d2:40:64:2a:a2:b3:59:68:d3:11:20:1e:e9: 76:f5:80:15:69:b6:0a:49:ea:20:90:ba:66:0e:d6:46:60:e2: 50:97:93:ee:e6:d4:1b:d3:b7:3f:11:fa:f4:f7:26:cc:43:2c: b4:fc:4d:ff:7f:d5:06:da:13:76:e5:9a:e0:70:b5:82:7e:8f: 23:96:f3:7f:f4:ed:8e:a0:5f:2b:d0:f5:7b:54:f1:a9:0f:c3: 1a:aa:c7:30:23:cf:92:04:e5:0f:71:ba:b9:b5:08:d0:f3:3c: fb:4f:18:89:b1:c4:03:20:0e:c3:43:7d:52:50:9b:b7:bd:cc: 1a:4c:ed:46:5c:54:63:2b:21:be:4c:8b:af:d6:77:7c:12:dd: 6a:05:ad:78:c8:ac:75:d0:95:cd:c0:88:41:b1:af:60:95:ef: ce:e5:23:0c:80:ca:d4:3b:0f:33:e5:3a:b0:69:ed:d3:5e:48: 0a:99:fb:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0U3iiwTHjdHT2RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YjAwZmNmN2MtNDVhOS00YzA5LWIzMDctMGM1MjBmM2I3ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh8I5aljlpWLDKzrT/jRTQYnCAxJDvwWS5MP i9rSE7o3JaVwBsizT2oT602TS754nu0cOWBX+q6alk+9VOk68CBEkfZbunw0+kBZ 7MSFsAN1I5RQjgbSnKdn80XwHJFARNtdHH2dFb+02V/KuyI2s+ItX0208WTYkaJQ 4kHBrTJ/2EbabvvDw/+VMUPuuKNwretvy+inVRtJY/EGxov46+uS6MdgOAltFdjd 93hvwHXtUk/T3WstX7Z3bEmk+KzWRrGiYGzG0j3P/1kQk+wlXHmxniqXWWcf+lmS u8mnPGg555q0Q0mX5uzMRjVXlDvFcsTxPUknes8y6Pj+7P1PIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLfqbB/YgbRxMojvp9d8l4eFKJduMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGJjODk2YjUtZmE4Yi0z ZjRhLThlYzQtMzdmNDU5NmU0MGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEBJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ93WvxsMo0aIjTalt+anKsd9WPqIlusdnEbycWBDv22FMIwYt+x t3AlV1b2f/3KqH9a0Osevs7quCy+agshXRMDzV0l00zBgMr01FXK0kBkKqKzWWjT ESAe6Xb1gBVptgpJ6iCQumYO1kZg4lCXk+7m1BvTtz8R+vT3JsxDLLT8Tf9/1Qba E3blmuBwtYJ+jyOW83/07Y6gXyvQ9XtU8akPwxqqxzAjz5IE5Q9xurm1CNDzPPtP GImxxAMgDsNDfVJQm7e9zBpM7UZcVGMrIb5Mi6/Wd3wS3WoFrXjIrHXQlc3AiEGx r2CV787lIwyAytQ7DzPlOrBp7dNeSAqZ+0s= -----END CERTIFICATE-----Generated at Sat Aug 23 16:54:43 2025 by rpki-client