$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11adf43d-f5d6-3ede-956b-7561e88dfc9e.roa File: 11adf43d-f5d6-3ede-956b-7561e88dfc9e.roa (raw, json) Hash identifier: cAyenw1HJEEHVoyWva9ARq+NPONQgSDuhaFFKdK77Nc= Subject key identifier: 8D:CD:40:6C:78:18:35:3C:E7:1A:13:C0:0E:97:90:AB:1C:18:53:0E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB971AAFE62A2608453840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11adf43d-f5d6-3ede-956b-7561e88dfc9e.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 2606:4700:304e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:97:1a:af:e6:2a:26:08:45:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=80f19603-972a-4844-b7fd-1e9a133f9cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:bb:4f:6e:a1:a1:0d:24:86:83:da:f6:d4: 73:8c:70:ab:42:e2:d6:f4:7a:5f:fc:7a:0b:de:7b: 25:ab:3c:1e:b4:8f:40:43:75:e5:b3:f6:2e:60:ad: f6:1c:e5:55:b1:a4:3e:94:58:01:0a:7a:60:a5:f5: a8:e7:b5:f6:d2:79:fa:cc:cd:94:0c:b8:b2:41:1d: a0:f5:3e:8a:b0:6a:17:b0:81:74:40:72:a5:8b:c9: 1f:17:f7:63:ea:23:16:3f:e3:1e:f0:71:6a:e8:1c: da:f7:0a:ae:04:59:25:7a:99:be:8f:1d:41:f1:b6: 05:8e:35:77:5c:f1:5c:0d:65:57:d2:f5:cb:e3:b3: 9a:71:38:42:fd:4b:68:c2:7a:bc:16:e4:bb:4a:23: ca:db:a0:b8:58:a6:c3:fb:12:c0:87:1d:f0:84:70: 5b:f3:9d:15:31:40:cb:4d:d9:04:b4:c3:25:38:6b: 1f:47:b7:12:f7:61:a9:cb:76:72:39:5a:59:9d:0f: f3:fe:56:f8:70:70:1a:7b:83:e0:a4:47:d3:3b:a2: f5:93:70:e4:f6:d8:ed:2e:16:b1:30:2c:8e:21:58: f8:6a:49:b3:ac:6c:98:27:b2:07:be:72:48:3e:2d: 82:58:86:f1:2f:02:8c:9f:07:87:44:14:7c:09:be: 61:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CD:40:6C:78:18:35:3C:E7:1A:13:C0:0E:97:90:AB:1C:18:53:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11adf43d-f5d6-3ede-956b-7561e88dfc9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:304e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9c:a6:97:26:a3:f7:fe:82:ff:10:a3:ec:9b:73:e0:62:d0: a9:40:fd:3d:88:dc:31:cc:07:23:af:e5:34:38:5c:1f:b1:ff: a5:0e:32:c5:3d:b7:4c:82:3c:7c:06:fb:19:1e:ad:4e:26:91: 8c:84:97:f9:57:72:3b:ab:10:7e:d0:ff:6d:e2:15:88:ef:af: 7e:bb:a7:d6:9c:44:b5:da:89:81:04:96:6b:bf:1c:f7:42:92: c5:95:14:6b:94:2e:c6:bf:77:54:ef:95:05:a9:e4:4d:e3:f3: 7c:66:22:a2:08:d0:8f:0a:d3:5e:d0:43:ea:52:70:fc:7b:33: 5a:a3:7b:54:cf:0a:33:8d:38:7b:82:86:c3:8f:ae:ad:73:62: e4:cd:55:be:be:d8:2a:9c:56:4d:c2:e2:55:42:ad:b8:9d:8b: f7:1c:88:09:fe:de:2f:cc:56:67:b9:ab:15:3f:af:2b:7c:88: 90:8d:b8:f8:e2:9a:8b:d3:48:55:93:33:6c:2e:96:25:f6:2c: 1a:d4:98:bc:15:38:f6:de:04:40:b1:2d:77:72:58:8e:67:08: cb:c0:b7:5b:6a:19:fe:ca:b2:51:c7:92:5d:7b:ed:ef:1a:3c: 80:83:80:e2:67:42:d1:f9:2f:79:9f:83:6d:79:0b:d9:f3:2e: 6a:8b:13:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErFq5car+YqJghFOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ODBmMTk2MDMtOTcyYS00ODQ0LWI3ZmQtMWU5YTEzM2Y5Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMS7T26hoQ0khoPa9tRzjHCrQuLW9Hpf/HoL 3nslqzwetI9AQ3Xls/YuYK32HOVVsaQ+lFgBCnpgpfWo57X20nn6zM2UDLiyQR2g 9T6KsGoXsIF0QHKli8kfF/dj6iMWP+Me8HFq6Bza9wquBFklepm+jx1B8bYFjjV3 XPFcDWVX0vXL47OacThC/Utownq8FuS7SiPK26C4WKbD+xLAhx3whHBb850VMUDL TdkEtMMlOGsfR7cS92Gpy3ZyOVpZnQ/z/lb4cHAae4PgpEfTO6L1k3Dk9tjtLhax MCyOIVj4akmzrGyYJ7IHvnJIPi2CWIbxLwKMnweHRBR8Cb5h3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI3NQGx4GDU85xoTwA6XkKscGFMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTFhZGY0M2QtZjVkNi0z ZWRlLTk1NmItNzU2MWU4OGRmYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADBO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEacppcmo/f+gv8Qo+ybc+Bi0KlA/T2I3DHMByOv5TQ4XB+x/6UO MsU9t0yCPHwG+xkerU4mkYyEl/lXcjurEH7Q/23iFYjvr367p9acRLXaiYEElmu/ HPdCksWVFGuULsa/d1TvlQWp5E3j83xmIqII0I8K017QQ+pScPx7M1qje1TPCjON OHuChsOPrq1zYuTNVb6+2CqcVk3C4lVCrbidi/cciAn+3i/MVme5qxU/ryt8iJCN uPjimovTSFWTM2wuliX2LBrUmLwVOPbeBECxLXdyWI5nCMvAt1tqGf7KslHHkl17 7e8aPICDgOJnQtH5L3mfg215C9nzLmqLE3c= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:49 2025 by rpki-client