$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a9f0670-83b5-31d5-a58a-c5ed02d4fd59.roa File: 1a9f0670-83b5-31d5-a58a-c5ed02d4fd59.roa (raw, json) Hash identifier: Dxwx7A8OFUgzQr84YRyiyE1/Y2FDrpwEaZosu7Se68w= Subject key identifier: B4:0B:7E:0C:A2:DE:14:46:AD:6E:6E:E9:E2:73:FD:8C:C2:58:D1:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD9367456B5E0E0AEB4030300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a9f0670-83b5-31d5-a58a-c5ed02d4fd59.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 2606:4700:4008::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:74:56:b5:e0:e0:ae:b4:03:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=81bec581-fa50-4ba5-8bf4-b264fcee2654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:95:31:3d:2d:62:94:80:49:48:78:18:82: ae:20:2b:5d:38:fd:08:19:5f:c6:7c:b0:9f:70:88: 94:a3:c9:1e:6e:fb:ce:e2:b9:ea:02:07:20:cf:ad: 74:9d:28:df:42:d3:97:1b:37:17:e1:a2:ae:dd:d8: 95:8a:e7:f2:06:d4:58:b1:ef:36:34:f3:a6:58:10: 0e:b2:eb:06:52:73:70:8a:7f:67:3a:77:66:0b:b2: fa:02:c2:89:ca:91:53:b0:52:55:b7:9f:2e:a1:4a: 15:d1:91:ad:e9:57:0d:08:6d:3b:ed:9d:39:c4:cd: 09:b0:fb:4c:5f:b7:cc:38:c7:a3:91:70:77:c5:0b: 09:24:6b:d1:aa:d8:4e:53:e8:b0:18:5f:f7:27:ca: 44:48:85:03:f2:52:e7:d4:d5:ad:3b:08:01:04:de: 08:9f:5c:47:94:af:f6:c6:f3:56:6f:25:9d:22:24: 6e:9c:71:f3:8e:c6:33:17:44:af:dc:26:e3:43:ea: 26:b7:64:5c:75:54:95:32:34:fe:4c:ec:2d:6d:e4: dd:ca:55:ce:14:97:f2:5a:26:98:83:e8:82:8a:96: f4:26:2e:69:d3:69:e8:18:10:40:d3:b0:26:35:fc: 1b:ca:ef:db:81:08:8c:cd:63:93:6b:51:38:ad:79: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0B:7E:0C:A2:DE:14:46:AD:6E:6E:E9:E2:73:FD:8C:C2:58:D1:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a9f0670-83b5-31d5-a58a-c5ed02d4fd59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4008::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d0:8d:02:7e:e5:75:52:08:1e:bf:43:e5:63:38:66:36:44: 27:2e:fb:c5:d7:9b:96:6e:15:32:cf:2e:99:ab:8c:ed:9b:e8: be:dc:ee:9b:24:b9:7d:9c:9e:0f:3c:b0:eb:4a:e7:44:cd:9d: 98:c3:4f:56:5b:93:08:ae:ca:0e:58:aa:de:b2:83:19:fa:a9: d1:39:68:c4:38:9e:16:06:59:12:d9:f9:1e:89:a8:2f:05:4c: ea:a3:46:5f:b4:58:03:44:ed:3d:fd:12:87:57:83:95:7c:1b: 3b:90:f6:37:49:48:0a:96:be:7e:e5:12:76:74:bd:b4:0f:eb: 0f:b1:b8:78:2c:38:3d:ac:f2:49:fb:09:c7:42:52:03:8a:98: f4:f6:bb:db:37:ba:2a:2d:c9:00:ce:7d:e3:69:07:4e:24:2b: 04:40:e7:8d:70:fe:28:73:5a:29:19:4d:36:66:f1:a4:99:80: c5:66:4e:71:8b:d0:c9:a3:b8:67:a9:ed:fc:91:bb:16:6f:38: d0:6b:98:82:ef:cb:da:d8:a4:0e:cf:98:18:40:43:bb:02:b6: 69:30:d6:5c:68:8b:52:6a:fa:29:d2:45:e4:39:58:98:ea:71: 67:8e:6a:50:85:76:66:f0:e2:d4:4e:9a:7e:d6:68:6c:4e:94: e6:f7:c4:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErZNnRWteDgrrQDAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ODFiZWM1ODEtZmE1MC00YmE1LThiZjQtYjI2NGZjZWUyNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApguVMT0tYpSASUh4GIKuICtdOP0IGV/GfLCf cIiUo8kebvvO4rnqAgcgz610nSjfQtOXGzcX4aKu3diViufyBtRYse82NPOmWBAO susGUnNwin9nOndmC7L6AsKJypFTsFJVt58uoUoV0ZGt6VcNCG077Z05xM0JsPtM X7fMOMejkXB3xQsJJGvRqthOU+iwGF/3J8pESIUD8lLn1NWtOwgBBN4In1xHlK/2 xvNWbyWdIiRunHHzjsYzF0Sv3CbjQ+omt2RcdVSVMjT+TOwtbeTdylXOFJfyWiaY g+iCipb0Ji5p02noGBBA07AmNfwbyu/bgQiMzWOTa1E4rXlBxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQLfgyi3hRGrW5u6eJz/YzCWNEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWE5ZjA2NzAtODNiNS0z MWQ1LWE1OGEtYzVlZDAyZDRmZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgZHAEAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXQjQJ+5XVSCB6/Q+VjOGY2RCcu+8XXm5ZuFTLPLpmrjO2b6L7c 7pskuX2cng88sOtK50TNnZjDT1Zbkwiuyg5Yqt6ygxn6qdE5aMQ4nhYGWRLZ+R6J qC8FTOqjRl+0WANE7T39EodXg5V8GzuQ9jdJSAqWvn7lEnZ0vbQP6w+xuHgsOD2s 8kn7CcdCUgOKmPT2u9s3uiotyQDOfeNpB04kKwRA541w/ihzWikZTTZm8aSZgMVm TnGL0MmjuGep7fyRuxZvONBrmILvy9rYpA7PmBhAQ7sCtmkw1lxoi1Jq+inSReQ5 WJjqcWeOalCFdmbw4tROmn7WaGxOlOb3xC8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:57:15 2025 by rpki-client