$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa File: 1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa (raw, json) Hash identifier: rCU1h8zoGmTCdihb5egjD2sW/+G3CHeNaY5CXgzrJD4= Subject key identifier: 21:0D:1A:C4:F0:22:81:15:77:0A:AA:DB:B1:4E:DC:0C:57:13:FF:4E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D14B192ADA805D33FCFB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 2606:4700:3000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:4b:19:2a:da:80:5d:33:fc:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=8a51be1c-4ad2-485c-a8db-adb82527ce6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:ac:5f:32:3e:98:5f:a4:a4:20:04:61:76: af:fb:07:ac:41:bf:9c:5d:7b:28:7e:84:a5:9c:d3: 10:1a:9c:61:b1:d0:1d:16:ff:b0:43:3b:bc:e4:c1: 07:1f:a2:79:7f:0c:29:f3:bf:8d:cd:f6:ce:cc:fb: 31:fd:b8:97:eb:0f:fb:1b:c4:b7:64:7f:60:ad:62: 4c:6b:59:0e:bd:82:7c:51:5e:5c:56:bf:8a:0b:e2: c9:30:ec:13:c2:7d:49:4d:4e:7e:39:7e:a8:cd:07: c8:8a:7b:16:6c:98:af:36:1e:8c:06:d6:3f:34:7a: 92:51:f6:90:04:45:77:e5:c7:d8:74:7d:0f:fb:7d: d4:62:cc:f6:e7:a8:91:83:07:f2:4a:b5:33:d0:bb: fa:ba:3a:64:7a:be:87:ac:a3:7c:9a:43:1a:49:ac: 98:1e:5a:f7:c4:59:98:d2:d7:35:60:a2:3d:4c:9a: db:01:b4:8a:d3:7a:50:b6:6e:ba:c4:df:7e:c9:d2: c4:f4:92:b1:93:5c:75:af:5e:93:19:7c:77:b0:33: ac:1a:fc:6e:b8:8d:ba:49:41:99:e2:96:ef:f9:04: 04:ea:29:60:6e:1a:67:22:b2:ef:95:65:b2:d7:78: c9:ee:2b:1d:54:11:dc:36:3a:eb:c0:98:4e:82:54: bb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0D:1A:C4:F0:22:81:15:77:0A:AA:DB:B1:4E:DC:0C:57:13:FF:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:99:60:b2:a1:03:c3:ed:3a:97:4c:86:03:33:b8:ae:9c:46: 84:44:e1:ce:dd:c7:cf:26:21:ee:ac:41:4b:3e:82:0d:0e:40: 30:ae:99:5e:d8:d7:9a:66:f3:6a:c5:4b:4a:93:a1:1d:28:a0: b7:03:2f:4a:e6:3a:2c:1e:b7:89:fe:5d:32:7e:d6:c2:c9:33: 41:6f:7c:4c:95:17:1a:24:90:e5:7e:f0:1e:fb:5b:83:5b:e0: c1:1f:15:00:95:86:6a:77:03:52:80:2b:53:75:31:c6:82:0c: 1f:c1:a9:8b:59:17:b0:62:67:ca:36:04:de:dc:a2:1d:6b:6c: d1:45:76:de:1c:fe:01:b2:64:38:bd:4e:08:de:24:51:9a:bc: 3c:44:a1:8a:fc:57:ee:79:60:c0:f6:3e:56:87:17:53:3e:85: 7d:60:4b:5c:44:d4:7d:94:ad:80:1e:56:4f:cb:cd:52:77:d4: 82:b1:67:0b:d3:59:40:c8:0f:6d:7a:de:93:2c:67:11:df:47: a6:a8:cc:65:c2:51:c0:b5:ce:f8:62:86:cc:17:0f:f4:bd:b2: 7b:d0:b4:28:ba:30:ed:b3:11:c2:d2:e0:93:e1:3f:df:73:e6: 7a:b2:cd:0f:cd:61:b5:f5:c3:39:b0:29:e5:11:26:e5:76:a8: 92:1c:f1:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0UsZKtqAXTP8+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OGE1MWJlMWMtNGFkMi00ODVjLWE4ZGItYWRiODI1MjdjZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWisXzI+mF+kpCAEYXav+wesQb+cXXsofoSl nNMQGpxhsdAdFv+wQzu85MEHH6J5fwwp87+NzfbOzPsx/biX6w/7G8S3ZH9grWJM a1kOvYJ8UV5cVr+KC+LJMOwTwn1JTU5+OX6ozQfIinsWbJivNh6MBtY/NHqSUfaQ BEV35cfYdH0P+33UYsz256iRgwfySrUz0Lv6ujpker6HrKN8mkMaSayYHlr3xFmY 0tc1YKI9TJrbAbSK03pQtm66xN9+ydLE9JKxk1x1r16TGXx3sDOsGvxuuI26SUGZ 4pbv+QQE6ilgbhpnIrLvlWWy13jJ7isdVBHcNjrrwJhOglS7/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCENGsTwIoEVdwqq27FO3AxXE/9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWQ3ZTE0NzEtOWQyNS0z YTYyLWE0MzQtZjIyZTllNmY0YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZHADAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJOZYLKhA8PtOpdMhgMzuK6cRoRE4c7dx88mIe6sQUs+gg0OQDCu mV7Y15pm82rFS0qToR0ooLcDL0rmOiwet4n+XTJ+1sLJM0FvfEyVFxokkOV+8B77 W4Nb4MEfFQCVhmp3A1KAK1N1McaCDB/BqYtZF7BiZ8o2BN7coh1rbNFFdt4c/gGy ZDi9TgjeJFGavDxEoYr8V+55YMD2PlaHF1M+hX1gS1xE1H2UrYAeVk/LzVJ31IKx ZwvTWUDID2163pMsZxHfR6aozGXCUcC1zvhihswXD/S9snvQtCi6MO2zEcLS4JPh P99z5nqyzQ/NYbX1wzmwKeURJuV2qJIc8Ss= -----END CERTIFICATE-----Generated at Sat Aug 23 15:00:25 2025 by rpki-client