$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36e266de-8412-30d9-874c-bd20116a8db2.roa File: 36e266de-8412-30d9-874c-bd20116a8db2.roa (raw, json) Hash identifier: jRGVAbztAiv7DDJL3R+GvkixDfuQwoWJNMys9q8/W50= Subject key identifier: 6C:F0:60:D5:C4:6B:BE:99:90:EA:A2:24:99:C0:51:9E:5C:39:7E:61 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D136FC4F8AB77D44E79E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36e266de-8412-30d9-874c-bd20116a8db2.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 2606:4700:4034::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:36:fc:4f:8a:b7:7d:44:e7:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=9bfcbc2b-dc90-473e-866a-2f85e585bafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:e3:d8:59:1e:c0:b6:c4:d8:42:94:27:9d: 99:f2:97:0d:6a:70:8a:42:48:90:c5:d0:80:e8:0f: 42:32:22:99:0c:31:4f:2d:10:12:54:73:95:9b:89: 4f:42:e0:50:64:0a:98:d6:e3:fb:b6:d7:e6:34:ab: 8c:5f:94:e5:06:2d:df:9c:15:e5:05:64:2e:aa:40: 33:9c:ca:84:cb:52:60:eb:66:49:40:dc:e9:47:1d: 1a:a4:8c:a9:17:58:33:de:00:37:8c:ff:bb:66:79: 61:ea:73:e4:ab:7b:d2:fb:53:0a:1d:3d:cc:ab:4b: fa:9f:d4:03:72:fc:fb:f4:50:6e:21:e6:c7:37:50: 87:9e:52:61:9a:db:ed:86:42:a8:53:64:4e:25:f2: 1a:70:fe:f1:4e:51:2d:cb:74:89:c1:ec:a6:cc:2a: 46:60:63:1d:91:54:f0:b6:55:91:c0:a5:80:97:6b: 9a:93:6d:b4:50:83:de:b5:ea:ba:1e:8a:97:64:c8: fb:7c:9f:74:51:18:46:e1:9f:9a:e2:a1:5e:59:82: f4:e6:85:c9:07:81:da:73:f1:78:b6:43:55:b8:2d: 8a:77:f7:d1:48:a7:61:97:93:26:b2:3c:f0:90:9b: f2:d8:8f:e5:39:f7:72:a9:a1:8d:99:43:4a:9d:62: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F0:60:D5:C4:6B:BE:99:90:EA:A2:24:99:C0:51:9E:5C:39:7E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36e266de-8412-30d9-874c-bd20116a8db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4034::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:65:d6:d2:74:55:20:10:2b:71:70:b4:5a:ff:b2:be:be:7d: 28:64:35:20:0c:8b:90:64:f6:d9:91:71:3b:23:b0:18:7d:04: 88:8e:43:db:18:76:b0:59:ec:ea:c1:cf:ea:91:88:2d:9a:a8: ab:4f:cf:b3:96:db:94:8a:5d:f8:89:ae:92:46:18:ca:62:7a: 4f:77:e8:cb:a8:79:e9:29:a0:16:18:5c:eb:d8:24:16:ae:a4: 0d:60:73:21:db:98:3b:47:2d:5c:56:9f:8e:c1:dc:cf:97:88: 04:64:b7:ad:ba:ef:00:6c:58:01:15:80:fa:b9:ad:a8:13:d2: fa:d7:a6:60:2e:52:7e:88:1b:e2:23:ef:46:38:b5:57:a8:75: 2e:2b:43:7e:1f:fa:59:27:62:8b:96:22:2d:33:7e:90:f6:7a: fc:03:1e:2d:f1:bd:68:6b:6b:a9:f1:6e:88:3b:0c:08:64:49: 2e:6b:71:b2:1d:65:06:6d:72:1a:a6:9b:10:14:96:a2:39:40: 79:0d:ab:ab:67:26:b3:44:33:63:06:5c:1b:55:81:8e:cd:93: 2f:6f:e7:33:c0:80:c4:95:c9:b8:69:56:03:1f:f8:1e:53:5a: 51:40:f4:0d:0d:e9:ef:6d:86:36:7c:13:6a:d8:62:e5:6e:d3: 79:8f:35:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0Tb8T4q3fUTnngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OWJmY2JjMmItZGM5MC00NzNlLTg2NmEtMmY4NWU1ODViYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU/j2FkewLbE2EKUJ52Z8pcNanCKQkiQxdCA 6A9CMiKZDDFPLRASVHOVm4lPQuBQZAqY1uP7ttfmNKuMX5TlBi3fnBXlBWQuqkAz nMqEy1Jg62ZJQNzpRx0apIypF1gz3gA3jP+7Znlh6nPkq3vS+1MKHT3Mq0v6n9QD cvz79FBuIebHN1CHnlJhmtvthkKoU2ROJfIacP7xTlEty3SJweymzCpGYGMdkVTw tlWRwKWAl2uak220UIPeteq6HoqXZMj7fJ90URhG4Z+a4qFeWYL05oXJB4Hac/F4 tkNVuC2Kd/fRSKdhl5MmsjzwkJvy2I/lOfdyqaGNmUNKnWKVLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGzwYNXEa76ZkOqiJJnAUZ5cOX5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzZlMjY2ZGUtODQxMi0z MGQ5LTg3NGMtYmQyMDExNmE4ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEA0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1l1tJ0VSAQK3FwtFr/sr6+fShkNSAMi5Bk9tmRcTsjsBh9BIiO Q9sYdrBZ7OrBz+qRiC2aqKtPz7OW25SKXfiJrpJGGMpiek936MuoeekpoBYYXOvY JBaupA1gcyHbmDtHLVxWn47B3M+XiARkt6267wBsWAEVgPq5ragT0vrXpmAuUn6I G+Ij70Y4tVeodS4rQ34f+lknYouWIi0zfpD2evwDHi3xvWhra6nxbog7DAhkSS5r cbIdZQZtchqmmxAUlqI5QHkNq6tnJrNEM2MGXBtVgY7Nky9v5zPAgMSVybhpVgMf +B5TWlFA9A0N6e9thjZ8E2rYYuVu03mPNdg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:34 2025 by rpki-client