$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3f8e5642-3dd3-334d-9152-d36dd7063513.roa File: 3f8e5642-3dd3-334d-9152-d36dd7063513.roa (raw, json) Hash identifier: A36LQWzHfTUpL0CwqQHwb5pt2+dKIa/n3sf0qJ5nEwk= Subject key identifier: 13:7E:92:92:C5:DB:F4:A9:99:1A:A4:4B:38:97:70:0A:30:AB:AE:5A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB998425344D4FD1CC2B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3f8e5642-3dd3-334d-9152-d36dd7063513.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 2606:4700:440b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:99:84:25:34:4d:4f:d1:cc:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=91829b2e-4b9c-4b81-b749-2b62c978d928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:66:9c:49:78:07:62:08:57:da:35:2a:48: cb:14:4e:25:68:0a:fe:9a:1b:76:97:6a:3d:bb:57: 96:55:ae:eb:25:2a:c2:87:a6:a2:a1:32:ee:89:dc: 48:b9:13:de:95:ba:ec:03:d9:59:38:7d:f7:7c:cb: de:09:e1:2a:1a:ba:62:ad:6e:eb:a4:d7:42:09:c4: 68:3b:b1:c1:de:4c:74:45:ed:9b:01:48:1e:ea:8f: 5e:30:3f:96:32:c2:f0:c2:56:22:5d:e6:b0:f7:3b: 00:99:f3:0c:39:13:4f:c6:b9:76:47:ad:f5:56:d7: 4e:69:28:33:90:63:65:a0:72:c1:e1:97:e1:bf:cb: 4f:69:c6:41:4e:e5:34:53:1f:8f:3c:16:67:bc:79: 49:c4:8c:14:5c:ef:81:8f:ed:68:b4:78:94:59:ee: b0:4f:0c:63:73:ed:b9:ec:4c:f5:c2:53:0d:42:ed: f7:88:2e:5c:08:f5:4c:08:19:4c:17:bb:44:11:61: a2:52:9e:f8:37:a8:3b:7d:56:bc:06:9a:ef:00:35: e8:13:c0:b3:5f:ec:1a:d5:df:99:e8:d2:f5:f6:72: d1:ba:ea:0b:04:53:4c:42:4e:8e:9f:59:ff:58:61: cd:61:05:2c:85:bb:8b:d4:bb:35:80:3f:ae:0e:e8: 12:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7E:92:92:C5:DB:F4:A9:99:1A:A4:4B:38:97:70:0A:30:AB:AE:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3f8e5642-3dd3-334d-9152-d36dd7063513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:440b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:50:cf:41:d0:fc:5f:6a:8a:50:1a:36:92:db:96:dc:b9:8b: 1e:85:60:05:19:fa:2d:df:81:b7:22:65:af:5c:dc:cf:30:cb: ca:07:69:04:10:3b:07:82:04:dc:4d:b4:65:d9:50:d8:99:a3: 46:8f:41:ac:5b:16:25:ba:52:59:fa:f2:d7:75:7e:73:1b:13: cc:be:b5:4a:1e:22:44:82:ba:9c:d8:a5:80:b5:15:13:e9:f6: e6:f4:b0:9a:9e:0d:e5:d3:b2:79:b4:34:c7:fa:41:bb:72:56: ea:87:37:5c:65:5c:86:23:48:9b:4e:c6:4c:c0:4f:1a:c6:ef: 42:41:d0:82:e7:b0:31:b4:7d:82:18:6f:bd:b8:25:c1:5d:73: da:bf:0b:b5:a2:7b:e5:23:69:37:57:1e:38:40:3c:68:ba:27: d7:ef:37:61:ac:ed:f3:fd:57:85:5c:4a:2c:7f:da:69:be:86: d8:90:64:39:25:49:5a:b6:57:5e:e0:e0:46:c7:2e:dd:da:23: d6:fd:39:57:d9:79:93:b7:d4:ff:58:b8:bb:73:05:a8:16:e3: 8c:99:c7:29:df:d2:76:62:7a:1f:50:aa:cb:2c:ed:2b:00:4b: 5e:48:25:8d:01:d1:07:52:82:24:e0:53:59:63:e4:5d:01:61: b3:d6:d4:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErFq5mEJTRNT9HMKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OTE4MjliMmUtNGI5Yy00YjgxLWI3NDktMmI2MmM5NzhkOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jtmnEl4B2IIV9o1KkjLFE4laAr+mht2l2o9 u1eWVa7rJSrCh6aioTLuidxIuRPelbrsA9lZOH33fMveCeEqGrpirW7rpNdCCcRo O7HB3kx0Re2bAUge6o9eMD+WMsLwwlYiXeaw9zsAmfMMORNPxrl2R631VtdOaSgz kGNloHLB4Zfhv8tPacZBTuU0Ux+PPBZnvHlJxIwUXO+Bj+1otHiUWe6wTwxjc+25 7Ez1wlMNQu33iC5cCPVMCBlMF7tEEWGiUp74N6g7fVa8BprvADXoE8CzX+wa1d+Z 6NL19nLRuuoLBFNMQk6On1n/WGHNYQUshbuL1Ls1gD+uDugS1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBN+kpLF2/SpmRqkSziXcAowq65aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2Y4ZTU2NDItM2RkMy0z MzRkLTkxNTItZDM2ZGQ3MDYzNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEQL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHdQz0HQ/F9qilAaNpLblty5ix6FYAUZ+i3fgbciZa9c3M8wy8oH aQQQOweCBNxNtGXZUNiZo0aPQaxbFiW6Uln68td1fnMbE8y+tUoeIkSCupzYpYC1 FRPp9ub0sJqeDeXTsnm0NMf6QbtyVuqHN1xlXIYjSJtOxkzATxrG70JB0ILnsDG0 fYIYb724JcFdc9q/C7Wie+UjaTdXHjhAPGi6J9fvN2Gs7fP9V4VcSix/2mm+htiQ ZDklSVq2V17g4EbHLt3aI9b9OVfZeZO31P9YuLtzBagW44yZxynf0nZieh9Qqsss 7SsAS15IJY0B0QdSgiTgU1lj5F0BYbPW1EE= -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:06 2025 by rpki-client