$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c26fb65-8f37-3819-96cf-f5a8578304e5.roa File: 5c26fb65-8f37-3819-96cf-f5a8578304e5.roa (raw, json) Hash identifier: Y+0cxmzucKXLw2VUUQ6RI4pL6sTYXgW600DyV/UOHuo= Subject key identifier: 50:DD:09:92:4D:47:3A:12:D6:8B:F2:34:E3:7B:6B:6F:62:A8:5D:48 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D134C87F8B630A82AEB280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c26fb65-8f37-3819-96cf-f5a8578304e5.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 2606:4700:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:34:c8:7f:8b:63:0a:82:ae:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=ded32ba0-1a72-4af0-a57e-48944af298d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8c:6a:ce:0e:73:6a:26:79:97:09:8e:23:38: 7e:15:26:46:a2:cb:d2:41:fa:2a:ce:db:83:74:79: 3c:40:5a:36:40:58:c0:bf:bc:53:13:28:30:af:43: 54:98:b3:68:ad:ce:7c:ff:1b:cf:04:01:14:d7:5d: 36:01:70:2f:02:1f:61:7f:58:a5:db:7e:a8:29:37: 70:15:66:27:a9:1e:1e:29:f8:8e:ba:2f:71:95:58: 44:ab:7c:e8:05:d9:79:96:7d:dd:84:c6:82:e0:b3: 3c:3c:b1:65:46:79:1a:e5:7e:0b:26:0a:b3:0d:eb: 0c:df:23:7c:31:ce:79:70:37:0d:65:5c:47:f5:8c: 06:84:d5:5e:32:10:c4:d4:21:b1:63:93:16:43:c0: 7f:4e:44:dd:3b:26:4d:f3:26:3c:97:07:b8:22:36: f9:bf:ab:13:3d:99:15:9c:7e:7b:09:5b:11:1e:02: c6:eb:ea:76:bb:40:e9:db:9f:61:06:d7:54:63:83: d4:53:21:b6:be:fc:eb:28:27:62:5f:ba:af:a0:75: 07:93:02:9b:d2:67:79:e3:17:aa:b7:f6:8a:27:78: 66:f9:a2:c3:63:a4:ed:16:0d:54:e8:a3:f1:9f:cb: c1:3d:7b:3a:6d:0c:29:4b:4a:2d:d4:9a:88:08:46: 09:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DD:09:92:4D:47:3A:12:D6:8B:F2:34:E3:7B:6B:6F:62:A8:5D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c26fb65-8f37-3819-96cf-f5a8578304e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0b:d8:9c:33:7e:4d:c1:e2:f6:d5:fb:d1:44:b5:89:28:2c: 0b:a1:b0:ab:81:ed:2f:2a:ba:a5:18:2f:bb:78:35:50:fb:54: 4b:eb:fd:bc:6f:83:5b:eb:29:2a:12:a3:af:5f:52:f6:73:b6: a5:ec:15:37:15:41:08:03:b6:e8:28:66:d1:8f:14:c2:02:f0: 59:f6:53:a8:03:36:3b:aa:b8:4e:88:5e:4e:22:3e:83:6c:1b: 82:81:8e:62:e4:d9:65:64:c3:c4:65:42:c7:98:be:c4:c0:2d: 9b:6b:43:14:56:00:1a:34:f7:07:f2:71:7c:b1:a7:50:07:d1: 39:9c:34:e6:95:5a:9e:f6:f7:40:e5:09:0f:1e:a5:e6:65:e3: 45:3d:fa:7f:90:7e:d5:1b:14:5b:44:1d:76:22:49:9b:af:10: c5:56:91:7a:08:19:00:db:b4:94:20:6d:dc:71:14:1f:47:e7: b7:ba:92:3f:fb:fa:2e:08:12:6e:ca:ce:17:a5:aa:20:2b:d7: 16:6f:1a:6d:09:0a:21:9e:ea:54:89:df:ec:fc:1e:2a:b0:bf: ac:f2:b6:97:90:a5:a6:34:06:c7:91:9f:ff:e6:f4:16:04:70: 1a:3f:c4:ea:4b:c7:d8:89:56:92:5a:ce:40:7a:eb:75:b6:2c: 67:0d:ad:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0TTIf4tjCoKusoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZGVkMzJiYTAtMWE3Mi00YWYwLWE1N2UtNDg5NDRhZjI5OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Yxqzg5zaiZ5lwmOIzh+FSZGosvSQfoqztuD dHk8QFo2QFjAv7xTEygwr0NUmLNorc58/xvPBAEU1102AXAvAh9hf1il236oKTdw FWYnqR4eKfiOui9xlVhEq3zoBdl5ln3dhMaC4LM8PLFlRnka5X4LJgqzDesM3yN8 Mc55cDcNZVxH9YwGhNVeMhDE1CGxY5MWQ8B/TkTdOyZN8yY8lwe4Ijb5v6sTPZkV nH57CVsRHgLG6+p2u0Dp259hBtdUY4PUUyG2vvzrKCdiX7qvoHUHkwKb0md54xeq t/aKJ3hm+aLDY6TtFg1U6KPxn8vBPXs6bQwpS0ot1JqICEYJxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFDdCZJNRzoS1ovyNON7a29iqF1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWMyNmZiNjUtOGYzNy0z ODE5LTk2Y2YtZjVhODU3ODMwNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIEL2Jwzfk3B4vbV+9FEtYkoLAuhsKuB7S8quqUYL7t4NVD7VEvr /bxvg1vrKSoSo69fUvZztqXsFTcVQQgDtugoZtGPFMIC8Fn2U6gDNjuquE6IXk4i PoNsG4KBjmLk2WVkw8RlQseYvsTALZtrQxRWABo09wfycXyxp1AH0TmcNOaVWp72 90DlCQ8epeZl40U9+n+QftUbFFtEHXYiSZuvEMVWkXoIGQDbtJQgbdxxFB9H57e6 kj/7+i4IEm7KzhelqiAr1xZvGm0JCiGe6lSJ3+z8Hiqwv6zytpeQpaY0BseRn//m 9BYEcBo/xOpLx9iJVpJazkB663W2LGcNrRE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:48 2025 by rpki-client