$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa File: 8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa (raw, json) Hash identifier: 43tvNrmczHRhY0kxLppeopY/MYKy1xyWTnp+kw3qbFY= Subject key identifier: 7D:51:4F:85:3B:1A:90:1B:11:77:64:04:9E:F1:53:89:9B:E8:18:78 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D136BB3C3894F5D3C71EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 2606:4700:4021::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:36:bb:3c:38:94:f5:d3:c7:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=cbd2bb96-5c31-4fde-977c-96d521415821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:54:88:f5:2e:f2:e1:22:28:24:eb:55:c8:3e: 3d:7e:87:b7:6a:48:24:fc:4e:20:90:6a:fe:f0:20: 9e:da:0d:00:41:fe:cd:c3:8b:ff:f1:62:ab:74:33: c0:d3:b5:8f:4a:8d:93:a2:0f:f1:1b:7c:ae:c4:7d: 58:6d:e2:8f:eb:39:d2:fc:a5:02:bb:03:14:80:22: 88:37:af:ca:bf:f4:88:18:dc:61:e0:f2:e0:2b:50: 24:f8:6b:9a:b0:4f:0c:49:b9:6b:eb:cf:cb:2b:ec: f7:23:a2:c1:fe:18:11:43:4c:ee:87:33:61:d6:14: d2:99:4d:0a:31:f5:ab:22:ee:b1:42:54:88:00:69: b7:9c:2c:73:92:00:52:b8:58:a7:e8:5d:d8:9b:ba: d1:5c:f6:4c:c5:8c:d8:4e:28:92:d5:12:e1:84:bb: 0d:c2:69:d7:b8:7d:0b:4a:1d:cd:93:e7:c3:96:08: 06:51:b7:1a:af:df:7f:81:29:78:bb:34:8f:ca:7b: 55:a3:0a:0f:38:31:20:7c:c8:0c:eb:20:88:07:fc: 06:94:40:93:fc:97:04:87:e3:3a:5a:8f:61:38:45: 3b:95:8d:66:5b:6c:87:28:48:8c:0c:d4:4d:81:9e: e6:2c:70:32:a5:d0:63:6d:10:e8:77:10:73:58:5a: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:51:4F:85:3B:1A:90:1B:11:77:64:04:9E:F1:53:89:9B:E8:18:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4021::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:73:ae:78:ee:d8:b8:93:75:47:14:a5:5c:b5:c5:1b:37:7a: d4:2a:0a:9d:87:ca:c5:bc:2d:17:68:f6:c0:6c:01:e1:03:70: b0:73:c5:36:3e:65:97:59:a4:fc:1f:1d:ea:b0:52:12:d5:74: 6b:bf:c3:7d:b6:f4:2f:bc:e4:98:36:42:7d:55:98:b2:17:f0: 29:30:a5:40:52:52:9d:ff:4c:f9:ff:5d:cf:da:03:b3:95:c1: 24:3d:4c:d0:53:22:7d:33:05:77:fa:50:2a:b9:c8:c5:b0:4a: 3d:f9:b5:2a:b4:9b:da:9a:f4:fe:b1:24:4b:5f:4b:37:1e:ad: 99:f8:ac:d4:3c:b4:d6:94:96:b9:04:4d:78:2d:79:5b:e6:d5: 47:d7:24:38:ab:3d:b8:b0:aa:e3:38:31:64:93:a8:aa:53:09: f9:9f:ae:eb:b3:29:93:34:d5:59:5c:72:1f:28:7a:ad:8e:0b: 0a:28:0e:a5:d6:1b:a7:7a:62:18:5e:b7:ca:e1:99:14:61:30: fc:f6:dc:7a:84:2c:39:6a:ac:63:a2:d6:cb:bc:bc:0f:b2:f4: 19:29:db:e4:b1:d0:f0:32:5a:4b:73:7f:60:eb:85:94:c9:9f: 69:e2:df:a6:68:23:12:21:ce:ba:6d:15:29:7d:63:48:59:94: cc:40:20:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0Ta7PDiU9dPHHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk Y2JkMmJiOTYtNWMzMS00ZmRlLTk3N2MtOTZkNTIxNDE1ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVSI9S7y4SIoJOtVyD49foe3akgk/E4gkGr+ 8CCe2g0AQf7Nw4v/8WKrdDPA07WPSo2Tog/xG3yuxH1YbeKP6znS/KUCuwMUgCKI N6/Kv/SIGNxh4PLgK1Ak+GuasE8MSblr68/LK+z3I6LB/hgRQ0zuhzNh1hTSmU0K MfWrIu6xQlSIAGm3nCxzkgBSuFin6F3Ym7rRXPZMxYzYTiiS1RLhhLsNwmnXuH0L Sh3Nk+fDlggGUbcar99/gSl4uzSPyntVowoPODEgfMgM6yCIB/wGlECT/JcEh+M6 Wo9hOEU7lY1mW2yHKEiMDNRNgZ7mLHAypdBjbRDodxBzWFpUbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH1RT4U7GpAbEXdkBJ7xU4mb6Bh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGY3OGExZTItMWQwYi0z N2Q5LTlmZTUtOGVkOTEzZmFjM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMFzrnju2LiTdUcUpVy1xRs3etQqCp2HysW8LRdo9sBsAeEDcLBz xTY+ZZdZpPwfHeqwUhLVdGu/w3229C+85Jg2Qn1VmLIX8CkwpUBSUp3/TPn/Xc/a A7OVwSQ9TNBTIn0zBXf6UCq5yMWwSj35tSq0m9qa9P6xJEtfSzcerZn4rNQ8tNaU lrkETXgteVvm1UfXJDirPbiwquM4MWSTqKpTCfmfruuzKZM01Vlcch8oeq2OCwoo DqXWG6d6Yhhet8rhmRRhMPz23HqELDlqrGOi1su8vA+y9Bkp2+Sx0PAyWktzf2Dr hZTJn2ni36ZoIxIhzrptFSl9Y0hZlMxAIBo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:00:36 2025 by rpki-client