$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a18dc8f4-5390-3a3f-a297-185b2862eb4d.roa File: a18dc8f4-5390-3a3f-a297-185b2862eb4d.roa (raw, json) Hash identifier: uV5oGV/ckHEB3FhBdiS1FbvE9HKlrCl4BQcdr6gB9N4= Subject key identifier: EC:DB:20:71:B4:BF:64:FA:C4:FB:0B:B6:13:3C:4D:B8:D9:C8:A7:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876645DE3709033266588C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a18dc8f4-5390-3a3f-a297-185b2862eb4d.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 2606:4700:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:64:5d:e3:70:90:33:26:65:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=202cd59e-20c5-4c26-a161-4be01c9ce241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:50:8a:0f:18:17:82:12:1a:1a:94:b0:8a:54: 0b:0d:b0:a9:f9:37:3f:9d:ca:d2:44:e4:b0:af:af: d7:fa:f6:b6:88:b5:e7:6e:37:85:a4:71:7e:fa:d0: 2a:ca:f6:cc:f7:1d:67:10:d9:56:39:c1:cc:68:74: 11:34:cf:4f:cd:74:1c:e8:f5:22:33:11:82:c8:a5: 41:dc:c1:0d:d0:da:98:0f:84:df:f6:c3:af:c5:44: ac:48:9c:fe:41:57:83:d1:3e:68:c0:b3:44:db:eb: 3a:5f:6d:35:2b:31:05:c3:05:c4:9b:7e:0b:e5:4a: 9b:47:6f:25:a4:b7:be:d8:f0:d2:ef:06:1a:5e:81: 60:3c:9c:1f:65:dc:a3:86:72:fe:5c:34:b1:ed:82: 40:cb:df:50:5d:83:4e:fc:40:48:eb:39:35:c9:3c: bd:95:b4:ab:d7:f2:96:2f:b9:08:02:9c:6e:7d:c2: df:0f:79:47:22:68:0f:f6:6d:2e:b8:d3:c3:33:a2: 3b:e5:4d:69:d8:af:78:aa:b5:20:ba:05:9e:83:eb: d3:36:ea:64:a7:38:b6:92:34:7a:4e:1f:d5:80:de: 28:d2:dc:33:94:99:b1:97:52:f6:75:40:60:18:88: 3e:a8:fd:3f:b3:4c:c4:70:da:cf:b6:19:94:5f:fd: 0f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DB:20:71:B4:BF:64:FA:C4:FB:0B:B6:13:3C:4D:B8:D9:C8:A7:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a18dc8f4-5390-3a3f-a297-185b2862eb4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:101::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:16:f2:5a:67:96:90:47:93:58:c6:f5:21:bb:b6:6c:32:9c: b9:84:d4:55:de:7a:a1:a0:3e:d7:39:f2:1a:cd:e7:87:d1:0a: a3:02:a6:46:98:19:76:60:38:c7:a5:b9:c3:53:11:c5:44:58: d9:31:61:97:b8:9b:b3:da:9b:7f:6e:74:de:ca:e0:59:3c:b6: 81:53:8a:41:1b:d2:9a:b1:72:a5:9c:a2:a8:c2:82:96:a3:f3: 32:06:d6:b3:eb:a3:9b:73:19:37:d2:99:cd:53:ec:56:57:56: 39:59:69:ce:68:21:28:33:e6:62:9b:50:1a:8f:97:37:0d:9c: 08:5c:28:20:c1:9f:47:59:3d:1a:23:64:56:33:3a:c3:94:64: 07:c0:44:e5:33:03:fa:ca:05:da:e2:ba:43:00:95:71:32:36: 5a:53:45:93:e4:80:9f:a2:34:09:49:04:a6:9f:65:e0:38:f5: 70:5f:f6:5f:18:79:16:30:02:d1:60:a1:7c:31:b7:b7:6c:71: 08:5a:3c:97:96:d0:f4:28:b9:98:1b:5f:9b:0e:98:a6:6c:06: 12:dc:fd:15:10:18:2d:f2:d1:78:0d:57:c7:8d:9c:9f:f4:8c: c6:9e:96:8a:68:ef:b4:78:42:19:50:c2:23:12:11:cd:83:e6: a1:f9:ae:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErIdmRd43CQMyZliMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjAyY2Q1OWUtMjBjNS00YzI2LWExNjEtNGJlMDFjOWNlMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlCKDxgXghIaGpSwilQLDbCp+Tc/ncrSROSw r6/X+va2iLXnbjeFpHF++tAqyvbM9x1nENlWOcHMaHQRNM9PzXQc6PUiMxGCyKVB 3MEN0NqYD4Tf9sOvxUSsSJz+QVeD0T5owLNE2+s6X201KzEFwwXEm34L5UqbR28l pLe+2PDS7wYaXoFgPJwfZdyjhnL+XDSx7YJAy99QXYNO/EBI6zk1yTy9lbSr1/KW L7kIApxufcLfD3lHImgP9m0uuNPDM6I75U1p2K94qrUgugWeg+vTNupkpzi2kjR6 Th/VgN4o0twzlJmxl1L2dUBgGIg+qP0/s0zEcNrPthmUX/0PKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOzbIHG0v2T6xPsLthM8TbjZyKciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTE4ZGM4ZjQtNTM5MC0z YTNmLWEyOTctMTg1YjI4NjJlYjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAAEB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFsW8lpnlpBHk1jG9SG7tmwynLmE1FXeeqGgPtc58hrN54fRCqMC pkaYGXZgOMelucNTEcVEWNkxYZe4m7Pam39udN7K4Fk8toFTikEb0pqxcqWcoqjC gpaj8zIG1rPro5tzGTfSmc1T7FZXVjlZac5oISgz5mKbUBqPlzcNnAhcKCDBn0dZ PRojZFYzOsOUZAfAROUzA/rKBdriukMAlXEyNlpTRZPkgJ+iNAlJBKafZeA49XBf 9l8YeRYwAtFgoXwxt7dscQhaPJeW0PQouZgbX5sOmKZsBhLc/RUQGC3y0XgNV8eN nJ/0jMaelopo77R4QhlQwiMSEc2D5qH5rvE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:14:07 2025 by rpki-client