$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa File: d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa (raw, json) Hash identifier: H5P/OrNv1aZPADHG6wO8osMAMOVcY71E7b5qKVYp8BI= Subject key identifier: A2:9D:1F:10:9E:B5:F0:E0:DB:82:AD:A6:8F:47:D2:C2:64:91:F9:00 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D1358045F54B38B57A1780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 2606:4700:3017::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:35:80:45:f5:4b:38:b5:7a:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=d15f32f4-62f7-44a3-b9a2-e4ece8dcc525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:d1:da:92:6d:57:b1:75:b1:ef:33:49:d9: 05:45:df:b1:52:9f:b6:9f:2b:60:12:25:a1:bc:08: 32:4c:a0:cf:90:e3:62:3d:41:90:5f:8a:92:31:96: 7e:1a:e1:78:64:a0:30:90:75:5f:d7:9c:75:20:f2: e0:72:4a:28:bc:d2:4e:b9:c7:ad:87:0c:78:7e:f6: 83:a4:dc:49:a0:d0:b0:ce:6c:76:f3:32:0b:eb:72: be:55:66:33:dd:c5:c9:17:8a:55:42:fd:d1:b3:a1: c8:f2:60:6b:a7:9d:c8:cd:62:64:22:80:8c:1d:11: f3:d9:65:73:53:0f:8e:0c:97:e3:5a:9d:ff:27:84: 48:ab:1b:29:f1:24:e4:47:e5:4c:05:d1:e0:6b:e3: 1e:7d:0f:4b:39:e8:dc:6c:eb:2f:d6:40:c0:03:17: 3b:69:d9:32:b2:18:6a:bf:16:e0:a0:a0:0c:d9:e0: 33:b1:75:76:65:07:9e:95:c6:71:49:16:67:84:17: da:33:09:81:2a:ce:11:24:b9:8f:5a:e4:fe:d3:b7: 8c:82:02:9a:75:49:f3:e2:48:cb:b2:6b:7d:e0:e6: bf:b5:96:e4:aa:0b:b1:ff:74:76:77:88:b1:6c:ef: d8:36:8c:9d:6f:9b:47:3d:85:ab:f7:67:42:96:45: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:1F:10:9E:B5:F0:E0:DB:82:AD:A6:8F:47:D2:C2:64:91:F9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3017::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:24:69:61:05:1a:dd:94:43:7b:27:c1:1d:45:95:f3:9d:ea: 60:4c:9d:48:5f:c2:65:ac:74:e9:98:88:64:60:bc:b3:9f:56: 62:64:10:3b:a7:68:d9:41:ee:09:15:e5:23:d9:8b:b7:c4:b3: e8:c7:d7:c1:20:04:81:c4:de:f5:7b:bc:a8:7b:08:93:00:f9: a2:f8:75:26:67:ad:cd:7a:da:5d:bb:85:6a:8d:2f:98:0d:1b: 02:54:c5:a1:cd:5d:7c:8f:53:ab:01:31:b8:38:05:90:6b:14: ef:17:2c:65:fe:c5:31:bd:0d:a2:5f:fc:bb:f1:c9:0a:bd:ba: b2:e7:e2:df:5d:8c:85:72:3d:fb:cd:6e:67:91:16:7d:3e:2d: 12:77:1e:9d:7c:a2:e7:5c:67:e1:16:19:3e:40:b1:4d:ae:21: 71:fd:92:9a:c3:ac:55:78:bf:a4:62:ea:20:8d:ba:f4:6d:80: 14:be:89:89:59:6f:a0:af:9b:47:0e:7e:84:01:2d:66:5a:18: 03:26:35:0e:96:59:ca:6a:79:98:a7:73:9a:19:26:d7:87:ca: 3e:8c:50:72:02:eb:2b:d7:ec:13:0b:6d:f0:9b:3a:09:ce:a3: 4f:01:4d:e0:f9:22:eb:1f:90:c0:97:6f:4b:0f:2c:48:eb:32: 0e:89:11:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0TWARfVLOLV6F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDE1ZjMyZjQtNjJmNy00NGEzLWI5YTItZTRlY2U4ZGNjNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lvR2pJtV7F1se8zSdkFRd+xUp+2nytgEiWh vAgyTKDPkONiPUGQX4qSMZZ+GuF4ZKAwkHVf15x1IPLgckoovNJOucethwx4fvaD pNxJoNCwzmx28zIL63K+VWYz3cXJF4pVQv3Rs6HI8mBrp53IzWJkIoCMHRHz2WVz Uw+ODJfjWp3/J4RIqxsp8STkR+VMBdHga+MefQ9LOejcbOsv1kDAAxc7adkyshhq vxbgoKAM2eAzsXV2ZQeelcZxSRZnhBfaMwmBKs4RJLmPWuT+07eMggKadUnz4kjL smt94Oa/tZbkqgux/3R2d4ixbO/YNoydb5tHPYWr92dClkUP2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKKdHxCetfDg24Ktpo9H0sJkkfkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDI4YWUzYTEtYjJlOC0z OGNlLTlhMDEtZDJmYjBkZTNlZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwkaWEFGt2UQ3snwR1FlfOd6mBMnUhfwmWsdOmYiGRgvLOfVmJk EDunaNlB7gkV5SPZi7fEs+jH18EgBIHE3vV7vKh7CJMA+aL4dSZnrc162l27hWqN L5gNGwJUxaHNXXyPU6sBMbg4BZBrFO8XLGX+xTG9DaJf/LvxyQq9urLn4t9djIVy PfvNbmeRFn0+LRJ3Hp18oudcZ+EWGT5AsU2uIXH9kprDrFV4v6Ri6iCNuvRtgBS+ iYlZb6Cvm0cOfoQBLWZaGAMmNQ6WWcpqeZinc5oZJteHyj6MUHIC6yvX7BMLbfCb OgnOo08BTeD5IusfkMCXb0sPLEjrMg6JEeI= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:14 2025 by rpki-client