$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/354b6b4b-fe0d-3804-a420-3adce649b26a.roa File: 354b6b4b-fe0d-3804-a420-3adce649b26a.roa (raw, json) Hash identifier: y4JFAPS66ru3orwU9TrtKUhSC+WgWlGHjKaYM56lke8= Subject key identifier: E1:D1:8C:98:93:64:3E:DD:F6:16:0C:04:9B:44:57:2C:BE:1A:F7:47 Certificate issuer: /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Certificate serial: 010D0C9F4328584AE1968ECE0B4CBD6D37C07280 Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/354b6b4b-fe0d-3804-a420-3adce649b26a.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 20259 IP address blocks: 2604:440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:8e:ce:0b:4c:bd:6d:37:c0:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=cab99cea-8dc1-4200-a570-4605d58d2e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:30:99:c3:bd:75:0b:f0:df:54:f7:ae:e1: e9:bb:45:dd:58:dc:28:b8:a2:ba:96:ec:ff:df:35: fc:14:57:76:1d:bd:81:3f:0a:4d:57:62:a5:62:60: d2:1b:c5:6b:5d:69:bd:21:ff:4c:1d:76:83:9a:be: 68:04:0d:03:c0:72:fc:9d:6f:22:f5:c9:cb:f5:ea: 7d:9a:a4:be:51:ab:c0:71:06:da:2f:e2:3b:64:ec: b6:24:fb:a1:2c:1a:9d:b1:77:ca:0d:96:b9:32:17: 8b:d0:cb:b3:4a:31:61:7d:b6:c8:a1:03:1b:5d:58: cc:af:1c:91:1c:67:a2:01:9a:d1:46:c9:bf:14:d7: 78:b8:18:d9:3e:24:68:d7:a8:af:85:e4:d8:03:1f: 46:54:ff:8a:a9:16:4a:71:83:9c:d5:f3:a5:88:aa: 6f:60:cf:a0:28:15:12:3d:8f:ed:1a:de:b1:29:63: 59:cd:91:09:6f:95:a7:b7:ad:e4:e5:84:cf:bc:b9: f0:c9:83:40:2c:87:3f:e9:5f:1b:35:0d:2e:fd:8f: 74:1e:3b:c9:1f:e4:b5:59:6a:0c:55:7e:42:54:51: 90:4c:86:51:e9:7b:fd:c5:a2:e7:bf:a9:d0:28:cb: f5:c1:8b:40:52:06:7f:21:89:34:64:7a:c5:66:cd: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D1:8C:98:93:64:3E:DD:F6:16:0C:04:9B:44:57:2C:BE:1A:F7:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/354b6b4b-fe0d-3804-a420-3adce649b26a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl X509v3 Authority Key Identifier: keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer sbgp-ipAddrBlock: critical IPv6: 2604:440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8b:26:5e:7f:c3:97:89:53:8b:a7:8c:6e:c8:6b:65:7d:7f: 58:ab:39:9f:c2:6b:38:72:57:84:80:f6:04:78:af:fc:bb:36: 11:64:5c:d8:0d:36:22:17:bd:fe:4a:e2:1c:5a:32:f9:8f:ed: e1:7a:87:b6:d5:51:fc:c8:21:e5:ef:d0:14:8f:02:82:19:a2: 00:35:1e:50:05:b7:57:7a:4b:9e:ba:2a:d1:51:77:cc:f8:22: d0:6e:9f:38:80:ca:c7:50:e7:d6:d1:d9:44:7c:78:3b:4f:2c: 2e:79:1e:84:71:e9:2e:82:6f:41:63:d5:f7:c7:bd:25:93:ce: d5:10:a6:b7:13:50:26:38:0e:37:bf:5c:90:84:6e:cd:1c:67: 52:8a:96:0d:51:d1:27:bb:a5:a4:89:96:37:03:5a:b2:14:c6: 94:92:2e:da:94:9a:b1:85:1a:2a:0b:44:5a:61:c4:64:b0:43: 50:01:63:06:f6:71:2f:2d:30:1e:c8:8b:82:98:08:a8:c1:f9: 0e:1e:9e:0e:a9:9b:cb:6d:e4:38:74:a5:59:1c:6e:e3:3c:1c: 73:88:26:3c:56:73:77:07:08:51:d2:49:84:31:f6:f0:4b:63: f7:69:65:82:b5:bb:8e:15:1f:83:1b:e0:94:b5:8f:7f:0f:29: d1:cc:f7:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErhlo7OC0y9bTfAcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVlZjg3NWEtYzlhNC00NWUwLTliODAtM2VhMTBiZWNh ZDlmMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk Y2FiOTljZWEtOGRjMS00MjAwLWE1NzAtNDYwNWQ1OGQyZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUIwmcO9dQvw31T3ruHpu0XdWNwouKK6luz/ 3zX8FFd2Hb2BPwpNV2KlYmDSG8VrXWm9If9MHXaDmr5oBA0DwHL8nW8i9cnL9ep9 mqS+UavAcQbaL+I7ZOy2JPuhLBqdsXfKDZa5MheL0MuzSjFhfbbIoQMbXVjMrxyR HGeiAZrRRsm/FNd4uBjZPiRo16ivheTYAx9GVP+KqRZKcYOc1fOliKpvYM+gKBUS PY/tGt6xKWNZzZEJb5Wnt63k5YTPvLnwyYNALIc/6V8bNQ0u/Y90HjvJH+S1WWoM VX5CVFGQTIZR6Xv9xaLnv6nQKMv1wYtAUgZ/IYk0ZHrFZs2FnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOHRjJiTZD7d9hYMBJtEVyy+GvdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZWVm ODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWExMGJlY2FkOWYvMzU0YjZiNGItZmUwZC0z ODA0LWE0MjAtM2FkY2U2NDliMjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGVlZjg3NWEtYzlhNC00NWUwLTli ODAtM2VhMTBiZWNhZDlmLzhlZWY4NzVhLWM5YTQtNDVlMC05YjgwLTNlYTEwYmVj YWQ5Zi5jcmwwHwYDVR0jBBgwFoAU2hd1uxE+8mvw+V5uiVzDDuCoynIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZWVmODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWEx MGJlY2FkOWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQEQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB2iyZef8OXiVOLp4xuyGtlfX9Yqzmfwms4cleEgPYEeK/8uzYRZFzY DTYiF73+SuIcWjL5j+3heoe21VH8yCHl79AUjwKCGaIANR5QBbdXekueuirRUXfM +CLQbp84gMrHUOfW0dlEfHg7TywueR6Ecekugm9BY9X3x70lk87VEKa3E1AmOA43 v1yQhG7NHGdSipYNUdEnu6WkiZY3A1qyFMaUki7alJqxhRoqC0RaYcRksENQAWMG 9nEvLTAeyIuCmAiowfkOHp4OqZvLbeQ4dKVZHG7jPBxziCY8VnN3BwhR0kmEMfbw S2P3aWWCtbuOFR+DG+CUtY9/DynRzPdj -----END CERTIFICATE-----Generated at Sun Aug 24 05:36:20 2025 by rpki-client