$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa File: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (raw, json) Hash identifier: swN5En91W6Mxmr4eA/Pv4IfnlGQ9jv989w3ba9jLLNc= Subject key identifier: 97:3F:05:3D:07:23:B0:CE:81:90:7E:D7:2C:AF:AE:87:14:1F:C2:F7 Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584AECC126CDF2F630A983C0A700 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 32140 IP address blocks: 2602:806:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:26:cd:f2:f6:30:a9:83:c0:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=46ad03fa-0058-4198-a8f8-f76b646b1d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e1:84:17:ba:d8:6e:f8:43:88:46:9d:c9:b6: 41:88:c5:54:19:bb:1a:15:85:05:62:b2:1e:a7:4d: 09:90:7d:99:0a:a8:80:eb:3a:0c:bf:36:60:48:49: 03:e3:88:43:84:43:d2:9f:1e:63:cf:6c:c4:60:2f: ae:b2:af:5e:d0:13:bb:0d:33:20:97:04:e5:ce:13: 21:50:1e:0e:2b:a8:23:29:47:13:30:e8:10:35:80: c0:1c:f9:f8:4a:bc:86:2c:11:93:64:cb:d4:2a:f9: 14:e8:d9:6a:07:3c:1a:b3:01:f7:42:88:7b:ef:a1: df:76:40:4b:87:18:f9:d0:59:c0:e4:19:36:56:b6: 09:10:82:ed:7f:b2:0c:f9:e8:e5:15:8c:f0:24:d3: 83:07:26:78:66:91:88:48:98:ab:ff:8e:0e:97:d4: b8:80:fa:9f:3f:fc:06:78:88:8e:b5:78:de:f8:fd: 6b:b9:7a:8f:27:74:26:b0:23:1c:1f:d5:27:3b:66: 1c:a5:2e:db:79:15:5c:71:9c:a1:2c:74:7c:4f:e7: 42:e0:52:2e:3e:33:9d:1b:78:e8:ae:e7:4f:6c:0f: 01:da:b8:87:55:ed:f5:ac:99:22:91:40:e4:6e:a7: cc:d5:0d:aa:48:6d:b9:cf:91:55:fa:47:8a:8d:9a: c0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3F:05:3D:07:23:B0:CE:81:90:7E:D7:2C:AF:AE:87:14:1F:C2:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv6: 2602:806:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1d:ff:e3:a5:9c:fb:f6:75:cc:0b:9e:05:18:aa:4b:0a:2e: 6a:e7:48:67:c6:f2:d8:cd:a7:6b:b0:ae:3b:7d:18:4a:31:4d: 2a:95:a3:c3:80:6a:0d:de:2c:5a:a9:3e:28:11:c1:40:b8:60: 24:98:06:81:bc:bd:0a:91:3d:2c:87:96:01:b4:c2:09:e7:33: f1:70:8b:11:06:1d:86:ae:50:fa:23:e3:63:53:55:50:02:54: bb:c4:d3:cb:61:8c:d4:bd:a5:41:da:72:bf:90:c9:5d:a0:c5: 00:6a:9b:fe:eb:10:69:57:54:31:03:cf:7d:55:1d:7a:d8:aa: 09:ed:3d:2e:6c:60:50:a9:e6:86:56:b6:85:3f:88:d7:60:03: f3:39:8f:50:30:36:ab:1b:d6:24:8b:cb:f3:ad:ec:b7:bb:11: e3:e3:a6:9b:81:fc:64:66:e9:92:dc:1d:8b:f3:f9:25:8f:22: 24:e4:28:23:c0:d8:ff:51:df:d6:d9:29:3a:94:7e:ca:f2:ac: f7:81:58:a1:09:47:48:8e:fa:f0:51:a9:4e:11:cb:96:ee:5a: 66:b8:ae:1c:18:71:3b:a9:c2:6f:ed:02:11:b2:d8:4f:9f:13: 07:99:95:c4:e3:2a:be:d6:fd:ed:46:9d:6c:4b:81:2a:9f:f6: 67:b9:0f:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErswSbN8vYwqYPApwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDZhZDAzZmEtMDA1OC00MTk4LWE4ZjgtZjc2YjY0NmIxZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+GEF7rYbvhDiEadybZBiMVUGbsaFYUFYrIe p00JkH2ZCqiA6zoMvzZgSEkD44hDhEPSnx5jz2zEYC+usq9e0BO7DTMglwTlzhMh UB4OK6gjKUcTMOgQNYDAHPn4SryGLBGTZMvUKvkU6NlqBzwaswH3Qoh776HfdkBL hxj50FnA5Bk2VrYJEILtf7IM+ejlFYzwJNODByZ4ZpGISJir/44Ol9S4gPqfP/wG eIiOtXje+P1ruXqPJ3QmsCMcH9UnO2YcpS7beRVccZyhLHR8T+dC4FIuPjOdG3jo rudPbA8B2riHVe31rJkikUDkbqfM1Q2qSG25z5FV+keKjZrAhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJc/BT0HI7DOgZB+1yyvrocUH8L3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvZjI1OGZlZjgtMGQxYy0z N2YxLWE5NDMtZGIyZTZiMjM2ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEUd/+OlnPv2dcwLngUYqksKLmrnSGfG8tjNp2uwrjt9GEoxTSqV o8OAag3eLFqpPigRwUC4YCSYBoG8vQqRPSyHlgG0wgnnM/FwixEGHYauUPoj42NT VVACVLvE08thjNS9pUHacr+QyV2gxQBqm/7rEGlXVDEDz31VHXrYqgntPS5sYFCp 5oZWtoU/iNdgA/M5j1AwNqsb1iSLy/Ot7Le7EePjppuB/GRm6ZLcHYvz+SWPIiTk KCPA2P9R39bZKTqUfsryrPeBWKEJR0iO+vBRqU4Ry5buWma4rhwYcTupwm/tAhGy 2E+fEweZlcTjKr7W/e1GnWxLgSqf9me5D3g= -----END CERTIFICATE-----Generated at Sat Aug 23 23:42:04 2025 by rpki-client