$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa File: 3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa (raw, json) Hash identifier: lLGqjohNBtPj7rpseiR+F/6kcUPSn/Qsi8Qp3XQE9W4= Subject key identifier: 22:78:C4:B3:01:26:F3:83:18:76:5F:83:95:EC:C5:25:B6:1E:78:8B Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Certificate serial: 010D0C9F4328584AF2567BA8A66A8DBEDE220840 Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 19528 IP address blocks: 2605:14c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7b:a8:a6:6a:8d:be:de:22:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=b2aa1ed4-910a-44b1-8887-af44a5039ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:b4:35:4a:c5:8d:35:8a:05:b7:8e:c2:80: d5:b5:ef:3d:fa:07:5c:74:d6:b6:80:54:69:b6:d9: 13:70:2e:2b:e9:0d:56:a3:3f:cb:dd:8b:12:33:3c: c7:73:a7:6c:b3:09:76:06:d6:46:6d:80:31:73:92: d9:04:12:58:7b:14:eb:69:55:cf:be:56:b2:1c:10: 9d:ee:00:84:76:1d:f2:14:43:46:2a:e0:8a:8c:97: 08:82:7e:b5:cd:bc:df:c7:9b:9c:de:19:46:ac:a7: b7:9d:b8:82:46:66:eb:7a:0f:41:26:49:ee:cf:0a: 2e:15:ad:57:da:a1:ed:b1:05:a9:b3:0d:84:69:73: 63:ab:6e:92:d3:6f:99:05:74:39:b9:a6:71:e1:99: af:ae:23:f8:e5:3e:81:18:7d:b1:24:c7:1a:e9:98: 83:46:89:6e:c0:4e:a9:62:5f:bc:da:5c:e0:98:56: fe:c7:23:d7:ba:68:7b:77:e4:33:2d:0e:d5:4e:40: 93:3c:98:9b:f5:aa:70:9a:c2:b9:34:d1:f1:20:d6: 10:18:7f:98:81:72:8e:99:31:ee:db:67:3c:a8:8e: 3e:41:27:2e:92:f3:fd:fa:72:c3:af:27:6d:3f:3e: 5d:21:77:19:14:6d:68:ce:ff:18:0f:5b:81:25:ca: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:78:C4:B3:01:26:F3:83:18:76:5F:83:95:EC:C5:25:B6:1E:78:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl X509v3 Authority Key Identifier: keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer sbgp-ipAddrBlock: critical IPv6: 2605:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ce:a8:78:d4:8d:52:e7:69:c9:ff:92:87:81:bf:9d:79:23: ec:30:33:32:ca:bc:5b:88:54:90:cd:37:ef:5e:e5:7a:20:6e: 9a:18:3e:c2:c9:dd:f7:28:00:e8:26:0b:c4:55:95:32:42:30: 47:2a:73:04:1f:ae:92:2e:5a:15:69:2d:33:26:ff:2d:c0:c7: d6:a2:a7:df:d7:2d:a1:ce:52:4f:b4:86:d8:0b:53:63:5c:cf: fa:be:2c:61:0f:f9:9e:5e:75:e9:e8:ef:93:17:44:01:35:d0: 8e:d6:3a:27:4f:21:2e:27:38:e7:83:cc:89:3f:b1:2a:28:f3: 30:b4:6d:37:d6:e7:e6:d2:e8:b8:7e:5f:fb:16:65:72:dd:73: a7:79:c7:e1:9c:b4:67:78:9d:56:79:09:e7:ec:38:12:81:58: 09:58:ac:87:ae:96:cb:75:a5:3c:90:a1:6c:1d:77:72:5a:c8: be:ab:36:53:f2:0a:92:f1:7a:c0:69:5e:09:56:c0:d8:2c:25: f7:4f:bc:58:c1:e2:c6:3f:a3:c0:4c:24:be:84:fd:17:10:b7: 19:5c:5b:9c:47:a9:01:33:57:be:65:05:3a:bf:e2:b6:96:31: 59:38:4e:1f:f4:59:8a:cf:70:d8:9b:c5:a1:6c:7e:93:a9:ea: 32:a9:f0:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEryVnuopmqNvt4iCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1 N2RmMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YjJhYTFlZDQtOTEwYS00NGIxLTg4ODctYWY0NGE1MDM5YWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSK0NUrFjTWKBbeOwoDVte89+gdcdNa2gFRp ttkTcC4r6Q1Woz/L3YsSMzzHc6dsswl2BtZGbYAxc5LZBBJYexTraVXPvlayHBCd 7gCEdh3yFENGKuCKjJcIgn61zbzfx5uc3hlGrKe3nbiCRmbreg9BJknuzwouFa1X 2qHtsQWpsw2EaXNjq26S02+ZBXQ5uaZx4ZmvriP45T6BGH2xJMca6ZiDRoluwE6p Yl+82lzgmFb+xyPXumh7d+QzLQ7VTkCTPJib9apwmsK5NNHxINYQGH+YgXKOmTHu 22c8qI4+QScukvP9+nLDrydtPz5dIXcZFG1ozv8YD1uBJcrM4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCJ4xLMBJvODGHZfg5XsxSW2HniLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Rj YTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvM2EyZDcyNzQtNDIzNi0z MGJkLTk2NTQtZDlhYjlkZmQzY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNkY2E3MTUtYjNhZC00OTg1LWI2 ZmQtMGJkNzMwODI1N2RmLzJjZGNhNzE1LWIzYWQtNDk4NS1iNmZkLTBiZDczMDgy NTdkZi5jcmwwHwYDVR0jBBgwFoAU1Ewlr4qLF1EhKxI+/D4HEqe6+XswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3 MzA4MjU3ZGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUUwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQzqh41I1S52nJ/5KHgb+deSPsMDMyyrxbiFSQzTfvXuV6IG6aGD7C yd33KADoJgvEVZUyQjBHKnMEH66SLloVaS0zJv8twMfWoqff1y2hzlJPtIbYC1Nj XM/6vixhD/meXnXp6O+TF0QBNdCO1jonTyEuJzjng8yJP7EqKPMwtG031ufm0ui4 fl/7FmVy3XOnecfhnLRneJ1WeQnn7DgSgVgJWKyHrpbLdaU8kKFsHXdyWsi+qzZT 8gqS8XrAaV4JVsDYLCX3T7xYweLGP6PATCS+hP0XELcZXFucR6kBM1e+ZQU6v+K2 ljFZOE4f9FmKz3DYm8WhbH6TqeoyqfBn -----END CERTIFICATE-----Generated at Sun Aug 24 01:23:43 2025 by rpki-client