$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa File: 3021d954-9e02-3628-92f3-31f119119e7a.roa (raw, json) Hash identifier: LEaAECq20wjamc4XEUFQTP5F6IXg1dLmdD1Bnu+DXo0= Subject key identifier: D0:03:3D:78:80:2E:2E:6B:61:45:98:81:EE:C5:20:25:25:F8:4E:D9 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF5213390BFECFA38CAE35CF0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2606:7bc0:1081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:33:90:bf:ec:fa:38:ca:e3:5c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=bdd075b7-3621-4c5c-beda-e3f28d9d8517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:70:e2:be:1d:c8:56:c7:05:dd:1c:73:34: 9e:fa:d5:44:24:2d:dc:c1:95:e9:3f:39:f0:fb:60: fb:26:6f:d5:55:31:66:46:13:25:0e:03:cb:b3:dc: 7d:69:a6:61:e3:95:61:84:61:91:a7:1b:51:50:0e: 8a:13:b3:74:ba:82:88:9d:41:7b:4c:f5:ed:4d:02: 6c:47:ab:a0:83:26:c5:5e:76:24:a8:85:9f:dc:26: fc:c1:fb:a2:ac:80:b1:c2:8d:6f:cb:74:9e:ea:65: e6:52:e3:2e:6c:00:42:86:13:56:5b:ef:a8:74:d5: 0e:3f:67:02:9d:87:d5:db:f8:68:a7:a4:b0:5b:3e: e7:b2:fe:ad:0b:cb:33:43:ea:09:ac:61:47:fd:b9: ae:be:99:fb:be:9e:b4:52:13:07:1c:76:5c:ca:d2: 4b:6a:8d:16:66:23:d5:7f:6e:39:01:4a:f9:54:38: 23:96:3e:2b:b9:a5:c9:d7:4a:b8:5a:9c:dc:a3:1f: cf:ee:57:49:d0:1a:bf:89:6d:d5:c3:a2:e1:be:9c: fa:b9:96:14:4b:ee:31:b9:6d:5e:2b:a6:c5:94:22: c1:13:e6:ea:8c:cb:fd:4d:af:2e:b6:e5:f1:00:98: 86:aa:0f:73:04:b8:5a:ac:aa:fb:5a:d1:49:2d:c0: 0f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:03:3D:78:80:2E:2E:6B:61:45:98:81:EE:C5:20:25:25:F8:4E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1081::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:dc:c6:59:9f:52:65:1c:a5:e2:e3:21:f2:91:f5:9d:ce:bb: 0c:ea:95:9e:a4:48:5a:42:d6:d1:a1:26:86:6a:6e:2f:e8:c2: 3b:9f:d9:40:1b:b3:79:f3:11:1c:c3:14:e8:12:97:79:9a:42: a4:0c:cd:3f:fe:0b:45:33:9d:a5:43:7f:ec:1d:f8:9a:41:32: b2:7e:21:ca:e7:36:8f:db:8c:6a:cd:bb:cd:fc:ce:e9:0c:f4: ac:ba:2e:3c:54:fc:7a:88:cc:4a:95:9b:ad:d0:39:dc:83:b9: b1:20:53:ea:97:01:6d:b9:18:69:28:13:f8:d7:44:31:cf:78: 3a:35:73:93:bb:24:0d:76:12:44:5e:a4:68:51:eb:49:48:37: 3b:d4:ca:88:31:81:65:09:a2:6f:01:ea:10:3c:98:42:9e:e2: db:0f:37:bc:3c:91:8f:c6:db:3c:51:cf:88:84:69:7a:3b:28: 99:8d:59:9d:e9:10:8c:e8:75:40:96:a9:7f:c7:3f:a4:65:fe: 67:b1:f4:54:e0:3c:76:1e:c5:df:14:6e:da:a9:9d:ed:18:2b: c2:30:92:38:47:f1:73:d5:e6:df:4a:9c:b6:6e:5d:2d:58:3e: dc:7b:c0:43:7a:6a:2f:91:d6:fc:ea:8c:e1:a5:c5:8a:11:0c: 4a:bf:c1:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1ITOQv+z6OMrjXPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YmRkMDc1YjctMzYyMS00YzVjLWJlZGEtZTNmMjhkOWQ4NTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlldw4r4dyFbHBd0cczSe+tVEJC3cwZXpPznw +2D7Jm/VVTFmRhMlDgPLs9x9aaZh45VhhGGRpxtRUA6KE7N0uoKInUF7TPXtTQJs R6uggybFXnYkqIWf3Cb8wfuirICxwo1vy3Se6mXmUuMubABChhNWW++odNUOP2cC nYfV2/hop6SwWz7nsv6tC8szQ+oJrGFH/bmuvpn7vp60UhMHHHZcytJLao0WZiPV f245AUr5VDgjlj4ruaXJ10q4Wpzcox/P7ldJ0Bq/iW3Vw6Lhvpz6uZYUS+4xuW1e K6bFlCLBE+bqjMv9Ta8utuXxAJiGqg9zBLharKr7WtFJLcAPTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNADPXiALi5rYUWYge7FICUl+E7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMzAyMWQ5NTQtOWUwMi0z NjI4LTkyZjMtMzFmMTE5MTE5ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvcxlmfUmUcpeLjIfKR9Z3OuwzqlZ6kSFpC1tGhJoZqbi/owjuf 2UAbs3nzERzDFOgSl3maQqQMzT/+C0UznaVDf+wd+JpBMrJ+IcrnNo/bjGrNu838 zukM9Ky6LjxU/HqIzEqVm63QOdyDubEgU+qXAW25GGkoE/jXRDHPeDo1c5O7JA12 EkRepGhR60lINzvUyogxgWUJom8B6hA8mEKe4tsPN7w8kY/G2zxRz4iEaXo7KJmN WZ3pEIzodUCWqX/HP6Rl/mex9FTgPHYexd8Ubtqpne0YK8IwkjhH8XPV5t9KnLZu XS1YPtx7wEN6ai+R1vzqjOGlxYoRDEq/wao= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:36 2025 by rpki-client