$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/a98a384d-a2fd-342b-92b5-789d04b2d62b.roa File: a98a384d-a2fd-342b-92b5-789d04b2d62b.roa (raw, json) Hash identifier: QTUsUJeQ6d4untH7vRsckj3mBXReklIUwKS2gPhWR0c= Subject key identifier: 45:C7:F5:B5:8E:8B:52:04:F7:DD:96:6E:3F:CD:33:D4:99:0E:B4:80 Certificate issuer: /CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600 Certificate serial: 010D0C9F4328584AD23BAB6D6DCA73A7810E9240 Authority key identifier: E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/a98a384d-a2fd-342b-92b5-789d04b2d62b.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 46446 IP address blocks: 2606:5c00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ab:6d:6d:ca:73:a7:81:0e:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=16bc1d7a-43ad-4b1b-8b95-9526c3256031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:8b:2d:61:40:8e:1d:5d:3c:4d:40:0f:24: dc:fc:1f:ef:41:80:4f:ba:2d:a1:35:22:8c:d8:6e: ff:8d:be:e6:cf:57:0e:f8:b1:de:ee:07:5c:d1:2d: 39:70:e0:aa:08:7c:e2:1f:ab:b6:9e:ff:fe:f7:25: 3d:3b:b4:79:cb:5f:ab:07:c0:bb:1b:9c:e9:73:dc: 38:80:82:6f:5a:87:3b:44:3c:18:54:c3:31:50:f3: 35:b1:b6:de:cb:17:2e:20:68:f8:d9:23:69:93:d6: 7f:bb:b8:8d:27:c6:f9:b6:a1:73:13:3f:e5:82:d5: 81:df:79:82:75:6f:03:7e:84:b3:53:f5:2e:c1:86: d1:91:bf:be:95:aa:fb:a8:b2:f0:04:f3:f7:94:93: 1f:47:13:e8:35:d3:75:d9:33:a5:b1:40:e4:b6:00: 88:b4:ca:44:9a:b0:e9:96:c9:05:43:62:95:5a:84: 42:98:5b:2d:76:82:33:0d:f7:1d:ac:b1:2d:18:01: 9f:01:7f:ee:55:ac:ed:24:4f:e9:6c:92:a3:21:95: b2:89:c8:91:4c:8a:c4:8a:a9:85:32:48:95:db:c8: c3:53:71:20:af:de:a5:53:3a:a3:65:b8:c0:d7:80: a9:08:5c:18:1f:24:23:f1:58:c8:8e:3f:f4:7d:1c: 25:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C7:F5:B5:8E:8B:52:04:F7:DD:96:6E:3F:CD:33:D4:99:0E:B4:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/a98a384d-a2fd-342b-92b5-789d04b2d62b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl X509v3 Authority Key Identifier: keyid:E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer sbgp-ipAddrBlock: critical IPv6: 2606:5c00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:cd:a0:6d:a6:78:da:46:59:a2:9d:cb:7d:60:8d:bb:41:c5: 5a:84:d5:2c:60:24:a1:1f:01:40:f9:20:f0:d4:41:f7:dd:66: 3b:40:20:f5:41:45:58:ac:ce:ea:f2:94:78:64:70:ea:8e:61: 41:73:41:86:a9:37:0f:fb:2e:fd:1e:d7:e5:a4:b9:79:09:fa: 32:4f:1a:db:54:12:45:a3:33:ca:9d:9e:6d:d0:7f:2a:7b:85: ae:b2:94:8a:f7:e7:b0:65:3e:eb:f9:cd:45:04:ed:fb:46:0a: 2f:a9:08:d7:a9:26:13:ea:b4:36:e3:34:12:b9:be:e1:c8:75: 49:4f:a7:d2:1a:c7:3e:84:54:17:ca:59:fc:74:8c:fe:23:43: 23:4e:3e:a8:3e:e9:a4:82:ad:7f:46:88:51:84:79:59:e7:4e: c8:7f:d3:c9:68:b2:34:d1:63:1b:d8:d1:42:d9:1f:ed:7e:1e: 7e:4a:b9:e2:ce:fc:6b:f6:50:3e:1a:24:76:bb:2c:f8:ab:e8: 34:35:3b:4a:56:99:8c:1e:00:ae:e1:d5:e7:11:32:57:5b:6c: 58:22:11:23:24:23:c4:2b:6a:c3:6c:bd:09:2a:19:68:cc:6f: 01:99:78:f5:62:18:e8:e8:ed:da:03:df:d8:37:bd:a9:ba:8e: 53:92:20:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErSO6ttbcpzp4EOkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4N2M4ZWEtZDVhYy00ZjU5LTk0Y2QtNWRlN2E1YzUx NjAwMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MTZiYzFkN2EtNDNhZC00YjFiLThiOTUtOTUyNmMzMjU2MDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaSLLWFAjh1dPE1ADyTc/B/vQYBPui2hNSKM 2G7/jb7mz1cO+LHe7gdc0S05cOCqCHziH6u2nv/+9yU9O7R5y1+rB8C7G5zpc9w4 gIJvWoc7RDwYVMMxUPM1sbbeyxcuIGj42SNpk9Z/u7iNJ8b5tqFzEz/lgtWB33mC dW8DfoSzU/UuwYbRkb++lar7qLLwBPP3lJMfRxPoNdN12TOlsUDktgCItMpEmrDp lskFQ2KVWoRCmFstdoIzDfcdrLEtGAGfAX/uVaztJE/pbJKjIZWyiciRTIrEiqmF MkiV28jDU3Egr96lUzqjZbjA14CpCFwYHyQj8VjIjj/0fRwlBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEXH9bWOi1IE992Wbj/NM9SZDrSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODg3 YzhlYS1kNWFjLTRmNTktOTRjZC01ZGU3YTVjNTE2MDAvYTk4YTM4NGQtYTJmZC0z NDJiLTkyYjUtNzg5ZDA0YjJkNjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjg4N2M4ZWEtZDVhYy00ZjU5LTk0 Y2QtNWRlN2E1YzUxNjAwLzY4ODdjOGVhLWQ1YWMtNGY1OS05NGNkLTVkZTdhNWM1 MTYwMC5jcmwwHwYDVR0jBBgwFoAU4vJM+75XeR9VGBcYdJHcH0MyBxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODg3YzhlYS1kNWFjLTRmNTktOTRjZC01ZGU3 YTVjNTE2MDAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZcADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwzaBtpnjaRlminct9YI27QcVahNUsYCShHwFA+SDw1EH33WY7QCD1 QUVYrM7q8pR4ZHDqjmFBc0GGqTcP+y79HtflpLl5CfoyTxrbVBJFozPKnZ5t0H8q e4WuspSK9+ewZT7r+c1FBO37RgovqQjXqSYT6rQ24zQSub7hyHVJT6fSGsc+hFQX yln8dIz+I0MjTj6oPumkgq1/RohRhHlZ507If9PJaLI00WMb2NFC2R/tfh5+Srni zvxr9lA+GiR2uyz4q+g0NTtKVpmMHgCu4dXnETJXW2xYIhEjJCPEK2rDbL0JKhlo zG8BmXj1Yhjo6O3aA9/YN72puo5TkiB6 -----END CERTIFICATE-----Generated at Sun Aug 24 01:22:09 2025 by rpki-client