$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa File: d4b45eb4-09b2-3b7d-a70a-922354aad665.roa (raw, json) Hash identifier: QzclmTE9/+qq56F7bW0XRWBlQEQc1NGflKj0BtwADbI= Subject key identifier: AD:B4:23:47:39:B3:5A:11:30:F0:C1:DD:BB:BE:C8:72:78:21:CB:DA Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584AD3A0F635E72913194614C800 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 394111 IP address blocks: 2607:6f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f6:35:e7:29:13:19:46:14:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=b77cfb23-ce10-48d3-9667-a5f1e071e0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:ff:ab:80:43:1c:9e:2c:56:5c:f1:71:b8: 50:91:aa:9e:1c:51:29:41:27:3a:32:ec:10:ab:a4: 79:1e:1d:84:da:04:54:74:e4:04:9f:16:44:17:67: 79:d5:7d:91:4c:54:14:5c:ca:1a:4b:f0:f7:a5:09: 55:60:c4:a9:99:58:96:0b:ed:75:ea:4a:92:47:07: 0d:83:21:6f:51:be:07:45:9e:aa:b6:e0:94:39:91: 42:e7:a5:47:b8:a5:f6:92:72:7f:3c:13:65:ff:13: 67:70:e6:ba:0b:c2:db:c7:fb:60:c1:41:92:cb:6d: ff:bd:14:34:61:71:8d:fa:79:68:58:ed:e2:23:8f: ee:96:74:8b:93:f2:d9:a3:8c:f3:4f:47:d4:6f:73: 7d:5f:81:5b:0d:ca:97:9a:9a:21:d6:03:3f:d0:0b: fc:8e:5e:24:59:1b:67:40:0c:90:d6:d3:e3:a4:d7: 12:24:24:69:90:13:2c:7e:37:ea:4c:7c:85:7b:f3: 01:c4:e3:7d:bf:0f:64:c0:f9:95:6d:ef:a8:74:ff: 61:a5:99:32:77:a3:88:9a:d2:96:b4:4c:7a:2a:ca: 99:ab:40:d0:7f:e2:5c:e0:44:59:f8:ae:53:da:83: 8b:42:89:d1:e5:98:31:df:13:7c:b8:47:51:6f:8b: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B4:23:47:39:B3:5A:11:30:F0:C1:DD:BB:BE:C8:72:78:21:CB:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv6: 2607:6f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b4:f7:a6:96:ed:24:18:8b:5a:17:8a:ae:50:72:93:c7:a9: c6:56:6f:72:72:73:22:2b:b9:87:e6:a1:9e:fa:b7:69:3a:e1: 88:08:ad:30:ff:20:fc:0d:8c:c4:39:7c:54:ea:3d:8f:d3:1b: 6a:2c:d6:83:8a:fd:f4:a0:06:f4:f3:45:46:e2:45:ec:de:9e: 03:4d:14:38:a3:66:ca:9d:6e:64:25:4f:b6:e1:1b:94:c1:40: 20:e1:a1:3e:f1:f7:d1:a2:a8:7d:cf:c5:b2:55:7f:34:75:5d: 38:98:d6:1a:ec:3a:05:b3:c8:35:c4:36:50:66:f2:65:65:52: 7f:ca:4b:c9:aa:ce:48:c8:1c:65:39:e6:99:95:1b:32:34:04: fd:f8:88:e3:ea:20:62:a4:69:a2:39:ba:f6:9f:3c:7a:1f:74: 9f:50:f1:4e:5d:99:a4:66:19:89:41:47:fe:da:98:88:c5:50: 67:41:b1:f5:4a:8d:12:23:32:1f:c0:29:4f:c7:85:9e:c0:49: b3:c8:5e:06:08:35:a6:98:c9:59:52:b5:91:a5:6c:70:6a:c0: 07:83:4c:fa:0f:d2:df:6c:59:69:2a:67:5c:3f:7c:e8:d3:b7: fb:a2:10:ef:50:53:7f:e5:65:a9:88:b9:3b:5e:bc:47:ed:6c: 8b:36:8b:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErToPY15ykTGUYUyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk Yjc3Y2ZiMjMtY2UxMC00OGQzLTk2NjctYTVmMWUwNzFlMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGr/q4BDHJ4sVlzxcbhQkaqeHFEpQSc6MuwQ q6R5Hh2E2gRUdOQEnxZEF2d51X2RTFQUXMoaS/D3pQlVYMSpmViWC+116kqSRwcN gyFvUb4HRZ6qtuCUOZFC56VHuKX2knJ/PBNl/xNncOa6C8Lbx/tgwUGSy23/vRQ0 YXGN+nloWO3iI4/ulnSLk/LZo4zzT0fUb3N9X4FbDcqXmpoh1gM/0Av8jl4kWRtn QAyQ1tPjpNcSJCRpkBMsfjfqTHyFe/MBxON9vw9kwPmVbe+odP9hpZkyd6OImtKW tEx6KsqZq0DQf+Jc4ERZ+K5T2oOLQonR5Zgx3xN8uEdRb4sHbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK20I0c5s1oRMPDB3bu+yHJ4IcvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvZDRiNDVlYjQtMDliMi0z YjdkLWE3MGEtOTIyMzU0YWFkNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdvADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCjtPemlu0kGItaF4quUHKTx6nGVm9ycnMiK7mH5qGe+rdpOuGICK0w /yD8DYzEOXxU6j2P0xtqLNaDiv30oAb080VG4kXs3p4DTRQ4o2bKnW5kJU+24RuU wUAg4aE+8ffRoqh9z8WyVX80dV04mNYa7DoFs8g1xDZQZvJlZVJ/ykvJqs5IyBxl OeaZlRsyNAT9+Ijj6iBipGmiObr2nzx6H3SfUPFOXZmkZhmJQUf+2piIxVBnQbH1 So0SIzIfwClPx4WewEmzyF4GCDWmmMlZUrWRpWxwasAHg0z6D9LfbFlpKmdcP3zo 07f7ohDvUFN/5WWpiLk7XrxH7WyLNot8 -----END CERTIFICATE-----Generated at Sun Aug 24 00:05:54 2025 by rpki-client