$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa File: 27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa (raw, json) Hash identifier: /+h7BFA5xNfld9BpxI3dDf9NErkgF6hELJDPuIHGvKs= Subject key identifier: 8F:23:CE:4F:5E:EA:24:A3:59:B2:F1:23:F4:BD:73:7C:D6:09:43:CA Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F4328584ACE0BA65853B28452DCD31500 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 3573 IP address blocks: 2610:b0:41d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a6:58:53:b2:84:52:dc:d3:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=b708af35-cbd3-44ee-ab7f-a0a8cb6101c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:b7:be:07:26:b3:97:44:e3:cf:33:5f:1d: 6a:c9:2c:62:2a:4c:35:1c:2f:51:f7:60:50:f4:bf: 22:0d:c3:27:0d:d3:5e:0a:ae:0a:98:e1:a9:87:93: 35:69:3c:46:52:56:07:c8:e4:51:08:6c:e4:4f:b2: d3:20:b9:bf:66:06:5a:7d:93:68:aa:99:e5:9c:ba: 90:21:33:0d:42:b2:b8:31:4d:2a:70:b3:ab:6a:af: 56:0d:70:f2:a1:b7:35:57:34:57:af:8c:99:11:1d: 7a:ac:20:a1:10:70:13:05:30:32:a1:cb:b9:71:4c: b9:b0:c0:fb:e0:ec:ca:47:df:2f:b6:cb:c0:47:81: eb:3c:50:1d:c8:40:60:63:0f:55:b4:4f:93:0d:f5: 43:31:f4:9c:20:51:b1:c3:20:12:0e:1c:32:7f:c3: f1:56:79:b5:78:e5:f7:cb:f0:3b:f0:74:be:5e:ab: 7f:76:df:be:06:82:c3:ca:10:6e:1b:71:87:f4:18: 3c:d6:1d:01:69:f3:87:b1:71:d3:8a:be:e3:77:b1: fe:a4:c6:db:4c:b2:9c:da:bf:92:21:06:84:87:45: 70:c3:c5:f9:42:f4:02:8a:35:12:22:6c:06:1e:39: 11:2c:fa:ad:6b:64:73:19:30:9c:76:a2:b2:ba:a7: 36:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:23:CE:4F:5E:EA:24:A3:59:B2:F1:23:F4:BD:73:7C:D6:09:43:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv6: 2610:b0:41d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:01:10:6b:3f:f3:8f:dc:4f:57:d8:7b:62:39:0b:5a:ba:1d: 6c:4f:d1:d9:75:8d:9d:a1:0b:a2:46:79:73:67:5e:6d:1b:00: 54:df:21:51:9f:ba:f9:5a:d5:f5:88:8a:f6:54:e5:54:75:60: 87:71:2a:dc:34:06:f4:e4:e8:be:12:7c:51:5e:8c:4d:2f:9d: 79:a3:53:61:d3:7f:d5:2b:10:45:80:29:10:40:ec:8d:dc:1d: c8:e7:70:e0:f8:15:e8:8e:e4:56:5d:36:ee:70:ce:f4:c8:ba: f6:9c:f0:20:7c:6b:0c:80:d0:a0:8b:9b:58:a2:4c:a2:ff:d3: d1:ba:d0:0a:2b:02:fb:34:15:72:10:2e:19:56:c6:44:c4:c3: 1c:98:6d:43:f6:66:6f:01:96:ec:37:39:27:6c:5f:c4:ae:18: 89:f4:6d:4a:80:b3:a9:25:0e:3f:a8:de:54:70:53:da:55:35: ae:b4:1a:7c:02:fa:4e:61:db:69:7d:39:77:09:20:68:77:7f: c0:08:b9:37:81:67:5d:8f:7a:7d:6f:04:2a:99:a1:f2:22:6d: 42:05:60:e4:30:18:14:d7:04:d9:5d:87:4d:4e:04:e8:5e:e7: c1:11:ff:1c:fd:eb:6e:20:16:dc:c5:2a:83:b5:1a:85:ae:2d: a4:69:9b:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErOC6ZYU7KEUtzTFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YjcwOGFmMzUtY2JkMy00NGVlLWFiN2YtYTBhOGNiNjEwMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VC3vgcms5dE488zXx1qySxiKkw1HC9R92BQ 9L8iDcMnDdNeCq4KmOGph5M1aTxGUlYHyORRCGzkT7LTILm/ZgZafZNoqpnlnLqQ ITMNQrK4MU0qcLOraq9WDXDyobc1VzRXr4yZER16rCChEHATBTAyocu5cUy5sMD7 4OzKR98vtsvAR4HrPFAdyEBgYw9VtE+TDfVDMfScIFGxwyASDhwyf8PxVnm1eOX3 y/A78HS+Xqt/dt++BoLDyhBuG3GH9Bg81h0BafOHsXHTir7jd7H+pMbbTLKc2r+S IQaEh0Vww8X5QvQCijUSImwGHjkRLPqta2RzGTCcdqKyuqc2gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI8jzk9e6iSjWbLxI/S9c3zWCUPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvMjdkODc2YjktOGFlZC0z NmY2LTljNmEtMWMxNGJkM2IwNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAsEHZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA4BEGs/84/cT1fYe2I5C1q6HWxP0dl1jZ2hC6JGeXNnXm0bAFTf IVGfuvla1fWIivZU5VR1YIdxKtw0BvTk6L4SfFFejE0vnXmjU2HTf9UrEEWAKRBA 7I3cHcjncOD4FeiO5FZdNu5wzvTIuvac8CB8awyA0KCLm1iiTKL/09G60AorAvs0 FXIQLhlWxkTEwxyYbUP2Zm8Bluw3OSdsX8SuGIn0bUqAs6klDj+o3lRwU9pVNa60 GnwC+k5h22l9OXcJIGh3f8AIuTeBZ12Pen1vBCqZofIibUIFYOQwGBTXBNldh01O BOhe58ER/xz9624gFtzFKoO1GoWuLaRpm/E= -----END CERTIFICATE-----Generated at Sun Aug 24 07:56:15 2025 by rpki-client