$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/a9e2de6d-26ab-3f2b-bede-33457e603032.roa File: a9e2de6d-26ab-3f2b-bede-33457e603032.roa (raw, json) Hash identifier: qlFMr9q7vx8pS1IhjLuBL+Pb6vrD6AL5x1jBr/SrXfQ= Subject key identifier: B1:5A:9C:A5:69:61:D9:5F:69:76:4D:0B:DA:30:59:DD:13:D9:8F:89 Certificate issuer: /CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Certificate serial: 010D0C9F4328584AECC120AE2EF55C2540A37180 Authority key identifier: 5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/a9e2de6d-26ab-3f2b-bede-33457e603032.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 25222 IP address blocks: 2605:db00::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:20:ae:2e:f5:5c:25:40:a3:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=81ba895e-b07d-484e-a15c-56d33aa1961c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:0c:d1:42:de:ab:8f:93:27:dc:0f:74:86: 15:77:00:4c:d9:e7:22:01:09:80:f5:01:93:f0:a5: e7:cc:15:36:e1:ec:69:35:e7:e8:d7:a6:9b:83:c1: f9:e8:e0:88:75:72:45:d2:08:15:2b:b8:aa:13:25: 9f:6e:69:b8:24:fe:e2:60:d2:14:93:c2:64:04:d3: a4:0e:fd:c3:3f:43:b2:cb:0e:d6:d2:d6:a3:2f:d9: 1f:05:3b:fa:c9:eb:a8:df:8f:2a:f9:39:c5:67:a2: fe:c8:4b:e7:8d:3a:5c:5a:c0:f0:68:04:a1:83:c1: 09:6a:3a:d3:8a:42:a7:e7:3f:49:0f:d8:db:85:5f: 75:48:f2:7e:43:25:67:d6:e9:f8:30:35:00:a7:e8: 49:e6:76:9e:d7:a7:10:a5:06:8b:e6:8c:75:09:b6: 61:45:42:2f:8d:23:54:7c:66:15:13:c0:a5:78:16: b7:45:43:32:fc:66:ed:63:82:86:23:14:2c:a7:5b: 5b:7a:61:1b:97:37:9a:45:f7:54:a7:5e:e1:0b:49: f2:10:ed:2f:64:b5:fd:fb:05:63:c1:d6:97:43:cf: 00:a4:bd:a0:34:6d:a6:56:f9:e4:a3:58:59:b2:20: eb:eb:db:fc:19:f1:85:5c:65:29:2d:a8:4a:e1:75: 59:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5A:9C:A5:69:61:D9:5F:69:76:4D:0B:DA:30:59:DD:13:D9:8F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/a9e2de6d-26ab-3f2b-bede-33457e603032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl X509v3 Authority Key Identifier: keyid:5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer sbgp-ipAddrBlock: critical IPv6: 2605:db00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:39:90:b9:15:36:9f:4f:18:89:a4:db:e6:02:80:1d:d3:17: da:7a:52:03:b2:e6:b2:bc:b0:d3:98:39:f4:05:c3:41:54:51: 83:0e:bd:ab:a7:5b:1b:4e:99:10:97:36:9f:88:a0:f9:30:2d: ad:53:0f:fa:95:4f:e4:e9:2c:09:75:b5:17:27:94:28:99:f2: d0:78:4e:69:a0:f0:24:80:01:c4:0a:84:ba:1d:f1:84:89:39: 87:bb:a6:a4:3c:8c:a1:a2:ee:30:ac:fd:5f:f5:e8:44:99:67: f1:10:cd:d7:8b:c6:aa:00:0b:d3:1e:d5:c9:91:e0:5a:1f:c6: 34:eb:63:65:2c:d2:08:97:e7:cf:22:16:fe:76:ab:f1:92:ef: d1:12:a0:7f:d8:30:c1:cb:aa:2f:e8:8c:a0:11:8d:04:ea:cc: b1:82:b1:70:67:af:c6:52:2c:59:46:a7:80:99:52:06:3f:88: 7d:0c:b5:29:ac:aa:cb:ed:0c:7e:d3:ae:be:ca:89:65:06:c9: 09:33:95:20:c7:cf:89:dd:3c:4e:fd:8f:97:6d:42:6e:24:80: 9f:0f:8b:85:40:37:81:39:87:70:63:0e:10:d0:c8:c0:58:46: 10:40:bd:84:74:2b:d0:58:b7:14:68:ba:5d:26:1a:d9:12:63: 64:52:42:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErswSCuLvVcJUCjcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3OTY1NTgtODJkNi00MWE1LWI4ZWMtNWRmZGJkODlk NWQ3MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ODFiYTg5NWUtYjA3ZC00ODRlLWExNWMtNTZkMzNhYTE5NjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DgM0ULeq4+TJ9wPdIYVdwBM2eciAQmA9QGT 8KXnzBU24expNefo16abg8H56OCIdXJF0ggVK7iqEyWfbmm4JP7iYNIUk8JkBNOk Dv3DP0Oyyw7W0tajL9kfBTv6yeuo348q+TnFZ6L+yEvnjTpcWsDwaAShg8EJajrT ikKn5z9JD9jbhV91SPJ+QyVn1un4MDUAp+hJ5nae16cQpQaL5ox1CbZhRUIvjSNU fGYVE8CleBa3RUMy/GbtY4KGIxQsp1tbemEblzeaRfdUp17hC0nyEO0vZLX9+wVj wdaXQ88ApL2gNG2mVvnko1hZsiDr69v8GfGFXGUpLahK4XVZFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLFanKVpYdlfaXZNC9owWd0T2Y+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5 NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZkYmQ4OWQ1ZDcvYTllMmRlNmQtMjZhYi0z ZjJiLWJlZGUtMzM0NTdlNjAzMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWU3OTY1NTgtODJkNi00MWE1LWI4 ZWMtNWRmZGJkODlkNWQ3L2VlNzk2NTU4LTgyZDYtNDFhNS1iOGVjLTVkZmRiZDg5 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUXKPtievnlv+HCDJGhWB6bKFGHdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZk YmQ4OWQ1ZDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXbADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA5OZC5FTafTxiJpNvmAoAd0xfaelIDsuayvLDTmDn0BcNBVFGDDr2r p1sbTpkQlzafiKD5MC2tUw/6lU/k6SwJdbUXJ5QomfLQeE5poPAkgAHECoS6HfGE iTmHu6akPIyhou4wrP1f9ehEmWfxEM3Xi8aqAAvTHtXJkeBaH8Y062NlLNIIl+fP Ihb+dqvxku/REqB/2DDBy6ov6IygEY0E6syxgrFwZ6/GUixZRqeAmVIGP4h9DLUp rKrL7Qx+066+yollBskJM5Ugx8+J3TxO/Y+XbUJuJICfD4uFQDeBOYdwYw4Q0MjA WEYQQL2EdCvQWLcUaLpdJhrZEmNkUkJb -----END CERTIFICATE-----Generated at Sat Aug 23 23:49:32 2025 by rpki-client