$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa File: 9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa (raw, json) Hash identifier: 5gBINg5Wspdzg66aEZwR1L4c+MKl1LppL9aeI/RW2B8= Subject key identifier: 12:25:69:03:78:08:31:42:9A:92:37:F4:91:53:0D:53:82:92:C6:F3 Certificate issuer: /CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Certificate serial: 010D0C9F4328584AD23BB4C7E4BC2AC8F1114EE0 Authority key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 984 IP address blocks: 2606:fb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b4:c7:e4:bc:2a:c8:f1:11:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=808f0b34-783b-4c31-ba0a-7d5bc4b43e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:f9:79:76:20:7b:22:5d:16:b2:3a:73:83: a6:af:be:fe:d5:d5:c9:78:72:45:a2:9f:77:84:06: b3:de:15:c5:b1:6e:04:fb:60:9f:97:03:da:07:ee: 1d:c4:87:1e:7d:ad:1e:74:47:ba:e6:74:a3:50:5e: 90:b1:54:a6:30:43:12:8a:46:dc:4b:38:2d:6c:00: 5e:cb:10:e2:2e:cd:ad:dc:bd:e0:a9:b9:a9:ad:27: 11:4c:c6:05:d4:cf:c9:34:04:4a:c7:e7:31:fc:8a: 21:d8:03:b0:8a:81:73:86:66:40:02:18:69:8e:f3: 5d:1c:83:88:39:8a:69:3c:51:d8:23:be:4b:2b:a9: 88:a9:aa:b1:b8:5e:62:ef:86:ee:26:2f:9d:46:f0: 85:89:5b:4a:b0:32:3a:77:d0:86:8e:01:72:57:f3: f1:60:54:41:17:30:24:ad:ae:65:6f:e8:c0:0f:6b: f2:fe:d7:69:30:0f:51:e0:65:de:bc:e4:32:36:9e: bc:2a:ab:b9:47:85:83:ae:d4:6a:1c:a2:83:5f:dc: b9:55:44:9a:0d:87:ba:83:7a:46:d3:aa:dd:5b:c0: d7:7b:f1:78:a7:ec:24:17:9d:35:0a:ee:1c:96:be: 4a:fd:2a:a7:10:30:d5:7f:09:c6:41:7b:43:71:d4: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:25:69:03:78:08:31:42:9A:92:37:F4:91:53:0D:53:82:92:C6:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl X509v3 Authority Key Identifier: keyid:0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer sbgp-ipAddrBlock: critical IPv6: 2606:fb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:42:c5:45:78:4a:25:98:18:08:ad:48:cb:b7:69:f2:4e:8a: df:e5:9b:30:ec:ae:8c:2c:d7:35:bd:f5:e9:5a:c3:a2:f5:85: 4a:49:b1:5a:67:3f:eb:39:1e:5e:34:39:df:a6:fe:37:c9:94: 8f:6a:e9:01:67:d4:72:4c:31:4d:52:58:12:c6:60:d4:e8:36: 2a:55:88:55:99:be:d9:9a:93:e0:79:3a:aa:ab:61:9e:bc:0c: 83:67:bd:3e:41:05:05:c1:ff:ba:f0:27:ee:19:fc:7f:11:3c: 17:cd:31:b3:a7:a3:79:8f:34:62:03:da:36:b0:c8:ce:c7:64: 37:81:a5:71:ab:ee:61:33:5c:e6:59:d9:e0:79:f4:e6:e9:b9: 51:56:69:a0:e6:a9:5c:98:83:b4:20:81:b0:72:fe:d9:37:b0: b2:01:c1:c3:16:46:1f:72:6a:ff:dc:92:2f:54:37:2c:82:fb: 03:fb:d3:d1:d3:b0:6a:99:74:6e:e4:30:50:39:ca:e4:12:e6: 96:c7:22:90:8e:32:6e:f2:c7:ca:d0:15:c0:d3:e3:54:2b:76: 7a:9d:8f:4b:2a:02:06:39:b6:3e:a5:2a:e7:7b:19:a4:5b:71: 58:b0:3d:ae:97:44:af:45:43:b2:b4:ac:85:c2:07:e6:c6:8f: 87:56:b2:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErSO7TH5LwqyPERTuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzZTk3NzgtZTZlMy00ZDg1LWEyZTItN2U5MmNiYzk5 ZjM5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ODA4ZjBiMzQtNzgzYi00YzMxLWJhMGEtN2Q1YmM0YjQzZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb/5eXYgeyJdFrI6c4Omr77+1dXJeHJFop93 hAaz3hXFsW4E+2CflwPaB+4dxIcefa0edEe65nSjUF6QsVSmMEMSikbcSzgtbABe yxDiLs2t3L3gqbmprScRTMYF1M/JNARKx+cx/Ioh2AOwioFzhmZAAhhpjvNdHIOI OYppPFHYI75LK6mIqaqxuF5i74buJi+dRvCFiVtKsDI6d9CGjgFyV/PxYFRBFzAk ra5lb+jAD2vy/tdpMA9R4GXevOQyNp68Kqu5R4WDrtRqHKKDX9y5VUSaDYe6g3pG 06rdW8DXe/F4p+wkF501Cu4clr5K/SqnEDDVfwnGQXtDcdSXiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBIlaQN4CDFCmpI39JFTDVOCksbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MjNl OTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2JjOTlmMzkvOWJlYTc0NTItNjNlMC0z NWY0LTg1NTItM2QyZmIxOWQwZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODIzZTk3NzgtZTZlMy00ZDg1LWEy ZTItN2U5MmNiYzk5ZjM5LzgyM2U5Nzc4LWU2ZTMtNGQ4NS1hMmUyLTdlOTJjYmM5 OWYzOS5jcmwwHwYDVR0jBBgwFoAUDTgDTsHDzqfx7cDC1r7PRL3a43wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTky Y2JjOTlmMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArQsVFeEolmBgIrUjLt2nyTorf5Zsw7K6MLNc1vfXpWsOi9YVKSbFa Zz/rOR5eNDnfpv43yZSPaukBZ9RyTDFNUlgSxmDU6DYqVYhVmb7ZmpPgeTqqq2Ge vAyDZ70+QQUFwf+68CfuGfx/ETwXzTGzp6N5jzRiA9o2sMjOx2Q3gaVxq+5hM1zm WdngefTm6blRVmmg5qlcmIO0IIGwcv7ZN7CyAcHDFkYfcmr/3JIvVDcsgvsD+9PR 07BqmXRu5DBQOcrkEuaWxyKQjjJu8sfK0BXA0+NUK3Z6nY9LKgIGObY+pSrnexmk W3FYsD2ul0SvRUOytKyFwgfmxo+HVrJI -----END CERTIFICATE-----Generated at Sun Aug 24 03:49:07 2025 by rpki-client