$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/c1ba5f8b-a587-3aea-996d-c1d9594cec65.roa File: c1ba5f8b-a587-3aea-996d-c1d9594cec65.roa (raw, json) Hash identifier: arJmPWjKtex5TWaHsKTJ+qjIHlgcv6tmzJKIfWfssBw= Subject key identifier: 8F:59:E3:6B:BF:86:A7:75:AD:22:E3:2E:98:36:53:86:4E:A6:03:19 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584AF0F14A651AA03BF9E9B68700 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/c1ba5f8b-a587-3aea-996d-c1d9594cec65.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 399575 IP address blocks: 2606:67c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4a:65:1a:a0:3b:f9:e9:b6:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=f2525753-0ae8-4638-bf8c-2b49ecd4c295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b9:f4:94:c9:89:42:6e:31:c1:e8:03:71:99: ef:69:d6:97:86:cf:1b:4a:45:0f:4a:d3:15:88:e0: c1:5e:1c:c5:07:eb:6d:19:dc:72:d8:b7:49:4a:03: 2e:d8:69:2e:70:d9:b1:11:e4:3b:30:b9:f7:7a:ab: 92:c9:00:08:18:e7:f5:5f:5f:26:e8:cd:c7:e0:56: 14:4c:6f:d4:76:8d:01:03:a1:50:73:e6:d6:4e:a1: 98:8e:dd:a3:68:fd:d5:d9:1f:58:3e:f7:e1:17:1a: 1e:29:6c:80:7e:7c:a5:1f:05:c3:06:b5:03:07:18: fa:b5:78:b0:38:4c:25:70:4b:ba:f8:12:2b:85:2a: d5:0d:bd:2c:e3:45:8b:66:37:ec:e9:ec:ef:8c:b9: 9c:b2:a8:68:19:24:1b:9b:4b:ec:30:05:54:5b:de: 9a:00:f9:c0:7c:be:aa:3d:52:16:c7:96:ad:19:6d: 39:bc:d6:bf:1f:62:ce:d0:49:31:67:49:38:1d:1a: 1f:77:e5:c0:5f:b4:9e:12:5c:59:26:23:29:5f:35: b7:f6:ee:8b:f9:42:2f:05:96:bf:35:db:cd:da:09: 67:14:9f:4c:9b:66:a3:ee:a2:19:ee:6a:15:d0:e9: 37:b3:54:0b:55:36:49:50:8e:23:5d:12:ea:de:6e: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:59:E3:6B:BF:86:A7:75:AD:22:E3:2E:98:36:53:86:4E:A6:03:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/c1ba5f8b-a587-3aea-996d-c1d9594cec65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv6: 2606:67c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:59:31:da:b1:8a:15:fe:22:84:34:fd:57:31:12:df:ce:51: 8a:e4:3d:48:fe:dd:fb:01:dc:eb:3b:12:20:d2:ca:3c:c3:8e: 31:15:61:d1:27:30:d1:b8:bc:c3:9f:c4:db:fe:c3:7a:69:2e: bc:ea:12:7b:15:b0:15:99:48:89:c7:6f:e8:98:ad:c8:a4:03: f7:df:dc:32:bc:85:d1:f6:e6:75:18:3d:03:1f:b4:6a:bf:0d: 7d:8b:44:2a:b8:a1:6a:0f:14:64:25:76:76:a0:f8:88:d5:e7: 87:c0:39:ee:87:3f:73:1e:f2:cf:03:c5:e8:c2:35:98:3d:91: 7a:70:b4:59:65:8b:78:9d:02:0c:46:f8:6d:38:ef:7f:f0:c8: 41:26:83:61:4e:2b:ef:16:21:f5:ea:23:a5:01:00:9f:77:34: b1:33:97:b5:7e:f4:ea:85:22:d9:b1:22:6a:8d:5a:e4:65:dd: 3d:d2:d4:30:cc:59:32:c3:b7:34:e9:76:67:ca:d3:cb:a4:56: bc:f1:8d:d1:8a:ae:2c:c2:f6:64:1c:74:70:d3:53:53:56:88: d7:5d:ce:0e:d2:2a:a1:ad:ef:97:e8:70:16:bf:e2:f2:db:98: f3:a5:85:71:44:68:77:db:d5:9c:fb:9a:1e:89:0c:46:42:3f: bd:22:01:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErw8UplGqA7+em2hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZjI1MjU3NTMtMGFlOC00NjM4LWJmOGMtMmI0OWVjZDRjMjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrn0lMmJQm4xwegDcZnvadaXhs8bSkUPStMV iODBXhzFB+ttGdxy2LdJSgMu2GkucNmxEeQ7MLn3equSyQAIGOf1X18m6M3H4FYU TG/Udo0BA6FQc+bWTqGYjt2jaP3V2R9YPvfhFxoeKWyAfnylHwXDBrUDBxj6tXiw OEwlcEu6+BIrhSrVDb0s40WLZjfs6ezvjLmcsqhoGSQbm0vsMAVUW96aAPnAfL6q PVIWx5atGW05vNa/H2LO0EkxZ0k4HRofd+XAX7SeElxZJiMpXzW39u6L+UIvBZa/ NdvN2glnFJ9Mm2aj7qIZ7moV0Ok3s1QLVTZJUI4jXRLq3m5xCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI9Z42u/hqd1rSLjLpg2U4ZOpgMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvYzFiYTVmOGItYTU4Ny0z YWVhLTk5NmQtYzFkOTU5NGNlYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZnwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0WTHasYoV/iKENP1XMRLfzlGK5D1I/t37AdzrOxIg0so8w44xFWHR JzDRuLzDn8Tb/sN6aS686hJ7FbAVmUiJx2/omK3IpAP339wyvIXR9uZ1GD0DH7Rq vw19i0QquKFqDxRkJXZ2oPiI1eeHwDnuhz9zHvLPA8XowjWYPZF6cLRZZYt4nQIM RvhtOO9/8MhBJoNhTivvFiH16iOlAQCfdzSxM5e1fvTqhSLZsSJqjVrkZd090tQw zFkyw7c06XZnytPLpFa88Y3Riq4swvZkHHRw01NTVojXXc4O0iqhre+X6HAWv+Ly 25jzpYVxRGh329Wc+5oeiQxGQj+9IgEC -----END CERTIFICATE-----Generated at Sat Aug 23 22:30:39 2025 by rpki-client