$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa File: bae8e28d-e4a2-3286-91f3-d55570d1925e.roa (raw, json) Hash identifier: wB4YqcVp1zibpHfRi60FaX+qgml10uD9HEnciTYU/rs= Subject key identifier: 66:25:64:08:02:74:A7:48:85:2E:A5:E8:AF:38:EF:AD:E5:28:9C:E1 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F4328584AD23BBEB20AE12E06CDC9D700 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 16904 IP address blocks: 2600:a00::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:be:b2:0a:e1:2e:06:cd:c9:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=f3259d80-dbee-4319-b132-cd2e034b5c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:9c:b2:ef:35:2f:de:ec:fc:6e:dd:ec:f0: 67:56:a2:ff:d8:59:1f:4a:49:07:2a:44:c7:15:4f: ba:c2:db:4a:a3:55:e9:ce:82:25:66:0b:8a:d3:fe: a2:be:c3:8b:c9:90:9c:67:89:dc:88:e4:2b:4e:f2: a5:d6:c7:63:c8:b8:64:41:a2:0e:76:c6:6e:82:f6: 6a:ad:09:ad:17:07:54:8e:58:cc:6c:1b:7a:13:5c: 73:dd:81:ff:9d:f1:4c:d8:ac:56:c0:f7:3d:75:af: 3c:38:bf:20:7e:3e:72:f0:22:e1:d6:fa:cd:75:30: 40:be:d4:88:6a:28:a7:49:c4:5c:cc:64:47:1b:0b: 8d:8a:1a:da:e4:d3:54:ff:ce:fd:08:c2:8b:b9:fb: 48:a2:30:02:5e:9c:e0:66:ae:0a:1d:ad:a0:53:15: d3:2d:2b:f2:44:ea:06:1a:27:86:54:2c:91:c8:1b: 11:6b:0f:21:ec:75:0f:d2:86:c1:0d:45:7b:be:4f: 50:62:8c:b8:44:20:fa:b1:99:eb:d2:00:1f:36:c3: 56:80:d5:58:cf:46:09:f6:80:eb:b9:dc:8b:7b:84: 45:c4:ea:c6:7e:1e:33:79:89:1d:5b:3a:05:74:9e: cb:a6:0e:fc:97:34:48:bc:a8:ca:64:09:41:fb:b6: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:25:64:08:02:74:A7:48:85:2E:A5:E8:AF:38:EF:AD:E5:28:9C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv6: 2600:a00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:79:7c:4c:b2:f1:bb:ce:f4:ed:b2:b3:8d:38:bd:13:fd:67: a2:40:51:2d:6b:37:f7:86:47:5b:d0:1a:41:7f:a1:00:bc:12: 3e:33:f3:5a:c0:3d:b6:7b:d0:9d:8e:6c:c4:75:ff:5f:f7:63: f2:79:a7:e8:99:a2:a7:2c:cc:ab:2e:f0:9a:da:ae:6e:c4:8c: 63:1e:7c:2e:13:a3:da:c7:9a:ff:65:0c:15:3f:c9:6a:cc:99: b0:a2:9a:b2:97:c2:81:94:5d:76:e3:cf:75:10:f8:f4:e4:75: ff:7e:e4:ec:8b:0f:d8:43:cc:36:2a:a0:88:7a:80:40:d5:d8: ea:62:9e:5c:8f:63:ed:70:e5:8a:96:d8:50:3e:77:51:f2:0e: ef:6a:1d:9b:d7:b4:f5:1f:9d:71:2c:22:3d:22:a2:be:ac:3e: d2:44:39:2d:7f:e0:62:a8:2a:fc:98:27:0b:85:99:2f:b7:70: 95:a0:b1:8e:59:20:24:b7:07:13:02:b4:05:74:78:8c:19:a1: 4d:30:9e:07:29:fb:ef:f6:f6:dd:2c:eb:56:4d:51:dd:9f:e2: 6c:09:9c:f1:e6:6b:6f:b1:b6:15:7a:7d:15:02:28:7b:4c:c8: 92:fd:4e:c5:f0:68:c6:7d:5e:65:cb:70:cd:60:61:be:2b:39: 8d:2c:02:6c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErSO76yCuEuBs3J1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZjMyNTlkODAtZGJlZS00MzE5LWIxMzItY2QyZTAzNGI1YzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+mcsu81L97s/G7d7PBnVqL/2FkfSkkHKkTH FU+6wttKo1XpzoIlZguK0/6ivsOLyZCcZ4nciOQrTvKl1sdjyLhkQaIOdsZugvZq rQmtFwdUjljMbBt6E1xz3YH/nfFM2KxWwPc9da88OL8gfj5y8CLh1vrNdTBAvtSI aiinScRczGRHGwuNihra5NNU/879CMKLuftIojACXpzgZq4KHa2gUxXTLSvyROoG GieGVCyRyBsRaw8h7HUP0obBDUV7vk9QYoy4RCD6sZnr0gAfNsNWgNVYz0YJ9oDr udyLe4RFxOrGfh4zeYkdWzoFdJ7Lpg78lzRIvKjKZAlB+7amPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGYlZAgCdKdIhS6l6K84763lKJzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYmFlOGUyOGQtZTRhMi0z Mjg2LTkxZjMtZDU1NTcwZDE5MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAKADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOeXxMsvG7zvTtsrONOL0T/WeiQFEtazf3hkdb0BpBf6EAvBI+M/Na wD22e9CdjmzEdf9f92PyeafomaKnLMyrLvCa2q5uxIxjHnwuE6Pax5r/ZQwVP8lq zJmwopqyl8KBlF124891EPj05HX/fuTsiw/YQ8w2KqCIeoBA1djqYp5cj2PtcOWK lthQPndR8g7vah2b17T1H51xLCI9IqK+rD7SRDktf+BiqCr8mCcLhZkvt3CVoLGO WSAktwcTArQFdHiMGaFNMJ4HKfvv9vbdLOtWTVHdn+JsCZzx5mtvsbYVen0VAih7 TMiS/U7F8GjGfV5ly3DNYGG+KzmNLAJs -----END CERTIFICATE-----Generated at Sat Aug 23 19:29:22 2025 by rpki-client