$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/cf3cda41-0474-3ce2-924d-84527b3062ff.roa File: cf3cda41-0474-3ce2-924d-84527b3062ff.roa (raw, json) Hash identifier: 2BoTbGU9csJBT3dMuIJXBdJXP60q+oGMKEBuIsRDzEA= Subject key identifier: 4F:56:B2:28:C4:CB:54:40:B9:BB:59:C0:B0:04:B2:51:4C:EC:A7:A8 Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977 Certificate serial: 010D0C9F4328584AE89122627626957E167CA9E0 Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/cf3cda41-0474-3ce2-924d-84527b3062ff.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 398549 IP address blocks: 2605:dd40:5bbb::/48 maxlen: 48 2605:dd40:5ccc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:22:62:76:26:95:7e:16:7c:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=5e2cfa22-917d-4ae6-8f41-62acc8dda877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:20:b3:26:7d:c1:90:6d:fe:15:3f:29:b2: a6:10:97:5a:96:0e:1f:de:97:e3:c1:ea:2d:ad:85: 12:10:4f:ed:18:67:a9:bf:df:dc:bb:ec:b3:7a:0f: df:7f:14:ef:de:64:5b:53:dd:2e:3b:ca:6e:8c:bc: ab:d2:d7:c9:43:29:02:19:8f:7c:d9:ed:50:62:6b: 85:76:0c:d0:e5:b9:4b:f4:aa:46:ea:cd:57:fc:87: 43:b5:d9:75:5c:1a:dc:d7:cd:52:62:8d:66:02:8c: fb:27:5d:1a:ac:19:c2:67:e0:7a:22:f4:b3:27:87: 0b:4a:62:42:00:80:55:f3:40:75:1f:ab:53:ec:53: e3:7c:d0:72:a9:32:28:a2:b9:bb:66:0e:0c:27:f8: 7a:fd:00:3e:b2:90:27:da:e0:32:ee:dc:48:05:b8: c5:99:22:5e:b4:e7:ac:0f:08:d2:d9:3f:5f:33:d2: f4:d0:28:f8:62:c6:64:2f:0f:ee:ca:7e:d1:f9:ca: d5:ee:44:f1:dc:e1:37:ce:1a:20:f0:52:b1:88:4c: 78:d4:a7:a7:0a:d2:32:1b:32:ed:5f:8a:bc:01:38: 1a:3b:d2:c2:96:06:a9:09:65:b6:62:1d:7b:09:08: 33:fa:bb:08:28:37:7a:66:92:3b:eb:98:4f:15:21: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:56:B2:28:C4:CB:54:40:B9:BB:59:C0:B0:04:B2:51:4C:EC:A7:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/cf3cda41-0474-3ce2-924d-84527b3062ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl X509v3 Authority Key Identifier: keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer sbgp-ipAddrBlock: critical IPv6: 2605:dd40:5bbb::/48 2605:dd40:5ccc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d6:e3:2a:d9:d8:8d:6e:37:3f:34:8e:b9:cf:5a:d8:f7:07: 3a:18:c8:02:98:c7:c3:54:73:39:74:ad:22:7f:b1:8b:e0:18: 88:e6:9f:05:cb:f9:c6:38:9e:e7:78:15:7d:c4:61:6b:2a:54: 43:65:5f:64:a1:9f:d4:db:f0:c7:a0:69:a1:18:2b:ba:d6:b0: 8a:ca:44:5d:e1:9e:f0:e6:16:1d:f3:3b:71:07:67:12:36:43: 60:84:87:1e:0b:67:98:7e:be:f1:6c:1a:86:85:63:1b:58:e9: 3d:b2:d2:03:fb:dc:e8:53:28:b5:3c:61:05:4b:94:08:25:48: 49:47:6f:c9:21:b4:a7:8b:f0:fc:df:e8:9f:37:d6:16:0d:73: 3b:cb:3d:4f:9b:86:c1:f4:b9:29:ce:8e:20:91:05:04:22:6f: 61:27:c7:bd:e0:31:2d:ef:bf:73:2b:e3:4e:36:5f:2c:47:39: 37:9d:82:56:ca:34:fb:d3:01:c4:6b:e7:b1:30:0a:95:5a:02: 2d:e3:55:d8:04:55:32:80:6e:0d:10:9e:d1:8f:06:a7:ed:6c: 38:99:b6:df:d0:f8:75:5e:47:a2:cf:93:67:19:cc:4b:9b:30: cd:b1:9d:f5:45:0a:19:ff:2b:0c:bc:b7:85:02:f6:d2:eb:2b: b6:fe:10:d7 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErokSJidiaVfhZ8qeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4 OTc3MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NWUyY2ZhMjItOTE3ZC00YWU2LThmNDEtNjJhY2M4ZGRhODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JUgsyZ9wZBt/hU/KbKmEJdalg4f3pfjweot rYUSEE/tGGepv9/cu+yzeg/ffxTv3mRbU90uO8pujLyr0tfJQykCGY982e1QYmuF dgzQ5blL9KpG6s1X/IdDtdl1XBrc181SYo1mAoz7J10arBnCZ+B6IvSzJ4cLSmJC AIBV80B1H6tT7FPjfNByqTIoorm7Zg4MJ/h6/QA+spAn2uAy7txIBbjFmSJetOes DwjS2T9fM9L00Cj4YsZkLw/uyn7R+crV7kTx3OE3zhog8FKxiEx41KenCtIyGzLt X4q8ATgaO9LClgapCWW2Yh17CQgz+rsIKDd6ZpI765hPFSE8WQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFE9WsijEy1RAubtZwLAEslFM7KeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvY2YzY2RhNDEtMDQ3NC0z Y2UyLTkyNGQtODQ1MjdiMzA2MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4 ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy ZDVjODg5NzcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgXdQFu7 AwcAJgXdQFzMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACPW4yrZ2I1uNz80jrnPWtj3BzoYyAKYx8NUczl0 rSJ/sYvgGIjmnwXL+cY4nud4FX3EYWsqVENlX2Shn9Tb8MegaaEYK7rWsIrKRF3h nvDmFh3zO3EHZxI2Q2CEhx4LZ5h+vvFsGoaFYxtY6T2y0gP73OhTKLU8YQVLlAgl SElHb8khtKeL8Pzf6J831hYNczvLPU+bhsH0uSnOjiCRBQQib2Enx73gMS3vv3Mr 4042XyxHOTedglbKNPvTAcRr57EwCpVaAi3jVdgEVTKAbg0QntGPBqftbDiZtt/Q +HVeR6LPk2cZzEubMM2xnfVFChn/Kwy8t4UC9tLrK7b+ENc= -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:17 2025 by rpki-client