$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa File: 553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa (raw, json) Hash identifier: Xt4wgPs3MIegNpmS1sAdu5Cq7XWgIT5eejg+rXryWjE= Subject key identifier: 86:D3:0E:A7:88:D8:FE:89:46:36:B0:65:77:A3:E1:E1:DF:2D:A6:8E Certificate issuer: /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Certificate serial: 010D0C9F4328584AC87643DEC9E0C04F6A3ED780 Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 3663 IP address blocks: 2604:aa00::/32 maxlen: 56 2607:f430::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:43:de:c9:e0:c0:4f:6a:3e:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=9fffdc9f-d8dd-4dab-8d6d-81c038915454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:19:12:ba:d4:5c:b5:bc:01:44:38:81:ed: 92:1b:37:0a:4f:69:b1:33:b0:29:4f:9d:0b:46:7f: 69:6e:01:10:04:27:21:c0:67:24:5f:30:38:b3:55: 23:6d:5e:80:98:0b:94:9e:56:67:56:2a:01:61:8b: ad:01:b7:6e:87:f1:b5:0b:fa:e8:fc:a8:32:c5:40: 44:c9:74:6f:dc:a8:6c:38:87:42:fd:ac:46:78:65: f6:f6:3c:ff:3e:d2:88:8e:39:ce:b8:cc:45:a2:bd: 43:07:38:39:e7:ee:4a:9e:c8:02:01:18:bf:80:b0: e1:b7:65:41:24:a3:58:1e:63:18:40:a8:33:27:bf: 9c:a8:8d:84:f5:6d:ad:05:fb:5e:19:9c:bf:d9:84: a0:ff:c9:a1:8d:31:d0:92:9a:ac:d0:c0:01:e6:15: b8:73:c9:03:51:0a:f3:3a:51:9d:02:69:c0:72:54: c3:6a:d2:a5:a3:9a:41:7e:e8:b0:af:4b:2c:d0:5e: 2b:64:89:38:83:4e:35:b3:9c:98:df:1d:68:de:5f: 3f:cf:cc:01:a9:97:94:95:45:1a:d8:7e:b2:65:fc: 14:d9:b6:1b:a8:13:5b:3b:28:ea:78:c2:59:0a:10: 99:72:88:02:10:06:94:88:91:ad:a1:92:5c:7d:f5: b3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D3:0E:A7:88:D8:FE:89:46:36:B0:65:77:A3:E1:E1:DF:2D:A6:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl X509v3 Authority Key Identifier: keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer sbgp-ipAddrBlock: critical IPv6: 2604:aa00::/32 2607:f430::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:49:dc:a2:1d:5f:04:60:a7:6e:eb:9f:7a:ca:65:49:f8:36: 80:11:5b:94:65:e8:e4:67:36:79:f0:9f:bb:40:54:f8:ae:92: 2c:1e:d6:6e:21:84:48:0c:aa:64:f9:b6:79:0f:8e:3e:ae:8a: 31:ef:b8:b4:95:47:bc:3f:38:f3:20:b4:1a:fb:f8:c8:ea:25: 12:1c:1b:7a:db:52:10:56:ac:e1:cc:b4:b3:7c:40:5d:12:a9: f7:6b:71:d1:40:8d:3f:93:82:f8:4a:48:5d:a7:5e:ec:d6:0f: 67:05:5c:02:1b:8b:07:2a:7f:6e:cc:b8:10:9f:55:f2:87:82: e4:f3:c9:03:f1:2f:92:e7:d4:b6:6c:8d:92:50:a2:9e:a0:db: 21:fb:dd:75:99:cd:50:97:69:95:a3:99:10:f9:25:f7:cd:79: e8:5b:b8:32:6c:e4:4c:cc:cf:4e:8a:28:81:e6:eb:83:c8:cc: 02:2b:35:01:c9:f7:82:77:aa:d0:2b:3e:e3:59:3c:b0:e6:16: cc:37:e7:ca:ae:50:3d:a0:0c:24:c4:9c:34:6f:f3:98:de:ed: 0f:73:e9:d5:b6:4c:08:e1:3a:f0:81:02:f8:6f:86:6d:d7:7b: 99:fd:fc:2d:bf:16:42:6f:ad:d6:e0:8a:ae:4d:72:3f:32:25: d3:fc:38:e8 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErIdkPeyeDAT2o+14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw Y2Y5MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk OWZmZmRjOWYtZDhkZC00ZGFiLThkNmQtODFjMDM4OTE1NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJQZErrUXLW8AUQ4ge2SGzcKT2mxM7ApT50L Rn9pbgEQBCchwGckXzA4s1UjbV6AmAuUnlZnVioBYYutAbduh/G1C/ro/KgyxUBE yXRv3KhsOIdC/axGeGX29jz/PtKIjjnOuMxFor1DBzg55+5KnsgCARi/gLDht2VB JKNYHmMYQKgzJ7+cqI2E9W2tBfteGZy/2YSg/8mhjTHQkpqs0MAB5hW4c8kDUQrz OlGdAmnAclTDatKlo5pBfuiwr0ss0F4rZIk4g041s5yY3x1o3l8/z8wBqZeUlUUa 2H6yZfwU2bYbqBNbOyjqeMJZChCZcogCEAaUiJGtoZJcffWzYQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIbTDqeI2P6JRjawZXej4eHfLaaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvNTUzYWRmNGMtOTRmYS0z OGZiLWJjZTYtMjFhZGJiYzJiZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1 OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3 ZWJmYzBjZjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAJgSqAAMF ACYH9DAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAmEncoh1fBGCnbuufesplSfg2gBFblGXo5Gc2efCfu0BU +K6SLB7WbiGESAyqZPm2eQ+OPq6KMe+4tJVHvD848yC0Gvv4yOolEhwbettSEFas 4cy0s3xAXRKp92tx0UCNP5OC+EpIXade7NYPZwVcAhuLByp/bsy4EJ9V8oeC5PPJ A/EvkufUtmyNklCinqDbIfvddZnNUJdplaOZEPkl98156Fu4MmzkTMzPTooogebr g8jMAis1Acn3gneq0Cs+41k8sOYWzDfnyq5QPaAMJMScNG/zmN7tD3Pp1bZMCOE6 8IEC+G+Gbdd7mf38Lb8WQm+t1uCKrk1yPzIl0/w46A== -----END CERTIFICATE-----Generated at Sun Aug 24 03:50:28 2025 by rpki-client