$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa File: b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa (raw, json) Hash identifier: k4VF/XKnMlkDnnxUm46r7LYt/X1CWy+poNQjxcTPTQI= Subject key identifier: 09:0B:02:87:DB:71:D9:8B:25:89:79:B5:E9:A6:08:A9:3B:82:9F:8A Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Certificate serial: 010D0C9F4328584AD3A0FA392305CFFE41B404E5 Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 53507 IP address blocks: 2604:56c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:fa:39:23:05:cf:fe:41:b4:04:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=d62765a0-7bf7-46bb-bfe2-8b8b97d47851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e4:eb:44:be:c7:e0:bc:71:a6:9a:0f:48:bb: c4:e6:68:5a:46:95:08:55:ee:60:b3:57:48:96:2d: 86:85:70:6b:f1:8a:c3:1c:68:83:f2:89:19:e0:f8: 71:9e:c4:83:6d:dd:cf:af:90:48:be:9c:cc:22:20: ba:c5:99:50:20:04:c6:a3:e2:f8:72:4e:19:b4:e1: 54:84:87:bd:24:c8:bc:37:45:46:a1:eb:c8:4b:91: 50:c1:99:69:50:3c:02:44:bb:1b:2f:70:df:bf:e7: a3:58:1b:08:56:26:32:c6:38:e7:47:7c:d4:e5:96: cd:a7:ba:fa:84:dc:15:96:40:07:15:2c:3c:b7:cd: d9:1b:ca:2e:2f:ac:40:9c:e9:3a:f4:c1:e4:56:55: 96:32:1f:44:0d:ec:61:18:a7:51:05:13:93:a4:c2: 36:d7:af:bb:76:de:e7:93:b6:a6:90:bb:77:ff:88: 25:4a:0a:19:cb:89:49:b4:24:95:96:fe:11:37:21: 1a:97:78:15:1b:89:dc:14:2e:bd:e2:41:e0:f0:2c: 34:25:d9:f5:ff:66:98:34:94:79:8f:5b:80:af:a6: 53:15:20:58:f4:a5:5f:6c:37:dc:2d:52:65:08:72: 7e:1f:03:60:d2:56:0e:20:27:93:93:88:7b:1a:06: cd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0B:02:87:DB:71:D9:8B:25:89:79:B5:E9:A6:08:A9:3B:82:9F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl X509v3 Authority Key Identifier: keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer sbgp-ipAddrBlock: critical IPv6: 2604:56c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:3e:fa:0e:de:c7:dd:b8:92:8d:2b:2c:5b:dd:09:5b:21:50: 4d:d9:11:3b:13:2e:62:9f:68:38:fd:07:73:dc:90:45:bf:d2: ba:f1:1a:32:81:2e:95:71:f0:d7:6c:68:56:39:8d:72:84:bc: c0:2c:9f:98:3a:b1:6c:cf:e7:02:e7:93:3d:c0:f2:b1:19:6b: 61:cd:d8:83:85:32:6d:88:ca:f0:52:88:f9:f3:c3:15:3a:42: d4:d0:78:7b:8b:40:9b:c8:17:85:e5:72:db:52:2b:97:a5:0a: c1:00:72:15:59:f9:d9:78:64:5c:29:5c:3c:ef:c0:39:d3:e7: 48:92:4f:94:42:97:81:a8:78:42:93:8a:69:f0:c1:86:96:4d: 7d:7a:e2:4b:8a:9f:18:8c:17:87:0a:bc:d8:20:de:b8:69:66: c6:10:ab:10:00:ba:e2:e6:17:a7:6f:89:a1:e8:5d:5e:a8:b0: 1f:44:a2:3c:a7:86:87:b9:bb:1d:73:db:7a:41:ab:02:39:70: b4:33:bb:49:47:b9:ef:9f:bc:56:03:fb:9c:25:d6:94:c8:e7: 38:f5:c0:55:0a:fc:b6:f0:ab:01:52:3a:63:64:16:10:9d:95: 6b:83:ba:f9:70:f6:89:f7:d9:fa:ce:cd:80:9c:1b:26:2e:fd: 9a:9b:bc:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErToPo5IwXP/kG0BOUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlZjM2MzQtN2I0OS00Yjk3LTg3ODctNjgwZDYxOTZl NmU0MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDYyNzY1YTAtN2JmNy00NmJiLWJmZTItOGI4Yjk3ZDQ3ODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeTrRL7H4LxxppoPSLvE5mhaRpUIVe5gs1dI li2GhXBr8YrDHGiD8okZ4PhxnsSDbd3Pr5BIvpzMIiC6xZlQIATGo+L4ck4ZtOFU hIe9JMi8N0VGoevIS5FQwZlpUDwCRLsbL3Dfv+ejWBsIViYyxjjnR3zU5ZbNp7r6 hNwVlkAHFSw8t83ZG8ouL6xAnOk69MHkVlWWMh9EDexhGKdRBROTpMI216+7dt7n k7amkLt3/4glSgoZy4lJtCSVlv4RNyEal3gVG4ncFC694kHg8Cw0Jdn1/2aYNJR5 j1uAr6ZTFSBY9KVfbDfcLVJlCHJ+HwNg0lYOICeTk4h7GgbNcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAkLAofbcdmLJYl5temmCKk7gp+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVm MzYzNC03YjQ5LTRiOTctODc4Ny02ODBkNjE5NmU2ZTQvYjlhMjZjZjEtZTJhNy0z MDVkLThhYjgtNzFlMDRiNDQ0MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFlZjM2MzQtN2I0OS00Yjk3LTg3 ODctNjgwZDYxOTZlNmU0L2ExZWYzNjM0LTdiNDktNGI5Ny04Nzg3LTY4MGQ2MTk2 ZTZlNC5jcmwwHwYDVR0jBBgwFoAU64YxEagOCq33QaX8gmjaFICXvrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVmMzYzNC03YjQ5LTRiOTctODc4Ny02ODBk NjE5NmU2ZTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRWwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhPvoO3sfduJKNKyxb3QlbIVBN2RE7Ey5in2g4/Qdz3JBFv9K68Roy gS6VcfDXbGhWOY1yhLzALJ+YOrFsz+cC55M9wPKxGWthzdiDhTJtiMrwUoj588MV OkLU0Hh7i0CbyBeF5XLbUiuXpQrBAHIVWfnZeGRcKVw878A50+dIkk+UQpeBqHhC k4pp8MGGlk19euJLip8YjBeHCrzYIN64aWbGEKsQALri5henb4mh6F1eqLAfRKI8 p4aHubsdc9t6QasCOXC0M7tJR7nvn7xWA/ucJdaUyOc49cBVCvy28KsBUjpjZBYQ nZVrg7r5cPaJ99n6zs2AnBsmLv2am7z4 -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:43 2025 by rpki-client