$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa File: ae0ccfe5-813a-30c6-ad89-44f55329642c.roa (raw, json) Hash identifier: 2DTvuK7sDfczvO8U0xbMjYzk4+71FiVoV6d1gy6Tz38= Subject key identifier: AD:23:B8:A6:21:60:B4:01:42:B8:7A:46:12:82:DA:0D:85:80:D9:E9 Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39 Certificate serial: 010D0C9F4328584AD93667F2DE211A56A9AECB40 Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 25820 IP address blocks: 2607:8700::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:67:f2:de:21:1a:56:a9:ae:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=3f0ec852-af9c-453a-aab2-b374b51e2580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:1f:82:e3:01:ba:2e:51:89:5c:af:4a:64: 2b:ab:45:21:4e:3d:bd:9a:64:0d:7d:7a:43:c8:16: 71:eb:eb:31:d2:ad:23:ab:6c:f1:03:7e:aa:21:16: 1f:2d:5f:eb:b3:46:53:64:91:7d:52:65:79:ec:de: 9c:38:36:5f:34:97:49:26:3c:07:76:5e:1f:2b:7b: 4f:b6:20:f0:19:3a:17:52:4d:05:52:a1:0d:17:9e: 42:6d:9d:e7:e3:a0:e9:12:54:26:4e:8d:cb:e4:de: b6:45:a6:f0:d8:d9:df:6e:e3:fd:aa:90:35:95:47: 03:33:a8:ad:a6:6d:20:be:1d:d7:ab:e2:3c:46:7a: 9c:58:db:42:24:7d:fd:43:ba:f4:6e:24:9d:f6:fc: 74:94:a7:21:25:16:84:b4:0f:91:2c:d6:51:69:c2: b2:41:3b:53:1a:5e:cd:92:6b:80:b1:e5:8e:48:82: 97:ff:fe:91:48:60:94:c5:83:61:d7:d2:64:30:b0: 49:49:d6:36:a9:5a:eb:70:ce:8a:07:8c:01:d1:4a: 18:94:eb:c3:6e:ae:38:cc:0d:0c:43:50:bf:27:23: a4:15:d1:02:58:95:26:6f:9d:25:c8:89:f1:8d:4c: cf:da:cf:81:71:73:9c:fa:c6:61:c9:03:2b:1d:ba: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:23:B8:A6:21:60:B4:01:42:B8:7A:46:12:82:DA:0D:85:80:D9:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl X509v3 Authority Key Identifier: keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer sbgp-ipAddrBlock: critical IPv6: 2607:8700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8b:78:ca:c2:cb:62:2d:61:75:9d:a5:69:87:16:59:19:03: 8f:b3:d1:18:d3:98:60:f7:35:66:27:10:3e:d2:7d:75:96:35: 1b:87:16:ad:37:08:93:93:3e:4a:a3:cc:20:6c:58:f2:a5:5c: d8:9f:8a:6c:d7:35:06:0a:ef:26:a4:5b:5c:29:cf:1e:28:2c: dc:8f:42:40:f1:40:4a:c8:98:e3:8a:39:5c:34:5f:60:56:6d: 14:60:0a:00:2b:0a:8f:c2:ba:32:f7:af:d8:54:1d:7d:ab:e5: c8:67:fb:3f:db:e8:a5:a2:1b:3e:2e:1b:7c:8a:fc:0f:6f:7f: c0:78:a0:36:29:3c:e3:f6:b6:62:36:6e:03:78:7f:c3:dc:38: da:bc:d4:fb:60:20:e3:22:86:1a:99:d8:e3:10:f8:2c:5e:d1: 96:8e:d8:db:d7:7f:0e:d1:fe:93:36:a2:8e:0f:53:31:81:bc: 81:17:74:39:4d:6f:03:66:d0:27:29:73:54:18:00:f8:3f:1c: 0e:d0:da:73:b8:ad:40:c0:99:6a:56:e4:dc:4a:9a:d4:af:37: 39:a2:b7:06:87:67:31:c8:61:52:e4:f7:09:4d:ef:50:73:14: df:c0:94:23:20:31:24:cb:58:3c:59:65:23:ad:19:6b:5c:c0: b4:0c:06:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErZNmfy3iEaVqmuy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1 ZTM5MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk M2YwZWM4NTItYWY5Yy00NTNhLWFhYjItYjM3NGI1MWUyNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3wfguMBui5RiVyvSmQrq0UhTj29mmQNfXpD yBZx6+sx0q0jq2zxA36qIRYfLV/rs0ZTZJF9UmV57N6cODZfNJdJJjwHdl4fK3tP tiDwGToXUk0FUqENF55CbZ3n46DpElQmTo3L5N62Rabw2NnfbuP9qpA1lUcDM6it pm0gvh3Xq+I8RnqcWNtCJH39Q7r0biSd9vx0lKchJRaEtA+RLNZRacKyQTtTGl7N kmuAseWOSIKX//6RSGCUxYNh19JkMLBJSdY2qVrrcM6KB4wB0UoYlOvDbq44zA0M Q1C/JyOkFdECWJUmb50lyInxjUzP2s+BcXOc+sZhyQMrHbo9NwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK0juKYhYLQBQrh6RhKC2g2FgNnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvYWUwY2NmZTUtODEzYS0z MGM2LWFkODktNDRmNTUzMjk2NDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1 NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky OTE2NTVlMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7i3jKwstiLWF1naVphxZZGQOPs9EY05hg9zVmJxA+0n11ljUbhxat NwiTkz5Ko8wgbFjypVzYn4ps1zUGCu8mpFtcKc8eKCzcj0JA8UBKyJjjijlcNF9g Vm0UYAoAKwqPwroy96/YVB19q+XIZ/s/2+ilohs+Lht8ivwPb3/AeKA2KTzj9rZi Nm4DeH/D3DjavNT7YCDjIoYamdjjEPgsXtGWjtjb138O0f6TNqKOD1MxgbyBF3Q5 TW8DZtAnKXNUGAD4PxwO0NpzuK1AwJlqVuTcSprUrzc5orcGh2cxyGFS5PcJTe9Q cxTfwJQjIDEky1g8WWUjrRlrXMC0DAYC -----END CERTIFICATE-----Generated at Sun Aug 24 03:18:59 2025 by rpki-client