$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa File: dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa (raw, json) Hash identifier: ZN89WVnlZtXIJPl6sbRzbLxw3UDHy8KBdkb7M+ekdLI= Subject key identifier: 7D:0A:6A:2B:30:08:E7:F4:E3:B3:9D:02:46:A6:85:27:EA:C6:C3:B6 Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584AE03117E5DFA5424477037E00 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 400702 IP address blocks: 2604:6580::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:17:e5:df:a5:42:44:77:03:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=56b2195c-dd9a-4a8c-b76a-f0165061c43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:de:1a:7d:d7:4f:42:1a:e3:e6:be:33:e1: 87:cd:72:fa:00:e8:f6:af:44:e0:ea:f7:56:01:ab: dd:f7:ea:61:6f:c0:e9:4c:26:22:bf:3a:c8:84:06: d3:cc:37:3b:2e:e1:4f:03:5e:9e:72:d9:ac:5f:80: 40:99:93:5e:aa:2f:38:b4:f6:99:bb:bc:ec:23:54: 69:3f:f7:ae:83:d2:a1:4b:a0:8a:49:ca:0f:57:e1: b9:aa:f5:ef:4b:1a:fe:5f:58:93:44:e5:b9:c9:1b: 32:76:16:5f:e4:8d:e8:fd:d1:9d:ca:75:f9:cc:fa: ea:95:ea:76:43:25:7e:59:bd:b3:ac:9b:f1:b6:62: 26:41:b8:02:2f:7d:b4:37:36:54:a5:49:49:ed:b2: c1:4a:38:01:3b:70:81:09:ab:1d:69:79:e2:75:c3: 76:b4:45:f9:80:85:25:ef:f7:15:26:bd:d3:81:be: 48:45:26:c2:fa:1a:0b:c0:a2:e9:f1:59:01:b0:f9: 18:05:4e:09:da:26:3f:36:86:58:64:39:12:1c:d3: 44:9f:e1:5d:1c:9c:88:73:7a:ba:bd:5f:a8:a6:3f: dc:97:f5:21:f6:be:4b:96:37:8c:32:f7:45:bd:dc: 53:cc:b7:94:0f:c7:6c:b9:f1:32:65:bf:d7:2d:e1: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0A:6A:2B:30:08:E7:F4:E3:B3:9D:02:46:A6:85:27:EA:C6:C3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv6: 2604:6580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d8:44:5b:23:be:7d:f8:20:95:3c:a6:1e:f5:06:dc:53:d7: c9:fc:45:1a:71:c2:62:74:c0:94:32:bf:be:41:da:a7:d2:b8: 0a:a1:e1:9c:4c:e1:99:4c:41:0d:83:0c:e4:68:60:2e:8a:17: 32:45:5d:3b:9d:0f:f3:77:29:b0:b1:e0:cc:84:62:17:33:b2: 7a:97:87:45:57:ae:19:54:cc:9e:2d:58:4f:3b:ea:b8:d8:dd: 06:52:93:74:7e:75:ea:1f:61:a0:b7:a0:62:4d:8d:d8:9c:ba: 06:9d:0e:25:ea:d0:42:c1:99:48:84:38:8b:29:f0:a6:ce:39: d6:78:d3:5f:6a:01:c9:2c:0b:58:3e:08:14:11:14:bf:8d:b1: 73:ab:48:41:c8:a6:5b:6d:6e:b5:71:f8:0c:af:1a:fb:31:fe: a2:80:f3:c0:47:92:0f:e6:f0:2d:16:1f:d4:af:74:c6:03:d1: 40:31:8b:83:2e:ad:a8:c6:82:92:1d:8c:5f:7e:17:87:b3:6e: b6:ed:31:85:93:39:98:42:91:f4:1b:e4:3c:b2:33:57:b7:d9: 0e:b1:1f:34:58:d5:ea:76:19:fe:6d:d7:4e:80:99:45:9c:de: 4d:36:6e:1a:b3:a4:78:51:f9:05:23:84:63:1f:29:af:0f:c5: da:ee:d7:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErgMRfl36VCRHcDfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk NTZiMjE5NWMtZGQ5YS00YThjLWI3NmEtZjAxNjUwNjFjNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqDeGn3XT0Ia4+a+M+GHzXL6AOj2r0Tg6vdW Aavd9+phb8DpTCYivzrIhAbTzDc7LuFPA16ectmsX4BAmZNeqi84tPaZu7zsI1Rp P/eug9KhS6CKScoPV+G5qvXvSxr+X1iTROW5yRsydhZf5I3o/dGdynX5zPrqlep2 QyV+Wb2zrJvxtmImQbgCL320NzZUpUlJ7bLBSjgBO3CBCasdaXnidcN2tEX5gIUl 7/cVJr3Tgb5IRSbC+hoLwKLp8VkBsPkYBU4J2iY/NoZYZDkSHNNEn+FdHJyIc3q6 vV+opj/cl/Uh9r5LljeMMvdFvdxTzLeUD8dsufEyZb/XLeHAxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH0KaiswCOf047OdAkamhSfqxsO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvZGQ2ZWJjNjUtNjM3NS0z ZjNkLWE0ZDQtN2U3OWIxNjYyZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRlgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCK2ERbI759+CCVPKYe9QbcU9fJ/EUaccJidMCUMr++Qdqn0rgKoeGc TOGZTEENgwzkaGAuihcyRV07nQ/zdymwseDMhGIXM7J6l4dFV64ZVMyeLVhPO+q4 2N0GUpN0fnXqH2Ggt6BiTY3YnLoGnQ4l6tBCwZlIhDiLKfCmzjnWeNNfagHJLAtY PggUERS/jbFzq0hByKZbbW61cfgMrxr7Mf6igPPAR5IP5vAtFh/Ur3TGA9FAMYuD Lq2oxoKSHYxffheHs2627TGFkzmYQpH0G+Q8sjNXt9kOsR80WNXqdhn+bddOgJlF nN5NNm4as6R4UfkFI4RjHymvD8Xa7tfb -----END CERTIFICATE-----Generated at Sun Aug 24 05:12:06 2025 by rpki-client