$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa File: aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa (raw, json) Hash identifier: Vh8m3mTBw+kFngTGhNyc86P5q21OTMRLXA1k0+ApofI= Subject key identifier: 74:F8:88:58:BE:54:D4:F8:2B:2A:D0:09:DC:D7:EB:20:CA:80:89:2D Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AD23BAA833E56068C58DD75E0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 2607:6000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:aa:83:3e:56:06:8c:58:dd:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=c69db5e1-8c8b-41e2-9058-681be31581b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:28:59:27:92:3d:47:36:44:a5:8e:2c:d4: 7d:49:d9:86:f8:92:eb:55:56:d6:81:12:6a:84:bb: 09:3e:d6:49:cb:49:35:51:e5:08:d6:72:1e:43:8d: 7a:8b:96:95:36:14:e8:6f:87:eb:d8:61:fc:a1:ae: 5e:c9:4a:de:23:f3:7f:e1:a9:f7:e4:d9:a4:0a:b5: 24:fd:70:b7:0e:6d:8a:a0:90:c3:b0:ce:37:df:ff: 8e:52:e3:3a:e4:cc:1c:32:7e:10:22:43:5c:3f:c6: aa:48:83:a1:1b:e0:d0:8a:11:46:9e:89:d3:5e:9f: 4d:24:1e:98:ec:05:88:af:c7:98:59:7b:b6:f9:ab: 46:f6:c3:9b:bd:a2:05:c9:ac:bd:c0:44:fd:ae:06: 9b:28:d6:11:35:9a:e4:a5:8a:c0:f1:41:ab:80:14: 42:e2:25:11:2b:e1:50:37:f5:5a:8e:35:83:5c:7c: 5e:40:6b:52:06:3c:96:8f:ea:43:7b:59:40:83:36: 4d:ca:ec:81:57:f0:27:50:cb:95:9c:24:d6:e0:81: bf:55:08:90:e3:96:18:83:d1:f9:a8:f7:3d:1d:26: c0:ac:14:d1:94:28:28:b2:61:36:2a:4f:3e:3e:94: 86:12:82:af:88:1b:c1:a7:e2:b6:2f:0a:c7:c9:78: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F8:88:58:BE:54:D4:F8:2B:2A:D0:09:DC:D7:EB:20:CA:80:89:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2f:6b:eb:2b:01:5b:11:ae:e0:91:bc:a3:87:7c:a6:c4:1c: e2:a9:98:6e:c4:60:2e:e7:91:35:c4:03:46:6c:e6:66:cb:2d: 01:4a:93:21:ef:3d:aa:79:36:dc:13:6b:bc:11:b2:31:ce:84: 1b:b4:36:f9:14:10:d8:73:8a:76:45:3f:b4:86:66:9d:de:59: 7a:ea:0f:0a:c4:51:c7:3d:a1:73:13:f7:fb:42:2d:03:55:78: 60:16:bf:57:0a:13:ef:41:de:72:ac:88:8d:b8:94:fd:a8:e2: ab:d1:a9:00:52:e7:f7:50:db:d6:c3:3b:2a:6b:15:55:63:69: eb:0c:ae:bb:5f:35:eb:3e:bf:97:89:da:c1:02:57:f9:80:38: 73:15:ce:ba:af:a8:1b:34:e9:b3:f8:a7:32:cb:ed:42:ae:f9: 8e:34:35:2f:fe:bc:23:77:88:66:8f:42:2c:19:b3:da:50:54: f7:80:c3:6c:3e:30:63:43:6a:23:71:57:a3:b9:ec:10:88:71: be:09:ad:21:1c:17:ef:45:6c:72:25:35:61:d9:20:9d:2f:ea: 40:26:8e:c2:2c:12:29:75:56:4f:e4:29:4b:f9:46:6c:39:a5: b5:a6:27:30:b1:d9:18:d0:f5:b8:2c:5d:5e:03:45:fb:b9:81: fa:12:39:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErSO6qDPlYGjFjddeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YzY5ZGI1ZTEtOGM4Yi00MWUyLTkwNTgtNjgxYmUzMTU4MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhgoWSeSPUc2RKWOLNR9SdmG+JLrVVbWgRJq hLsJPtZJy0k1UeUI1nIeQ416i5aVNhTob4fr2GH8oa5eyUreI/N/4an35NmkCrUk /XC3Dm2KoJDDsM433/+OUuM65MwcMn4QIkNcP8aqSIOhG+DQihFGnonTXp9NJB6Y 7AWIr8eYWXu2+atG9sObvaIFyay9wET9rgabKNYRNZrkpYrA8UGrgBRC4iURK+FQ N/VajjWDXHxeQGtSBjyWj+pDe1lAgzZNyuyBV/AnUMuVnCTW4IG/VQiQ45YYg9H5 qPc9HSbArBTRlCgosmE2Kk8+PpSGEoKviBvBp+K2LwrHyXhFqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHT4iFi+VNT4KyrQCdzX6yDKgIktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWE1MDM1ZjMtMmQyMS0z NTc0LThmYTMtOGU5YTM5NzNlMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgdgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGL2vrKwFbEa7gkbyjh3ymxBziqZhuxGAu55E1xANGbOZmyy0BSpMh 7z2qeTbcE2u8EbIxzoQbtDb5FBDYc4p2RT+0hmad3ll66g8KxFHHPaFzE/f7Qi0D VXhgFr9XChPvQd5yrIiNuJT9qOKr0akAUuf3UNvWwzsqaxVVY2nrDK67XzXrPr+X idrBAlf5gDhzFc66r6gbNOmz+Kcyy+1CrvmONDUv/rwjd4hmj0IsGbPaUFT3gMNs PjBjQ2ojcVejuewQiHG+Ca0hHBfvRWxyJTVh2SCdL+pAJo7CLBIpdVZP5ClL+UZs OaW1picwsdkY0PW4LF1eA0X7uYH6EjmL -----END CERTIFICATE-----Generated at Sat Aug 23 13:59:05 2025 by rpki-client