$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa File: 890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa (raw, json) Hash identifier: HFGWH0gNpKLHJLqsHr9j/muTCq6S+SBNeIfFV4MZII8= Subject key identifier: 5E:72:20:02:CF:A3:FD:C3:FD:D5:B8:AF:85:97:34:A9:F4:F6:42:A7 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584AF0F14B2A6343DC78C6012B6D Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 4226 IP address blocks: 2604:f586::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4b:2a:63:43:dc:78:c6:01:2b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=eafe3ffa-93ff-47d1-a2b6-418670dc3d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:69:26:28:f1:ac:8b:84:c6:22:f2:68:6a:de: 78:48:f4:c7:de:81:d7:78:58:ae:1a:eb:58:f9:34: 13:76:f8:b4:51:f3:b8:c2:f7:88:b4:bd:56:6f:a9: df:30:4a:39:7a:bd:97:d5:0f:ec:db:1d:3a:45:b1: 3d:13:57:ac:08:58:cf:a8:ff:b7:59:3c:40:a7:4c: c2:0a:d1:6f:55:ba:b1:8d:07:df:7f:f0:f0:1b:47: e7:b2:39:09:97:d8:77:da:38:3e:80:c9:ad:4e:32: 0e:4d:b3:7b:0c:b7:98:86:07:07:1d:c7:1d:58:db: 74:1e:a7:a2:1f:a4:84:ab:78:6b:49:80:44:47:c5: de:cc:aa:ab:43:1a:10:94:2a:a0:6c:ca:bf:98:c8: df:61:b9:ac:0c:5d:1d:1f:2e:53:60:9c:19:dc:70: e7:6a:e7:cf:bb:13:4b:9e:6d:ca:d2:90:36:8c:8f: 97:e4:ad:1a:c8:02:76:df:b8:c7:9d:fb:53:7a:96: 0d:4e:8c:de:dd:8e:e8:31:5b:ae:47:cd:af:28:fe: 51:c4:7b:67:63:16:59:c7:80:a6:9c:40:09:0c:2b: 6e:1b:92:62:57:5a:70:33:1b:a6:26:48:73:7b:9d: a4:5e:63:39:16:65:c3:f6:c3:f9:d0:e2:c9:5b:5d: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:72:20:02:CF:A3:FD:C3:FD:D5:B8:AF:85:97:34:A9:F4:F6:42:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f586::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e4:d7:38:39:35:4b:0c:db:13:8f:1a:e4:6b:eb:39:48:85: 5a:fb:7e:e0:1a:33:d9:35:88:82:b1:12:12:6d:13:df:c2:d1: 16:4d:04:40:b2:d4:c3:03:2c:f8:f4:07:9a:0b:de:d9:ed:9c: 0f:d9:7d:e3:ea:85:f3:94:2c:15:c3:6f:17:b9:97:86:05:57: 69:99:34:3c:1d:22:f1:15:ac:c1:ee:69:80:43:1f:42:0e:40: 44:7d:13:f1:4a:e5:ca:68:07:c5:37:be:02:c3:4d:97:bf:21: ee:7d:c8:8c:46:b0:84:a1:02:07:ea:3a:a6:0c:95:15:22:fb: 44:65:2f:52:fd:61:78:a0:bb:04:79:0c:0f:5b:3b:99:86:34: c2:c7:b1:27:1f:9c:94:7d:a0:b6:d0:29:c6:85:17:a8:2b:77: cf:83:4f:2e:1f:70:55:45:d1:f7:39:91:0b:91:19:26:0f:bd: 9b:f6:cf:67:34:d8:bc:cc:1e:22:37:a1:7e:ca:c8:47:77:c7: de:e9:a1:8b:ac:63:c4:8c:45:b7:be:7f:2e:39:98:54:05:9f: 64:22:ef:85:da:02:40:a3:9b:26:f0:35:e4:13:63:79:8a:b5: e9:fa:59:de:55:67:f6:fb:08:60:10:33:91:91:56:c8:65:02: 85:8f:56:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErw8UsqY0PceMYBK20wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZWFmZTNmZmEtOTNmZi00N2QxLWEyYjYtNDE4NjcwZGMzZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2kmKPGsi4TGIvJoat54SPTH3oHXeFiuGutY +TQTdvi0UfO4wveItL1Wb6nfMEo5er2X1Q/s2x06RbE9E1esCFjPqP+3WTxAp0zC CtFvVbqxjQfff/DwG0fnsjkJl9h32jg+gMmtTjIOTbN7DLeYhgcHHccdWNt0Hqei H6SEq3hrSYBER8XezKqrQxoQlCqgbMq/mMjfYbmsDF0dHy5TYJwZ3HDnaufPuxNL nm3K0pA2jI+X5K0ayAJ237jHnftTepYNToze3Y7oMVuuR82vKP5RxHtnYxZZx4Cm nEAJDCtuG5JiV1pwMxumJkhze52kXmM5FmXD9sP50OLJW11ArQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF5yIALPo/3D/dW4r4WXNKn09kKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvODkwZjljMmUtNDI0Ni0z MTJiLWE4NjktZWJiMmNmYmRkN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1hjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZ5Nc4OTVLDNsTjxrka+s5SIVa+37gGjPZNYiCsRISbRPfwtEWTQRA stTDAyz49AeaC97Z7ZwP2X3j6oXzlCwVw28XuZeGBVdpmTQ8HSLxFazB7mmAQx9C DkBEfRPxSuXKaAfFN74Cw02XvyHufciMRrCEoQIH6jqmDJUVIvtEZS9S/WF4oLsE eQwPWzuZhjTCx7EnH5yUfaC20CnGhReoK3fPg08uH3BVRdH3OZELkRkmD72b9s9n NNi8zB4iN6F+yshHd8fe6aGLrGPEjEW3vn8uOZhUBZ9kIu+F2gJAo5sm8DXkE2N5 irXp+lneVWf2+whgEDORkVbIZQKFj1bz -----END CERTIFICATE-----Generated at Sun Aug 24 02:56:36 2025 by rpki-client