$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa File: 68e8e840-a656-3ad6-aea8-71835d66921c.roa (raw, json) Hash identifier: D+MMXa4e2bOnIebnZyCcnB203ZrC7++Z/tEsIRwtL14= Subject key identifier: D4:6E:A9:05:A0:C6:B6:A3:59:B6:50:17:D5:65:32:2E:B6:B7:C4:4B Certificate issuer: /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae Certificate serial: 010D0C9F4328584AE72BB674020D41B08E008900 Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 36832 IP address blocks: 2602:f9bd:f01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:b6:74:02:0d:41:b0:8e:00:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=74c3e1ea-a8e0-45a5-a86c-972750fe1260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:ae:fa:76:e8:1b:3b:9a:a6:00:f0:83:38: 45:81:56:72:3b:dc:ac:2f:38:28:f2:e1:23:36:5b: fc:f6:7e:0e:8a:cd:e7:6b:cb:c0:61:e5:76:46:e2: 84:51:7a:cc:bb:e0:7e:34:08:21:7f:2b:77:f0:0c: 4d:68:42:5f:ef:ce:e0:b9:38:3a:b4:2a:d2:1b:07: 89:23:0f:04:26:ca:04:ae:0a:d6:b1:b5:b9:1a:4d: 44:69:20:05:2a:19:a8:10:6e:2f:be:a0:fb:c9:b8: c0:f4:6b:5d:c2:c6:4d:83:f7:38:8f:65:00:b6:d2: 8a:98:d4:7e:dc:bf:04:da:2a:25:cc:c4:b0:f1:8c: 4e:fc:5b:7d:eb:9f:42:e8:4c:23:27:7f:ab:81:9e: c6:e5:87:77:a0:92:11:10:a9:e9:ff:9a:de:a6:07: 55:dc:64:70:d6:8f:fa:af:86:4b:90:91:d3:91:3b: 74:16:ec:5e:50:ed:0b:70:70:50:71:cc:ce:29:9e: ae:da:71:3b:06:5c:89:1d:97:3f:1f:91:3b:8f:b6: f4:2f:7c:cf:53:21:8c:07:cf:44:f2:24:81:45:ac: 4b:a5:1c:0a:c2:89:ee:77:23:2b:6f:99:d7:27:55: bc:89:88:b9:9a:62:f2:4b:b4:79:14:90:2c:c1:2a: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6E:A9:05:A0:C6:B6:A3:59:B6:50:17:D5:65:32:2E:B6:B7:C4:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl X509v3 Authority Key Identifier: keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9bd:f01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:95:03:b9:35:b2:a8:b5:1b:b2:e6:c1:4a:24:70:6f:3c:c7: e9:7f:98:cb:90:e8:d3:0f:6d:78:8c:ae:b6:a9:24:90:04:35: ea:15:3a:90:ec:8f:60:77:45:98:25:a5:65:98:43:ed:73:0a: e5:0d:a2:28:07:60:28:2e:67:fe:3e:02:67:82:72:32:af:17: 47:c4:91:a3:e1:af:c3:7d:25:cb:a3:4d:50:09:9d:c4:66:61: 25:4f:51:c6:f5:73:27:1f:90:a1:a9:d2:66:10:ea:d5:e0:14: ae:42:7d:54:56:d8:84:2f:21:1e:c4:01:a0:e1:3b:c8:06:e7: e7:16:10:fc:58:7c:8e:14:1f:37:ad:5d:8d:4a:69:9d:0f:cb: 04:d8:f3:66:8b:95:e0:af:e1:f8:aa:af:ab:bc:89:77:b0:ed: e3:89:5c:06:98:0d:85:33:b0:89:c6:89:c6:18:78:51:d8:84: ba:db:f0:0c:1e:f5:2a:42:27:94:4f:82:14:5f:80:47:77:f1: 46:1a:22:4e:95:92:ec:6c:43:58:19:da:69:93:53:1a:0a:b3: b1:f2:4c:84:85:cc:db:19:ac:80:ec:de:a8:91:8b:26:75:1c: 1d:00:dc:9e:ec:0c:28:ba:26:36:e4:28:80:b6:3f:49:0e:b9: f2:76:37:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErnK7Z0Ag1BsI4AiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWViNjgxYWMtY2U4My00NTg4LWJiZWQtMjg3N2JmNWE0 M2FlMB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk NzRjM2UxZWEtYThlMC00NWE1LWE4NmMtOTcyNzUwZmUxMjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKeu+nboGzuapgDwgzhFgVZyO9ysLzgo8uEj Nlv89n4Ois3na8vAYeV2RuKEUXrMu+B+NAghfyt38AxNaEJf787guTg6tCrSGweJ Iw8EJsoErgrWsbW5Gk1EaSAFKhmoEG4vvqD7ybjA9GtdwsZNg/c4j2UAttKKmNR+ 3L8E2iolzMSw8YxO/Ft9659C6EwjJ3+rgZ7G5Yd3oJIREKnp/5repgdV3GRw1o/6 r4ZLkJHTkTt0FuxeUO0LcHBQcczOKZ6u2nE7BlyJHZc/H5E7j7b0L3zPUyGMB89E 8iSBRaxLpRwKwonudyMrb5nXJ1W8iYi5mmLyS7R5FJAswSqZeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNRuqQWgxrajWbZQF9VlMi62t8RLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2 ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3YmY1YTQzYWUvNjhlOGU4NDAtYTY1Ni0z YWQ2LWFlYTgtNzE4MzVkNjY5MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWViNjgxYWMtY2U4My00NTg4LWJi ZWQtMjg3N2JmNWE0M2FlL2FlYjY4MWFjLWNlODMtNDU4OC1iYmVkLTI4NzdiZjVh NDNhZS5jcmwwHwYDVR0jBBgwFoAU6UnX34qG5dZ/rJgDrsJvSwjdC0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3 YmY1YTQzYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5vQ8B MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiVA7k1sqi1G7LmwUokcG88x+l/mMuQ6NMPbXiMrrapJJAENeoV OpDsj2B3RZglpWWYQ+1zCuUNoigHYCguZ/4+AmeCcjKvF0fEkaPhr8N9JcujTVAJ ncRmYSVPUcb1cycfkKGp0mYQ6tXgFK5CfVRW2IQvIR7EAaDhO8gG5+cWEPxYfI4U HzetXY1KaZ0PywTY82aLleCv4fiqr6u8iXew7eOJXAaYDYUzsInGicYYeFHYhLrb 8Awe9SpCJ5RPghRfgEd38UYaIk6VkuxsQ1gZ2mmTUxoKs7HyTISFzNsZrIDs3qiR iyZ1HB0A3J7sDCi6JjbkKIC2P0kOufJ2N5Y= -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:07 2025 by rpki-client