$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/32915dae-42f2-38d7-86d4-d902e4d35a8d.roa File: 32915dae-42f2-38d7-86d4-d902e4d35a8d.roa (raw, json) Hash identifier: bpctti+0P0unAyPyswKRJvSkm9a/NXDWQS1YDB3dHnM= Subject key identifier: A6:F6:6A:C2:0A:17:A5:53:F1:B4:2D:51:61:31:E8:86:E9:34:CD:B9 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584ACF70F7C77C458955BA4209E0 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/32915dae-42f2-38d7-86d4-d902e4d35a8d.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 271 IP address blocks: 2607:f8f0:250::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:70:f7:c7:7c:45:89:55:ba:42:09:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=5202d19a-3692-4055-8a93-c486732959e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6e:03:94:18:ba:2e:58:e4:ac:17:f6:c7:1b: 75:37:f3:90:da:96:4b:fc:c0:99:76:33:b7:80:81: 3c:5d:e6:99:b0:22:fc:cf:65:22:b6:ea:e3:28:cc: 39:a7:4e:47:73:88:45:52:41:e5:ed:1b:d4:c8:77: 44:e9:46:98:55:07:74:0a:f9:32:c3:92:58:00:cc: 8c:46:0a:d9:73:29:05:1f:2d:2b:be:fd:48:c9:00: b6:be:c1:4c:fe:d2:59:1a:2e:12:01:22:8e:55:bc: 0a:2c:8b:07:0f:1a:b7:5d:5a:75:38:6d:52:1d:1c: 3b:1e:e3:04:03:35:9d:1f:26:60:be:ce:c5:ce:35: 4b:cf:f1:94:25:4f:8c:32:35:63:66:6a:8c:37:1b: 44:e3:6f:86:c8:e6:18:d9:7d:40:70:c0:ad:7d:31: fb:24:2f:2c:5d:c7:f6:30:1b:d8:b5:ae:c4:b7:46: 74:e3:7d:35:c2:5d:6a:53:90:98:91:43:fc:08:85: 43:58:fc:a5:ba:76:8e:f4:7d:d3:09:68:88:a7:15: 20:f9:1a:cc:43:a4:81:3b:7c:79:a6:eb:e8:7e:af: 2d:30:6a:aa:dd:33:11:33:6b:51:a3:b5:01:9d:95: b3:59:52:60:74:ea:cc:24:53:58:12:98:f4:c7:c6: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F6:6A:C2:0A:17:A5:53:F1:B4:2D:51:61:31:E8:86:E9:34:CD:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/32915dae-42f2-38d7-86d4-d902e4d35a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:250::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e1:0c:0d:23:62:de:7c:5f:16:d7:b9:66:87:d3:e7:2b:a7: a3:69:d3:37:de:70:f0:94:2f:78:5e:40:60:fb:3c:41:f0:a5: 65:63:59:94:59:7a:4d:4f:54:51:02:41:f6:d4:88:87:45:ef: 6d:03:ba:da:32:f7:e3:30:b1:51:8a:80:c5:0e:dc:6f:b8:05: 5e:ef:2e:e8:84:58:65:b9:34:37:fe:19:f2:9f:ef:ad:44:b2: 4b:e4:71:de:76:5d:c7:2e:4e:61:b5:89:8e:ab:9d:a0:49:67: 8a:21:e8:bc:d7:e3:75:42:a0:be:de:de:d9:e4:5a:dc:09:be: 7c:9e:a4:58:01:89:23:91:b1:a7:75:a9:2a:ee:7b:e9:a6:58: 01:e0:fd:e9:56:95:a0:48:f7:83:09:af:55:66:93:bd:91:7d: 88:03:89:49:1d:2f:40:03:84:26:30:0c:c1:b2:c3:bd:5e:bc: de:c4:cc:4c:cf:cd:bd:c9:ca:dd:28:4d:4b:50:53:07:67:a7: a3:dd:f4:23:51:14:b1:4c:de:c9:2a:be:ba:32:bc:0d:ef:08: 8b:81:7a:56:84:11:21:88:27:b0:83:a0:88:13:b4:39:4b:ca: 0c:28:1d:36:1c:00:e8:8e:65:a1:f8:a3:f8:dc:7b:eb:bc:bc: 1a:87:37:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErPcPfHfEWJVbpCCeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NTIwMmQxOWEtMzY5Mi00MDU1LThhOTMtYzQ4NjczMjk1OWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg24DlBi6LljkrBf2xxt1N/OQ2pZL/MCZdjO3 gIE8XeaZsCL8z2UiturjKMw5p05Hc4hFUkHl7RvUyHdE6UaYVQd0Cvkyw5JYAMyM RgrZcykFHy0rvv1IyQC2vsFM/tJZGi4SASKOVbwKLIsHDxq3XVp1OG1SHRw7HuME AzWdHyZgvs7FzjVLz/GUJU+MMjVjZmqMNxtE42+GyOYY2X1AcMCtfTH7JC8sXcf2 MBvYta7Et0Z04301wl1qU5CYkUP8CIVDWPylunaO9H3TCWiIpxUg+RrMQ6SBO3x5 puvofq8tMGqq3TMRM2tRo7UBnZWzWVJgdOrMJFNYEpj0x8YPsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKb2asIKF6VT8bQtUWEx6IbpNM25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvMzI5MTVkYWUtNDJmMi0z OGQ3LTg2ZDQtZDkwMmU0ZDM1YThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgf48AJQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABzhDA0jYt58XxbXuWaH0+crp6Np0zfecPCUL3heQGD7PEHwpWVj WZRZek1PVFECQfbUiIdF720Dutoy9+MwsVGKgMUO3G+4BV7vLuiEWGW5NDf+GfKf 761Eskvkcd52XccuTmG1iY6rnaBJZ4oh6LzX43VCoL7e3tnkWtwJvnyepFgBiSOR sad1qSrue+mmWAHg/elWlaBI94MJr1Vmk72RfYgDiUkdL0ADhCYwDMGyw71evN7E zEzPzb3Jyt0oTUtQUwdnp6Pd9CNRFLFM3skqvroyvA3vCIuBelaEESGIJ7CDoIgT tDlLygwoHTYcAOiOZaH4o/jce+u8vBqHN1Y= -----END CERTIFICATE-----Generated at Sat Aug 23 22:52:30 2025 by rpki-client