$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa File: 40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa (raw, json) Hash identifier: /Ez7B2sfNh08uk/5b7F8ivDJG5VSIjwiMHHIZJeEKMQ= Subject key identifier: FE:AD:D0:FF:8F:70:16:C4:8C:99:CC:22:E8:6C:0B:58:DB:99:A0:96 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584AEF8BCC526F9D2B79C9ACAC80 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 271 IP address blocks: 2607:f8f0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:cc:52:6f:9d:2b:79:c9:ac:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=5e8d49f8-8c98-416b-95f9-e6b4ed5e47ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:5a:7c:2d:f4:8b:c4:d7:0d:b8:c4:3e:c4: 49:93:38:32:a4:17:c1:1e:9b:6c:4e:87:de:38:d4: d2:19:35:fd:1d:1d:37:c1:24:9c:a1:22:dd:89:d4: 17:14:98:4b:00:3f:0e:a4:8d:29:da:c3:a0:ef:75: 90:2a:24:b0:83:8e:d7:b5:35:a6:19:4e:10:02:3b: 77:db:f6:56:d9:a1:2e:3c:c9:51:56:a6:30:0d:aa: c4:a1:c4:a0:e4:85:dc:77:0b:fe:7b:a6:0a:47:50: eb:b5:c4:00:0d:93:22:13:4c:2b:a3:fe:d3:ee:ad: 5b:10:75:3e:05:be:de:6b:3a:62:f4:78:2d:de:33: bc:e5:01:25:f9:16:1b:c6:b0:41:35:be:20:1f:ea: 9a:d3:37:5d:41:e5:5f:27:34:16:a1:81:ca:fe:14: 6d:88:cd:55:e7:3e:ec:50:d1:9e:67:04:55:95:f4: 1b:06:f0:d9:58:33:24:8d:cc:1b:65:a4:59:2d:aa: c2:9c:53:1f:d1:38:c8:bb:81:0a:4a:bc:55:5b:65: b8:72:13:aa:2f:20:54:45:a6:f9:7d:0e:19:3e:d9: 62:ad:f9:21:21:c9:98:0e:80:55:83:cf:5e:43:52: 27:be:71:49:6a:c2:3f:f5:77:1e:ab:ce:88:c3:6f: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AD:D0:FF:8F:70:16:C4:8C:99:CC:22:E8:6C:0B:58:DB:99:A0:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:54:c3:04:1e:3d:90:8e:61:49:3f:e5:40:c7:a9:30:ff:a8: 01:61:d1:e2:1a:19:46:8e:b6:a4:fd:a2:a8:3b:c9:fd:70:2e: 06:50:48:c8:e0:55:e9:3e:ad:8b:44:21:ec:05:e5:e6:12:61: 5a:24:45:ab:cc:c9:9a:a0:ff:b3:47:48:40:35:6e:e6:72:23: 45:ee:b1:f4:33:81:03:a5:22:12:5f:6d:b5:96:f3:31:15:dc: c5:e1:72:ec:05:77:3d:42:29:d7:51:61:d6:19:2e:26:7d:60: eb:eb:bb:aa:e6:30:bb:67:95:7e:37:f5:c2:11:95:b1:cb:2f: 12:4d:9c:9d:12:60:82:81:eb:52:99:b5:1d:d6:71:03:f9:ba: 1b:39:1a:a4:97:d6:a5:d9:81:23:ad:f6:1b:ef:7f:45:50:26: f0:3d:b5:1d:75:a2:bf:73:d0:1b:9b:f4:d3:ba:e0:fe:25:0f: b4:59:80:b4:90:0e:49:0f:a7:e9:9a:21:52:77:f2:d7:a7:5b: 23:92:08:21:ce:a1:e7:19:01:35:35:a4:a5:88:9e:5a:ca:d4: d9:ee:69:33:45:3a:f1:69:d6:83:17:6b:08:7c:ea:df:d3:f9: cd:7f:b9:14:04:a2:32:50:46:dc:bc:4b:34:1c:6d:73:0c:a1: 2a:a3:cb:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErvi8xSb50recmsrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk NWU4ZDQ5ZjgtOGM5OC00MTZiLTk1ZjktZTZiNGVkNWU0N2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzNafC30i8TXDbjEPsRJkzgypBfBHptsTofe ONTSGTX9HR03wSScoSLdidQXFJhLAD8OpI0p2sOg73WQKiSwg47XtTWmGU4QAjt3 2/ZW2aEuPMlRVqYwDarEocSg5IXcdwv+e6YKR1DrtcQADZMiE0wro/7T7q1bEHU+ Bb7eazpi9Hgt3jO85QEl+RYbxrBBNb4gH+qa0zddQeVfJzQWoYHK/hRtiM1V5z7s UNGeZwRVlfQbBvDZWDMkjcwbZaRZLarCnFMf0TjIu4EKSrxVW2W4chOqLyBURab5 fQ4ZPtlirfkhIcmYDoBVg89eQ1InvnFJasI/9Xceq86Iw29MTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP6t0P+PcBbEjJnMIuhsC1jbmaCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvNDBjMGFmZDYtNmJhMi0z ZTcyLTg1NTctYjlkMGVhOTk1ZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48ABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABhUwwQePZCOYUk/5UDHqTD/qAFh0eIaGUaOtqT9oqg7yf1wLgZQ SMjgVek+rYtEIewF5eYSYVokRavMyZqg/7NHSEA1buZyI0XusfQzgQOlIhJfbbWW 8zEV3MXhcuwFdz1CKddRYdYZLiZ9YOvru6rmMLtnlX439cIRlbHLLxJNnJ0SYIKB 61KZtR3WcQP5uhs5GqSX1qXZgSOt9hvvf0VQJvA9tR11or9z0Bub9NO64P4lD7RZ gLSQDkkPp+maIVJ38tenWyOSCCHOoecZATU1pKWInlrK1NnuaTNFOvFp1oMXawh8 6t/T+c1/uRQEojJQRty8SzQcbXMMoSqjy4k= -----END CERTIFICATE-----Generated at Sat Aug 23 22:59:59 2025 by rpki-client