$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa File: b0aead21-fe86-32c1-8560-e3f695d01240.roa (raw, json) Hash identifier: EbymtlH/ziPVgbiKQ12yqqL4JYXgYh/vZ/pej6Q7kk0= Subject key identifier: BB:68:A8:A4:24:89:53:06:47:13:95:D2:E3:4A:C0:A3:EC:9C:53:8F Certificate issuer: /CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Certificate serial: 010D0C9F4328584AADF11E55829DFA73CDF17F80 Authority key identifier: 8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 19919 IP address blocks: 2601:1600::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1e:55:82:9d:fa:73:cd:f1:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=0314cd4b-78b6-42c1-a661-af81d9dc4dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c3:57:b0:e4:4e:45:3c:00:e3:aa:7b:c3:18: 87:02:4f:7e:49:dc:09:f9:56:20:85:d5:f2:aa:22: c5:67:a1:b2:06:42:c6:01:97:7b:a8:69:24:34:bf: 6b:95:9f:a0:70:22:59:80:b4:fb:97:35:c8:f9:23: 50:a8:da:43:21:bd:30:0c:b6:54:71:41:09:4d:24: f9:f4:d6:54:bf:d0:69:07:eb:63:3e:f3:53:fd:52: 15:46:46:9a:a9:88:67:e0:42:8e:47:92:bb:63:72: ec:bd:e5:59:8c:2c:f0:a6:94:40:3e:cd:0e:1d:26: bc:c1:3b:ce:5f:9d:e2:a7:36:bd:95:da:65:35:d8: b3:19:33:52:c8:80:25:21:ec:7c:8e:a0:0c:fa:58: e3:25:9c:1f:2a:d4:5e:57:14:18:63:85:d7:68:7c: 65:57:4f:0d:7f:fd:3b:de:52:61:60:c4:85:3a:82: b6:89:1e:9a:05:12:a4:3e:e4:d1:7b:db:78:37:7d: 45:de:28:75:72:20:c5:11:1b:63:1a:dc:c6:50:2a: 3b:cd:2c:0f:b3:a0:b8:91:73:d8:57:f0:df:ac:f5: b0:52:5d:eb:96:c8:22:0f:8a:3d:16:eb:95:91:38: 2c:05:7e:f2:ef:f3:a7:27:9e:3b:02:88:d3:b8:db: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:68:A8:A4:24:89:53:06:47:13:95:D2:E3:4A:C0:A3:EC:9C:53:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl X509v3 Authority Key Identifier: keyid:8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer sbgp-ipAddrBlock: critical IPv6: 2601:1600::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:19:90:3f:a9:38:ff:3b:7d:27:63:0f:61:22:a2:82:11:49: 73:85:63:0e:5e:07:9e:57:f3:bb:ff:e2:29:a7:18:53:de:0c: e0:ca:f5:a0:e0:61:da:39:d6:00:44:c7:6a:f0:7b:f1:81:04: 67:34:0c:b6:06:7e:cb:eb:fc:dc:b7:8d:3a:ac:f6:33:81:de: b1:22:9b:99:a4:43:c1:46:9c:37:57:9b:23:b7:0f:f2:3b:8f: e6:a8:71:34:45:49:95:ad:fc:8c:03:5c:32:51:f8:fa:71:71: b3:45:6b:e0:29:01:a1:76:ef:e5:ae:89:8d:27:33:c5:81:6d: 0b:bd:ba:91:39:3b:22:ab:87:83:2e:f8:d0:a1:75:3c:28:3f: b4:1d:ee:7c:f2:84:2a:8b:29:32:74:2c:bf:ce:56:31:5e:c6: a2:9d:2b:25:66:dc:8c:3e:80:75:53:27:48:ba:99:7f:6e:c4: 77:62:b6:21:88:47:ef:b6:fa:27:d3:9a:47:b4:ba:5f:13:86: 63:35:0c:38:e7:f2:47:e0:56:52:75:30:e0:11:14:b5:50:7f: 0f:14:da:af:c9:72:bf:8e:cd:88:03:8e:4f:6e:b2:09:c3:ff: b7:65:57:48:0c:ec:d7:e3:1a:39:b1:1e:b7:6d:f5:96:7d:0d: 53:21:28:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqt8R5Vgp36c83xf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZhZmM3YTAtOTQyNC00MzFiLTg3YWEtZmFiNGM3MDMy ZWQyMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MDMxNGNkNGItNzhiNi00MmMxLWE2NjEtYWY4MWQ5ZGM0ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcNXsORORTwA46p7wxiHAk9+SdwJ+VYghdXy qiLFZ6GyBkLGAZd7qGkkNL9rlZ+gcCJZgLT7lzXI+SNQqNpDIb0wDLZUcUEJTST5 9NZUv9BpB+tjPvNT/VIVRkaaqYhn4EKOR5K7Y3LsveVZjCzwppRAPs0OHSa8wTvO X53ipza9ldplNdizGTNSyIAlIex8jqAM+ljjJZwfKtReVxQYY4XXaHxlV08Nf/07 3lJhYMSFOoK2iR6aBRKkPuTRe9t4N31F3ih1ciDFERtjGtzGUCo7zSwPs6C4kXPY V/DfrPWwUl3rlsgiD4o9FuuVkTgsBX7y7/OnJ547AojTuNsITQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLtoqKQkiVMGRxOV0uNKwKPsnFOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NmFm YzdhMC05NDI0LTQzMWItODdhYS1mYWI0YzcwMzJlZDIvYjBhZWFkMjEtZmU4Ni0z MmMxLTg1NjAtZTNmNjk1ZDAxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjZhZmM3YTAtOTQyNC00MzFiLTg3 YWEtZmFiNGM3MDMyZWQyLzY2YWZjN2EwLTk0MjQtNDMxYi04N2FhLWZhYjRjNzAz MmVkMi5jcmwwHwYDVR0jBBgwFoAUi7dDLh1Lr9B5AwaWTKytXGQkYSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NmFmYzdhMC05NDI0LTQzMWItODdhYS1mYWI0 YzcwMzJlZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEWADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1GZA/qTj/O30nYw9hIqKCEUlzhWMOXgeeV/O7/+IppxhT3gzgyvWg 4GHaOdYARMdq8HvxgQRnNAy2Bn7L6/zct406rPYzgd6xIpuZpEPBRpw3V5sjtw/y O4/mqHE0RUmVrfyMA1wyUfj6cXGzRWvgKQGhdu/lromNJzPFgW0LvbqROTsiq4eD LvjQoXU8KD+0He588oQqiykydCy/zlYxXsainSslZtyMPoB1UydIupl/bsR3YrYh iEfvtvon05pHtLpfE4ZjNQw45/JH4FZSdTDgERS1UH8PFNqvyXK/js2IA45PbrIJ w/+3ZVdIDOzX4xo5sR63bfWWfQ1TISgF -----END CERTIFICATE-----Generated at Sun Aug 24 06:28:21 2025 by rpki-client