$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa File: c431513d-aaef-3485-b46c-d4c9e32372d8.roa (raw, json) Hash identifier: xSQszdLI7pqUXpx2pG8Hap375hJBDOR3uRvphVJRC4M= Subject key identifier: 86:60:0F:A2:77:B2:E0:E7:9F:97:89:06:BD:05:08:C6:3E:7B:D4:0B Certificate issuer: /CN=938e1602-8093-4bcd-b527-f5d1756295fc Certificate serial: 010D0C9F4328584ABEB0D8631DA8C3E6264FE680 Authority key identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa Signing time: Mon 04 Aug 2025 13:00:36 +0000 ROA not before: Mon 04 Aug 2025 13:00:36 +0000 ROA not after: Sun 02 Nov 2025 14:00:36 +0000 asID: 401482 IP address blocks: 2620:cf:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:b0:d8:63:1d:a8:c3:e6:26:4f:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938e1602-8093-4bcd-b527-f5d1756295fc Validity Not Before: Aug 4 13:00:36 2025 GMT Not After : Nov 2 14:00:36 2025 GMT Subject: CN=a878c08f-3ed6-42e1-bfa5-8e49428f721b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1b:cc:f7:88:f1:7b:a7:26:75:db:e1:7b:91: 16:e7:10:21:bb:30:f7:77:da:3b:66:6a:c5:a5:a9: 7f:4c:91:6d:63:03:90:07:34:d0:e1:54:05:20:1d: f0:f3:05:45:c5:80:c2:fb:a1:fd:c2:de:14:74:ef: 39:1c:53:13:bd:3e:65:35:fc:5c:4b:94:b6:11:55: 96:7b:e1:95:62:95:42:f9:83:f1:1e:6a:4c:fd:23: 23:b9:16:89:4f:8a:24:21:1e:e5:40:07:f6:7f:4e: 07:b3:04:4e:85:ae:b6:02:13:55:e2:b6:7f:e4:b8: b7:88:08:26:04:28:d3:23:11:ef:9e:cd:18:58:62: 36:fe:b0:c0:c9:9b:5b:21:08:f1:1a:67:91:17:cb: ce:7c:f7:48:12:a8:5b:93:72:36:be:95:47:15:62: 53:38:73:25:36:1f:09:43:a5:8e:1f:11:2f:4c:ba: 4a:5c:70:8d:a7:ac:7c:47:b7:48:31:e9:bc:d1:5b: 69:6c:a4:99:4b:d6:52:c4:75:f3:5f:b9:29:f1:f6: d8:e2:bc:81:a9:38:3c:4b:cd:ce:2d:88:a6:0c:67: 05:86:f1:f7:84:1f:d9:3f:e4:80:92:ca:5d:11:5f: f8:a2:10:0e:1d:f8:b0:e4:2f:79:9a:c8:1b:42:55: 7f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:60:0F:A2:77:B2:E0:E7:9F:97:89:06:BD:05:08:C6:3E:7B:D4:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl X509v3 Authority Key Identifier: keyid:FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer sbgp-ipAddrBlock: critical IPv6: 2620:cf:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f9:83:b3:8b:75:21:1d:38:39:53:52:39:af:7b:ea:44:e8: 2a:19:10:ac:7c:ef:ae:fb:b3:d7:24:18:5e:52:71:e7:d2:0a: 4d:3e:72:77:d8:37:27:21:4c:9b:af:bf:b6:b0:fe:b3:15:1d: bd:f6:25:d5:db:f9:f7:83:4a:ff:be:b4:2b:63:60:e9:d3:9b: 38:cd:70:9c:01:05:19:3c:98:c7:63:67:cc:18:e2:12:94:70: 7b:c5:3d:e0:13:22:6d:31:67:bc:12:78:32:17:19:01:ca:b2: f9:c8:5c:9e:9e:d0:e4:21:54:bf:23:c9:d2:08:43:b4:87:e8: 40:81:d7:41:ec:fd:14:71:1d:a4:c6:77:24:e1:ab:e1:b4:4f: cb:47:d4:9a:58:75:44:3b:21:0d:69:ed:59:84:7b:e9:4b:78: 04:df:f0:1f:53:8c:84:01:cf:01:11:3c:97:24:84:c7:c2:36: c5:56:43:c3:ad:02:49:f2:91:98:ea:eb:bd:b0:91:66:c7:50: 5a:41:6a:3b:23:87:1e:b9:4c:2d:54:3b:e8:ab:31:5c:91:d4: 64:4b:27:72:67:f7:08:23:6c:1f:ed:20:ba:b8:df:27:58:b6: 01:62:94:e9:a2:58:25:57:23:90:d0:ca:2c:7d:96:7a:f5:60: 95:af:cc:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq+sNhjHajD5iZP5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM4ZTE2MDItODA5My00YmNkLWI1MjctZjVkMTc1NjI5 NWZjMB4XDTI1MDgwNDEzMDAzNloXDTI1MTEwMjE0MDAzNlowLzEtMCsGA1UEAxMk YTg3OGMwOGYtM2VkNi00MmUxLWJmYTUtOGU0OTQyOGY3MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRvM94jxe6cmddvhe5EW5xAhuzD3d9o7ZmrF pal/TJFtYwOQBzTQ4VQFIB3w8wVFxYDC+6H9wt4UdO85HFMTvT5lNfxcS5S2EVWW e+GVYpVC+YPxHmpM/SMjuRaJT4okIR7lQAf2f04HswROha62AhNV4rZ/5Li3iAgm BCjTIxHvns0YWGI2/rDAyZtbIQjxGmeRF8vOfPdIEqhbk3I2vpVHFWJTOHMlNh8J Q6WOHxEvTLpKXHCNp6x8R7dIMem80VtpbKSZS9ZSxHXzX7kp8fbY4ryBqTg8S83O LYimDGcFhvH3hB/ZP+SAkspdEV/4ohAOHfiw5C95msgbQlV/EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIZgD6J3suDnn5eJBr0FCMY+e9QLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Mzhl MTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2Mjk1ZmMvYzQzMTUxM2QtYWFlZi0z NDg1LWI0NmMtZDRjOWUzMjM3MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTM4ZTE2MDItODA5My00YmNkLWI1 MjctZjVkMTc1NjI5NWZjLzkzOGUxNjAyLTgwOTMtNGJjZC1iNTI3LWY1ZDE3NTYy OTVmYy5jcmwwHwYDVR0jBBgwFoAU/MwAtMa9gHxpV2YtGanrwjeJePYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQx NzU2Mjk1ZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAz6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAr5g7OLdSEdODlTUjmve+pE6CoZEKx87677s9ckGF5ScefSCk0+ cnfYNychTJuvv7aw/rMVHb32JdXb+feDSv++tCtjYOnTmzjNcJwBBRk8mMdjZ8wY 4hKUcHvFPeATIm0xZ7wSeDIXGQHKsvnIXJ6e0OQhVL8jydIIQ7SH6ECB10Hs/RRx HaTGdyThq+G0T8tH1JpYdUQ7IQ1p7VmEe+lLeATf8B9TjIQBzwERPJckhMfCNsVW Q8OtAknykZjq672wkWbHUFpBajsjhx65TC1UO+irMVyR1GRLJ3Jn9wgjbB/tILq4 3ydYtgFilOmiWCVXI5DQyix9lnr1YJWvzF8= -----END CERTIFICATE-----Generated at Sun Aug 24 01:05:04 2025 by rpki-client