$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa File: 56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa (raw, json) Hash identifier: hWYNHb8zlkAJOGMUJbu7wdQFIk2hkpt8T2bIFgmnLv4= Subject key identifier: DF:C8:86:AD:D6:34:63:9D:19:F5:06:3A:01:AD:52:D5:8A:7B:47:25 Certificate issuer: /CN=df17821c-c81a-4f1b-baba-e8419dc81508 Certificate serial: 010D0C9F4328584AEE269C1AA5CA63262A80BA80 Authority key identifier: EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 23307 IP address blocks: 2620:8b:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:9c:1a:a5:ca:63:26:2a:80:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df17821c-c81a-4f1b-baba-e8419dc81508 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=cfa3dd36-62aa-448d-acd9-86cb02a4a47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:24:fb:db:f1:16:b7:1f:03:b7:8e:b0:4b: ef:ff:4e:0a:33:3f:ae:2a:ba:a1:bc:f3:97:4f:73: c7:a3:bb:1b:86:a6:65:c9:5d:03:a9:ee:d7:19:32: df:e8:9d:58:3c:24:a1:51:21:39:3a:7d:d0:20:a8: ab:5f:54:aa:8c:97:66:dd:f3:a8:37:e6:c6:c4:d4: ea:c9:5a:ab:23:6c:c8:45:af:da:53:ca:cb:ab:55: a8:a0:f4:4e:cb:58:34:d1:85:25:01:94:4d:d6:75: f8:ad:76:16:39:2f:33:bf:80:4a:d8:fb:6d:07:b5: b6:4a:9c:ce:13:6c:bc:22:68:e7:ad:80:f8:5c:3c: 70:ef:e8:23:37:f2:04:9d:30:8c:62:7a:11:17:20: ce:3c:31:c5:0e:df:c7:72:0b:04:28:52:7b:9b:32: bf:19:c0:ac:3e:9e:dc:b1:de:d0:e6:ba:08:e8:19: 46:89:55:43:14:fa:99:d6:1b:1b:ad:e9:1f:70:7c: 1a:09:1c:48:bd:31:2b:1c:65:e0:7c:b3:d0:c7:24: 2e:49:1b:df:cc:fe:15:4e:e7:eb:93:4c:23:37:f2: 03:a1:84:61:53:a7:2d:bd:1d:65:0b:9a:fb:60:ef: 49:1f:80:5e:19:c3:2c:0f:15:25:82:f4:ab:61:24: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C8:86:AD:D6:34:63:9D:19:F5:06:3A:01:AD:52:D5:8A:7B:47:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.crl X509v3 Authority Key Identifier: keyid:EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer sbgp-ipAddrBlock: critical IPv6: 2620:8b:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c0:38:85:71:0d:70:16:c4:dd:ec:52:89:ed:f1:b9:4e:9a: f9:9c:f9:92:7f:30:ba:3f:39:2e:54:db:f7:81:28:c0:55:9b: c6:bb:78:92:a3:47:18:7c:1a:de:9a:bc:de:f5:ae:2e:8c:a4: 57:17:fd:15:15:b1:cb:df:22:35:6c:17:e3:42:7e:51:78:db: ca:b5:10:fb:45:f6:51:20:a6:6b:a8:35:93:56:45:2f:7c:24: c8:a3:24:94:d8:f5:b8:ee:37:ff:e7:99:d9:c9:7d:ec:27:78: 02:e3:a5:67:f6:cc:fa:bd:af:e5:f7:96:6b:0b:56:51:0e:d3: b6:6a:44:8d:a6:fe:b7:19:fc:b0:f1:64:a8:1c:66:70:fb:39: bc:46:d0:97:a3:51:e9:70:a9:ab:09:db:53:78:22:fb:87:99: 4d:d0:40:f7:51:35:2a:28:b3:e1:e9:4c:a2:a6:57:bf:cd:b1: 38:a2:b2:af:fc:fd:97:47:83:f2:e8:a6:cf:dd:62:ea:39:bc: 63:03:bf:c7:04:88:fc:30:e7:6d:21:1d:07:9a:eb:c8:4b:69: 38:02:0e:25:db:69:d8:1c:7b:ee:28:0c:86:78:96:99:ed:6a: 4c:67:22:2f:f3:30:f8:f3:93:69:df:bc:7a:6d:c2:ad:d2:b2: 77:dc:4d:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruJpwapcpjJiqAuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxNzgyMWMtYzgxYS00ZjFiLWJhYmEtZTg0MTlkYzgx NTA4MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk Y2ZhM2RkMzYtNjJhYS00NDhkLWFjZDktODZjYjAyYTRhNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRMk+9vxFrcfA7eOsEvv/04KMz+uKrqhvPOX T3PHo7sbhqZlyV0Dqe7XGTLf6J1YPCShUSE5On3QIKirX1SqjJdm3fOoN+bGxNTq yVqrI2zIRa/aU8rLq1WooPROy1g00YUlAZRN1nX4rXYWOS8zv4BK2PttB7W2SpzO E2y8ImjnrYD4XDxw7+gjN/IEnTCMYnoRFyDOPDHFDt/HcgsEKFJ7mzK/GcCsPp7c sd7Q5roI6BlGiVVDFPqZ1hsbrekfcHwaCRxIvTErHGXgfLPQxyQuSRvfzP4VTufr k0wjN/IDoYRhU6ctvR1lC5r7YO9JH4BeGcMsDxUlgvSrYSQySwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN/Ihq3WNGOdGfUGOgGtUtWKe0clMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjE3 ODIxYy1jODFhLTRmMWItYmFiYS1lODQxOWRjODE1MDgvNTZiOGQ5MWEtNGY3MC0z OWFkLWFkM2QtZjNhMjAxODlmYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGYxNzgyMWMtYzgxYS00ZjFiLWJh YmEtZTg0MTlkYzgxNTA4L2RmMTc4MjFjLWM4MWEtNGYxYi1iYWJhLWU4NDE5ZGM4 MTUwOC5jcmwwHwYDVR0jBBgwFoAU6qshJWbLBNm6o+ZieFUrt5rlFXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjE3ODIxYy1jODFhLTRmMWItYmFiYS1lODQx OWRjODE1MDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAi4AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbAOIVxDXAWxN3sUont8blOmvmc+ZJ/MLo/OS5U2/eBKMBVm8a7 eJKjRxh8Gt6avN71ri6MpFcX/RUVscvfIjVsF+NCflF428q1EPtF9lEgpmuoNZNW RS98JMijJJTY9bjuN//nmdnJfewneALjpWf2zPq9r+X3lmsLVlEO07ZqRI2m/rcZ /LDxZKgcZnD7ObxG0JejUelwqasJ21N4IvuHmU3QQPdRNSoos+HpTKKmV7/NsTii sq/8/ZdHg/Lops/dYuo5vGMDv8cEiPww520hHQea68hLaTgCDiXbadgce+4oDIZ4 lpntakxnIi/zMPjzk2nfvHptwq3SsnfcTTA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:07 2025 by rpki-client