$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa File: ddb106cb-5166-390c-ae06-ee99129ea34e.roa (raw, json) Hash identifier: ET7OLF3WBoHkdwnGisMQkrDnZhZ1rHsOIe0OuUYJ1e8= Subject key identifier: C2:49:73:58:BA:FA:6E:4A:7B:84:1D:25:CC:DB:A1:BA:B0:D8:62:BB Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584AECC1276CC25A5287E5265100 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 394354 IP address blocks: 2620:10a:801f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:27:6c:c2:5a:52:87:e5:26:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f8935af4-c1d0-45ed-a927-3a882c56995e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:4b:ad:20:a7:eb:6e:44:c5:f5:50:34:e7: bd:3f:19:39:21:bf:60:ea:39:ef:c4:2d:f9:44:90: 8e:3e:7d:29:71:48:bb:6e:1d:00:f0:65:c1:52:20: 0e:88:3d:65:79:c4:01:a0:06:89:fe:8c:c6:85:ad: 25:24:2c:0a:27:be:0a:59:3a:f2:7c:02:41:4c:4a: a7:ea:f9:a8:b4:c1:49:09:54:ab:21:54:45:3d:7c: d5:3b:96:bc:69:71:16:e1:69:5a:56:8b:6a:36:f5: 27:a7:32:84:f5:48:52:53:50:3c:3d:f5:52:f1:6d: 1d:fb:fa:53:66:39:4e:f1:d5:73:1b:73:82:57:d1: 75:1f:17:ca:d0:93:de:4a:7b:a9:a8:15:49:30:e6: d0:60:07:c4:d1:e5:19:1a:55:b1:06:6c:94:e7:98: 9c:6d:2b:1b:05:76:13:a4:87:9a:dc:cb:24:ad:0c: 70:51:ac:df:8e:26:11:7c:7a:c4:39:24:a2:89:a5: 69:28:71:11:be:d4:48:e7:1f:e1:ed:25:87:70:77: fa:27:c7:f4:98:3f:6e:e7:95:8b:6e:90:11:31:b6: 49:de:1d:2c:14:1a:66:3b:d4:cc:2e:4c:dd:25:f9: e7:00:67:c1:d5:80:e3:86:c5:10:c7:3d:42:56:4e: ff:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:49:73:58:BA:FA:6E:4A:7B:84:1D:25:CC:DB:A1:BA:B0:D8:62:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:801f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d9:7c:52:5b:f9:b9:88:4c:b0:1a:58:60:bb:3a:66:de:f6: 7e:4c:66:2e:3b:d7:02:c9:97:bd:a0:a4:95:e8:ff:c5:b4:30: 93:3e:18:6c:be:53:c6:65:92:eb:62:67:98:31:06:6a:cc:8f: 2f:aa:30:ee:d0:51:25:8b:be:ed:97:5a:94:72:27:bd:6a:1f: e6:37:d8:0d:9b:80:5e:a4:ae:d9:7c:11:14:01:e0:a3:eb:20: 80:81:75:af:e1:fd:ce:e7:a7:fa:1e:17:f9:1f:44:03:c9:ce: c1:e4:ad:2a:e7:c6:8e:51:dd:2f:6a:ad:fd:f1:00:ee:f3:65: 5a:ea:31:97:63:04:27:3f:f2:dc:d5:32:23:e0:f0:d3:36:e8: 22:c7:b1:73:17:44:c9:bd:ee:37:f3:21:01:39:9e:20:17:99: c5:ad:7a:2b:84:db:88:fe:76:f2:7b:91:60:58:8c:25:20:c8: 29:17:51:8f:8a:9a:e6:6a:dc:48:a3:c1:41:23:41:f1:bf:f5: 43:47:43:8e:cf:41:a4:d1:93:bb:ed:5f:dc:34:69:41:99:73: 28:a6:0a:9b:90:e7:0c:af:91:9f:80:af:52:9c:af:a3:40:67: 50:85:ba:eb:74:62:7f:77:b1:3a:5c:df:17:4b:65:5e:6f:15: 85:28:fe:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErswSdswlpSh+UmUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Zjg5MzVhZjQtYzFkMC00NWVkLWE5MjctM2E4ODJjNTY5OTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWBLrSCn625ExfVQNOe9Pxk5Ib9g6jnvxC35 RJCOPn0pcUi7bh0A8GXBUiAOiD1lecQBoAaJ/ozGha0lJCwKJ74KWTryfAJBTEqn 6vmotMFJCVSrIVRFPXzVO5a8aXEW4WlaVotqNvUnpzKE9UhSU1A8PfVS8W0d+/pT ZjlO8dVzG3OCV9F1HxfK0JPeSnupqBVJMObQYAfE0eUZGlWxBmyU55icbSsbBXYT pIea3MskrQxwUazfjiYRfHrEOSSiiaVpKHERvtRI5x/h7SWHcHf6J8f0mD9u55WL bpARMbZJ3h0sFBpmO9TMLkzdJfnnAGfB1YDjhsUQxz1CVk7/uQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJJc1i6+m5Ke4QdJczbobqw2GK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZGRiMTA2Y2ItNTE2Ni0z OTBjLWFlMDYtZWU5OTEyOWVhMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGPZfFJb+bmITLAaWGC7Ombe9n5MZi471wLJl72gpJXo/8W0MJM+ GGy+U8ZlkutiZ5gxBmrMjy+qMO7QUSWLvu2XWpRyJ71qH+Y32A2bgF6krtl8ERQB 4KPrIICBda/h/c7np/oeF/kfRAPJzsHkrSrnxo5R3S9qrf3xAO7zZVrqMZdjBCc/ 8tzVMiPg8NM26CLHsXMXRMm97jfzIQE5niAXmcWteiuE24j+dvJ7kWBYjCUgyCkX UY+KmuZq3EijwUEjQfG/9UNHQ47PQaTRk7vtX9w0aUGZcyimCpuQ5wyvkZ+Ar1Kc r6NAZ1CFuut0Yn93sTpc3xdLZV5vFYUo/nQ= -----END CERTIFICATE-----Generated at Sun Aug 24 03:17:10 2025 by rpki-client