$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa File: 63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa (raw, json) Hash identifier: brAiSz4UnQfHjWzPT0Tu6IQcSHjtNvyQPmpyOrvsvxo= Subject key identifier: 62:34:2B:B0:2F:4A:8C:62:FE:27:CD:86:E8:F7:3F:6D:3E:6A:28:C6 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584AECC11CA71D75D6A65D032980 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 397423 IP address blocks: 2604:f440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:1c:a7:1d:75:d6:a6:5d:03:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3ffe0fca-5e87-46e2-bb0a-d0999d8aa2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:a6:35:41:e5:d9:eb:e8:c5:ba:ce:d7:dc: a1:19:2c:bf:61:b5:22:22:f6:0f:39:39:33:37:eb: fa:7d:dd:5a:b0:11:9c:09:2b:d0:9a:4b:59:6a:dc: a0:f8:9a:b7:80:72:1f:1b:a8:b6:88:08:70:30:8a: 71:75:e3:09:22:65:31:7b:cd:06:80:01:29:29:94: 4b:09:f4:13:a3:16:3c:08:00:c6:52:07:24:b1:0a: 45:d5:b5:c8:82:44:00:16:07:c8:71:12:9e:c4:b6: d8:16:0f:43:8b:ee:d2:bc:6b:66:b1:af:1c:81:2a: bb:52:0b:c3:85:44:63:9f:1a:ba:22:8c:81:97:8b: 0b:b1:98:93:ac:90:35:36:78:3d:63:1c:cd:b4:b9: fe:59:81:35:b4:f9:63:ef:db:73:e9:41:e7:79:b5: 8d:54:da:31:5b:c7:f7:a2:b8:52:75:d0:f8:06:23: b0:e9:b4:db:f3:0e:5b:42:bc:87:6f:53:02:4d:f3: c2:88:46:eb:c2:c2:5b:17:8b:d3:d4:78:7b:ef:a1: 71:20:a8:66:1e:22:fd:f9:a8:7b:e7:35:d9:da:d2: 15:fa:53:b5:8a:58:e9:2a:f1:0e:89:d6:0b:f6:fa: 3a:b8:25:91:a1:f8:dd:df:e6:9a:ae:ce:88:8b:dc: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:34:2B:B0:2F:4A:8C:62:FE:27:CD:86:E8:F7:3F:6D:3E:6A:28:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv6: 2604:f440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:69:96:ea:05:66:fb:36:f1:19:20:45:29:6a:59:fe:50:89: c3:11:64:5b:a1:83:9e:9c:00:18:ce:c0:f9:af:33:40:e3:39: 8c:2f:4b:19:d2:c8:a9:64:c6:77:5f:ea:75:77:7a:a1:d0:92: 69:04:3e:3c:31:b4:ba:bc:b0:23:8e:59:18:21:d6:6e:a5:95: d1:56:65:78:1b:da:83:cd:e0:85:cc:98:93:81:ff:99:1c:35: 28:ac:73:14:3f:8d:96:33:03:bb:f7:b9:c2:e3:1f:63:f2:60: 8a:80:f9:28:d6:8f:f6:fb:3a:20:b6:9a:d0:db:51:6e:16:b3: 9b:be:69:ca:14:25:74:f5:f3:4f:be:6a:7f:38:40:fb:59:f8: 21:a5:5c:10:92:ae:f6:91:c0:78:5f:e5:21:7f:03:18:c6:fb: 6e:ec:38:b6:94:59:92:3d:6c:c4:08:02:08:8c:01:be:6e:de: d4:97:93:59:3c:cb:be:6f:12:8e:90:02:ee:4e:6d:9f:cb:ce: 02:69:f6:d8:64:f9:8a:89:e7:e6:8a:96:4c:7b:0d:33:4b:1d: 31:95:51:57:10:c1:a0:b7:45:46:1b:6e:2b:be:a2:5a:de:2b: 25:b1:a2:d0:14:2a:32:d3:11:0c:b6:c3:91:7d:5c:25:fe:68: e9:ae:36:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErswRynHXXWpl0DKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2ZmZTBmY2EtNWU4Ny00NmUyLWJiMGEtZDA5OTlkOGFhMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbKmNUHl2evoxbrO19yhGSy/YbUiIvYPOTkz N+v6fd1asBGcCSvQmktZatyg+Jq3gHIfG6i2iAhwMIpxdeMJImUxe80GgAEpKZRL CfQToxY8CADGUgcksQpF1bXIgkQAFgfIcRKexLbYFg9Di+7SvGtmsa8cgSq7UgvD hURjnxq6IoyBl4sLsZiTrJA1Nng9YxzNtLn+WYE1tPlj79tz6UHnebWNVNoxW8f3 orhSddD4BiOw6bTb8w5bQryHb1MCTfPCiEbrwsJbF4vT1Hh776FxIKhmHiL9+ah7 5zXZ2tIV+lO1iljpKvEOidYL9vo6uCWRofjd3+aars6Ii9zmCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGI0K7AvSoxi/ifNhuj3P20+aijGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNjMxODhmYzktNWQ4NC0z YzIzLWIyZjItZDQ3YzZhZDBmNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT0QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDbaZbqBWb7NvEZIEUpaln+UInDEWRboYOenAAYzsD5rzNA4zmML0sZ 0sipZMZ3X+p1d3qh0JJpBD48MbS6vLAjjlkYIdZupZXRVmV4G9qDzeCFzJiTgf+Z HDUorHMUP42WMwO797nC4x9j8mCKgPko1o/2+zogtprQ21FuFrObvmnKFCV09fNP vmp/OED7WfghpVwQkq72kcB4X+UhfwMYxvtu7Di2lFmSPWzECAIIjAG+bt7Ul5NZ PMu+bxKOkALuTm2fy84CafbYZPmKiefmipZMew0zSx0xlVFXEMGgt0VGG24rvqJa 3islsaLQFCoy0xEMtsORfVwl/mjprjZQ -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:55 2025 by rpki-client