$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa File: f321ea97-8906-32ec-a1b5-79839e8eae51.roa (raw, json) Hash identifier: C01xgERaGB5ydmxHef9kYnQdJl/PVN4NirjM5X71hyw= Subject key identifier: EC:94:10:A5:60:0A:C8:88:77:BE:91:71:82:21:F9:28:F9:25:58:68 Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Certificate serial: 010D0C9F4328584AE4611372FA865EC22C225500 Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 211066 IP address blocks: 2605:640f:640f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:13:72:fa:86:5e:c2:2c:22:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=fff049e2-5fd4-4a43-877a-984d709ba61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:32:fb:cf:cb:9b:7b:77:23:8f:fe:42:fd:4a: 0b:79:4f:09:e0:23:80:8d:28:5a:01:08:0e:72:7a: 61:d8:71:d3:dd:f5:8e:e0:ab:98:a5:01:83:06:f7: 77:ea:36:37:3d:ed:94:a2:58:5d:9b:42:25:21:f7: a4:f4:f8:66:ab:22:b5:82:92:b7:64:9a:2b:17:8f: 36:62:4a:06:76:fa:b1:31:ee:b8:61:35:65:ff:da: 79:d1:67:91:57:cc:df:27:9c:3a:e7:49:b4:8a:22: c7:49:47:13:3c:df:f6:ec:a9:8c:15:39:81:60:5c: 8b:e8:06:ce:fd:e5:48:f9:a0:3f:af:10:d4:70:14: 45:c2:34:8e:bb:d6:89:f9:ce:10:9c:77:52:74:e7: d8:65:af:57:89:df:c7:b3:be:21:06:ee:7c:0f:36: c2:f9:40:62:f8:c3:4f:e4:26:0d:0b:51:99:ef:76: e6:44:0b:3a:0b:70:4b:2a:a6:20:3b:1f:49:e1:b5: 31:e3:28:c8:cf:dc:fe:0c:ab:cd:72:3a:de:11:1d: a3:47:a0:7c:49:cc:f8:06:8d:7b:53:f5:ea:9c:d4: 8e:f3:c5:83:9a:01:a4:47:f5:4f:fb:0c:cf:3f:e4: 45:6d:19:8c:b4:e0:a6:61:c8:81:11:d1:20:24:f3: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:94:10:A5:60:0A:C8:88:77:BE:91:71:82:21:F9:28:F9:25:58:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl X509v3 Authority Key Identifier: keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer sbgp-ipAddrBlock: critical IPv6: 2605:640f:640f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c6:19:3d:61:73:09:ea:97:39:1b:47:1d:30:91:18:ba:d7: 03:83:b2:8e:d2:3c:74:d1:3f:00:58:f0:42:a4:5c:4d:1a:09: 9c:14:38:50:c8:f2:3e:db:d6:5d:b3:87:85:6d:c2:91:50:64: e6:0d:5f:9f:eb:8a:cc:73:ed:3a:f7:8b:a9:98:9f:79:ed:23: 94:6f:7f:a3:9e:a8:13:60:d4:ab:de:a4:de:62:ef:98:59:06: a9:9d:0e:7a:41:31:68:3d:2b:db:c3:d2:5e:05:ef:f8:db:e2: 47:d0:bd:ec:37:d9:dc:1b:86:36:f0:a1:c0:9a:47:31:95:e3: e2:8c:76:1d:db:be:ee:ad:80:53:e5:0a:9c:57:01:04:59:24: 71:75:c5:c8:c6:8d:e0:7d:f8:31:3c:87:5e:64:55:0a:66:ba: f9:97:16:a7:f6:7e:58:02:f1:de:80:da:30:ba:60:62:1f:05: bb:2c:b0:d9:e2:55:f1:12:47:f0:c3:79:d7:37:a3:7d:77:74: 5f:68:19:7a:dc:43:e6:51:fc:59:14:e1:a6:67:33:41:07:69: 5a:35:38:db:68:8e:ce:2b:fe:cf:9b:e1:af:05:f9:22:5f:c0: ba:ce:13:0b:ae:1c:dd:9a:ad:99:e3:ce:a5:4e:1c:9c:0d:ae: c2:5b:bf:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErkYRNy+oZewiwiVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi OWQ3MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmZmMDQ5ZTItNWZkNC00YTQzLTg3N2EtOTg0ZDcwOWJhNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzL7z8ube3cjj/5C/UoLeU8J4COAjShaAQgO cnph2HHT3fWO4KuYpQGDBvd36jY3Pe2Uolhdm0IlIfek9PhmqyK1gpK3ZJorF482 YkoGdvqxMe64YTVl/9p50WeRV8zfJ5w650m0iiLHSUcTPN/27KmMFTmBYFyL6AbO /eVI+aA/rxDUcBRFwjSOu9aJ+c4QnHdSdOfYZa9Xid/Hs74hBu58DzbC+UBi+MNP 5CYNC1GZ73bmRAs6C3BLKqYgOx9J4bUx4yjIz9z+DKvNcjreER2jR6B8Scz4Bo17 U/XqnNSO88WDmgGkR/VP+wzPP+RFbRmMtOCmYciBEdEgJPN+DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOyUEKVgCsiId76RcYIh+Sj5JVhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvZjMyMWVhOTctODkwNi0z MmVjLWExYjUtNzk4MzllOGVhZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm NDEwYmI5ZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVkD2QP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnGGT1hcwnqlzkbRx0wkRi61wODso7SPHTRPwBY8EKkXE0aCZwU OFDI8j7b1l2zh4VtwpFQZOYNX5/risxz7Tr3i6mYn3ntI5Rvf6OeqBNg1KvepN5i 75hZBqmdDnpBMWg9K9vD0l4F7/jb4kfQvew32dwbhjbwocCaRzGV4+KMdh3bvu6t gFPlCpxXAQRZJHF1xcjGjeB9+DE8h15kVQpmuvmXFqf2flgC8d6A2jC6YGIfBbss sNniVfESR/DDedc3o313dF9oGXrcQ+ZR/FkU4aZnM0EHaVo1ONtojs4r/s+b4a8F +SJfwLrOEwuuHN2arZnjzqVOHJwNrsJbv9M= -----END CERTIFICATE-----Generated at Sun Aug 24 09:46:00 2025 by rpki-client