$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/db23e48f-79db-3106-8cec-6be0feb1b42a.roa File: db23e48f-79db-3106-8cec-6be0feb1b42a.roa (raw, json) Hash identifier: lM+gusSodRpBAfiUpHdjgBSREDi8IJiJeV7NfPelWUk= Subject key identifier: C7:3A:B5:EF:20:DF:56:3F:25:E4:C1:C9:01:17:C3:8A:20:F8:AA:3C Certificate issuer: /CN=eebd57d4-bdbb-4203-975d-94b32833e8c7 Certificate serial: 010D0C9F4328584AEFC979579928F7C9B4467F40 Authority key identifier: 80:FE:92:AB:B8:62:45:0A:82:F6:C0:A2:93:0D:4E:92:4D:E4:23:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/db23e48f-79db-3106-8cec-6be0feb1b42a.roa Signing time: Fri 22 Aug 2025 03:04:54 +0000 ROA not before: Fri 22 Aug 2025 03:04:54 +0000 ROA not after: Thu 20 Nov 2025 04:04:54 +0000 asID: 32267 IP address blocks: 2604:87c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:c9:79:57:99:28:f7:c9:b4:46:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebd57d4-bdbb-4203-975d-94b32833e8c7 Validity Not Before: Aug 22 03:04:54 2025 GMT Not After : Nov 20 04:04:54 2025 GMT Subject: CN=0e638d6a-4bff-4961-9f79-19b72e24dc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3b:72:12:5b:f6:16:90:18:11:dc:a6:7a:b8: 2c:53:21:36:27:5b:f2:90:e5:2c:65:ec:08:27:1b: ce:66:76:00:15:eb:03:4e:44:9e:a2:47:24:76:9e: 3a:23:dc:ff:a8:1d:6b:73:93:61:f4:14:b8:83:8e: a0:49:68:03:d6:c7:7d:eb:0c:f5:e4:16:59:a9:05: c4:0f:0c:c9:e8:a2:3c:48:cd:ed:b3:4f:7a:d5:28: 98:64:46:3e:7a:c4:ba:f3:c9:68:22:45:b3:81:f9: b6:65:c0:91:9b:52:e4:38:9b:6e:d4:82:7b:e7:34: f6:ce:78:5e:e1:d6:7d:67:40:7f:42:c6:0f:59:d2: 3b:fa:47:cc:31:49:ea:e4:d5:6b:6d:b1:21:08:00: 28:87:5c:00:02:7c:7c:13:de:7e:2c:59:53:fb:d8: fe:2e:7f:71:11:d8:4d:b8:f8:56:3f:31:7f:55:8b: 42:3f:37:54:0c:62:1b:92:da:95:6e:31:f7:77:f2: 9f:4f:5a:7f:7a:f2:82:73:40:55:ab:74:bf:45:72: 52:70:90:b5:12:cf:d3:87:9d:94:96:71:97:4c:f6: 54:47:4b:ca:27:15:e7:11:a7:2c:d7:f2:f6:0b:81: be:b9:fd:95:60:56:b9:fa:05:bc:2a:07:fe:59:e8: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3A:B5:EF:20:DF:56:3F:25:E4:C1:C9:01:17:C3:8A:20:F8:AA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/db23e48f-79db-3106-8cec-6be0feb1b42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.crl X509v3 Authority Key Identifier: keyid:80:FE:92:AB:B8:62:45:0A:82:F6:C0:A2:93:0D:4E:92:4D:E4:23:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer sbgp-ipAddrBlock: critical IPv6: 2604:87c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:42:9a:aa:4b:f1:90:4e:9a:03:7c:29:42:e2:b8:7c:a7:98: 4b:79:f0:8d:07:df:7e:0a:b6:90:3d:3c:7b:da:62:83:e4:03: 20:71:09:9c:06:65:11:30:f5:7b:a2:ec:6c:b4:1c:7a:b5:56: 50:f2:69:7c:1f:d7:ac:69:9c:71:75:96:cb:40:f3:78:82:16: 98:be:79:6c:67:59:8e:37:96:7f:0c:da:b2:cf:d5:b4:ef:71: 7a:62:c3:02:de:03:60:00:6a:21:fa:eb:1e:10:e0:00:3f:39: 30:c6:e6:43:f0:7c:aa:ba:bc:c5:ad:9a:a6:5c:5b:e5:b4:36: d3:54:be:23:82:da:5e:3e:c6:9f:ef:ed:13:e1:e9:69:e6:76: b1:f8:e6:bb:c5:a0:d3:d1:9f:b1:19:1a:21:5e:06:21:b4:b0: 46:bc:b8:3a:01:ea:cd:85:c2:2f:ff:87:c3:2c:2b:8a:70:06: 41:f4:a3:17:36:39:90:fe:cd:48:0f:1f:71:da:f3:3f:55:7d: 5e:ce:5c:5a:77:a2:b7:d4:4e:fc:a6:6a:b4:57:4d:23:c2:0b: 8a:b5:e8:0e:d7:bb:dd:fc:31:62:e9:33:4f:5f:19:10:cb:ef: 9f:29:9e:d7:48:12:b0:08:b9:99:70:36:9b:d1:f3:b8:4b:1d: 67:85:86:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErvyXlXmSj3ybRGf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWViZDU3ZDQtYmRiYi00MjAzLTk3NWQtOTRiMzI4MzNl OGM3MB4XDTI1MDgyMjAzMDQ1NFoXDTI1MTEyMDA0MDQ1NFowLzEtMCsGA1UEAxMk MGU2MzhkNmEtNGJmZi00OTYxLTlmNzktMTliNzJlMjRkYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ztyElv2FpAYEdymergsUyE2J1vykOUsZewI JxvOZnYAFesDTkSeokckdp46I9z/qB1rc5Nh9BS4g46gSWgD1sd96wz15BZZqQXE DwzJ6KI8SM3ts0961SiYZEY+esS688loIkWzgfm2ZcCRm1LkOJtu1IJ75zT2znhe 4dZ9Z0B/QsYPWdI7+kfMMUnq5NVrbbEhCAAoh1wAAnx8E95+LFlT+9j+Ln9xEdhN uPhWPzF/VYtCPzdUDGIbktqVbjH3d/KfT1p/evKCc0BVq3S/RXJScJC1Es/Th52U lnGXTPZUR0vKJxXnEacs1/L2C4G+uf2VYFa5+gW8Kgf+Wei6CQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMc6te8g31Y/JeTByQEXw4og+Ko8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lZWJk NTdkNC1iZGJiLTQyMDMtOTc1ZC05NGIzMjgzM2U4YzcvZGIyM2U0OGYtNzlkYi0z MTA2LThjZWMtNmJlMGZlYjFiNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWViZDU3ZDQtYmRiYi00MjAzLTk3 NWQtOTRiMzI4MzNlOGM3L2VlYmQ1N2Q0LWJkYmItNDIwMy05NzVkLTk0YjMyODMz ZThjNy5jcmwwHwYDVR0jBBgwFoAUgP6Sq7hiRQqC9sCikw1Okk3kI5cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lZWJkNTdkNC1iZGJiLTQyMDMtOTc1ZC05NGIz MjgzM2U4YzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxQpqqS/GQTpoDfClC4rh8p5hLefCNB99+CraQPTx72mKD5AMgcQmc BmURMPV7ouxstBx6tVZQ8ml8H9esaZxxdZbLQPN4ghaYvnlsZ1mON5Z/DNqyz9W0 73F6YsMC3gNgAGoh+useEOAAPzkwxuZD8HyqurzFrZqmXFvltDbTVL4jgtpePsaf 7+0T4elp5nax+Oa7xaDT0Z+xGRohXgYhtLBGvLg6AerNhcIv/4fDLCuKcAZB9KMX NjmQ/s1IDx9x2vM/VX1ezlxad6K31E78pmq0V00jwguKtegO17vd/DFi6TNPXxkQ y++fKZ7XSBKwCLmZcDab0fO4Sx1nhYZ1 -----END CERTIFICATE-----Generated at Sat Aug 23 21:50:00 2025 by rpki-client