$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/528b788b-5be3-39b3-93cd-46f1ff1c4d38.roa File: 528b788b-5be3-39b3-93cd-46f1ff1c4d38.roa (raw, json) Hash identifier: 7Sd8oHerwBlgu9K8AOx1M4wHDJ/onXDay0wLRqdKzNg= Subject key identifier: C6:D1:6C:BA:72:0F:B0:02:67:14:D8:AC:EF:0A:98:A7:77:B4:CE:50 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F4328584AFC1BF2721A2572E97C226200 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/528b788b-5be3-39b3-93cd-46f1ff1c4d38.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 53535 IP address blocks: 2620:37:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f2:72:1a:25:72:e9:7c:22:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=de55b836-4cfa-4da3-aac0-9d72496f5045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:71:41:f0:97:c9:3c:5e:75:f6:dc:72:4d:69: 81:5e:41:04:44:36:b3:25:fb:60:f4:47:0f:5e:6e: 50:88:d9:85:3e:be:0a:ec:66:00:9a:5b:2e:ba:ce: f2:3e:3e:48:0d:3d:b3:74:ed:1c:93:dd:7b:19:75: 9c:d6:2e:f5:6e:0d:ab:97:5d:40:e5:2b:55:05:bc: c7:2d:b3:e5:85:15:68:ec:30:88:10:e7:21:8b:fc: 71:0e:99:ea:e2:42:91:1c:98:94:74:9b:60:ee:c8: c7:4c:9d:e2:8a:bb:47:50:a3:00:30:71:72:f6:ba: f8:d5:12:cd:27:e5:10:33:d7:5e:77:d2:bf:c2:fb: 04:5c:29:e4:b7:99:94:e8:96:80:94:6c:39:97:2f: 68:fd:64:13:33:98:f8:32:b2:f3:49:d9:a0:13:0d: a5:a5:70:e5:39:56:13:03:ab:1e:5a:c7:d3:e8:fd: 9b:6a:a0:5b:ae:cc:8c:96:80:1c:23:66:d9:2a:ac: f9:aa:da:b7:9d:3c:93:82:03:cb:21:d3:84:63:49: f9:9f:6d:1b:0b:dc:49:ec:33:4f:88:ca:24:19:4d: 27:ab:47:67:3e:a0:92:5a:11:9b:f4:15:f4:38:5f: b1:21:ad:62:50:cf:ac:5e:1c:bf:4e:5f:ec:ec:54: 29:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D1:6C:BA:72:0F:B0:02:67:14:D8:AC:EF:0A:98:A7:77:B4:CE:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/528b788b-5be3-39b3-93cd-46f1ff1c4d38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv6: 2620:37:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:23:8a:5b:6c:d8:9c:4c:31:f3:41:83:2a:85:d4:2a:6a:8c: 61:7c:a7:2c:e7:c7:68:0b:b4:35:84:42:5e:92:b3:fd:84:a3: 62:98:a3:e1:92:3f:5e:f3:e3:d5:f5:3a:a9:d4:21:4e:21:ab: 70:16:9c:5c:7e:16:39:12:ae:8b:e2:41:65:81:40:f8:78:9e: 93:d1:25:5f:8c:13:b0:a4:c1:43:a4:38:46:d3:33:64:46:b2: bb:c5:f4:7b:bf:43:99:30:e3:1e:d4:cf:ec:df:4f:35:4d:c5: cc:77:e9:ca:77:99:b6:d0:3a:eb:29:0f:40:e2:3c:fb:1e:49: 31:ba:9d:27:ff:88:07:cb:1d:cb:03:9b:39:02:03:df:c5:e4: 02:53:e2:27:0e:99:21:48:6e:86:35:30:e8:50:cf:38:83:50: cd:76:75:04:52:fc:9f:2b:d2:3f:f7:d6:2f:e2:46:10:e3:17: 23:0d:85:f7:05:97:af:a2:e0:ed:14:7d:5d:0c:db:d8:96:76: d2:fc:05:8f:60:cf:4e:fe:5a:f8:56:a9:15:7b:eb:bd:d5:1b: 9a:b2:10:6e:46:f9:87:40:b1:2b:78:a4:65:48:2e:d6:ec:49: 9a:fe:7e:5e:48:e5:14:4e:bc:8c:b6:36:e1:54:19:72:e0:79: 0a:2a:78:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8G/JyGiVy6XwiYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGU1NWI4MzYtNGNmYS00ZGEzLWFhYzAtOWQ3MjQ5NmY1MDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnFB8JfJPF519txyTWmBXkEERDazJftg9EcP Xm5QiNmFPr4K7GYAmlsuus7yPj5IDT2zdO0ck917GXWc1i71bg2rl11A5StVBbzH LbPlhRVo7DCIEOchi/xxDpnq4kKRHJiUdJtg7sjHTJ3iirtHUKMAMHFy9rr41RLN J+UQM9ded9K/wvsEXCnkt5mU6JaAlGw5ly9o/WQTM5j4MrLzSdmgEw2lpXDlOVYT A6seWsfT6P2baqBbrsyMloAcI2bZKqz5qtq3nTyTggPLIdOEY0n5n20bC9xJ7DNP iMokGU0nq0dnPqCSWhGb9BX0OF+xIa1iUM+sXhy/Tl/s7FQp9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMbRbLpyD7ACZxTYrO8KmKd3tM5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvNTI4Yjc4OGItNWJlMy0z OWIzLTkzY2QtNDZmMWZmMWM0ZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAN+AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADojilts2JxMMfNBgyqF1CpqjGF8pyznx2gLtDWEQl6Ss/2Eo2KY o+GSP17z49X1OqnUIU4hq3AWnFx+FjkSroviQWWBQPh4npPRJV+ME7CkwUOkOEbT M2RGsrvF9Hu/Q5kw4x7Uz+zfTzVNxcx36cp3mbbQOuspD0DiPPseSTG6nSf/iAfL HcsDmzkCA9/F5AJT4icOmSFIboY1MOhQzziDUM12dQRS/J8r0j/31i/iRhDjFyMN hfcFl6+i4O0UfV0M29iWdtL8BY9gz07+WvhWqRV7673VG5qyEG5G+YdAsSt4pGVI LtbsSZr+fl5I5RROvIy2NuFUGXLgeQoqeGU= -----END CERTIFICATE-----Generated at Thu Oct 9 20:01:04 2025 by rpki-client