$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/284b97e2-d8e9-3620-98fe-65963d159161.roa File: 284b97e2-d8e9-3620-98fe-65963d159161.roa (raw, json) Hash identifier: op3OS8kBDwSB3S9XJIQZahYK2M1r+dvuJEuCpll6DwQ= Subject key identifier: EB:BB:D4:A8:E0:6A:72:41:D0:1E:CF:D6:6E:88:82:7C:04:0C:FF:26 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF521300BD1D7D54A2B37C180 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/284b97e2-d8e9-3620-98fe-65963d159161.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 2606:7bc0:1090::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:30:0b:d1:d7:d5:4a:2b:37:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=3361850e-b301-45ab-b0d0-e3cfdda39edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:e7:97:d8:20:35:22:69:dc:7f:0a:cc:2d: 53:8f:ac:ee:c0:8b:41:26:29:cd:85:57:41:bf:e9: 2f:6c:cf:56:5e:8b:3f:2c:7c:54:ff:c3:39:eb:e6: 1d:46:94:40:9f:44:2a:66:95:ca:4e:ac:e4:3f:2d: 4b:dc:6b:fc:b1:61:f4:b0:f6:b5:7b:3c:da:e4:16: b0:c3:83:71:55:5d:a0:27:92:6c:16:96:cc:6b:22: 18:bf:40:f0:56:61:c2:da:01:d4:4e:5c:68:c4:b0: 63:8c:b8:0a:54:a5:57:77:4d:0f:0b:f5:b0:da:7d: 23:34:7a:76:ba:5c:a2:e7:d0:7c:c3:00:84:af:1a: d2:6f:94:8d:25:ea:b2:a4:fe:08:bb:82:1c:f7:d5: 40:28:1c:d2:ed:9f:00:ce:60:33:15:92:75:c4:3b: 36:03:c3:8b:92:17:ba:5d:e5:5d:55:e6:19:0a:fb: ca:da:0d:02:c6:5f:f7:7b:e5:dc:04:5e:8f:84:54: ba:75:44:ee:18:ee:64:70:a0:75:54:ea:8c:86:80: 80:2d:4c:b2:ae:03:f8:df:a1:ca:c9:1c:21:28:19: 59:99:36:6b:3c:b8:06:f8:b8:37:fc:8c:b1:ad:7a: 94:a0:6b:ba:b4:94:ce:e8:5f:98:a9:a1:e8:4c:56: cd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BB:D4:A8:E0:6A:72:41:D0:1E:CF:D6:6E:88:82:7C:04:0C:FF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/284b97e2-d8e9-3620-98fe-65963d159161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1090::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:15:9d:1d:c6:27:28:c6:1e:72:92:53:25:82:17:3c:25:31: 2c:67:1e:fb:ae:17:28:b8:4b:b0:39:f9:bd:a5:37:a3:f9:6c: 70:54:b8:fe:aa:89:cd:0a:24:48:b2:06:cc:54:cf:ed:d9:93: e8:8c:05:69:87:00:68:2b:46:97:d3:73:b4:e8:be:95:1c:8d: 92:25:24:4d:5c:28:1f:1a:51:6d:5c:ea:54:29:7a:59:18:97: 7b:76:94:c8:26:3e:59:6b:29:11:0e:75:30:45:98:50:38:ac: ce:5d:35:76:0b:da:87:57:3d:36:c4:88:11:2e:8c:41:c2:57: 7a:b0:e5:fd:35:05:69:6a:ae:86:9d:cc:19:a0:d5:92:cc:4f: e7:0e:4a:02:c6:7d:da:32:c3:57:70:67:5b:57:fa:d4:ba:3d: bd:7a:94:f1:b6:e8:2c:4c:98:9c:eb:9b:07:c1:79:77:24:77: cd:3a:c4:17:88:0d:7f:d5:43:2a:8a:71:fa:94:19:3d:a7:da: f3:11:d4:75:1c:aa:96:46:ba:d6:d5:d2:05:aa:25:31:3e:a9: bf:22:e0:f7:c4:a5:49:b5:b5:a1:54:27:87:65:2f:1d:d8:d3: e6:4e:3b:e6:d5:21:44:2b:b8:0c:78:d1:a9:e0:86:8f:21:bc: c0:22:fd:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1ITAL0dfVSis3wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzM2MTg1MGUtYjMwMS00NWFiLWIwZDAtZTNjZmRkYTM5ZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaznl9ggNSJp3H8KzC1Tj6zuwItBJinNhVdB v+kvbM9WXos/LHxU/8M56+YdRpRAn0QqZpXKTqzkPy1L3Gv8sWH0sPa1ezza5Baw w4NxVV2gJ5JsFpbMayIYv0DwVmHC2gHUTlxoxLBjjLgKVKVXd00PC/Ww2n0jNHp2 ulyi59B8wwCErxrSb5SNJeqypP4Iu4Ic99VAKBzS7Z8AzmAzFZJ1xDs2A8OLkhe6 XeVdVeYZCvvK2g0Cxl/3e+XcBF6PhFS6dUTuGO5kcKB1VOqMhoCALUyyrgP436HK yRwhKBlZmTZrPLgG+Lg3/IyxrXqUoGu6tJTO6F+YqaHoTFbNuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOu71KjganJB0B7P1m6IgnwEDP8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMjg0Yjk3ZTItZDhlOS0z NjIwLTk4ZmUtNjU5NjNkMTU5MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZ7wBCQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGMVnR3GJyjGHnKSUyWCFzwlMSxnHvuuFyi4S7A5+b2lN6P5bHBU uP6qic0KJEiyBsxUz+3Zk+iMBWmHAGgrRpfTc7TovpUcjZIlJE1cKB8aUW1c6lQp elkYl3t2lMgmPllrKREOdTBFmFA4rM5dNXYL2odXPTbEiBEujEHCV3qw5f01BWlq roadzBmg1ZLMT+cOSgLGfdoyw1dwZ1tX+tS6Pb16lPG26CxMmJzrmwfBeXckd806 xBeIDX/VQyqKcfqUGT2n2vMR1HUcqpZGutbV0gWqJTE+qb8i4PfEpUm1taFUJ4dl Lx3Y0+ZOO+bVIUQruAx40angho8hvMAi/SA= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:21 2025 by rpki-client