$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa File: 433031db-4285-39e5-accd-f6fb29f9770e.roa (raw, json) Hash identifier: RNZVyTjI5ix/4cp2PvkqcxSZrpQdgzVQ8mHOO7saaIE= Subject key identifier: B4:02:81:98:66:EF:0A:40:98:EC:9E:23:32:5D:91:1E:5F:D1:F8:45 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584B25FC2F8846330785676B2C00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2606:7bc0:1064::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:2f:88:46:33:07:85:67:6b:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=c0eabeda-8a8b-4b03-83c7-6fb846ca905f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a0:95:fc:a1:19:91:52:61:81:e0:34:c7:71: 83:17:6a:97:f0:d5:30:7a:8f:3c:cc:4d:80:eb:46: 54:3c:ab:91:59:89:0c:06:35:18:84:d0:05:21:e1: b5:50:5d:94:31:70:c7:86:64:f9:a7:b3:25:73:d4: b5:1b:17:d6:a6:5b:6c:da:05:18:08:9b:9a:84:4c: fa:6d:ab:bc:94:fc:11:dd:95:06:72:df:dc:cc:10: 3a:66:af:49:5a:07:ac:a0:6d:f7:f2:c8:4c:a7:80: 7c:84:ed:4e:dd:0b:94:56:99:d1:04:1e:96:a2:03: 07:4e:36:a9:61:80:e6:62:a5:94:87:29:b8:00:1e: 2e:c4:a8:1c:61:fd:04:c4:eb:40:a0:ee:a2:35:1c: cb:ee:fd:ae:59:2f:35:10:b0:70:8e:9c:29:ab:40: 19:3f:cb:12:9a:65:d0:d3:96:66:de:98:25:7e:39: 80:88:1f:f1:e5:9f:72:76:a3:e8:de:33:60:55:a9: aa:86:87:76:f8:41:a2:6f:41:56:39:a7:bc:fb:7d: 2a:2b:da:8c:42:9e:09:6b:3a:a9:f9:b3:f9:45:64: cd:25:a1:9e:59:3f:69:b3:1f:21:7c:0b:7d:4c:5c: d0:5a:a4:a8:f8:85:7c:1b:ea:a8:44:ce:4d:5a:b9: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:02:81:98:66:EF:0A:40:98:EC:9E:23:32:5D:91:1E:5F:D1:F8:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1064::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:29:4f:78:53:ac:60:9b:3c:ee:28:41:0a:49:76:12:93:e3: 7f:34:a3:04:b6:ac:c6:c9:dc:a0:73:7b:5c:cf:d4:8f:4e:2f: fa:d4:02:9e:b1:22:0c:3c:4e:d8:d2:a7:90:8a:d7:da:b6:06: 73:46:a5:0f:53:78:c1:6f:a5:98:67:2a:48:b5:4f:76:e0:b6: 0d:aa:8e:a6:71:46:e2:52:49:b4:1f:c7:f0:6c:22:5a:5d:ae: 1d:87:c8:98:30:65:b3:d7:50:8a:8e:74:5f:88:4d:c9:7d:db: 54:89:cf:0c:73:17:a8:42:7e:9e:73:41:b8:54:a3:15:8a:f3: c4:d5:56:80:8a:4d:d7:ef:3b:32:a4:19:21:d6:4a:0f:26:34: 47:a8:c7:19:75:66:ea:ec:c2:ad:47:56:8e:6b:7a:6b:d0:49: 0f:5f:16:18:1e:c3:d9:7b:1a:53:5e:60:21:53:7e:81:0b:a4: 45:25:ca:40:fd:f4:7f:f3:91:34:5e:99:ff:84:09:0e:a8:87: 06:d2:7e:57:9d:23:c0:16:eb:33:42:e6:80:dc:07:10:c9:83: af:28:dc:fa:56:96:9a:a8:aa:ed:15:b7:5c:cd:84:5c:61:65: d4:26:8d:d0:df:9e:d0:bd:d1:38:54:7d:e8:46:6b:3c:5a:8e: 31:5d:4c:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsl/C+IRjMHhWdrLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YzBlYWJlZGEtOGE4Yi00YjAzLTgzYzctNmZiODQ2Y2E5MDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKCV/KEZkVJhgeA0x3GDF2qX8NUweo88zE2A 60ZUPKuRWYkMBjUYhNAFIeG1UF2UMXDHhmT5p7Mlc9S1GxfWplts2gUYCJuahEz6 bau8lPwR3ZUGct/czBA6Zq9JWgesoG338shMp4B8hO1O3QuUVpnRBB6WogMHTjap YYDmYqWUhym4AB4uxKgcYf0ExOtAoO6iNRzL7v2uWS81ELBwjpwpq0AZP8sSmmXQ 05Zm3pglfjmAiB/x5Z9ydqPo3jNgVamqhod2+EGib0FWOae8+30qK9qMQp4Jazqp +bP5RWTNJaGeWT9psx8hfAt9TFzQWqSo+IV8G+qoRM5NWrnFhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQCgZhm7wpAmOyeIzJdkR5f0fhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNDMzMDMxZGItNDI4NS0z OWU1LWFjY2QtZjZmYjI5Zjk3NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC8pT3hTrGCbPO4oQQpJdhKT4380owS2rMbJ3KBze1zP1I9OL/rU Ap6xIgw8TtjSp5CK19q2BnNGpQ9TeMFvpZhnKki1T3bgtg2qjqZxRuJSSbQfx/Bs Ilpdrh2HyJgwZbPXUIqOdF+ITcl921SJzwxzF6hCfp5zQbhUoxWK88TVVoCKTdfv OzKkGSHWSg8mNEeoxxl1Zurswq1HVo5remvQSQ9fFhgew9l7GlNeYCFTfoELpEUl ykD99H/zkTRemf+ECQ6ohwbSfledI8AW6zNC5oDcBxDJg68o3PpWlpqoqu0Vt1zN hFxhZdQmjdDfntC90ThUfehGazxajjFdTFg= -----END CERTIFICATE-----Generated at Thu Oct 9 01:16:44 2025 by rpki-client