$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/535f2120-15e6-3cda-998e-66dc0177d5a5.roa File: 535f2120-15e6-3cda-998e-66dc0177d5a5.roa (raw, json) Hash identifier: NAFOjm5bxGP2AOcqNpQ1X3k2sq1CORYjWcKIWUArLMo= Subject key identifier: F5:DA:DB:3A:5F:8E:EC:1B:0F:6D:7D:47:73:0F:BA:2E:50:D5:B5:70 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF52133774EA6CD374FED7200 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/535f2120-15e6-3cda-998e-66dc0177d5a5.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 2606:7bc0:1081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:33:77:4e:a6:cd:37:4f:ed:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=3692de4e-775d-4b8d-9938-ccc2f71ad9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3f:5d:ff:e1:ea:73:d3:79:ec:bf:88:ba:0f: 3e:bb:44:80:84:fb:f5:4c:12:e1:aa:26:6b:46:2f: 3c:15:b9:dc:71:1f:42:fb:85:f5:1e:0b:a0:ff:63: 06:1e:d6:8f:10:40:92:12:f3:30:5f:d9:c9:94:b1: 98:ee:2d:58:99:f4:f3:10:54:e4:d2:27:05:2d:ae: ee:d0:34:04:44:73:77:4c:11:44:1c:7b:78:9c:c0: 41:49:95:dd:c9:df:c7:15:c1:6c:3e:b5:96:44:2a: 1e:ad:79:98:05:a3:15:36:68:ac:58:67:3d:16:01: 8d:29:4f:3d:22:0b:a8:b6:e7:f8:65:3d:3c:b5:5d: 65:76:72:b1:3d:a7:82:c5:5c:7b:1b:97:09:74:f7: 4d:08:cb:82:6f:cf:63:3c:49:63:39:cf:aa:55:0f: e2:0d:af:3f:4f:a5:8f:36:e7:c2:06:96:ce:dc:72: 58:0a:85:11:8e:eb:e7:25:d7:ec:c1:7e:15:d3:53: 65:e6:4e:1b:92:c1:07:e1:64:5a:ca:61:a5:0e:99: 67:5e:4a:23:2b:5b:17:1d:0e:6e:8c:1d:b6:5a:e0: 59:fd:00:be:a8:a7:17:91:3e:d5:63:5f:4a:9b:2d: e0:b2:d8:ec:81:b2:eb:e0:84:ce:b5:2c:ad:61:ec: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DA:DB:3A:5F:8E:EC:1B:0F:6D:7D:47:73:0F:BA:2E:50:D5:B5:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/535f2120-15e6-3cda-998e-66dc0177d5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1081::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:dc:ce:e3:2a:fd:22:a7:4a:2f:87:1f:c6:00:5f:4b:50:c7: d4:c7:c9:45:43:27:4e:d8:ff:67:dd:98:46:4a:d0:b5:8b:45: b8:c7:6e:86:a9:c9:3f:94:53:e3:72:c3:04:a6:2e:d7:ca:e1: bd:b3:ae:2f:23:c4:b7:52:76:29:e1:fb:5b:ad:23:36:38:73: 91:86:c8:11:18:ec:85:c7:c5:12:28:03:2c:d8:c0:bc:f3:e6: 7a:0c:35:c1:4a:8c:0d:0a:07:c8:c9:ab:37:0e:9d:6b:59:7e: 7d:3f:39:b8:18:9e:ea:e1:be:87:1f:b0:55:ec:98:5d:0d:62: 50:5b:2c:25:8e:5a:0b:be:e5:56:91:41:da:e8:65:a3:ef:17: c9:82:62:5e:35:a5:01:74:51:97:4e:cd:6e:0c:ee:9c:84:d7: 60:03:86:03:dd:40:2a:2f:58:3e:11:f9:07:d5:a3:66:2a:5c: 09:2f:da:8c:a5:bf:3b:86:47:d1:c5:63:15:d6:dc:f0:c3:a8: 8c:49:9a:6d:60:d7:23:17:09:d4:4b:56:b8:f5:76:b5:7e:c7: e1:4d:7a:e7:60:91:61:c1:07:9a:b9:74:3c:19:e5:f7:e1:45: 69:16:40:50:bf:22:8e:b7:80:d4:c3:e1:dc:40:d8:18:0b:c6: 23:0c:4d:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1ITN3TqbNN0/tcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzY5MmRlNGUtNzc1ZC00YjhkLTk5MzgtY2NjMmY3MWFkOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz9d/+Hqc9N57L+Iug8+u0SAhPv1TBLhqiZr Ri88FbnccR9C+4X1Hgug/2MGHtaPEECSEvMwX9nJlLGY7i1YmfTzEFTk0icFLa7u 0DQERHN3TBFEHHt4nMBBSZXdyd/HFcFsPrWWRCoerXmYBaMVNmisWGc9FgGNKU89 Iguotuf4ZT08tV1ldnKxPaeCxVx7G5cJdPdNCMuCb89jPEljOc+qVQ/iDa8/T6WP NufCBpbO3HJYCoURjuvnJdfswX4V01Nl5k4bksEH4WRaymGlDplnXkojK1sXHQ5u jB22WuBZ/QC+qKcXkT7VY19Kmy3gstjsgbLr4ITOtSytYewtPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPXa2zpfjuwbD219R3MPui5Q1bVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTM1ZjIxMjAtMTVlNi0z Y2RhLTk5OGUtNjZkYzAxNzdkNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIrczuMq/SKnSi+HH8YAX0tQx9THyUVDJ07Y/2fdmEZK0LWLRbjH boapyT+UU+NywwSmLtfK4b2zri8jxLdSdinh+1utIzY4c5GGyBEY7IXHxRIoAyzY wLzz5noMNcFKjA0KB8jJqzcOnWtZfn0/ObgYnurhvocfsFXsmF0NYlBbLCWOWgu+ 5VaRQdroZaPvF8mCYl41pQF0UZdOzW4M7pyE12ADhgPdQCovWD4R+QfVo2YqXAkv 2oylvzuGR9HFYxXW3PDDqIxJmm1g1yMXCdRLVrj1drV+x+FNeudgkWHBB5q5dDwZ 5ffhRWkWQFC/Io63gNTD4dxA2BgLxiMMTVg= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:21 2025 by rpki-client