$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/708a0fce-faf3-3bf4-879c-98c847a3d670.roa File: 708a0fce-faf3-3bf4-879c-98c847a3d670.roa (raw, json) Hash identifier: sKAurkTJYiSaiz4QjXDU+ixF25oTkifBtG4ZP4b5nSs= Subject key identifier: C7:6F:29:D3:CF:19:37:94:E6:6B:61:8C:29:3F:87:17:C4:F0:32:9D Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584B2496D3BD2FFAC69C3F2DC180 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/708a0fce-faf3-3bf4-879c-98c847a3d670.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 394625 IP address blocks: 2606:d280:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d3:bd:2f:fa:c6:9c:3f:2d:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=29a757e3-2c29-4295-a235-d79cfad6896b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:63:d0:e2:8a:d5:d1:9e:cc:92:a3:8f:ef:ea: 66:0d:da:5b:5d:18:59:fd:8c:31:c8:e7:2e:55:c6: 8f:45:4e:b4:29:12:3c:ec:df:f1:cf:8f:3b:7d:a6: 10:37:e7:7f:2b:5b:ba:2f:d4:a2:8f:ea:10:6b:39: 71:3e:82:1d:42:5c:d3:14:6b:d9:9a:fc:e6:ea:94: f5:cb:8b:d9:a6:3b:53:62:35:56:ba:d7:1a:a3:e7: cc:00:3e:9d:4a:5c:07:6f:20:2d:f5:df:b8:7e:b5: 45:45:d1:42:93:11:8d:02:c7:5c:15:98:a5:88:1a: 7c:03:64:3c:f7:b2:d3:3c:09:e3:7d:4b:02:15:d7: 67:90:6f:2b:f1:c9:0d:38:e6:b8:3d:ed:60:c4:e7: 23:62:4c:62:da:2f:f1:5c:b0:55:1e:a6:bf:0e:d3: 4b:e1:46:04:7b:4d:04:94:71:13:23:ac:e0:4a:fc: d2:75:c7:db:4a:43:6a:c0:23:33:3a:f2:59:9e:50: 40:0e:fb:29:9d:0a:66:7e:8f:a8:24:fe:63:ab:70: d7:b7:f1:10:c6:50:91:5b:67:56:16:34:0e:48:8e: 99:83:0a:fc:8c:39:58:db:8d:ce:06:a9:41:32:5d: 46:ed:32:f2:73:01:60:cc:4d:6f:14:04:3b:c0:42: 83:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6F:29:D3:CF:19:37:94:E6:6B:61:8C:29:3F:87:17:C4:F0:32:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/708a0fce-faf3-3bf4-879c-98c847a3d670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:d280:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:03:2c:50:f2:15:9d:05:75:96:17:ab:40:d3:7a:56:4f:08: fe:dd:16:42:24:e3:18:54:d8:17:ea:38:2e:dd:e7:9d:3e:0c: 1b:ae:63:92:76:3c:40:83:6d:28:f5:ba:a5:0c:12:c4:5c:a9: 8e:95:6d:aa:17:b2:93:36:dc:f7:04:be:d3:38:01:2c:84:aa: 0d:e3:c1:99:5a:41:f0:c9:45:50:c3:44:71:f0:6d:6c:72:3f: 83:f0:4f:99:81:7a:fe:e9:1a:d3:0f:9f:23:87:65:3c:78:c0: f0:75:12:e9:22:46:e0:e3:11:89:ce:6b:a1:77:37:45:7c:39: a2:c3:6f:33:42:ef:d3:0d:82:30:45:b1:d3:4d:0b:49:36:91: ec:0b:f5:1a:86:43:82:e6:c1:a8:52:76:cb:79:3d:ec:c7:06: 15:37:31:76:ce:03:45:b6:2d:29:29:23:c9:df:b0:73:55:4a: 71:28:e5:48:13:cf:08:fb:87:23:d6:4a:08:5f:15:bc:97:3b: 35:35:20:2d:00:cb:27:dd:f9:cd:4c:b1:31:98:bd:ee:c8:27: 91:9c:ad:21:c6:96:ba:66:13:62:b8:23:27:49:7a:f5:ba:6c: 79:78:3e:57:e3:d1:e0:10:ce:ad:3d:0f:e1:a0:01:d2:86:60: 3f:78:a5:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEskltO9L/rGnD8twYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MjlhNzU3ZTMtMmMyOS00Mjk1LWEyMzUtZDc5Y2ZhZDY4OTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2PQ4orV0Z7MkqOP7+pmDdpbXRhZ/YwxyOcu VcaPRU60KRI87N/xz487faYQN+d/K1u6L9Sij+oQazlxPoIdQlzTFGvZmvzm6pT1 y4vZpjtTYjVWutcao+fMAD6dSlwHbyAt9d+4frVFRdFCkxGNAsdcFZiliBp8A2Q8 97LTPAnjfUsCFddnkG8r8ckNOOa4Pe1gxOcjYkxi2i/xXLBVHqa/DtNL4UYEe00E lHETI6zgSvzSdcfbSkNqwCMzOvJZnlBADvspnQpmfo+oJP5jq3DXt/EQxlCRW2dW FjQOSI6Zgwr8jDlY243OBqlBMl1G7TLycwFgzE1vFAQ7wEKDUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMdvKdPPGTeU5mthjCk/hxfE8DKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvNzA4YTBmY2UtZmFmMy0z YmY0LTg3OWMtOThjODQ3YTNkNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbSgAAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKgDLFDyFZ0FdZYXq0DTelZPCP7dFkIk4xhU2BfqOC7d550+DBuu Y5J2PECDbSj1uqUMEsRcqY6VbaoXspM23PcEvtM4ASyEqg3jwZlaQfDJRVDDRHHw bWxyP4PwT5mBev7pGtMPnyOHZTx4wPB1EukiRuDjEYnOa6F3N0V8OaLDbzNC79MN gjBFsdNNC0k2kewL9RqGQ4LmwahSdst5PezHBhU3MXbOA0W2LSkpI8nfsHNVSnEo 5UgTzwj7hyPWSghfFbyXOzU1IC0Ayyfd+c1MsTGYve7IJ5GcrSHGlrpmE2K4IydJ evW6bHl4Plfj0eAQzq09D+GgAdKGYD94pcg= -----END CERTIFICATE-----Generated at Fri Oct 10 20:15:01 2025 by rpki-client