$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa File: a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa (raw, json) Hash identifier: uweKhjoNDp7EvQUpR17KwnpzWVDNPpen5put5HL/fnY= Subject key identifier: 00:D8:28:1B:80:EC:A5:CA:D5:3E:F3:30:F4:A6:04:A8:68:2C:8C:0C Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B0CDC04A6D254C010E61DD040 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 21947 IP address blocks: 2604:300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:04:a6:d2:54:c0:10:e6:1d:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=533b9c8d-6a22-4ee3-a2e2-eba4b80fe7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:b9:0c:49:f8:e3:da:73:bc:c4:48:80:64: 54:82:7b:59:7f:d1:9f:8b:a7:4b:3a:4a:e8:ed:93: ea:5d:b8:27:dd:9e:22:2d:be:fe:04:05:66:ee:37: e6:2b:8a:6a:ef:c1:64:6e:49:dc:1b:48:da:5b:99: 7e:86:89:01:3b:c8:5b:fd:45:d8:8e:73:41:82:ee: 78:22:2c:9a:bc:b2:b3:15:0a:4b:6d:b1:14:a3:5b: b4:47:00:df:81:05:ed:e0:4b:bf:56:0b:34:da:7b: 3b:be:10:dd:af:54:de:8f:a0:65:e0:65:df:2c:4d: b8:95:49:1f:32:9b:9b:41:39:c3:6b:a2:8c:37:d1: 6a:d0:17:93:59:d3:a7:30:66:a9:61:89:30:ef:40: 3f:1a:af:b7:f9:3a:7a:99:77:a1:3f:5c:66:25:a0: 1b:8c:dd:60:90:9d:99:cb:d5:1e:f7:ed:bc:b3:e9: d3:3d:5f:c3:c0:7b:ea:97:c8:44:9e:00:55:3e:3f: bc:cf:46:aa:a7:01:0d:01:cd:4a:d4:8d:d2:13:f9: a0:f2:47:9c:da:26:c6:75:20:b9:d4:72:ab:00:21: 65:69:29:e2:4e:69:7e:f0:79:8b:48:94:22:4e:07: 3e:7f:dd:ab:b7:ba:f0:a9:fc:d6:51:9e:1f:34:dc: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D8:28:1B:80:EC:A5:CA:D5:3E:F3:30:F4:A6:04:A8:68:2C:8C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2604:300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6a:e3:38:63:07:f8:f2:40:fa:e8:34:59:c6:8c:09:4e:f9: f6:3b:7d:09:6c:96:40:b4:20:b8:7f:9b:ad:06:1d:67:b4:fc: 35:04:43:c2:94:9a:e6:43:d4:9d:50:9b:aa:c0:8b:2f:5c:b5: 33:a4:3a:78:17:73:f4:71:8c:35:dd:da:7e:8e:1d:cb:a5:42: 8b:d1:91:41:b1:75:77:9f:a6:cc:76:2c:7e:1f:5e:65:d9:ae: 26:08:01:66:5f:cb:6a:0b:97:f4:5a:d9:0a:4b:19:f8:71:ea: fa:39:8a:06:bc:3b:56:99:e0:50:90:01:f1:2f:28:53:69:31: e9:19:ee:48:55:e0:15:81:d3:54:0c:a5:a6:be:e9:2e:a6:53: 6f:b7:a2:e9:5a:0e:71:bd:23:2e:ae:19:ca:49:d0:10:e2:f5: fa:b1:8a:68:9d:0e:f1:52:46:f9:3b:8a:c2:dd:a7:8c:13:e0: 9a:f6:2b:fb:c5:4f:2f:ec:27:ae:44:0c:c9:3b:a0:ab:bd:db: ed:ed:70:27:dd:74:a3:24:0a:3e:9e:6f:a0:2b:18:f5:15:a9: eb:b6:7d:b8:c8:a7:55:ab:d8:3a:f1:73:62:5e:a6:84:3d:79: fd:ca:f2:ea:c6:5a:d5:5d:8e:ed:7c:c4:3d:4e:8c:c2:7b:7d: 80:28:10:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsM3ASm0lTAEOYd0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NTMzYjljOGQtNmEyMi00ZWUzLWEyZTItZWJhNGI4MGZlN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWG5DEn449pzvMRIgGRUgntZf9Gfi6dLOkro 7ZPqXbgn3Z4iLb7+BAVm7jfmK4pq78FkbkncG0jaW5l+hokBO8hb/UXYjnNBgu54 IiyavLKzFQpLbbEUo1u0RwDfgQXt4Eu/Vgs02ns7vhDdr1Tej6Bl4GXfLE24lUkf MpubQTnDa6KMN9Fq0BeTWdOnMGapYYkw70A/Gq+3+Tp6mXehP1xmJaAbjN1gkJ2Z y9Ue9+28s+nTPV/DwHvql8hEngBVPj+8z0aqpwENAc1K1I3SE/mg8kec2ibGdSC5 1HKrACFlaSniTml+8HmLSJQiTgc+f92rt7rwqfzWUZ4fNNzlXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFADYKBuA7KXK1T7zMPSmBKhoLIwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYTMxYjdlZTMtNjQzMC0z YjQ1LWI3ODYtN2I1NWNhMGI3YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQDADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJauM4Ywf48kD66DRZxowJTvn2O30JbJZAtCC4f5utBh1ntPw1BEPC lJrmQ9SdUJuqwIsvXLUzpDp4F3P0cYw13dp+jh3LpUKL0ZFBsXV3n6bMdix+H15l 2a4mCAFmX8tqC5f0WtkKSxn4cer6OYoGvDtWmeBQkAHxLyhTaTHpGe5IVeAVgdNU DKWmvukuplNvt6LpWg5xvSMurhnKSdAQ4vX6sYponQ7xUkb5O4rC3aeME+Ca9iv7 xU8v7CeuRAzJO6Crvdvt7XAn3XSjJAo+nm+gKxj1Fanrtn24yKdVq9g68XNiXqaE PXn9yvLqxlrVXY7tfMQ9TozCe32AKBAf -----END CERTIFICATE-----Generated at Fri Oct 10 22:19:10 2025 by rpki-client