$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/da3e563b-aec6-3b6f-9c82-da2d9cf659b6.roa File: da3e563b-aec6-3b6f-9c82-da2d9cf659b6.roa (raw, json) Hash identifier: ZK9aJpMr9MCeA3itDap7JHdBMYoPUiNlF9KuM5waZXc= Subject key identifier: 10:6A:3A:7D:E0:51:4E:F3:D8:D7:FB:AC:A0:76:15:9D:7F:60:26:43 Certificate issuer: /CN=9377ba0e-dde7-47fc-b879-e155f4e3ce8d Certificate serial: 010D0C9F4328584B004BE52C4C1CCFD0B1CE8680 Authority key identifier: D6:FA:12:88:DB:E4:56:52:BC:BB:5F:03:F3:D4:7E:0B:12:16:9E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/da3e563b-aec6-3b6f-9c82-da2d9cf659b6.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 395161 IP address blocks: 2606:d940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e5:2c:4c:1c:cf:d0:b1:ce:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9377ba0e-dde7-47fc-b879-e155f4e3ce8d Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=8cb65dd0-956c-4566-9228-a9c54f791292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9c:5f:55:cf:28:41:5a:4b:ba:e6:8c:fb:0e: f0:09:9b:80:31:aa:01:6b:b8:de:c2:7f:24:ee:d2: 81:8d:80:ed:a6:e5:c1:25:8b:7c:2d:75:28:89:31: e2:47:72:0b:31:77:e1:90:2a:d6:01:12:a5:c4:d8: ca:bb:2d:f6:57:ab:65:6d:2a:64:42:f1:33:66:15: 40:74:38:ab:e0:4d:93:9e:d8:12:bc:86:3c:78:35: 91:4a:14:2b:e5:09:4b:cc:04:94:83:aa:fb:44:78: b7:33:68:32:ac:b0:72:0f:e9:08:9c:1e:7f:c3:d9: 06:3e:9c:d4:c1:02:35:73:4c:56:fb:3a:99:2b:a2: 4e:31:40:3d:25:1b:f8:d0:f2:7f:33:fc:d0:13:32: 55:a3:fc:5b:b6:b5:93:b0:e6:30:45:9f:e6:56:99: 12:99:ed:0a:28:61:db:36:b5:92:65:00:b1:d6:15: 5a:80:c5:db:79:67:a3:f9:13:8a:64:cb:d0:a9:08: af:fd:5e:4a:89:57:4b:52:d8:8b:9a:28:5f:ea:27: 82:92:72:c3:79:a4:4f:ca:5b:ce:14:3f:01:08:4c: 81:e8:d8:10:7c:be:db:5b:a8:89:01:83:1d:58:c0: fa:6c:62:4e:38:ed:74:aa:ea:b6:d9:fe:13:1b:fd: 2d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6A:3A:7D:E0:51:4E:F3:D8:D7:FB:AC:A0:76:15:9D:7F:60:26:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/da3e563b-aec6-3b6f-9c82-da2d9cf659b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.crl X509v3 Authority Key Identifier: keyid:D6:FA:12:88:DB:E4:56:52:BC:BB:5F:03:F3:D4:7E:0B:12:16:9E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.cer sbgp-ipAddrBlock: critical IPv6: 2606:d940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:4f:41:0f:c4:63:81:ce:4c:ef:ca:ae:0a:6b:2e:da:1b:2d: 03:a6:83:ff:60:ac:25:2a:0d:bd:86:91:52:c0:c1:72:32:6c: 64:bb:d3:ed:79:12:e2:d8:50:71:35:75:c0:ec:61:3f:ed:6b: 59:92:c1:bf:e1:e9:51:91:9e:cd:f9:af:7b:f5:df:1e:48:b1: d6:59:27:d8:a5:bc:47:0b:cd:d1:b2:06:bf:47:74:27:5d:11: e8:b3:80:cd:22:4f:91:b4:95:65:67:05:af:fc:38:5e:89:7c: bf:98:5f:83:92:66:f2:0e:9a:c3:ae:a9:57:88:a3:96:8a:6d: 23:a2:6a:b4:dc:74:87:5c:76:1b:d1:23:02:f7:07:01:ba:fa: 59:72:e9:14:11:b5:95:84:9b:c0:c4:12:7c:27:e4:3c:a8:6f: 00:f1:f9:51:6c:dd:4a:3a:ad:51:eb:ce:3d:ac:4b:fc:19:ab: 6d:a7:48:cb:1a:3e:88:e3:97:0d:19:26:b5:9a:74:7c:82:b2: ee:3e:5f:9a:8a:81:21:e3:bc:8d:fd:f8:56:a7:53:e8:54:42: ba:20:52:58:8d:c5:9b:7d:6f:80:da:b4:3e:8d:9f:3e:a4:10: 5c:94:40:5d:91:cd:22:51:94:2b:a4:79:63:00:54:39:ea:96: be:99:53:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsAS+UsTBzP0LHOhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM3N2JhMGUtZGRlNy00N2ZjLWI4NzktZTE1NWY0ZTNj ZThkMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk OGNiNjVkZDAtOTU2Yy00NTY2LTkyMjgtYTljNTRmNzkxMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJxfVc8oQVpLuuaM+w7wCZuAMaoBa7jewn8k 7tKBjYDtpuXBJYt8LXUoiTHiR3ILMXfhkCrWARKlxNjKuy32V6tlbSpkQvEzZhVA dDir4E2TntgSvIY8eDWRShQr5QlLzASUg6r7RHi3M2gyrLByD+kInB5/w9kGPpzU wQI1c0xW+zqZK6JOMUA9JRv40PJ/M/zQEzJVo/xbtrWTsOYwRZ/mVpkSme0KKGHb NrWSZQCx1hVagMXbeWej+ROKZMvQqQiv/V5KiVdLUtiLmihf6ieCknLDeaRPylvO FD8BCEyB6NgQfL7bW6iJAYMdWMD6bGJOOO10quq22f4TG/0tGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBBqOn3gUU7z2Nf7rKB2FZ1/YCZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzc3 YmEwZS1kZGU3LTQ3ZmMtYjg3OS1lMTU1ZjRlM2NlOGQvZGEzZTU2M2ItYWVjNi0z YjZmLTljODItZGEyZDljZjY1OWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3N2JhMGUtZGRlNy00N2ZjLWI4 NzktZTE1NWY0ZTNjZThkLzkzNzdiYTBlLWRkZTctNDdmYy1iODc5LWUxNTVmNGUz Y2U4ZC5jcmwwHwYDVR0jBBgwFoAU1voSiNvkVlK8u18D89R+CxIWnlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85Mzc3YmEwZS1kZGU3LTQ3ZmMtYjg3OS1lMTU1 ZjRlM2NlOGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCtT0EPxGOBzkzvyq4Kay7aGy0DpoP/YKwlKg29hpFSwMFyMmxku9Pt eRLi2FBxNXXA7GE/7WtZksG/4elRkZ7N+a979d8eSLHWWSfYpbxHC83Rsga/R3Qn XRHos4DNIk+RtJVlZwWv/DheiXy/mF+DkmbyDprDrqlXiKOWim0jomq03HSHXHYb 0SMC9wcBuvpZcukUEbWVhJvAxBJ8J+Q8qG8A8flRbN1KOq1R6849rEv8Gattp0jL Gj6I45cNGSa1mnR8grLuPl+aioEh47yN/fhWp1PoVEK6IFJYjcWbfW+A2rQ+jZ8+ pBBclEBdkc0iUZQrpHljAFQ56pa+mVMZ -----END CERTIFICATE-----Generated at Wed Sep 10 16:34:37 2025 by rpki-client