$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3c97cab3-405b-3220-bcab-f0c1eedf3b3a.roa File: 3c97cab3-405b-3220-bcab-f0c1eedf3b3a.roa (raw, json) Hash identifier: tVhH7D7ubVMJI/FeMlPpWkTe5xIwuqwJ9WPdJ9BNnIQ= Subject key identifier: 4B:8E:C3:D8:85:F5:D9:8C:92:AE:61:F2:40:51:0C:B6:D9:B7:BF:39 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ADBCCEBDB4BE36C4AE9C20040 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3c97cab3-405b-3220-bcab-f0c1eedf3b3a.roa Signing time: Thu 14 Aug 2025 23:15:41 +0000 ROA not before: Thu 14 Aug 2025 23:15:41 +0000 ROA not after: Thu 13 Nov 2025 00:15:41 +0000 asID: 396982 IP address blocks: 2605:4300:3b07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:cc:eb:db:4b:e3:6c:4a:e9:c2:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 14 23:15:41 2025 GMT Not After : Nov 13 00:15:41 2025 GMT Subject: CN=1924861d-56c6-4b7f-aa0a-3da849ed7e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:bc:b9:8d:b9:71:02:97:d0:00:50:3c:00: d6:58:a1:0f:8a:0b:85:3e:f1:86:00:2f:b6:0a:c3: 1b:69:c1:1d:93:0b:16:09:3d:a8:7b:ce:74:f0:6d: 1c:f6:55:ae:89:ba:59:89:6b:33:95:27:82:90:b1: 7e:1b:c6:66:b2:16:67:22:ad:ee:b1:48:21:a2:38: 97:9b:57:9a:92:5d:4c:de:b3:5f:9e:70:2b:f6:81: 4e:ff:cf:08:16:98:b9:3e:5f:52:71:9f:58:20:de: db:b0:b4:66:71:ec:e5:2f:06:8a:01:06:27:c7:f8: df:eb:21:f7:7d:9d:94:ec:4a:cf:7a:da:fc:00:46: 25:27:29:b9:59:d6:19:03:a7:c1:6f:e5:e3:5c:24: ed:96:db:db:5f:e9:d9:86:f0:2e:72:79:34:24:03: f6:00:33:89:1f:f5:06:51:04:5d:10:cc:fe:07:35: e8:f4:69:ea:08:31:b6:ed:5f:c7:d9:7f:06:9b:3d: 38:3f:cb:dd:da:33:5e:ca:d3:a3:94:d9:2d:36:51: f5:77:5a:5f:8d:73:3c:f4:74:cd:36:3a:94:26:a8: 60:d8:0b:b8:ed:29:9c:20:a9:12:f1:38:d0:3b:b3: ed:42:ee:a0:01:5f:6c:eb:2d:ed:cd:dd:07:b2:b9: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8E:C3:D8:85:F5:D9:8C:92:AE:61:F2:40:51:0C:B6:D9:B7:BF:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3c97cab3-405b-3220-bcab-f0c1eedf3b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:3b07::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:af:db:f3:cc:73:db:dd:2b:71:70:7a:45:eb:4c:85:4a:f3: 58:47:f4:ce:1a:a5:c8:ff:36:c4:2a:fc:71:00:e2:6b:e4:91: b1:33:9a:fb:29:73:30:04:c6:81:37:60:6c:01:e1:39:8a:ca: d6:98:0f:b9:4a:54:42:e3:7e:48:2d:ad:6b:a4:38:e2:6e:fb: b2:3c:60:83:c1:c2:1a:ef:c5:64:8a:7c:dc:9a:1f:2e:8b:80: 5a:4b:b8:9c:de:ae:1e:79:49:37:0a:77:72:f2:04:72:26:18: 5a:a8:20:49:05:b3:56:56:f3:2b:fe:e9:61:4b:b9:ef:cf:ff: 78:04:dd:b2:4d:e5:d2:9d:e2:84:fe:25:89:aa:21:40:1f:2a: cd:1b:cf:9f:6d:96:ca:c8:93:c3:df:23:a6:ac:7e:94:94:23: 09:2f:be:34:e0:99:ae:13:27:69:38:c9:a2:24:cc:da:84:0e: ad:ac:83:bc:6d:6f:16:71:6c:a6:b9:92:11:30:e2:36:e7:0c: 54:79:b8:f9:20:b3:5c:be:de:a5:3d:bb:7f:9d:1e:7e:6b:ea: 41:55:f2:71:dc:47:a4:ee:d6:c7:ed:94:01:20:1b:c8:99:93: ff:e3:9e:52:80:c5:9e:d6:e1:ad:90:67:fd:11:a4:a5:69:aa: 22:14:af:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErbzOvbS+NsSunCAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgxNDIzMTU0MVoXDTI1MTExMzAwMTU0MVowLzEtMCsGA1UEAxMk MTkyNDg2MWQtNTZjNi00YjdmLWFhMGEtM2RhODQ5ZWQ3ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUa8uY25cQKX0ABQPADWWKEPiguFPvGGAC+2 CsMbacEdkwsWCT2oe8508G0c9lWuibpZiWszlSeCkLF+G8ZmshZnIq3usUghojiX m1eakl1M3rNfnnAr9oFO/88IFpi5Pl9ScZ9YIN7bsLRmcezlLwaKAQYnx/jf6yH3 fZ2U7ErPetr8AEYlJym5WdYZA6fBb+XjXCTtltvbX+nZhvAucnk0JAP2ADOJH/UG UQRdEMz+BzXo9GnqCDG27V/H2X8Gmz04P8vd2jNeytOjlNktNlH1d1pfjXM89HTN NjqUJqhg2Au47SmcIKkS8TjQO7PtQu6gAV9s6y3tzd0HsrlsRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEuOw9iF9dmMkq5h8kBRDLbZt785MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2M5N2NhYjMtNDA1Yi0z MjIwLWJjYWItZjBjMWVlZGYzYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDADsH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEmv2/PMc9vdK3FwekXrTIVK81hH9M4apcj/NsQq/HEA4mvkkbEz mvspczAExoE3YGwB4TmKytaYD7lKVELjfkgtrWukOOJu+7I8YIPBwhrvxWSKfNya Hy6LgFpLuJzerh55STcKd3LyBHImGFqoIEkFs1ZW8yv+6WFLue/P/3gE3bJN5dKd 4oT+JYmqIUAfKs0bz59tlsrIk8PfI6asfpSUIwkvvjTgma4TJ2k4yaIkzNqEDq2s g7xtbxZxbKa5khEw4jbnDFR5uPkgs1y+3qU9u3+dHn5r6kFV8nHcR6Tu1sftlAEg G8iZk//jnlKAxZ7W4a2QZ/0RpKVpqiIUr8s= -----END CERTIFICATE-----Generated at Wed Aug 20 08:35:19 2025 by rpki-client