$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b88e8e9d-d863-32b1-bedf-c6884509f836.roa File: b88e8e9d-d863-32b1-bedf-c6884509f836.roa (raw, json) Hash identifier: 8D4Rd8PXOPOOVLmwX1Q6m0YoFd0ZkdftRN/8UcuRefw= Subject key identifier: D6:D3:31:27:F7:AF:22:10:AD:12:E0:B0:5F:55:A0:71:65:42:E6:DF Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584AC9DB97C0A8989988274C9100 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b88e8e9d-d863-32b1-bedf-c6884509f836.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 32133 IP address blocks: 2606:8e80:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:97:c0:a8:98:99:88:27:4c:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=895e9b57-1081-4ca4-ba38-ef611e7e9587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:c5:f8:22:da:71:b7:e0:ef:ed:8f:42:48: c1:54:24:37:94:08:ca:0d:38:71:9e:02:c7:7c:82: 79:55:9d:18:a8:b6:ed:b1:13:b3:c0:e4:4a:82:37: 03:38:47:3f:df:3f:da:b4:dd:19:81:46:86:d6:cc: fe:d5:e1:c9:7a:97:65:5f:5a:cd:d4:2b:70:46:23: a8:5f:9a:8f:2d:e6:02:b9:95:fa:96:7a:ef:91:ac: 69:d3:d7:12:09:b7:38:fe:37:cd:b4:18:a3:07:a1: 60:f8:63:cd:b6:d9:1e:bc:56:0d:04:db:8d:61:67: 3b:cc:99:b9:2b:35:55:36:1a:89:90:2d:7b:7a:78: eb:3b:ab:4f:96:7b:11:1f:c6:32:73:7f:c5:0f:ff: 0e:c7:71:9e:92:fc:7c:77:1a:52:65:f2:bf:39:56: 08:16:54:ef:2a:5e:ed:c1:25:84:12:9c:7b:a3:ad: 6f:78:06:d5:52:47:04:95:e9:9d:9f:d1:89:43:00: a0:5d:81:c5:c7:45:59:74:48:51:68:12:7b:5b:65: 54:86:34:18:3e:12:83:9d:78:b9:0a:7a:35:50:70: ee:57:52:9e:c8:69:98:0a:66:fd:9a:77:70:23:4e: 43:85:ad:97:66:f4:b0:1e:51:11:2f:4e:0c:78:2f: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D3:31:27:F7:AF:22:10:AD:12:E0:B0:5F:55:A0:71:65:42:E6:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b88e8e9d-d863-32b1-bedf-c6884509f836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv6: 2606:8e80:1000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b3:b3:0b:45:12:f2:4f:0b:d6:4b:9d:29:5a:2d:90:0c:e3: 42:e0:f3:c6:60:d6:bd:e2:8f:55:f3:5f:98:20:cb:50:24:dd: b9:51:bc:f3:80:d7:7a:fc:89:db:b4:46:69:75:f6:f3:f9:34: 69:5b:ba:f3:63:57:76:4b:0e:74:91:36:bd:47:d3:f4:b7:aa: c2:39:c9:fb:e2:d7:8d:fb:4e:b5:fe:8c:0c:d1:f4:11:f3:f4: 28:5a:4a:e7:62:bb:1c:02:b6:75:4c:e3:0d:00:ff:e9:c6:d5: 4f:93:f3:1c:33:6f:e9:30:ee:64:ad:a1:f3:43:35:63:3d:3a: 27:d7:12:04:16:62:f3:88:8d:c7:5d:4e:79:f0:cc:32:bd:3c: 28:c5:ac:8b:eb:d9:74:b4:ce:4e:26:1b:a6:f6:98:ec:bc:b5: 0f:27:23:9f:69:b4:77:96:dd:68:76:91:d9:8c:bc:8a:fb:97: b3:e5:7a:04:63:bf:c6:7f:35:68:6b:0e:73:fd:c5:f5:43:e6: 0e:73:83:57:a1:13:33:e7:22:a1:58:7b:0a:d4:b1:dc:88:76: e3:5a:e9:e7:4c:7c:f0:7c:f0:d2:98:a1:b2:11:5b:ab:56:44: 70:b8:b3:97:f8:40:50:c1:b2:e0:76:93:16:ec:3d:c7:80:a9: c2:72:51:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErJ25fAqJiZiCdMkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk ODk1ZTliNTctMTA4MS00Y2E0LWJhMzgtZWY2MTFlN2U5NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKrF+CLacbfg7+2PQkjBVCQ3lAjKDThxngLH fIJ5VZ0YqLbtsROzwORKgjcDOEc/3z/atN0ZgUaG1sz+1eHJepdlX1rN1CtwRiOo X5qPLeYCuZX6lnrvkaxp09cSCbc4/jfNtBijB6Fg+GPNttkevFYNBNuNYWc7zJm5 KzVVNhqJkC17enjrO6tPlnsRH8Yyc3/FD/8Ox3Gekvx8dxpSZfK/OVYIFlTvKl7t wSWEEpx7o61veAbVUkcElemdn9GJQwCgXYHFx0VZdEhRaBJ7W2VUhjQYPhKDnXi5 Cno1UHDuV1KeyGmYCmb9mndwI05Dha2XZvSwHlERL04MeC+EXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNbTMSf3ryIQrRLgsF9VoHFlQubfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvYjg4ZThlOWQtZDg2My0z MmIxLWJlZGYtYzY4ODQ1MDlmODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgaOgBAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ6zswtFEvJPC9ZLnSlaLZAM40Lg88Zg1r3ij1XzX5ggy1Ak3blR vPOA13r8idu0Rml19vP5NGlbuvNjV3ZLDnSRNr1H0/S3qsI5yfvi1437TrX+jAzR 9BHz9ChaSudiuxwCtnVM4w0A/+nG1U+T8xwzb+kw7mStofNDNWM9OifXEgQWYvOI jcddTnnwzDK9PCjFrIvr2XS0zk4mG6b2mOy8tQ8nI59ptHeW3Wh2kdmMvIr7l7Pl egRjv8Z/NWhrDnP9xfVD5g5zg1ehEzPnIqFYewrUsdyIduNa6edMfPB88NKYobIR W6tWRHC4s5f4QFDBsuB2kxbsPceAqcJyUdc= -----END CERTIFICATE-----Generated at Thu Aug 21 10:26:08 2025 by rpki-client