$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa File: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (raw, json) Hash identifier: 8M3ZKvCjjzzF8dsQAfN+8uJZRMxpW07T1PhkTGE+DgI= Subject key identifier: 52:D5:8D:D6:15:6B:98:89:10:DB:E8:97:7E:C7:6E:20:73:E6:B9:D9 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584ACF70F8D34919304B9D885780 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 22413 IP address blocks: 2604:f140::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:70:f8:d3:49:19:30:4b:9d:88:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=b073778e-5cc1-4fa1-b5dc-d11cb9c462e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9a:16:2a:f3:a1:c2:97:94:de:a3:24:a3:53: 38:41:25:46:9e:13:38:e1:4a:04:cd:e7:d7:cc:7a: c4:a8:6b:24:09:43:b2:cb:e5:cb:9f:b5:72:07:b1: 67:b1:1b:60:18:5d:70:1e:0a:b2:ed:14:37:59:57: 20:2d:07:ee:95:55:d3:19:f5:6e:cb:0b:4c:48:a9: af:23:88:79:77:41:da:8d:d5:00:42:c5:e8:fb:7b: 1c:99:fe:00:98:6f:ad:47:ac:1c:23:70:4d:d0:25: af:f0:d2:b9:f5:cd:a8:ce:5f:ed:61:01:70:11:0f: 1b:9e:8c:4b:a8:b3:dc:ce:0d:bf:77:9a:10:02:67: 04:93:50:9a:bd:66:e2:94:bc:04:da:18:06:ed:48: b7:79:f5:60:ff:77:1e:28:d7:c7:f6:0f:af:ab:e4: 24:1f:bb:6f:b2:82:84:30:a9:22:07:31:71:89:49: 5d:ea:42:09:b7:69:d9:24:73:ff:e7:32:53:55:dc: b6:36:00:a7:2b:fd:a4:91:ff:36:c3:9e:84:8f:ac: ca:25:8c:52:41:56:30:28:38:74:1e:da:6a:8f:11: c6:ba:cc:46:90:2a:01:2e:8e:e9:29:99:95:6c:70: 34:5b:3e:f1:01:bf:5b:5a:5d:c6:4e:d3:58:90:2e: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D5:8D:D6:15:6B:98:89:10:DB:E8:97:7E:C7:6E:20:73:E6:B9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv6: 2604:f140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e3:c0:71:15:8a:84:48:56:27:1b:ac:63:bd:56:0b:a1:21: e7:89:de:c1:39:97:5c:42:cd:e9:62:16:f4:d3:3b:0e:9e:ac: 9c:0d:3b:78:a2:12:ef:06:77:6a:b8:b4:99:72:5f:a8:97:29: 71:9a:50:cc:00:71:fe:f3:54:7b:1b:17:42:a4:04:ca:4f:8d: 57:6f:03:fd:82:02:8b:26:ca:f5:13:96:4c:e1:d3:a0:0c:6c: 33:83:de:63:e6:b0:ce:37:49:61:c9:f5:f2:bf:c2:a9:b1:fe: 09:59:06:32:9d:94:ea:92:55:ea:a3:7e:6f:50:59:db:cd:52: 94:11:e6:33:da:34:de:6f:eb:2b:ec:b7:40:89:c9:e3:79:19: 55:06:88:97:d4:ca:a9:99:04:bf:6d:73:25:15:68:32:72:a6: c9:0b:e4:bb:e2:d8:c4:21:99:98:66:90:39:df:b6:a9:b1:5b: c4:c8:44:b1:cd:b2:39:3e:85:3e:57:f9:e4:2a:1a:86:a8:37: f0:92:f8:da:2d:bf:dc:07:20:55:e4:4a:5e:1b:61:08:77:81: d8:c7:48:9e:a9:24:2e:4c:4b:89:e6:8d:22:d1:30:d4:ce:a6: 24:b1:36:57:21:8a:8a:19:34:c6:dc:b4:f3:be:25:a1:74:ce: 1c:5a:e8:71 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErPcPjTSRkwS52IV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk YjA3Mzc3OGUtNWNjMS00ZmExLWI1ZGMtZDExY2I5YzQ2MmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZoWKvOhwpeU3qMko1M4QSVGnhM44UoEzefX zHrEqGskCUOyy+XLn7VyB7FnsRtgGF1wHgqy7RQ3WVcgLQfulVXTGfVuywtMSKmv I4h5d0HajdUAQsXo+3scmf4AmG+tR6wcI3BN0CWv8NK59c2ozl/tYQFwEQ8bnoxL qLPczg2/d5oQAmcEk1CavWbilLwE2hgG7Ui3efVg/3ceKNfH9g+vq+QkH7tvsoKE MKkiBzFxiUld6kIJt2nZJHP/5zJTVdy2NgCnK/2kkf82w56Ej6zKJYxSQVYwKDh0 HtpqjxHGusxGkCoBLo7pKZmVbHA0Wz7xAb9bWl3GTtNYkC7nOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFLVjdYVa5iJENvol37HbiBz5rnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvOWRkM2E5N2MtOWQ2Yi0z ZTdmLWExZjQtNDIwNGZjZTllMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTxQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCU48BxFYqESFYnG6xjvVYLoSHnid7BOZdcQs3pYhb00zsOnqycDTt4 ohLvBndquLSZcl+olylxmlDMAHH+81R7GxdCpATKT41XbwP9ggKLJsr1E5ZM4dOg DGwzg95j5rDON0lhyfXyv8Kpsf4JWQYynZTqklXqo35vUFnbzVKUEeYz2jTeb+sr 7LdAicnjeRlVBoiX1MqpmQS/bXMlFWgycqbJC+S74tjEIZmYZpA537apsVvEyESx zbI5PoU+V/nkKhqGqDfwkvjaLb/cByBV5EpeG2EId4HYx0ieqSQuTEuJ5o0i0TDU zqYksTZXIYqKGTTG3LTzviWhdM4cWuhx -----END CERTIFICATE-----Generated at Wed Aug 20 23:02:49 2025 by rpki-client