$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/cc1c9146-ce23-319c-a59f-293f6b27a1ae.roa File: cc1c9146-ce23-319c-a59f-293f6b27a1ae.roa (raw, json) Hash identifier: zSDufsRjwTNP1onOZXx5yKtXIey+CC6CWjKdQDviOcA= Subject key identifier: 15:38:BF:5C:F9:2F:A0:66:CC:88:6E:EA:3F:8A:ED:32:68:C8:62:7E Certificate issuer: /CN=2686c5f2-35c8-4282-ae9f-58a0bf99be68 Certificate serial: 010D0C9F4328584AF52148D7CD3A094960202780 Authority key identifier: FD:76:BF:EC:61:37:91:9A:53:C9:22:3B:74:78:4F:DE:C2:36:CF:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/cc1c9146-ce23-319c-a59f-293f6b27a1ae.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 1706 IP address blocks: 2607:f088::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:48:d7:cd:3a:09:49:60:20:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2686c5f2-35c8-4282-ae9f-58a0bf99be68 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=7555f5db-67ba-448f-a828-15e375244230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a0:f7:b1:7d:6e:5d:ab:92:05:18:b8:8d:ca: 71:76:9c:f5:85:ee:e8:4d:75:3c:06:58:ed:34:55: f9:6f:82:44:8d:04:0c:18:b2:0e:0c:bd:14:a5:78: 28:5a:41:d0:69:64:8e:8b:0b:32:4e:2a:d6:a9:82: 17:e2:8d:63:27:66:c8:75:52:77:cb:95:90:0b:0e: f0:75:e5:7d:94:1f:b2:4c:dc:ed:e7:77:6d:23:72: 84:0e:0f:0f:b4:41:bc:2b:44:2e:31:de:05:9d:28: 1f:b8:6c:20:db:1d:cf:c9:11:2a:1c:fa:72:f8:05: 8f:e8:60:05:13:be:6d:56:7c:dc:94:29:2b:f0:4e: 9f:fb:57:c7:52:6a:5d:24:9a:eb:56:04:b6:87:0c: 56:9c:23:4c:52:21:e4:5e:19:13:45:e7:6b:5d:9e: 86:dd:c5:48:a0:ab:fc:ee:b4:e8:1c:7f:2f:65:4c: 72:99:7f:0f:32:ff:aa:48:e7:95:e7:fb:81:fa:f8: 31:c5:cf:88:28:a1:7d:49:c0:65:19:f9:1e:fa:d4: c5:e2:c1:de:6a:33:e9:3a:74:53:88:37:5e:f2:02: fb:4f:bd:e2:f8:07:17:d1:93:8a:b1:0c:9c:b7:84: 63:43:ed:16:66:ba:6c:99:72:a5:a1:0b:27:f6:e0: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:38:BF:5C:F9:2F:A0:66:CC:88:6E:EA:3F:8A:ED:32:68:C8:62:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/cc1c9146-ce23-319c-a59f-293f6b27a1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.crl X509v3 Authority Key Identifier: keyid:FD:76:BF:EC:61:37:91:9A:53:C9:22:3B:74:78:4F:DE:C2:36:CF:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer sbgp-ipAddrBlock: critical IPv6: 2607:f088::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ed:74:c6:9e:86:71:71:10:81:dd:3b:4e:9e:2f:2d:80:c1: 2c:67:1a:b1:0e:16:1c:e2:32:e8:f1:a5:57:3a:4d:8b:78:c1: 26:2b:9d:d8:cd:b8:65:fe:d2:89:22:e9:15:16:b5:87:f3:50: ef:9a:99:0d:cb:b6:51:2e:1d:ec:21:3e:a7:bf:77:62:9e:4b: 72:b6:84:5f:fb:2d:48:27:3c:56:06:f8:62:6a:f2:22:60:7d: 6b:8a:45:73:10:f9:00:a9:f8:53:ce:28:94:2f:66:71:49:3a: 6a:fb:e8:29:2e:23:9d:17:b5:2b:ca:04:11:27:07:7d:6e:8b: 5c:c7:a9:a4:ac:17:0d:78:27:5e:0e:37:fc:96:9b:50:e9:d1: 7d:5f:5f:eb:45:cf:88:10:be:84:5a:d1:67:27:46:43:f7:48: 5b:59:1c:75:17:aa:5f:e6:24:dd:dd:26:13:ee:86:7e:7b:5e: 89:48:3d:15:56:1f:61:5d:be:9d:34:ec:30:0d:dd:9f:21:b9: 79:8b:d3:64:65:c2:51:cf:cc:e7:f2:45:2a:db:55:20:5e:81: 31:27:9c:ff:3b:1e:72:2d:10:15:9d:61:91:99:d7:c0:8b:8f: ea:5f:6b:ac:16:7a:e2:ac:4a:1a:af:f0:0e:3e:57:b8:f9:45: b5:db:29:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr1IUjXzToJSWAgJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY4NmM1ZjItMzVjOC00MjgyLWFlOWYtNThhMGJmOTli ZTY4MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NzU1NWY1ZGItNjdiYS00NDhmLWE4MjgtMTVlMzc1MjQ0MjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6D3sX1uXauSBRi4jcpxdpz1he7oTXU8Bljt NFX5b4JEjQQMGLIODL0UpXgoWkHQaWSOiwsyTirWqYIX4o1jJ2bIdVJ3y5WQCw7w deV9lB+yTNzt53dtI3KEDg8PtEG8K0QuMd4FnSgfuGwg2x3PyREqHPpy+AWP6GAF E75tVnzclCkr8E6f+1fHUmpdJJrrVgS2hwxWnCNMUiHkXhkTRedrXZ6G3cVIoKv8 7rToHH8vZUxymX8PMv+qSOeV5/uB+vgxxc+IKKF9ScBlGfke+tTF4sHeajPpOnRT iDde8gL7T73i+AcX0ZOKsQyct4RjQ+0WZrpsmXKloQsn9uBFdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBU4v1z5L6BmzIhu6j+K7TJoyGJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNjg2 YzVmMi0zNWM4LTQyODItYWU5Zi01OGEwYmY5OWJlNjgvY2MxYzkxNDYtY2UyMy0z MTljLWE1OWYtMjkzZjZiMjdhMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjY4NmM1ZjItMzVjOC00MjgyLWFl OWYtNThhMGJmOTliZTY4LzI2ODZjNWYyLTM1YzgtNDI4Mi1hZTlmLTU4YTBiZjk5 YmU2OC5jcmwwHwYDVR0jBBgwFoAU/Xa/7GE3kZpTySI7dHhP3sI2z4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yNjg2YzVmMi0zNWM4LTQyODItYWU5Zi01OGEw YmY5OWJlNjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfwiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAH7XTGnoZxcRCB3TtOni8tgMEsZxqxDhYc4jLo8aVXOk2LeMEmK53Y zbhl/tKJIukVFrWH81DvmpkNy7ZRLh3sIT6nv3dinktytoRf+y1IJzxWBvhiavIi YH1rikVzEPkAqfhTziiUL2ZxSTpq++gpLiOdF7UrygQRJwd9botcx6mkrBcNeCde Djf8lptQ6dF9X1/rRc+IEL6EWtFnJ0ZD90hbWRx1F6pf5iTd3SYT7oZ+e16JSD0V Vh9hXb6dNOwwDd2fIbl5i9NkZcJRz8zn8kUq21UgXoExJ5z/Ox5yLRAVnWGRmdfA i4/qX2usFnrirEoar/AOPle4+UW12ymK -----END CERTIFICATE-----Generated at Mon Aug 25 12:17:10 2025 by rpki-client