$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2c61544d-74aa-3fe8-aa31-5556a66e95e7.roa File: 2c61544d-74aa-3fe8-aa31-5556a66e95e7.roa (raw, json) Hash identifier: LjtOGLr+IDqtEJk/xY5YxeAJ9GuIUNmfcG/97WNsMLE= Subject key identifier: FE:63:B2:D5:0A:DA:EE:5E:EA:76:8A:B0:52:32:52:B0:A6:D7:34:69 Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584B1558F17BF2E227BCBF233800 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2c61544d-74aa-3fe8-aa31-5556a66e95e7.roa Signing time: Thu 04 Sep 2025 13:58:53 +0000 ROA not before: Thu 04 Sep 2025 13:58:53 +0000 ROA not after: Wed 03 Dec 2025 14:58:53 +0000 asID: 46524 IP address blocks: 2606:6440:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:58:f1:7b:f2:e2:27:bc:bf:23:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Sep 4 13:58:53 2025 GMT Not After : Dec 3 14:58:53 2025 GMT Subject: CN=a138a573-a3fa-4de8-ac6c-237dadfc7542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:d0:03:bf:1a:74:27:01:16:9e:f9:01:9a: 1d:9e:3a:b1:06:37:74:c1:05:c9:b5:03:d0:13:fd: d4:c0:a3:98:7f:fd:a5:b9:fa:13:33:5a:f1:b1:5b: 64:1c:a0:9d:62:05:b2:0a:e0:73:84:8f:0c:a6:28: 97:6f:7f:07:a2:52:95:29:af:82:d6:5a:31:56:4d: d7:32:30:b2:12:ca:5d:d0:bf:f4:56:a0:8e:2c:0c: 66:52:76:3c:25:60:b6:dc:7c:2e:19:3c:8e:ff:d1: 37:e2:11:93:ad:95:4d:4a:00:ed:ad:00:df:49:0a: 17:74:92:ee:6b:07:16:8b:68:9c:58:93:96:5e:41: fb:7e:46:09:ef:68:67:de:eb:d7:16:66:96:f0:f6: 14:91:8b:2f:23:3a:8a:e9:15:be:79:1a:20:e4:fc: 81:70:94:57:ad:a2:b2:0c:8d:01:3e:c5:d2:a9:33: 1c:26:83:58:5e:8e:e7:56:31:e9:d1:d3:ea:20:9f: d3:21:2c:72:28:cf:f6:f6:20:f3:c1:11:3d:5f:db: 49:db:7d:1f:ca:45:2b:23:3b:d4:42:2b:9d:57:f2: 52:52:7e:e4:10:47:cd:f9:6c:e1:21:33:fb:02:be: 64:ce:66:cf:65:12:bb:c7:eb:16:3f:0a:07:a2:8c: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:63:B2:D5:0A:DA:EE:5E:EA:76:8A:B0:52:32:52:B0:A6:D7:34:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2c61544d-74aa-3fe8-aa31-5556a66e95e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv6: 2606:6440:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7d:f7:b0:e5:c9:dd:83:1d:0b:53:d6:e2:50:a7:57:ae:de: a5:9b:2f:b1:d3:63:78:6e:99:78:91:83:cc:59:30:ca:59:77: 05:bb:42:c1:36:d3:16:84:7e:36:61:33:fc:60:38:b6:e0:7b: eb:99:50:41:da:5f:96:a2:83:b8:24:f9:16:54:8c:fc:6d:0f: 70:e8:6f:14:2b:45:a1:ac:a2:55:86:68:66:36:57:f1:b7:ab: 88:a9:47:b2:aa:d2:0a:d2:df:e6:3c:88:82:72:db:b3:14:bc: 0c:00:a3:bf:fc:f3:71:8d:72:a3:51:7c:ab:f3:c0:84:2b:34: 0c:e2:52:13:45:a8:fb:65:0e:cc:86:06:a8:9b:5c:f4:36:ae: dd:ae:49:e3:fc:45:bd:dd:67:69:30:a9:ce:eb:cd:7c:9a:98: 5e:9f:ea:16:59:25:b9:87:88:e2:d4:bd:17:6c:17:33:2f:e9: 08:54:c8:10:38:f5:72:01:7b:55:3c:86:93:1e:a1:c9:cc:79: 55:ce:2f:c9:68:2f:0d:f7:03:21:f3:6e:d7:1a:b0:9a:77:ad: 0c:2e:86:62:71:f7:cd:b0:75:a7:d3:43:01:a8:db:ef:a2:f0: 66:2f:fd:2b:1c:21:96:e1:49:65:9f:74:04:d3:bb:02:7e:f4: 37:8a:20:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsVWPF78uInvL8jOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MDkwNDEzNTg1M1oXDTI1MTIwMzE0NTg1M1owLzEtMCsGA1UEAxMk YTEzOGE1NzMtYTNmYS00ZGU4LWFjNmMtMjM3ZGFkZmM3NTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrfQA78adCcBFp75AZodnjqxBjd0wQXJtQPQ E/3UwKOYf/2lufoTM1rxsVtkHKCdYgWyCuBzhI8MpiiXb38HolKVKa+C1loxVk3X MjCyEspd0L/0VqCOLAxmUnY8JWC23HwuGTyO/9E34hGTrZVNSgDtrQDfSQoXdJLu awcWi2icWJOWXkH7fkYJ72hn3uvXFmaW8PYUkYsvIzqK6RW+eRog5PyBcJRXraKy DI0BPsXSqTMcJoNYXo7nVjHp0dPqIJ/TISxyKM/29iDzwRE9X9tJ230fykUrIzvU QiudV/JSUn7kEEfN+WzhITP7Ar5kzmbPZRK7x+sWPwoHoowWJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP5jstUK2u5e6naKsFIyUrCm1zRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvMmM2MTU0NGQtNzRhYS0z ZmU4LWFhMzEtNTU1NmE2NmU5NWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZkQAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJd997Dlyd2DHQtT1uJQp1eu3qWbL7HTY3humXiRg8xZMMpZdwW7 QsE20xaEfjZhM/xgOLbge+uZUEHaX5aig7gk+RZUjPxtD3DobxQrRaGsolWGaGY2 V/G3q4ipR7Kq0grS3+Y8iIJy27MUvAwAo7/883GNcqNRfKvzwIQrNAziUhNFqPtl DsyGBqibXPQ2rt2uSeP8Rb3dZ2kwqc7rzXyamF6f6hZZJbmHiOLUvRdsFzMv6QhU yBA49XIBe1U8hpMeocnMeVXOL8loLw33AyHzbtcasJp3rQwuhmJx982wdafTQwGo 2++i8GYv/SscIZbhSWWfdATTuwJ+9DeKIDE= -----END CERTIFICATE-----Generated at Mon Sep 8 10:33:32 2025 by rpki-client