$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/45a0eb88-85c1-30a7-8674-338f6cc82f21.roa File: 45a0eb88-85c1-30a7-8674-338f6cc82f21.roa (raw, json) Hash identifier: 50H2ovN8/kI3gVdr3TyI3QXd3hipNhn/1SPthHkbeOs= Subject key identifier: 22:52:83:0B:8C:5C:63:B4:32:66:F5:AA:68:97:6F:D2:C9:44:69:48 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584AF5214D76A6EC0DFA6189BC60 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/45a0eb88-85c1-30a7-8674-338f6cc82f21.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 21700 IP address blocks: 2606:f1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4d:76:a6:ec:0d:fa:61:89:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=f7ca641d-6334-447f-b220-8b06b3086da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:86:87:3a:8d:1f:97:c6:b9:e6:b2:24:41:4d: 99:a4:51:2e:cd:27:a4:46:29:fc:58:c1:f8:7f:cc: 68:44:f8:95:db:98:41:5d:f9:28:64:89:93:05:65: 2c:fe:d6:db:c1:be:92:20:41:d0:27:df:04:c8:be: eb:54:51:dd:7d:fc:92:6c:8e:ec:f7:7d:fa:88:65: 52:c8:ed:6f:08:5d:7a:55:7f:06:91:92:4f:48:b8: 75:9a:d2:c1:74:a4:58:64:f7:93:88:59:88:ff:9a: d7:e7:21:cb:6e:b1:bb:f8:fd:d5:c4:d4:1e:b2:47: d2:94:13:52:83:15:04:9d:b2:c6:34:cb:17:3e:66: 52:39:c6:9f:04:e6:4a:12:de:29:0a:c3:bd:c7:1f: 1d:21:3c:9c:b4:7f:d3:49:df:2f:09:80:46:d1:fa: d1:21:d5:6c:d5:16:98:d0:f8:78:0d:51:47:04:93: b0:18:53:5c:57:7d:72:2c:61:82:42:f6:ab:53:18: cf:87:3a:79:89:86:3a:ff:c4:d3:c6:30:51:d6:1a: 62:dd:0e:4a:a8:e4:81:26:62:b7:d4:fe:0f:97:44: e1:a5:0b:3e:4c:dc:1a:bd:a1:64:ec:fe:b1:8f:5e: 88:c4:eb:73:8f:d1:25:80:63:b3:d2:76:d6:fb:c1: 54:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:52:83:0B:8C:5C:63:B4:32:66:F5:AA:68:97:6F:D2:C9:44:69:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/45a0eb88-85c1-30a7-8674-338f6cc82f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv6: 2606:f1c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b8:60:82:d0:f0:28:eb:c1:41:c4:4a:71:7c:42:8f:ef:13: 75:49:65:67:d8:89:f9:cc:00:9a:7e:a8:6c:e4:4c:4a:4b:e5: 48:d5:f0:82:eb:f3:48:9b:ec:47:61:02:45:1c:36:ed:9c:8f: b8:b3:b8:df:6d:e2:f1:09:b7:4f:57:47:45:31:d2:c4:2d:93: de:24:5f:62:13:69:f6:2b:d4:58:f8:82:0c:cb:f8:09:e3:18: a0:7f:66:04:ad:ea:42:7f:6e:f9:ee:4b:40:1b:02:df:c6:25: 56:5b:5c:4d:9b:d6:fe:a2:26:c5:90:02:11:7c:0d:4b:9f:23: e1:c2:b9:2d:41:8d:b8:88:87:de:0e:ef:7f:88:89:3e:d0:09: 0f:8a:e0:f5:c1:82:2d:7d:35:6b:fe:24:ad:17:ca:04:b6:b9: 9b:3c:f7:d9:61:56:66:35:d6:fb:50:c6:44:f5:b9:d6:8e:62: 4b:c8:0d:48:bf:22:75:7d:d5:b4:94:c0:0f:28:16:e9:45:dd: 05:71:f0:56:ca:78:c2:b6:dc:51:ac:8e:6d:95:e9:0c:29:14: 53:4d:76:9c:9a:7b:a2:02:e8:6d:24:65:9d:9d:24:aa:0d:37: fb:02:8c:01:87:7c:3b:1f:c1:d4:8f:ab:5a:2f:16:88:6b:65: 3a:db:d4:47 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr1IU12puwN+mGJvGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjdjYTY0MWQtNjMzNC00NDdmLWIyMjAtOGIwNmIzMDg2ZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIaHOo0fl8a55rIkQU2ZpFEuzSekRin8WMH4 f8xoRPiV25hBXfkoZImTBWUs/tbbwb6SIEHQJ98EyL7rVFHdffySbI7s9336iGVS yO1vCF16VX8GkZJPSLh1mtLBdKRYZPeTiFmI/5rX5yHLbrG7+P3VxNQeskfSlBNS gxUEnbLGNMsXPmZSOcafBOZKEt4pCsO9xx8dITyctH/TSd8vCYBG0frRIdVs1RaY 0Ph4DVFHBJOwGFNcV31yLGGCQvarUxjPhzp5iYY6/8TTxjBR1hpi3Q5KqOSBJmK3 1P4Pl0ThpQs+TNwavaFk7P6xj16IxOtzj9ElgGOz0nbW+8FUAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCJSgwuMXGO0Mmb1qmiXb9LJRGlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNDVhMGViODgtODVjMS0z MGE3LTg2NzQtMzM4ZjZjYzgyZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbxwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3uGCC0PAo68FBxEpxfEKP7xN1SWVn2In5zACafqhs5ExKS+VI1fCC 6/NIm+xHYQJFHDbtnI+4s7jfbeLxCbdPV0dFMdLELZPeJF9iE2n2K9RY+IIMy/gJ 4xigf2YErepCf2757ktAGwLfxiVWW1xNm9b+oibFkAIRfA1LnyPhwrktQY24iIfe Du9/iIk+0AkPiuD1wYItfTVr/iStF8oEtrmbPPfZYVZmNdb7UMZE9bnWjmJLyA1I vyJ1fdW0lMAPKBbpRd0FcfBWynjCttxRrI5tlekMKRRTTXacmnuiAuhtJGWdnSSq DTf7AowBh3w7H8HUj6taLxaIa2U629RH -----END CERTIFICATE-----Generated at Tue Aug 26 10:46:18 2025 by rpki-client