$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/96f964a3-5c77-383c-b888-0fa21581fc81.roa File: 96f964a3-5c77-383c-b888-0fa21581fc81.roa (raw, json) Hash identifier: 3IDJkophNKGKr6q/KaIVjeJrcgg5cOcqq5XfF3ATbh8= Subject key identifier: 29:49:B6:00:52:72:2A:67:2D:D4:66:D4:0F:63:3F:AE:23:F8:CF:54 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584AFAB68B8B1B40EF7975E29CC0 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/96f964a3-5c77-383c-b888-0fa21581fc81.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 271 IP address blocks: 2607:f8f0:420::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:8b:8b:1b:40:ef:79:75:e2:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=a8935818-abcb-43fa-bad2-a8bd45e33cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:42:38:87:77:07:0b:e0:26:33:c9:f7:d8: 2a:05:4b:0e:84:80:89:b0:84:31:cd:16:20:d0:62: 57:d6:1d:40:4e:ab:1c:fe:bc:6a:ef:bf:6e:a3:ef: e5:7c:31:3e:b9:95:93:bc:a4:0a:5f:83:70:01:de: 1a:b7:52:0e:38:18:4b:12:17:8c:14:61:4e:4e:36: a6:42:b3:1b:7d:54:b2:b3:0a:43:a6:32:d4:5f:24: 3e:b4:aa:e0:c2:b2:55:ae:f2:f6:4d:f9:80:38:87: b3:8a:e5:06:c8:dd:5a:17:ac:2a:03:c4:49:59:21: 8b:16:4c:49:ff:60:4e:03:c4:52:01:65:d0:cc:76: c3:a7:18:9d:12:e9:1f:3b:a8:74:e9:f3:ca:f2:47: 12:09:1c:4d:85:5b:85:98:37:18:f0:d2:68:f8:91: 20:34:c9:90:f1:0c:b1:5f:2e:90:92:a6:40:79:70: 5a:34:35:29:14:59:9a:0c:99:41:3e:a5:b0:9f:5b: cd:de:9e:c8:c3:b9:a3:17:f0:57:aa:d9:35:bf:25: 97:51:0a:10:f2:59:f9:04:61:71:ec:af:bb:01:1e: 0d:cb:f8:a9:52:d9:c4:9f:f7:a2:ee:a2:8b:aa:4d: 62:ce:d2:67:c2:12:aa:88:f9:16:f4:83:13:7d:27: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:49:B6:00:52:72:2A:67:2D:D4:66:D4:0F:63:3F:AE:23:F8:CF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/96f964a3-5c77-383c-b888-0fa21581fc81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:420::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:85:61:01:e6:ba:d7:9b:1c:ab:87:26:88:2c:5e:71:a2:63: 7f:d2:4b:23:dc:f4:ef:b7:59:9d:b5:6c:c6:7c:16:c5:3d:75: 17:16:8a:40:aa:85:7a:74:e1:50:91:9d:9f:12:04:23:7d:61: 06:12:16:34:38:59:51:19:b3:b5:9a:b3:75:8c:f5:94:6b:f8: 70:93:73:2a:b1:30:d3:76:ab:ec:c3:47:94:c9:a9:99:3c:a6: 51:04:d6:c4:92:c3:42:4a:4e:d5:9a:6e:c2:f6:8e:33:c5:f5: 7e:e6:da:a8:c4:7e:e7:cc:c5:d0:a6:72:44:97:5e:60:a5:d5: 61:b7:c3:3e:2e:96:36:d5:13:12:c4:cc:22:01:90:21:79:ea: 2f:1e:3f:73:07:ab:30:cf:ce:8f:d6:af:a2:15:29:47:fd:6b: 31:5b:10:79:d0:e1:7b:34:22:b3:80:3d:fb:7a:09:ef:fb:92: 10:80:f0:e6:cb:98:25:db:46:8a:d3:e6:31:71:2e:ac:9c:00: ee:2a:c8:17:2e:1d:01:5f:06:36:5d:c9:1e:28:e9:5d:89:e6: ce:56:30:4c:26:d5:33:02:30:d5:12:aa:e5:4a:12:45:b4:b5: 66:2c:08:50:df:2c:86:a7:02:9f:0c:1a:da:b7:32:cc:f2:1f: 30:59:d1:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr6touLG0DveXXinMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk YTg5MzU4MTgtYWJjYi00M2ZhLWJhZDItYThiZDQ1ZTMzY2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDpCOId3BwvgJjPJ99gqBUsOhICJsIQxzRYg 0GJX1h1ATqsc/rxq779uo+/lfDE+uZWTvKQKX4NwAd4at1IOOBhLEheMFGFOTjam QrMbfVSyswpDpjLUXyQ+tKrgwrJVrvL2TfmAOIeziuUGyN1aF6wqA8RJWSGLFkxJ /2BOA8RSAWXQzHbDpxidEukfO6h06fPK8kcSCRxNhVuFmDcY8NJo+JEgNMmQ8Qyx Xy6QkqZAeXBaNDUpFFmaDJlBPqWwn1vN3p7Iw7mjF/BXqtk1vyWXUQoQ8ln5BGFx 7K+7AR4Ny/ipUtnEn/ei7qKLqk1iztJnwhKqiPkW9IMTfScqCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFClJtgBScipnLdRm1A9jP64j+M9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvOTZmOTY0YTMtNWM3Ny0z ODNjLWI4ODgtMGZhMjE1ODFmYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AQg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGCFYQHmutebHKuHJogsXnGiY3/SSyPc9O+3WZ21bMZ8FsU9dRcW ikCqhXp04VCRnZ8SBCN9YQYSFjQ4WVEZs7Was3WM9ZRr+HCTcyqxMNN2q+zDR5TJ qZk8plEE1sSSw0JKTtWabsL2jjPF9X7m2qjEfufMxdCmckSXXmCl1WG3wz4uljbV ExLEzCIBkCF56i8eP3MHqzDPzo/Wr6IVKUf9azFbEHnQ4Xs0IrOAPft6Ce/7khCA 8ObLmCXbRorT5jFxLqycAO4qyBcuHQFfBjZdyR4o6V2J5s5WMEwm1TMCMNUSquVK EkW0tWYsCFDfLIanAp8MGtq3MszyHzBZ0V8= -----END CERTIFICATE-----Generated at Tue Aug 26 08:59:04 2025 by rpki-client