$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa File: 8674162a-9330-33c7-b0e9-15290762bc3b.roa (raw, json) Hash identifier: Lmb2Xu81GM/GQPGz2d7P+gdsUwozy3ZVYrjS7JJRdmA= Subject key identifier: 65:22:E2:07:B5:BD:84:B7:8E:E6:2C:7F:F0:55:03:19:48:59:55:54 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584B047C13BF5A825BB16D986180 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 2153 IP address blocks: 2607:f380:4:4004::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:13:bf:5a:82:5b:b1:6d:98:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=4c8bc4b1-1307-466c-90f3-5a029a36a230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:4b:4e:22:b2:fd:e1:4e:71:94:ed:7f:80: 12:09:04:9c:0a:07:e6:3e:af:38:99:37:46:fb:e6: 23:b1:23:0e:1e:2c:b3:0f:18:79:c3:cd:b9:fb:6f: 51:2c:a2:56:29:c0:1c:69:d7:7e:85:d7:42:cb:58: 2c:b9:8f:4e:a9:4d:0f:39:5e:9d:97:18:d4:8a:3a: 98:25:ca:6c:2c:93:6e:34:d5:ac:34:8c:9a:50:6d: 3e:6c:b3:ff:5e:35:95:06:94:8f:2d:ca:71:aa:c1: 0d:ae:b3:38:8a:f6:db:38:85:2c:84:53:95:3d:bb: e8:8a:49:18:40:a2:ed:13:08:af:36:f9:b7:0d:c1: cb:9d:6f:74:53:43:fb:9b:eb:86:8b:fd:b1:bc:a3: 9e:2b:b0:6d:3d:4c:6f:b3:4d:3c:66:57:95:4c:f4: e8:fc:b3:3f:0d:09:48:25:23:6a:9a:5b:70:33:62: 6d:a0:85:67:2a:e8:3d:fe:d8:71:1f:79:d4:10:c9: 8a:d3:a7:a3:b1:0f:e6:89:4e:9d:c6:7f:72:b9:2f: 12:fc:5f:a1:b4:b9:33:94:e0:b5:41:c3:4f:b8:b1: 7e:83:47:f3:e3:f5:10:85:e1:0a:d5:97:26:46:3c: 38:f2:d1:e1:45:39:0b:06:2a:2a:6d:77:93:49:82: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:22:E2:07:B5:BD:84:B7:8E:E6:2C:7F:F0:55:03:19:48:59:55:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv6: 2607:f380:4:4004::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:db:40:80:a0:71:66:55:d2:2d:94:2f:9b:dd:74:ba:ec:64: 68:aa:17:9d:0c:81:0b:7a:90:cc:ce:e2:e0:78:72:48:d3:ac: 69:9f:2c:5e:74:cb:3e:f7:62:58:6a:5e:71:72:c1:18:e1:65: 5d:11:71:49:7a:64:93:b0:2d:6e:27:de:cb:d0:7f:dd:ac:01: 51:2b:27:2e:a8:31:89:7c:0f:3a:86:f8:45:08:85:73:05:7c: ca:58:18:f9:83:74:0f:ec:a2:84:6d:45:2b:8c:82:f2:48:43: 9c:f4:89:ea:66:07:d0:78:1c:1c:91:0b:e2:0f:54:f6:08:7c: 10:13:fe:50:56:d0:f3:ad:d1:dc:7e:c5:9a:d7:8c:a3:1e:8f: da:cd:b4:cd:30:5d:3e:8d:c1:10:3a:59:61:9c:24:69:a6:33: 07:d6:f3:27:2f:8c:3f:d8:ed:5c:89:47:5b:48:fa:3f:fb:61: 16:ef:63:a5:16:b0:dc:47:26:ef:61:b5:19:51:32:61:0c:bb: 27:7c:4c:af:46:ee:58:31:16:dd:9c:a3:a5:44:f4:47:18:c7: 52:74:60:f4:70:a5:ba:03:b5:cd:ce:26:77:5c:fe:6a:44:95: e5:14:8d:a9:4c:01:a3:60:eb:15:e5:4b:ee:fb:74:f5:cf:1c: 02:1e:36:18 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEsEfBO/WoJbsW2YYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NGM4YmM0YjEtMTMwNy00NjZjLTkwZjMtNWEwMjlhMzZhMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhFLTiKy/eFOcZTtf4ASCQScCgfmPq84mTdG ++YjsSMOHiyzDxh5w825+29RLKJWKcAcadd+hddCy1gsuY9OqU0POV6dlxjUijqY JcpsLJNuNNWsNIyaUG0+bLP/XjWVBpSPLcpxqsENrrM4ivbbOIUshFOVPbvoikkY QKLtEwivNvm3DcHLnW90U0P7m+uGi/2xvKOeK7BtPUxvs008ZleVTPTo/LM/DQlI JSNqmltwM2JtoIVnKug9/thxH3nUEMmK06ejsQ/miU6dxn9yuS8S/F+htLkzlOC1 QcNPuLF+g0fz4/UQheEK1ZcmRjw48tHhRTkLBioqbXeTSYIhuwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFGUi4ge1vYS3juYsf/BVAxlIWVVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvODY3NDE2MmEtOTMzMC0z M2M3LWIwZTktMTUyOTA3NjJiYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgfzgAAE QAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAfdtAgKBxZlXSLZQvm910uuxkaKoXnQyBC3qQzM7i4HhySNOs aZ8sXnTLPvdiWGpecXLBGOFlXRFxSXpkk7Atbifey9B/3awBUSsnLqgxiXwPOob4 RQiFcwV8ylgY+YN0D+yihG1FK4yC8khDnPSJ6mYH0HgcHJEL4g9U9gh8EBP+UFbQ 863R3H7FmteMox6P2s20zTBdPo3BEDpZYZwkaaYzB9bzJy+MP9jtXIlHW0j6P/th Fu9jpRaw3Ecm72G1GVEyYQy7J3xMr0buWDEW3ZyjpUT0RxjHUnRg9HClugO1zc4m d1z+akSV5RSNqUwBo2DrFeVL7vt09c8cAh42GA== -----END CERTIFICATE-----Generated at Fri Sep 5 04:43:42 2025 by rpki-client