$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a87344a9-56e9-34d4-9011-cf03bc9980c1.roa File: a87344a9-56e9-34d4-9011-cf03bc9980c1.roa (raw, json) Hash identifier: bGd1xJRraJ4d8XRNmIvftNtycNpHA+lyYtWZ62f5zS4= Subject key identifier: 5B:B4:D5:C4:78:1B:A4:09:BA:DC:CF:35:86:B3:80:8F:2A:94:AF:72 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584B047C13E17571738285B531F0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a87344a9-56e9-34d4-9011-cf03bc9980c1.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 2153 IP address blocks: 2607:f380:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:13:e1:75:71:73:82:85:b5:31:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=afe89ead-3520-4ba6-bbf9-7e1fa89ba819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:69:51:04:30:91:7a:23:39:b4:dc:e3:4f: ea:89:c1:78:b5:9b:b6:a4:50:4e:3d:90:53:29:dc: b2:6f:63:f2:05:31:fe:aa:f1:34:5e:00:41:f3:6e: 4d:7c:2b:e6:1d:f0:b0:0a:47:09:70:c8:31:b2:eb: 87:ac:0a:b4:63:8e:0d:f1:0e:65:f4:d1:42:22:0a: 2c:c0:d2:ef:45:45:e1:fa:42:24:09:f8:bc:2e:7b: 81:6f:51:52:08:c0:cf:19:f1:45:cc:89:84:bc:ae: bd:13:07:ba:0c:d0:41:3d:0c:9b:33:f5:7b:f6:5e: 73:09:f7:90:79:8b:4c:f3:5a:32:32:fd:5d:a3:e0: a2:c7:93:f6:58:9e:cc:1d:09:1d:8c:58:20:68:24: b2:79:32:9f:04:a5:04:b3:a2:c1:47:28:f5:4b:1e: 55:8d:1f:54:6d:c6:e3:54:16:07:af:5d:af:76:09: 36:99:c5:4b:6b:75:8f:e7:79:43:cf:0a:20:04:dc: ac:3e:f1:67:c8:41:ac:71:92:c1:d4:32:de:1f:55: c6:d1:92:fb:e0:9b:f5:c4:00:41:d9:bb:9e:e6:55: 5e:6d:af:95:da:5a:70:a0:9e:e6:06:37:d4:10:29: 53:c8:b3:44:b0:ff:30:6e:fa:b3:85:ad:75:48:10: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B4:D5:C4:78:1B:A4:09:BA:DC:CF:35:86:B3:80:8F:2A:94:AF:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a87344a9-56e9-34d4-9011-cf03bc9980c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv6: 2607:f380:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8f:8e:98:29:34:d0:66:a4:61:a1:ac:dd:77:93:da:08:21: 60:a6:24:7a:e1:0f:d7:20:5d:2f:39:48:75:bd:6b:68:bd:69: ba:c4:64:95:c1:66:49:e3:16:30:6d:8b:9e:03:17:2f:23:3b: 13:9b:f0:bd:bf:09:a9:87:69:76:4b:21:0a:d0:ea:14:3e:e0: cf:5f:48:45:cc:83:6c:87:dd:3c:ff:ad:76:79:35:73:fa:e3: 10:c0:d5:c9:64:d0:86:4b:c6:2a:42:09:fb:d3:50:2f:85:a9: f9:50:6f:8c:17:17:18:88:6a:d3:95:b3:bb:01:45:50:0a:fc: ba:6b:6c:77:1c:c8:8b:5a:59:1a:07:22:76:d7:ad:5e:90:8a: 9e:5c:bd:ac:77:aa:d1:7f:0f:5e:56:eb:b4:2b:44:6d:13:bb: 39:54:9a:87:14:fa:4d:45:a3:a9:ee:9c:08:a2:ac:b9:91:35: c7:b9:28:e8:45:b3:67:c9:22:61:9e:fa:b2:ca:f7:51:e8:39: 99:bc:6e:cb:88:37:2a:1c:35:2c:44:0e:42:60:a3:d3:a5:9a: 4b:da:1a:36:ca:4c:c6:cb:af:53:87:b9:ad:28:2b:b0:9a:96: d4:1d:2a:fc:71:d1:9a:e2:02:05:9c:af:9f:79:fc:f4:ce:3d: 20:d0:3b:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsEfBPhdXFzgoW1MfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YWZlODllYWQtMzUyMC00YmE2LWJiZjktN2UxZmE4OWJhODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5lpUQQwkXojObTc40/qicF4tZu2pFBOPZBT Kdyyb2PyBTH+qvE0XgBB825NfCvmHfCwCkcJcMgxsuuHrAq0Y44N8Q5l9NFCIgos wNLvRUXh+kIkCfi8LnuBb1FSCMDPGfFFzImEvK69Ewe6DNBBPQybM/V79l5zCfeQ eYtM81oyMv1do+Cix5P2WJ7MHQkdjFggaCSyeTKfBKUEs6LBRyj1Sx5VjR9Ubcbj VBYHr12vdgk2mcVLa3WP53lDzwogBNysPvFnyEGscZLB1DLeH1XG0ZL74Jv1xABB 2bue5lVeba+V2lpwoJ7mBjfUEClTyLNEsP8wbvqzha11SBC2LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFu01cR4G6QJutzPNYazgI8qlK9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYTg3MzQ0YTktNTZlOS0z NGQ0LTkwMTEtY2YwM2JjOTk4MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfzgAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKqPjpgpNNBmpGGhrN13k9oIIWCmJHrhD9cgXS85SHW9a2i9abrE ZJXBZknjFjBti54DFy8jOxOb8L2/CamHaXZLIQrQ6hQ+4M9fSEXMg2yH3Tz/rXZ5 NXP64xDA1clk0IZLxipCCfvTUC+FqflQb4wXFxiIatOVs7sBRVAK/LprbHccyIta WRoHInbXrV6Qip5cvax3qtF/D15W67QrRG0TuzlUmocU+k1Fo6nunAiirLmRNce5 KOhFs2fJImGe+rLK91HoOZm8bsuINyocNSxEDkJgo9OlmkvaGjbKTMbLr1OHua0o K7CaltQdKvxx0ZriAgWcr595/PTOPSDQO0I= -----END CERTIFICATE-----Generated at Fri Sep 5 05:55:42 2025 by rpki-client