$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/baae2628-02ca-3879-87d5-5af017ec5583.roa File: baae2628-02ca-3879-87d5-5af017ec5583.roa (raw, json) Hash identifier: Cc5p5eTN/YOD+NIUqfZI4tJeE7b3+Wuf97vWFIR2+hc= Subject key identifier: E8:D6:0B:8A:DC:DE:21:05:24:06:C9:C8:6C:76:54:5A:F3:92:F9:A2 Certificate issuer: /CN=c892586d-1638-476b-994e-499f179da6da Certificate serial: 010D0C9F4328584AC9DB9D29B1D5CB9C8367C240 Authority key identifier: 8F:B6:8E:83:59:9A:2D:D4:55:3E:77:6A:47:0B:49:46:5A:59:24:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/baae2628-02ca-3879-87d5-5af017ec5583.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 177 IP address blocks: 2607:f018:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:9d:29:b1:d5:cb:9c:83:67:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c892586d-1638-476b-994e-499f179da6da Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=38ad5a70-b21d-4b9f-bbc9-5722b5046bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:f1:73:85:d9:c4:53:b1:bf:52:f2:03:f8: 1a:85:2e:60:76:ff:6a:39:ed:9f:35:6c:c3:61:20: af:e2:f1:9c:f8:0f:b1:b7:2e:b3:75:ae:f8:62:23: 29:45:74:c5:a6:9d:bd:c7:1f:1f:6b:95:c0:c8:44: 63:d3:04:dc:fb:22:0b:7f:0b:75:63:5d:6f:19:6b: 96:44:2c:0b:d7:50:a4:29:13:68:0d:89:ea:fb:8d: 9f:57:59:10:e7:e7:09:24:af:7c:09:f2:ba:45:d9: df:48:7d:03:76:3a:a0:f5:5c:19:39:c6:be:1a:cd: 9a:42:d0:3c:b2:0e:fd:0e:10:a2:48:f0:2b:b8:83: 03:5c:52:51:02:dc:ef:88:3d:c9:40:f3:ca:ae:e0: ba:7a:8e:ac:3f:f1:ab:bb:50:39:b3:33:66:ba:cf: 04:1e:f5:57:79:af:5d:cf:9b:2f:32:30:0d:6c:91: fb:d5:11:1e:a5:ab:57:7b:ff:dc:2e:4e:a8:cb:b5: d5:27:b5:60:bf:29:19:d0:78:01:01:ab:28:52:08: 41:b6:5a:2b:88:e3:c9:58:ab:3e:94:63:d5:2c:38: 67:be:49:f3:e6:7a:04:ad:a3:9b:95:d7:4f:b8:95: f9:2f:b7:42:12:06:d0:e3:71:1b:19:4a:c4:ee:97: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D6:0B:8A:DC:DE:21:05:24:06:C9:C8:6C:76:54:5A:F3:92:F9:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/baae2628-02ca-3879-87d5-5af017ec5583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.crl X509v3 Authority Key Identifier: keyid:8F:B6:8E:83:59:9A:2D:D4:55:3E:77:6A:47:0B:49:46:5A:59:24:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer sbgp-ipAddrBlock: critical IPv6: 2607:f018:fffe::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:73:c0:41:17:c7:82:c8:1f:5d:31:23:48:56:cd:11:fd:ec: 91:33:fa:33:75:4d:de:1e:12:5a:2f:1c:a7:ea:1c:79:61:30: 70:44:35:83:92:d7:06:da:43:88:4d:24:a0:19:43:9b:33:0a: bc:c2:70:ef:7c:75:01:12:8f:1d:eb:b1:9a:83:3d:11:30:14: 1d:ef:82:68:96:8f:88:38:ad:8a:b3:c1:f6:e9:90:df:d5:37: 43:2b:53:6c:c0:a7:9d:0e:61:8d:b8:05:c7:d9:26:51:3b:c6: 8d:b9:a4:35:6f:94:b4:9d:8f:a1:bb:a3:38:a0:93:dd:be:56: a7:e2:83:b6:f4:87:23:24:d9:6b:a6:8a:37:53:37:1e:47:8c: 77:a8:0a:59:22:ea:ef:17:96:ca:5d:88:21:f5:c7:80:e9:58: 1c:49:78:d2:11:6c:3d:4b:ff:37:7b:9b:7c:6f:ca:89:c2:2b: ee:1f:a7:f9:9f:cc:76:05:61:a0:2a:46:62:c7:10:21:11:92: b4:b0:60:30:c5:b5:ec:de:18:66:bc:ff:a3:b8:08:57:86:be: 3e:ba:f2:d8:d5:80:92:00:08:58:22:ee:42:70:a1:a3:c0:c1: c9:ba:e8:21:25:7b:f8:c3:a0:98:76:3f:96:f9:83:7c:b2:1a: c2:11:5c:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErJ250psdXLnINnwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5MjU4NmQtMTYzOC00NzZiLTk5NGUtNDk5ZjE3OWRh NmRhMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk MzhhZDVhNzAtYjIxZC00YjlmLWJiYzktNTcyMmI1MDQ2YmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvjxc4XZxFOxv1LyA/gahS5gdv9qOe2fNWzD YSCv4vGc+A+xty6zda74YiMpRXTFpp29xx8fa5XAyERj0wTc+yILfwt1Y11vGWuW RCwL11CkKRNoDYnq+42fV1kQ5+cJJK98CfK6RdnfSH0Ddjqg9VwZOca+Gs2aQtA8 sg79DhCiSPAruIMDXFJRAtzviD3JQPPKruC6eo6sP/Gru1A5szNmus8EHvVXea9d z5svMjANbJH71REepatXe//cLk6oy7XVJ7VgvykZ0HgBAasoUghBtloriOPJWKs+ lGPVLDhnvknz5noEraOblddPuJX5L7dCEgbQ43EbGUrE7pe11wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOjWC4rc3iEFJAbJyGx2VFrzkvmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODky NTg2ZC0xNjM4LTQ3NmItOTk0ZS00OTlmMTc5ZGE2ZGEvYmFhZTI2MjgtMDJjYS0z ODc5LTg3ZDUtNWFmMDE3ZWM1NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg5MjU4NmQtMTYzOC00NzZiLTk5 NGUtNDk5ZjE3OWRhNmRhL2M4OTI1ODZkLTE2MzgtNDc2Yi05OTRlLTQ5OWYxNzlk YTZkYS5jcmwwHwYDVR0jBBgwFoAUj7aOg1maLdRVPndqRwtJRlpZJBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jODkyNTg2ZC0xNjM4LTQ3NmItOTk0ZS00OTlm MTc5ZGE2ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwGP/+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAJzwEEXx4LIH10xI0hWzRH97JEz+jN1Td4eElovHKfqHHlhMHBE NYOS1wbaQ4hNJKAZQ5szCrzCcO98dQESjx3rsZqDPREwFB3vgmiWj4g4rYqzwfbp kN/VN0MrU2zAp50OYY24BcfZJlE7xo25pDVvlLSdj6G7ozigk92+Vqfig7b0hyMk 2WumijdTNx5HjHeoClki6u8XlspdiCH1x4DpWBxJeNIRbD1L/zd7m3xvyonCK+4f p/mfzHYFYaAqRmLHECERkrSwYDDFtezeGGa8/6O4CFeGvj668tjVgJIACFgi7kJw oaPAwcm66CEle/jDoJh2P5b5g3yyGsIRXIk= -----END CERTIFICATE-----Generated at Wed Aug 20 21:29:21 2025 by rpki-client