$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa File: e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa (raw, json) Hash identifier: BBqWnigBH5MUJrEfasFvHzR8wAkZK9lt4NVGdpCy/Hk= Subject key identifier: 67:AF:09:BF:3C:DF:2D:70:D0:7A:24:B8:52:D0:85:F9:6D:E0:80:29 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584B004BF0C10804A4DB8E308C40 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 394996 IP address blocks: 2604:a880:803::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f0:c1:08:04:a4:db:8e:30:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=333e76cf-b6ce-4c99-9fa0-2f4490e5d839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:86:19:2c:74:b4:57:93:08:8b:24:25:d7:0d: 29:7a:f7:73:c4:63:17:5f:63:7d:e8:ba:85:30:2f: 97:50:a4:2b:d1:3b:54:bd:fd:80:f8:04:c4:7e:ee: 93:28:47:9b:da:fe:17:f7:56:32:3f:a9:98:46:3a: 73:d8:31:66:ef:92:8b:fd:5c:39:ad:1a:b9:b8:72: 5d:38:9f:1c:52:02:dc:65:9e:b9:dc:68:bb:eb:63: 14:27:58:eb:64:b0:92:58:17:9d:55:b4:f4:0d:23: 39:8d:c0:84:55:49:98:ee:14:62:13:36:01:3c:70: c2:f8:e3:90:a7:38:18:c6:8e:02:50:2b:1b:d6:08: 2d:05:dd:bf:81:1b:b4:3c:43:e8:1a:75:cf:ae:21: 2d:77:d6:d1:ef:97:81:fb:b6:52:12:3f:6e:8d:45: 3b:1c:a1:e4:57:52:da:15:19:a0:cc:8e:f7:9f:14: eb:e8:28:40:02:dc:d2:52:42:2e:18:38:9a:fc:ad: 79:25:96:71:d9:c3:df:b3:bf:1c:c8:1b:ea:49:0f: cf:78:c3:ab:3e:9e:ad:61:9c:99:f4:9a:81:c8:63: 7f:f8:5d:5a:0e:7c:e8:21:c7:a8:67:17:e1:d4:b7: 38:95:eb:66:c5:71:96:2c:d1:af:ea:3c:1a:d1:6a: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AF:09:BF:3C:DF:2D:70:D0:7A:24:B8:52:D0:85:F9:6D:E0:80:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv6: 2604:a880:803::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c4:d2:1c:b1:6b:54:45:e9:7d:11:a7:ca:10:c4:dd:95:ac: 09:d9:18:cf:30:51:19:8a:a4:05:7a:db:b3:6a:a5:a7:cd:7c: 37:03:c9:6b:15:8c:ed:80:82:29:cb:b9:13:5f:99:68:7e:cf: 02:47:aa:ac:1e:35:0f:87:07:e6:e0:be:f9:f4:e4:fa:4d:e3: 48:d6:a2:59:a6:3d:72:70:2f:52:e6:a2:6e:d6:52:25:32:87: 3a:d5:96:f1:a0:f8:4f:09:e1:b6:dd:aa:4a:f4:43:7f:2b:81: 0e:8e:43:2d:61:04:41:6b:10:44:71:fe:cb:ee:83:3a:03:75: 5b:62:35:d3:b0:d5:53:0d:56:dd:65:45:ad:d0:18:6e:26:b9: 9c:a6:eb:4e:f5:e4:16:d4:a1:32:62:94:be:f9:82:36:b1:97: 33:99:5d:0c:0f:6c:39:1e:48:67:86:c1:b9:7a:8e:0d:2c:44: a8:2d:cc:cd:8e:36:5d:ca:93:2d:3d:f2:3d:bd:13:89:dd:59: 57:10:57:dd:d7:6f:f5:3f:20:58:d7:56:6c:e5:44:5a:4f:9f: 75:aa:3f:c2:9d:06:8f:0e:5c:18:14:4e:4f:be:d8:f2:66:f4: 44:b1:89:e8:d8:17:24:ad:c2:e5:f4:18:89:6c:c8:aa:f9:9f: 3d:87:e3:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsAS/DBCASk244wjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MzMzZTc2Y2YtYjZjZS00Yzk5LTlmYTAtMmY0NDkwZTVkODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoYZLHS0V5MIiyQl1w0pevdzxGMXX2N96LqF MC+XUKQr0TtUvf2A+ATEfu6TKEeb2v4X91YyP6mYRjpz2DFm75KL/Vw5rRq5uHJd OJ8cUgLcZZ653Gi762MUJ1jrZLCSWBedVbT0DSM5jcCEVUmY7hRiEzYBPHDC+OOQ pzgYxo4CUCsb1ggtBd2/gRu0PEPoGnXPriEtd9bR75eB+7ZSEj9ujUU7HKHkV1La FRmgzI73nxTr6ChAAtzSUkIuGDia/K15JZZx2cPfs78cyBvqSQ/PeMOrPp6tYZyZ 9JqByGN/+F1aDnzoIceoZxfh1Lc4letmxXGWLNGv6jwa0WpP9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGevCb883y1w0HokuFLQhflt4IApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZTJhMWJjNmUtMGMyMi0z MDRmLTg5YjAtNjQzYmQ0NThlZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSogAgD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKHE0hyxa1RF6X0Rp8oQxN2VrAnZGM8wURmKpAV627NqpafNfDcD yWsVjO2AginLuRNfmWh+zwJHqqweNQ+HB+bgvvn05PpN40jWolmmPXJwL1Lmom7W UiUyhzrVlvGg+E8J4bbdqkr0Q38rgQ6OQy1hBEFrEERx/svugzoDdVtiNdOw1VMN Vt1lRa3QGG4muZym60715BbUoTJilL75gjaxlzOZXQwPbDkeSGeGwbl6jg0sRKgt zM2ONl3Kky098j29E4ndWVcQV93Xb/U/IFjXVmzlRFpPn3WqP8KdBo8OXBgUTk++ 2PJm9ESxiejYFyStwuX0GIlsyKr5nz2H40Q= -----END CERTIFICATE-----Generated at Wed Nov 5 00:54:48 2025 by rpki-client