$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b82ce5-eb95-3927-93b9-e4be49875295.roa File: 08b82ce5-eb95-3927-93b9-e4be49875295.roa (raw, json) Hash identifier: NA00JN57p94U0/FnjGh1Z6TDnxuiQ7pQfCe0HH+y4Aw= Subject key identifier: 8F:6F:3C:9E:2F:69:42:04:34:FF:E8:A6:E5:84:80:DE:7D:74:B8:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC89CFD4A43475452F9F20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b82ce5-eb95-3927-93b9-e4be49875295.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 2601:407:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:89:cf:d4:a4:34:75:45:2f:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=aeb4fc6b-81eb-4889-b0ec-5a9ceab9f525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8a:95:f1:ed:a3:3b:d7:5e:fc:38:7e:b5:0e: ee:00:2b:26:8f:ff:fb:9a:04:c1:54:1d:97:00:45: 75:1c:10:86:a0:93:a2:10:ce:2b:ce:fd:eb:5a:9a: a4:38:f0:ee:72:48:b7:07:fb:3f:ad:8f:3f:bf:b6: af:3e:59:7f:f1:dc:2d:d7:b6:6c:cc:14:3b:1b:f3: cb:5b:8d:b1:38:18:e5:a5:4e:a8:33:7d:a1:32:49: ae:96:0e:9d:6c:6e:25:5c:d0:80:87:ba:af:1f:49: 3a:d5:82:29:d9:cf:8d:10:c3:da:2c:94:03:cf:f3: 8f:24:07:b2:72:23:4d:f8:42:bf:00:b1:3b:87:81: c1:c5:89:26:a0:0a:ef:80:24:98:1a:2c:97:1b:d0: d3:ca:4f:d9:7f:4e:08:12:be:b0:d0:68:9a:e9:b1: 07:69:97:31:f9:73:3d:5e:af:26:20:da:a0:59:af: aa:fe:5d:c4:3e:02:18:a2:0a:33:8e:ba:85:22:d0: 1a:13:53:e1:1d:fb:cc:f9:c7:a6:12:20:d4:ca:aa: f6:3b:81:9c:d9:77:e7:32:04:fd:f1:67:27:12:24: 47:26:24:1b:f0:b7:86:ec:ac:61:07:48:03:5a:44: b5:9f:3c:82:39:1b:24:87:71:63:2f:c1:40:aa:04: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:3C:9E:2F:69:42:04:34:FF:E8:A6:E5:84:80:DE:7D:74:B8:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b82ce5-eb95-3927-93b9-e4be49875295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:407:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:15:bd:83:98:25:4f:46:9e:95:70:f9:5c:09:19:60:01:09: f7:df:4e:36:ab:80:5e:81:e4:e3:ee:64:b1:cc:ad:ca:05:99: 7e:d2:51:ea:77:76:57:d2:7c:68:d7:24:44:c8:ca:8d:d3:07: 7c:9a:30:e5:62:72:a8:9b:40:a2:a2:f6:46:3d:92:3b:ac:68: b6:e9:47:cd:98:41:05:15:e6:6a:c7:a3:c6:93:71:83:0a:c4: 47:99:12:61:e6:1c:84:06:52:ab:d7:b0:26:92:10:51:f3:dc: 14:bc:42:8a:33:55:2b:37:89:d5:29:29:82:1d:74:d4:dd:ff: 85:ae:1e:05:ea:b8:4c:01:ba:bf:40:41:fa:99:f4:7d:38:64: f6:72:63:4a:cb:27:6f:1a:d4:d3:f9:8c:e0:40:1d:17:e8:c7: a3:32:44:9f:4e:00:b7:b4:b9:dc:9d:48:fe:cc:56:27:6c:c5: 85:3c:f2:bd:7b:c2:d4:91:34:ee:e3:a8:4f:16:96:48:dd:d9: 74:a5:73:b6:c0:7b:b0:86:5c:f4:f1:2e:09:a8:0d:f3:c0:ca: 4a:3d:c3:8c:77:e1:71:e1:59:39:c6:4e:8a:10:2e:06:1c:32: 9f:27:35:fe:83:e6:d8:c4:b6:29:70:15:0e:35:7a:d9:61:18: 6b:d3:ef:6e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq07InP1KQ0dUUvnyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YWViNGZjNmItODFlYi00ODg5LWIwZWMtNWE5Y2VhYjlmNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4qV8e2jO9de/Dh+tQ7uACsmj//7mgTBVB2X AEV1HBCGoJOiEM4rzv3rWpqkOPDucki3B/s/rY8/v7avPll/8dwt17ZszBQ7G/PL W42xOBjlpU6oM32hMkmulg6dbG4lXNCAh7qvH0k61YIp2c+NEMPaLJQDz/OPJAey ciNN+EK/ALE7h4HBxYkmoArvgCSYGiyXG9DTyk/Zf04IEr6w0Gia6bEHaZcx+XM9 Xq8mINqgWa+q/l3EPgIYogozjrqFItAaE1PhHfvM+cemEiDUyqr2O4Gc2XfnMgT9 8WcnEiRHJiQb8LeG7KxhB0gDWkS1nzyCORskh3FjL8FAqgTzvwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI9vPJ4vaUIENP/opuWEgN59dLhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDhiODJjZTUtZWI5NS0z OTI3LTkzYjktZTRiZTQ5ODc1Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEEB0Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANRW9g5glT0aelXD5XAkZYAEJ999ONquAXoHk4+5kscytygWZftJR 6nd2V9J8aNckRMjKjdMHfJow5WJyqJtAoqL2Rj2SO6xotulHzZhBBRXmasejxpNx gwrER5kSYeYchAZSq9ewJpIQUfPcFLxCijNVKzeJ1Skpgh101N3/ha4eBeq4TAG6 v0BB+pn0fThk9nJjSssnbxrU0/mM4EAdF+jHozJEn04At7S53J1I/sxWJ2zFhTzy vXvC1JE07uOoTxaWSN3ZdKVztsB7sIZc9PEuCagN88DKSj3DjHfhceFZOcZOihAu Bhwynyc1/oPm2MS2KXAVDjV62WEYa9Pvbg== -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:00 2025 by rpki-client