$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c96326b-67be-3231-ad21-7a0b775750a7.roa File: 8c96326b-67be-3231-ad21-7a0b775750a7.roa (raw, json) Hash identifier: 4X2j6mcIyDb2JIVptf3RUP0ELui4yV5/jFqXr3armkw= Subject key identifier: A0:34:B4:68:B9:57:7D:AF:BF:77:42:08:F4:17:B2:D1:74:73:D1:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3C3A858AF9ABFF498FB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c96326b-67be-3231-ad21-7a0b775750a7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2603:208c::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:c3:a8:58:af:9a:bf:f4:98:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=946085eb-c3f2-468f-a331-6a23f7d7a4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b0:ac:3b:9a:68:22:c0:bb:58:db:3f:87:21: a8:ff:ca:c6:ac:17:b7:14:6f:00:6c:dc:42:1a:6c: 74:4a:81:bf:9d:34:48:19:b0:47:16:b1:b6:e6:35: 57:89:39:49:a3:cd:96:e1:26:6e:e7:8a:f1:ad:2f: d9:8f:38:ce:00:7a:c0:1b:e3:dc:2b:e1:8c:0b:01: 8d:b6:e1:c3:e6:a1:c4:96:26:d9:be:6d:00:65:5b: 54:0b:59:d2:7b:f5:53:f6:77:dd:7d:77:2d:13:ea: df:d1:21:67:37:91:f7:c4:03:48:1d:5c:98:39:cc: fb:56:42:5c:19:97:ca:41:cc:68:65:e7:42:f5:c0: 2d:76:9e:ee:37:b4:18:e5:9d:4a:76:f6:02:8b:a4: 43:f4:64:f3:30:72:f8:f2:7a:0d:41:b6:ab:17:64: b4:8a:d6:7c:67:10:6a:b4:e1:08:89:f7:b1:04:97: d5:7c:39:8c:13:46:19:20:64:b2:2e:ae:45:10:e3: e3:3d:1c:8c:72:e5:8d:15:50:14:d1:36:81:cc:ef: ef:36:c1:68:26:45:fc:08:2a:a0:3b:b3:de:8a:d1: 41:33:5e:1f:12:02:e2:4f:11:ab:83:8c:be:a8:b0: d5:dd:d0:98:fd:2b:ef:79:5b:ce:1b:05:29:43:6f: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:34:B4:68:B9:57:7D:AF:BF:77:42:08:F4:17:B2:D1:74:73:D1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c96326b-67be-3231-ad21-7a0b775750a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:208c::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:70:c4:ec:b0:5f:ff:6a:a5:e2:57:9d:bc:5a:9c:0c:ee:b0: a0:d2:f4:a4:2d:b2:07:2e:61:cb:60:79:68:68:93:18:93:16: cd:c7:64:2b:ca:d8:98:3a:6f:b5:cf:2f:97:ce:8b:da:f1:c9: 29:dc:d5:91:aa:10:9e:84:8b:3d:70:6e:ba:f9:42:6e:fa:23: d6:56:70:6a:9e:82:cf:ba:a5:d6:82:b5:c4:4a:91:5e:16:78: 7f:12:17:48:f5:38:9e:36:fb:34:80:f7:81:c9:64:fc:dd:50: e3:a3:77:c8:53:06:d4:b0:77:2d:d1:ac:46:fc:32:21:07:32: ce:61:a7:37:86:8b:7e:e5:4e:4f:51:dc:09:65:60:05:a9:f6: a8:53:a8:5b:aa:e6:8c:b4:5c:b4:69:63:1b:02:27:88:b1:c3: d7:cc:bc:65:f1:27:e3:0a:cf:73:42:ad:92:02:8f:35:de:6f: c5:76:01:85:da:4c:80:c0:1d:7a:b6:e4:0e:89:dd:9c:2c:3e: 28:4a:aa:46:68:85:ef:4d:be:b9:7d:25:67:ce:6c:cd:3c:4b: f7:1c:76:b1:0a:67:a7:80:2c:7d:e4:bf:81:2f:11:a9:91:03: 9b:5d:ee:6b:f9:98:15:18:f5:0a:b8:f8:4b:ce:04:05:d2:f5: 71:96:7f:6e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErsw8OoWK+av/SY+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTQ2MDg1ZWItYzNmMi00NjhmLWEzMzEtNmEyM2Y3ZDdhNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbCsO5poIsC7WNs/hyGo/8rGrBe3FG8AbNxC Gmx0SoG/nTRIGbBHFrG25jVXiTlJo82W4SZu54rxrS/ZjzjOAHrAG+PcK+GMCwGN tuHD5qHElibZvm0AZVtUC1nSe/VT9nfdfXctE+rf0SFnN5H3xANIHVyYOcz7VkJc GZfKQcxoZedC9cAtdp7uN7QY5Z1KdvYCi6RD9GTzMHL48noNQbarF2S0itZ8ZxBq tOEIifexBJfVfDmME0YZIGSyLq5FEOPjPRyMcuWNFVAU0TaBzO/vNsFoJkX8CCqg O7PeitFBM14fEgLiTxGrg4y+qLDV3dCY/SvveVvOGwUpQ291BQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKA0tGi5V32vv3dCCPQXstF0c9HrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM5NjMyNmItNjdiZS0z MjMxLWFkMjEtN2EwYjc3NTc1MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgjAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGnDE7LBf/2ql4ledvFqcDO6woNL0pC2yBy5hy2B5aGiTGJMWzcdk K8rYmDpvtc8vl86L2vHJKdzVkaoQnoSLPXBuuvlCbvoj1lZwap6Cz7ql1oK1xEqR XhZ4fxIXSPU4njb7NID3gclk/N1Q46N3yFMG1LB3LdGsRvwyIQcyzmGnN4aLfuVO T1HcCWVgBan2qFOoW6rmjLRctGljGwIniLHD18y8ZfEn4wrPc0KtkgKPNd5vxXYB hdpMgMAderbkDondnCw+KEqqRmiF702+uX0lZ85szTxL9xx2sQpnp4AsfeS/gS8R qZEDm13ua/mYFRj1Crj4S84EBdL1cZZ/bg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:20:05 2025 by rpki-client