$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa File: 85899aac-123c-38d4-9753-27300cdd4d92.roa (raw, json) Hash identifier: ukKzwQlf6kccIts2VVLzmDacZpR6p+onImuMsXdMubY= Subject key identifier: 8F:CE:C6:53:0B:01:A1:B2:8F:13:FC:EC:C1:87:A9:89:4D:78:D5:96 Certificate issuer: /CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28 Certificate serial: 010D0C9F4328584AA85BBBDBF2C294016D8D63C0 Authority key identifier: FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 34 IP address blocks: 2604:580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:bb:db:f2:c2:94:01:6d:8d:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=6cae4db6-eda7-4bb7-919d-575b2c39bdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4f:f5:9f:4f:37:30:28:57:93:1e:1f:cd:3f: ed:28:04:15:d1:1f:5c:71:0f:dc:85:88:2a:ec:76: 87:35:ea:9d:0b:a7:b6:58:51:ae:14:19:92:00:10: 69:4a:b8:fb:c2:cc:af:6c:cb:56:5c:13:59:f5:be: 1a:18:f0:0d:76:33:40:02:5b:74:d6:ce:dd:41:08: 91:00:3b:99:2e:c9:5f:2c:6b:5c:ee:c1:23:8f:39: 85:f4:0f:57:d8:8c:66:c8:48:56:a7:e8:db:87:0a: 87:48:e0:40:ef:99:23:8b:c2:c5:28:3f:66:39:83: ff:89:6b:6a:17:dd:eb:08:90:69:e2:77:05:3a:00: b5:cd:95:76:c3:d9:ac:b2:91:29:24:2a:e5:c3:e9: f8:3b:27:43:7e:4c:73:9a:46:46:e9:eb:89:01:ee: c9:7b:64:bc:99:b9:fc:69:d0:27:33:88:f4:a2:12: 47:5c:b2:f7:b3:59:8e:bb:39:10:40:91:e4:cd:6c: 2a:40:e0:d8:22:58:1b:a2:87:6a:f9:24:69:04:14: 28:c4:b0:5a:42:01:0c:37:a5:7c:a7:28:ca:30:4d: 5d:79:45:9b:09:3e:b6:69:f0:45:c5:68:52:eb:1f: f6:b4:ca:5f:91:5f:68:09:b9:52:71:e5:ce:3b:47: e0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CE:C6:53:0B:01:A1:B2:8F:13:FC:EC:C1:87:A9:89:4D:78:D5:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.crl X509v3 Authority Key Identifier: keyid:FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer sbgp-ipAddrBlock: critical IPv6: 2604:580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:72:4a:58:49:11:6a:9e:e0:9e:58:9b:03:d1:79:c5:91:7e: 3a:2f:11:c6:d6:4f:3b:2d:f9:fd:5b:0f:80:7a:12:15:a9:28: 27:64:b0:c4:9a:4c:0a:4b:73:56:04:e4:79:7f:24:ac:9f:bb: 06:53:d2:ff:7f:82:ef:34:7d:34:a6:3b:cb:e2:22:68:ac:d6: 59:a0:37:16:92:1f:3c:00:5e:dd:12:c9:a3:15:e4:54:69:f5: 65:61:58:8c:c7:17:1f:b1:91:1c:14:44:c4:3e:43:d1:c2:f8: df:b5:60:6f:5e:be:1d:d1:da:4d:1a:4c:10:bc:e8:16:bd:94: 23:38:fb:0a:30:6a:c0:3a:cc:eb:5f:9f:d9:8e:51:e3:a9:a1: e4:8e:b6:e2:dc:12:90:08:32:00:7d:c5:0f:01:3c:90:cb:2d: e0:29:a7:10:70:98:5e:8e:8d:73:ee:6d:61:51:af:cf:4c:ab: 97:f0:8b:3d:48:42:7e:f1:ca:68:7c:4d:b4:b1:b7:44:e2:a9: a2:7e:8e:8f:b6:31:69:21:05:86:51:fc:0c:ae:56:d2:38:0b: da:7a:7d:9f:3b:ea:1d:19:6c:52:83:3f:2a:32:af:d5:73:de: 8e:e1:c5:0b:fa:f6:0f:02:57:70:20:9b:ed:bd:d0:da:2a:d8: e4:ea:fd:ef -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqoW7vb8sKUAW2NY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4MWZhNWYtM2Y2ZC00N2RiLWE1MDQtYWNlYjU0Zjkz YzI4MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk NmNhZTRkYjYtZWRhNy00YmI3LTkxOWQtNTc1YjJjMzliZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE/1n083MChXkx4fzT/tKAQV0R9ccQ/chYgq 7HaHNeqdC6e2WFGuFBmSABBpSrj7wsyvbMtWXBNZ9b4aGPANdjNAAlt01s7dQQiR ADuZLslfLGtc7sEjjzmF9A9X2IxmyEhWp+jbhwqHSOBA75kji8LFKD9mOYP/iWtq F93rCJBp4ncFOgC1zZV2w9msspEpJCrlw+n4OydDfkxzmkZG6euJAe7Je2S8mbn8 adAnM4j0ohJHXLL3s1mOuzkQQJHkzWwqQODYIlgboodq+SRpBBQoxLBaQgEMN6V8 pyjKME1deUWbCT62afBFxWhS6x/2tMpfkV9oCblSceXOO0fg8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI/OxlMLAaGyjxP87MGHqYlNeNWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80Yzgx ZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2ViNTRmOTNjMjgvODU4OTlhYWMtMTIzYy0z OGQ0LTk3NTMtMjczMDBjZGQ0ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGM4MWZhNWYtM2Y2ZC00N2RiLWE1 MDQtYWNlYjU0ZjkzYzI4LzRjODFmYTVmLTNmNmQtNDdkYi1hNTA0LWFjZWI1NGY5 M2MyOC5jcmwwHwYDVR0jBBgwFoAU/1LVSdJXV4EJSRX8DxjPYefX6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzgxZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2Vi NTRmOTNjMjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMckpYSRFqnuCeWJsD0XnFkX46LxHG1k87Lfn9Ww+AehIVqSgnZLDE mkwKS3NWBOR5fySsn7sGU9L/f4LvNH00pjvL4iJorNZZoDcWkh88AF7dEsmjFeRU afVlYViMxxcfsZEcFETEPkPRwvjftWBvXr4d0dpNGkwQvOgWvZQjOPsKMGrAOszr X5/ZjlHjqaHkjrbi3BKQCDIAfcUPATyQyy3gKacQcJhejo1z7m1hUa/PTKuX8Is9 SEJ+8cpofE20sbdE4qmifo6PtjFpIQWGUfwMrlbSOAvaen2fO+odGWxSgz8qMq/V c96O4cUL+vYPAldwIJvtvdDaKtjk6v3v -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:27 2025 by rpki-client