$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa File: 2689cc5e-73a4-3934-b73d-56b59b54c522.roa (raw, json) Hash identifier: bP+e3OpzqwFJ4y61TKV+bM7wmzPG6zj3aPGb4x+rxZ4= Subject key identifier: 23:6B:E6:10:3B:BD:94:8B:26:52:85:AF:6C:76:F7:09:DE:AB:A9:BD Certificate issuer: /CN=c66b7cab-031d-4c4c-8595-19848efd3058 Certificate serial: 010D0C9F4328584AF0F13A753FFFBD8222B79000 Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 400339 IP address blocks: 2606:ab40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3a:75:3f:ff:bd:82:22:b7:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=fdb30739-327a-4e18-88c1-a259fb6562c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:d4:7f:33:02:f6:cb:96:df:86:97:cf:3f: b4:cd:f8:76:bf:fd:e0:e4:34:9a:f0:2b:db:44:80: e7:49:bf:33:a8:c4:95:f1:d1:29:f3:f1:8b:09:00: cf:5b:d9:42:ae:b5:86:bf:af:83:5a:40:57:88:a8: a4:cd:91:92:03:f6:60:df:04:1d:d1:45:4e:be:03: c1:04:f9:81:ad:e4:e3:d2:b6:33:68:ea:d4:b3:2b: c2:6b:3e:2d:d3:98:8e:50:57:df:f6:b5:df:97:14: 76:eb:e5:8f:3e:25:0f:b4:80:79:97:6c:37:dd:7d: d2:c5:70:31:6b:61:8f:42:8d:06:3c:d1:d3:0a:dc: 87:61:f9:23:c6:4d:4e:9b:f8:f9:b6:1e:5a:a3:a6: c0:85:72:6c:82:15:de:65:e0:91:c6:5c:2b:0a:f7: f1:f6:3a:e0:76:30:db:30:a2:5b:5a:f6:4b:f7:36: e5:b6:91:16:ea:17:79:0e:b9:48:24:80:86:f7:96: b0:d3:4c:9a:51:a8:57:59:26:95:97:60:c0:53:1c: 75:df:b6:9a:6f:89:c0:f9:06:13:04:c1:65:e5:15: a7:e4:4e:b6:42:d6:9f:97:8f:a4:5b:a3:9c:66:a5: 13:b9:93:43:b0:1b:a7:18:7e:0b:39:50:15:0f:69: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6B:E6:10:3B:BD:94:8B:26:52:85:AF:6C:76:F7:09:DE:AB:A9:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl X509v3 Authority Key Identifier: keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer sbgp-ipAddrBlock: critical IPv6: 2606:ab40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8e:13:4e:03:1f:5a:2a:4a:e0:9a:ef:fa:93:0b:43:95:73: 69:0d:0a:84:e5:b8:c4:75:fc:49:81:94:89:1b:b4:36:d6:51: be:e8:20:7b:77:29:bd:dd:8f:52:64:f7:ba:dd:4e:02:84:ef: cb:cc:78:2b:b0:8d:c4:f2:f4:e5:e3:98:ef:f6:9e:fa:f7:60: 0e:44:9d:bc:69:b7:bd:67:21:08:6e:1b:16:19:73:93:fd:93: 5c:3a:46:66:39:4c:92:f5:2d:bf:4b:c8:43:bf:c6:55:7a:45: 6f:7e:a0:b8:7e:7e:17:83:e3:30:20:11:14:d1:5b:b5:73:45: 43:a1:cd:e6:2c:08:44:e1:9d:0d:c5:bb:1b:53:c2:fa:ac:12: 0f:ce:81:b9:c9:e1:b3:39:bd:9d:32:5e:ce:43:25:9a:6f:5b: ca:f7:10:87:2e:ad:0c:7c:06:6d:0d:8c:fd:9b:8b:07:d9:93: 7e:d7:b1:ff:33:c5:42:dc:db:76:ba:ea:4d:3e:cf:bf:82:0e: 89:69:fd:31:44:54:cc:34:9c:bc:b1:e3:25:64:61:6d:84:35: f7:c9:c2:ab:63:5f:b9:d6:8a:65:d2:91:3f:29:0e:76:21:af: 65:e6:91:c1:58:d2:10:ab:cf:34:ab:28:41:19:04:8c:ad:15: f1:02:3c:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErw8Tp1P/+9giK3kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY2YjdjYWItMDMxZC00YzRjLTg1OTUtMTk4NDhlZmQz MDU4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZmRiMzA3MzktMzI3YS00ZTE4LTg4YzEtYTI1OWZiNjU2MmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonfUfzMC9suW34aXzz+0zfh2v/3g5DSa8Cvb RIDnSb8zqMSV8dEp8/GLCQDPW9lCrrWGv6+DWkBXiKikzZGSA/Zg3wQd0UVOvgPB BPmBreTj0rYzaOrUsyvCaz4t05iOUFff9rXflxR26+WPPiUPtIB5l2w33X3SxXAx a2GPQo0GPNHTCtyHYfkjxk1Om/j5th5ao6bAhXJsghXeZeCRxlwrCvfx9jrgdjDb MKJbWvZL9zbltpEW6hd5DrlIJICG95aw00yaUahXWSaVl2DAUxx137aab4nA+QYT BMFl5RWn5E62Qtafl4+kW6OcZqUTuZNDsBunGH4LOVAVD2nMSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCNr5hA7vZSLJlKFr2x29wneq6m9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZi N2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0OGVmZDMwNTgvMjY4OWNjNWUtNzNhNC0z OTM0LWI3M2QtNTZiNTliNTRjNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY2YjdjYWItMDMxZC00YzRjLTg1 OTUtMTk4NDhlZmQzMDU4L2M2NmI3Y2FiLTAzMWQtNGM0Yy04NTk1LTE5ODQ4ZWZk MzA1OC5jcmwwHwYDVR0jBBgwFoAUt8UCrE3muMdpydX2BPcapRRIdkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZiN2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0 OGVmZDMwNTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgarQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWjhNOAx9aKkrgmu/6kwtDlXNpDQqE5bjEdfxJgZSJG7Q21lG+6CB7 dym93Y9SZPe63U4ChO/LzHgrsI3E8vTl45jv9p7692AORJ28abe9ZyEIbhsWGXOT /ZNcOkZmOUyS9S2/S8hDv8ZVekVvfqC4fn4Xg+MwIBEU0Vu1c0VDoc3mLAhE4Z0N xbsbU8L6rBIPzoG5yeGzOb2dMl7OQyWab1vK9xCHLq0MfAZtDYz9m4sH2ZN+17H/ M8VC3Nt2uupNPs+/gg6Jaf0xRFTMNJy8seMlZGFthDX3ycKrY1+51opl0pE/KQ52 Ia9l5pHBWNIQq880qyhBGQSMrRXxAjzm -----END CERTIFICATE-----Generated at Wed Nov 5 19:15:53 2025 by rpki-client