$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa File: 2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa (raw, json) Hash identifier: 2pZpL0aCRkCN3GhxzCYIyNQ5BVKg4p/+41YMO7db72E= Subject key identifier: E6:16:D3:05:73:2E:45:75:A5:1D:CA:16:DD:E1:C3:CE:5F:C9:6D:A7 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584AA160E25B563BF766B0FBFD00 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 46687 IP address blocks: 2606:e280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e2:5b:56:3b:f7:66:b0:fb:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=f05377bd-ab13-4a13-928e-6d6e5de97223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:45:a0:ba:54:2e:5c:a3:d2:14:0d:0f:1b: 45:c0:51:32:7a:22:c3:39:1b:89:a7:f4:ef:93:69: 63:29:6b:70:0f:05:e6:6b:7e:8e:77:5b:09:4e:50: 1c:45:67:b5:f7:28:46:09:69:a8:f2:f4:c5:f2:65: 2b:8c:a1:72:2e:a8:f2:da:e6:a2:68:ef:b5:4f:40: ef:2d:17:27:17:75:74:2a:59:71:a8:7d:1b:a4:db: 45:04:a4:70:d1:14:87:af:d2:46:8b:23:d2:73:09: 2c:f6:fe:9a:f3:41:2b:26:57:32:0b:8e:61:2d:35: b7:24:95:fc:4d:31:c0:c0:d3:76:ca:e2:c2:fa:0e: 9b:2b:36:a5:12:64:df:22:92:aa:ad:2f:d3:1d:18: eb:28:db:79:c1:6e:e6:10:ce:63:1f:9c:59:3b:19: 16:80:e7:a6:1d:8c:22:df:f6:35:47:d3:20:8a:e5: 0e:52:4c:78:4d:7c:01:5a:5d:fc:ba:22:33:9a:e3: bf:68:4b:d3:21:0a:7a:33:fc:b6:f5:35:4c:94:9d: 0f:3e:80:71:96:94:c2:90:95:b4:0a:be:db:76:8e: 47:6e:a6:94:fa:a8:a3:4a:cf:ae:63:73:55:ce:25: ee:c6:65:35:65:be:97:e0:e4:33:d2:de:4d:63:d6: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:16:D3:05:73:2E:45:75:A5:1D:CA:16:DD:E1:C3:CE:5F:C9:6D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv6: 2606:e280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:68:5d:c1:46:b9:5a:b7:11:db:0a:80:36:94:5c:8a:dd:e4: 92:70:b8:77:25:a3:d3:4c:55:91:73:3b:4c:fe:83:cb:7a:22: b3:6b:9c:ce:cc:97:be:d3:be:2c:27:a3:77:94:af:25:29:d6: b0:0e:5a:84:8a:32:b8:7b:1a:42:03:8a:4b:69:52:03:7b:55: eb:c1:2b:f6:a0:b4:80:7d:2c:c9:9b:73:e9:03:39:4b:1e:4d: ec:80:d5:6f:c4:6e:fb:1e:8a:48:db:88:46:e8:00:76:bd:20: 41:73:0a:20:04:84:21:e6:43:a5:2a:17:fb:fc:4b:30:0a:cd: 60:8c:b3:92:09:df:20:b8:eb:d5:36:98:da:b5:23:a1:82:ea: 5f:d3:e8:6d:9c:2a:b1:79:eb:48:7b:1a:f7:ee:57:01:91:7d: 96:66:00:6b:7c:86:7e:b9:53:3d:3a:ab:f2:3a:7e:81:c3:4d: d0:a7:d1:5d:a2:87:0b:02:5b:c3:36:60:b3:ab:fb:27:5b:fa: 3e:dd:1d:57:9c:2f:49:f2:18:34:52:4a:2b:6e:ac:5d:d7:24: 4b:31:e1:41:65:f7:11:cf:9d:0b:fd:5c:f7:8b:7d:99:8c:e5: 66:23:ac:c7:a0:8f:21:8d:2c:1f:30:cd:16:9a:43:8f:a8:d5: 98:41:52:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqhYOJbVjv3ZrD7/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZjA1Mzc3YmQtYWIxMy00YTEzLTkyOGUtNmQ2ZTVkZTk3MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunpFoLpULlyj0hQNDxtFwFEyeiLDORuJp/Tv k2ljKWtwDwXma36Od1sJTlAcRWe19yhGCWmo8vTF8mUrjKFyLqjy2uaiaO+1T0Dv LRcnF3V0KllxqH0bpNtFBKRw0RSHr9JGiyPScwks9v6a80ErJlcyC45hLTW3JJX8 TTHAwNN2yuLC+g6bKzalEmTfIpKqrS/THRjrKNt5wW7mEM5jH5xZOxkWgOemHYwi 3/Y1R9MgiuUOUkx4TXwBWl38uiIzmuO/aEvTIQp6M/y29TVMlJ0PPoBxlpTCkJW0 Cr7bdo5HbqaU+qijSs+uY3NVziXuxmU1Zb6X4OQz0t5NY9ZT8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOYW0wVzLkV1pR3KFt3hw85fyW2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMjIxOWE1ZGQtZDY4NS0z ZTVmLWFkYTMtYTNlN2EwNWYyODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbigDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDaF3BRrlatxHbCoA2lFyK3eSScLh3JaPTTFWRcztM/oPLeiKza5zO zJe+074sJ6N3lK8lKdawDlqEijK4expCA4pLaVIDe1XrwSv2oLSAfSzJm3PpAzlL Hk3sgNVvxG77HopI24hG6AB2vSBBcwogBIQh5kOlKhf7/EswCs1gjLOSCd8guOvV NpjatSOhgupf0+htnCqxeetIexr37lcBkX2WZgBrfIZ+uVM9OqvyOn6Bw03Qp9Fd oocLAlvDNmCzq/snW/o+3R1XnC9J8hg0Ukorbqxd1yRLMeFBZfcRz50L/Vz3i32Z jOVmI6zHoI8hjSwfMM0WmkOPqNWYQVJF -----END CERTIFICATE-----Generated at Sat Aug 9 20:35:32 2025 by rpki-client