$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa File: cc57b996-1472-3501-b7aa-16621af1a48c.roa (raw, json) Hash identifier: A/wC4UqUqXt+eHCE6nPZwCA2yUgAfVTI9EweATn0fpU= Subject key identifier: D5:41:DD:F9:A6:43:A8:06:A4:1F:C0:98:BE:76:BC:49:0A:AE:32:36 Certificate issuer: /CN=1c6e98c6-c317-4bae-8a4b-23e26037e1f1 Certificate serial: 010D0C9F4328584AAE4D2E155DC4331E8EA83800 Authority key identifier: 03:E5:92:7A:88:59:9A:F7:18:56:4F:32:FC:04:9D:9D:6E:45:4A:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa Signing time: Tue 29 Jul 2025 16:06:55 +0000 ROA not before: Tue 29 Jul 2025 16:06:55 +0000 ROA not after: Mon 27 Oct 2025 16:06:55 +0000 asID: 393468 IP address blocks: 2620:135:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ae:4d:2e:15:5d:c4:33:1e:8e:a8:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6e98c6-c317-4bae-8a4b-23e26037e1f1 Validity Not Before: Jul 29 16:06:55 2025 GMT Not After : Oct 27 16:06:55 2025 GMT Subject: CN=6ac1b852-e8b1-47e4-85ec-3291217b8dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:84:75:65:a6:7b:4b:2d:0d:9b:de:9c:02:d8: 64:3c:5d:d1:72:27:f8:d0:0e:49:77:bc:f7:b3:27: b5:f7:53:f8:93:f5:46:0c:95:ba:5b:fc:2a:e9:c0: fa:22:5f:0e:84:01:1d:37:c0:54:ec:dc:87:52:c5: 0f:de:5d:88:3b:d3:72:8c:22:28:6e:3b:79:57:e0: a7:51:63:18:8d:de:49:b4:f6:62:57:7a:01:97:38: 75:b5:fb:ec:61:81:9c:6d:5d:15:a9:e1:e9:55:a9: b9:25:f6:02:7c:c4:48:ee:45:d3:11:5c:88:21:4e: 46:a1:87:26:44:bd:c9:88:2b:70:86:08:54:f6:85: e1:41:40:1e:84:7c:6b:e5:8a:3f:d6:34:48:9d:e4: 44:6c:5e:81:9c:23:44:72:c0:a1:aa:68:88:68:b7: 6c:f6:eb:28:c4:a3:14:ca:a7:a3:1e:cc:ac:c3:e1: 51:51:c8:26:32:e3:61:e3:64:27:c8:d5:e0:3b:23: db:8f:8b:0d:10:0f:58:13:95:3e:c3:39:20:9e:ca: e2:8a:fa:e9:b4:2b:0f:4b:bd:ab:8a:a9:fd:14:5b: 20:4b:bc:5e:25:99:49:78:35:5a:db:af:84:b6:03: b6:8a:39:8e:cb:8a:b7:fd:64:83:d6:71:c7:1c:02: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:41:DD:F9:A6:43:A8:06:A4:1F:C0:98:BE:76:BC:49:0A:AE:32:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.crl X509v3 Authority Key Identifier: keyid:03:E5:92:7A:88:59:9A:F7:18:56:4F:32:FC:04:9D:9D:6E:45:4A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:58:18:d8:02:b4:fe:7b:c6:00:47:3b:47:ec:bd:44:b7:f0: 0b:63:4b:11:69:f8:76:d2:03:8a:93:ae:00:34:c0:df:61:77: 34:23:bf:20:93:c2:6b:67:bc:4c:09:21:5f:4b:cd:4e:db:da: 15:46:45:9f:d5:c2:6f:2c:8b:45:2e:51:17:09:c1:97:4f:a3: 5e:97:1d:c8:8e:c4:57:3e:65:8c:11:4a:f1:4f:de:c3:97:5a: 34:45:3d:99:ce:ca:04:41:43:a2:50:45:07:86:03:d6:38:a6: 15:0a:57:98:47:53:38:33:7a:93:f6:e8:32:8b:6f:7f:dd:3f: 5b:34:6a:b5:72:55:d4:60:4b:4c:5e:a0:1a:ce:0a:b7:80:85: fe:cc:ff:d3:b8:d6:af:23:d5:3d:e7:69:79:9f:e5:74:9d:6d: c2:a2:20:85:86:ec:95:4c:40:52:61:da:2b:e0:64:38:66:87: 78:1b:13:f0:7a:d9:6a:bd:00:93:c6:2b:b5:c2:e0:0b:72:36: fb:d4:e2:93:87:6b:25:45:47:0b:24:3a:8b:8a:1c:06:2c:89: 8c:52:95:f0:99:95:36:1a:5d:87:6b:11:1a:87:79:13:1a:b4: be:51:c3:55:18:54:20:7b:3e:d6:b3:4a:c7:62:f2:f5:b7:0c: 22:ec:b2:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEquTS4VXcQzHo6oOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM2ZTk4YzYtYzMxNy00YmFlLThhNGItMjNlMjYwMzdl MWYxMB4XDTI1MDcyOTE2MDY1NVoXDTI1MTAyNzE2MDY1NVowLzEtMCsGA1UEAxMk NmFjMWI4NTItZThiMS00N2U0LTg1ZWMtMzI5MTIxN2I4ZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4R1ZaZ7Sy0Nm96cAthkPF3Rcif40A5Jd7z3 sye191P4k/VGDJW6W/wq6cD6Il8OhAEdN8BU7NyHUsUP3l2IO9NyjCIobjt5V+Cn UWMYjd5JtPZiV3oBlzh1tfvsYYGcbV0VqeHpVam5JfYCfMRI7kXTEVyIIU5GoYcm RL3JiCtwhghU9oXhQUAehHxr5Yo/1jRIneREbF6BnCNEcsChqmiIaLds9usoxKMU yqejHsysw+FRUcgmMuNh42QnyNXgOyPbj4sNEA9YE5U+wzkgnsriivrptCsPS72r iqn9FFsgS7xeJZlJeDVa26+EtgO2ijmOy4q3/WSD1nHHHAIkVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNVB3fmmQ6gGpB/AmL52vEkKrjI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYzZl OThjNi1jMzE3LTRiYWUtOGE0Yi0yM2UyNjAzN2UxZjEvY2M1N2I5OTYtMTQ3Mi0z NTAxLWI3YWEtMTY2MjFhZjFhNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWM2ZTk4YzYtYzMxNy00YmFlLThh NGItMjNlMjYwMzdlMWYxLzFjNmU5OGM2LWMzMTctNGJhZS04YTRiLTIzZTI2MDM3 ZTFmMS5jcmwwHwYDVR0jBBgwFoAUA+WSeohZmvcYVk8y/ASdnW5FSvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYzZlOThjNi1jMzE3LTRiYWUtOGE0Yi0yM2Uy NjAzN2UxZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABNfAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACRYGNgCtP57xgBHO0fsvUS38AtjSxFp+HbSA4qTrgA0wN9hdzQj vyCTwmtnvEwJIV9LzU7b2hVGRZ/Vwm8si0UuURcJwZdPo16XHciOxFc+ZYwRSvFP 3sOXWjRFPZnOygRBQ6JQRQeGA9Y4phUKV5hHUzgzepP26DKLb3/dP1s0arVyVdRg S0xeoBrOCreAhf7M/9O41q8j1T3naXmf5XSdbcKiIIWG7JVMQFJh2ivgZDhmh3gb E/B62Wq9AJPGK7XC4AtyNvvU4pOHayVFRwskOouKHAYsiYxSlfCZlTYaXYdrERqH eRMatL5Rw1UYVCB7PtazSsdi8vW3DCLsslM= -----END CERTIFICATE-----Generated at Sun Aug 10 10:40:56 2025 by rpki-client