$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8d32e85c-b042-3a2e-b416-c12385b69506.roa File: 8d32e85c-b042-3a2e-b416-c12385b69506.roa (raw, json) Hash identifier: Vw4CLuOvzzyO+84nkQDrgI+Qrt9ibt2NYPMsrW922h0= Subject key identifier: 9D:AC:86:B9:E7:48:7E:9F:88:F4:11:81:5E:F5:77:94:3C:DD:31:74 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584AECC151453E7BADF5312ACF80 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8d32e85c-b042-3a2e-b416-c12385b69506.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 198949 IP address blocks: 2620:147::/36 maxlen: 49 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:51:45:3e:7b:ad:f5:31:2a:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c8d860d4-5ec6-46ef-9430-217f0ec38a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:09:bf:0b:90:87:e2:a0:38:36:ec:ad:1d: 56:28:7d:44:5c:78:4c:5f:50:25:7c:86:1c:67:4d: d6:38:1d:b1:f0:ae:4c:f3:51:27:23:78:77:64:0a: e7:01:0c:4a:73:31:2a:70:bc:b3:95:7e:1c:6c:47: d8:53:58:65:59:d6:89:b8:7d:3e:6a:00:bd:1e:75: 15:04:3f:11:e7:33:b4:c5:11:6a:51:1c:cd:5e:a0: 9e:fd:95:b2:92:fa:aa:eb:c0:da:79:78:69:5d:9c: 94:ea:21:75:28:db:a5:2a:d5:ff:91:65:f0:3e:f8: 85:68:6b:f5:c9:78:f0:1c:63:11:44:8a:0a:1c:52: 80:62:bc:a5:54:3d:19:28:b9:99:95:5a:94:4f:61: 9f:a2:bf:6e:63:9b:7e:c7:04:5a:95:b9:94:1c:a2: 08:22:d6:a5:ee:14:f2:c9:5c:e8:fa:5c:1c:85:c9: f4:df:80:9a:d6:39:a6:9c:ec:90:7a:2e:95:90:10: 09:f0:8f:5d:b7:71:e1:26:c8:02:ec:b9:eb:7c:cb: dc:83:ed:f6:a2:b7:9d:6b:23:86:17:5a:b3:47:74: 9f:3f:08:c8:cd:f4:a2:63:26:fc:08:d1:aa:26:5f: e9:1d:33:c6:3f:b6:df:ec:d2:85:69:dc:43:66:20: 07:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AC:86:B9:E7:48:7E:9F:88:F4:11:81:5E:F5:77:94:3C:DD:31:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8d32e85c-b042-3a2e-b416-c12385b69506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:41:4e:57:89:08:01:09:94:db:6c:f9:9c:f0:f1:1e:58:a0: f4:a9:0f:87:bf:1b:fa:14:73:85:ec:4c:17:88:12:7e:ed:ad: 87:69:ba:4d:05:8d:3c:52:cc:d0:8f:aa:c7:6a:8f:70:97:d8: e9:35:b8:82:3d:6a:ce:31:77:18:c2:47:ef:41:48:64:94:39: c1:73:76:5c:a7:58:09:ee:6a:2e:13:21:60:e4:fa:c1:3b:c6: 5b:e6:82:9a:b9:fc:41:87:78:f4:49:2a:a8:f0:03:6a:c8:17: 81:78:ee:9c:04:1e:bf:4b:1d:ce:d1:9f:80:9a:80:69:d4:4e: 7c:02:d0:3a:f8:48:07:34:c5:8c:c9:9c:58:11:d6:47:86:06: 09:ae:58:c8:d6:19:6d:f8:86:c2:b0:ab:07:ec:b2:be:3e:c5: 55:97:96:07:d2:bf:3e:41:85:c5:ca:ee:5e:ed:a1:35:27:f8: a9:a5:0f:f4:26:0e:77:77:36:b0:67:8a:f7:3a:8b:a2:d3:f0: af:6b:0f:69:67:8e:5f:c8:fe:dd:66:f9:46:65:eb:2a:9b:af: a4:1b:f2:ab:56:bc:8b:dd:e4:1c:63:ed:2d:21:4d:30:d8:8b: 86:9d:55:a3:be:58:5c:27:b4:63:ac:be:f6:f3:02:c0:2d:5f: a1:0b:0f:98 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErswVFFPnut9TEqz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzhkODYwZDQtNWVjNi00NmVmLTk0MzAtMjE3ZjBlYzM4YTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv68JvwuQh+KgODbsrR1WKH1EXHhMX1AlfIYc Z03WOB2x8K5M81EnI3h3ZArnAQxKczEqcLyzlX4cbEfYU1hlWdaJuH0+agC9HnUV BD8R5zO0xRFqURzNXqCe/ZWykvqq68DaeXhpXZyU6iF1KNulKtX/kWXwPviFaGv1 yXjwHGMRRIoKHFKAYrylVD0ZKLmZlVqUT2Gfor9uY5t+xwRalbmUHKIIItal7hTy yVzo+lwchcn034Ca1jmmnOyQei6VkBAJ8I9dt3HhJsgC7LnrfMvcg+32oredayOG F1qzR3SfPwjIzfSiYyb8CNGqJl/pHTPGP7bf7NKFadxDZiAHeQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ2shrnnSH6fiPQRgV71d5Q83TF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvOGQzMmU4NWMtYjA0Mi0z YTJlLWI0MTYtYzEyMzg1YjY5NTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABRwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO0FOV4kIAQmU22z5nPDxHlig9KkPh78b+hRzhexMF4gSfu2th2m6 TQWNPFLM0I+qx2qPcJfY6TW4gj1qzjF3GMJH70FIZJQ5wXN2XKdYCe5qLhMhYOT6 wTvGW+aCmrn8QYd49EkqqPADasgXgXjunAQev0sdztGfgJqAadROfALQOvhIBzTF jMmcWBHWR4YGCa5YyNYZbfiGwrCrB+yyvj7FVZeWB9K/PkGFxcruXu2hNSf4qaUP 9CYOd3c2sGeK9zqLotPwr2sPaWeOX8j+3Wb5RmXrKpuvpBvyq1a8i93kHGPtLSFN MNiLhp1Vo75YXCe0Y6y+9vMCwC1foQsPmA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:28:43 2025 by rpki-client