$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa File: 8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa (raw, json) Hash identifier: 6R1c1Y+ejL4cj9Vdq2VfjHgax8HnoroGJQLBc31Vy5U= Subject key identifier: EB:62:72:A2:02:0B:7A:4E:F7:FB:D2:CD:0B:7D:20:3A:02:2F:30:A9 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584AD23BB2B874415A82472D8C80 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 399728 IP address blocks: 2620:98:e000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b2:b8:74:41:5a:82:47:2d:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=7215ec5f-fa16-4b67-9fa9-8d8b5460ffdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:e4:8b:76:dc:6a:4c:55:04:c0:8d:32:c3: 88:34:bd:f4:df:02:ec:37:12:5c:a8:70:b4:70:41: f4:b9:55:d2:67:e4:8e:a1:96:05:39:07:8c:73:d3: 20:d0:6d:73:41:f8:0b:af:b9:50:6d:be:c3:ff:0d: c4:6b:a8:39:a9:7a:26:63:dd:a8:18:db:24:b9:aa: 12:22:85:4e:a1:5c:a6:4e:d7:22:a6:a2:71:46:fd: 97:df:b2:91:b7:ef:c7:06:20:a5:25:41:bd:5f:cb: cd:50:19:21:85:aa:69:aa:dc:2c:58:b7:f7:61:5b: 81:47:74:9a:8c:74:cc:98:ef:2d:da:17:f1:a4:2c: 3c:76:95:34:f7:0e:e4:45:fc:bb:59:0e:db:26:cb: 7c:4f:75:16:ec:9f:dd:48:88:53:97:ce:d0:d4:4a: 4a:b2:4d:8c:64:ea:25:87:1c:c3:cd:c5:83:22:4a: a1:81:0f:31:0c:ae:a8:5a:9e:cc:49:c7:16:c9:84: a6:40:8b:6e:55:e9:60:23:34:7d:c6:3d:9d:9d:fe: 2a:61:88:0d:60:e3:ce:9e:70:9c:9a:3c:9e:fa:61: fe:a3:51:bd:46:21:a0:2d:f0:66:06:80:0c:fb:7d: 0b:55:67:be:94:af:51:2a:dc:4d:d5:22:bd:a8:9f: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:62:72:A2:02:0B:7A:4E:F7:FB:D2:CD:0B:7D:20:3A:02:2F:30:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:f4:e3:78:f8:5c:b2:33:da:a4:7c:cd:b8:77:18:28:f2:8b: 25:2d:03:da:a9:1d:37:3c:d4:8d:f2:60:a2:93:45:c7:77:98: 5a:f8:8b:e6:41:ea:b2:28:ce:21:3b:03:c3:ea:b3:0e:f0:a4: 09:ec:d2:bc:bc:20:78:8e:b4:23:57:52:76:7d:db:83:7e:99: f4:8e:03:06:6c:97:8e:d1:e9:64:db:0a:02:bc:28:95:dc:e0: 32:35:20:0c:9c:a3:7f:2d:f5:61:fe:32:8e:cc:e0:f0:03:3b: 2e:c4:b5:76:2c:6b:50:93:bd:bb:da:40:b3:c4:a0:76:2e:18: 04:ca:74:72:fe:89:53:3f:f5:ee:52:59:e7:7b:b8:31:e1:f7: 5e:04:3e:ba:05:b7:cb:aa:36:36:7d:04:35:59:d0:1c:bf:fb: 77:02:41:4d:2a:f5:1e:a6:a2:01:5e:79:3e:26:55:85:ee:e3: a8:17:5f:1e:84:e6:df:62:87:a2:1e:24:54:fc:1e:58:1f:ea: c8:37:32:0f:36:bc:45:d4:e7:b9:8d:4c:63:77:b1:fb:57:09: 6e:c4:2a:07:77:91:5e:88:06:ca:8c:c3:5c:5f:4d:3a:11:c2: 6a:96:d5:a2:aa:99:27:33:fd:d3:7f:48:39:cf:80:6a:7c:16: 28:3c:bc:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSO7K4dEFagkctjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NzIxNWVjNWYtZmExNi00YjY3LTlmYTktOGQ4YjU0NjBmZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn/ki3bcakxVBMCNMsOINL303wLsNxJcqHC0 cEH0uVXSZ+SOoZYFOQeMc9Mg0G1zQfgLr7lQbb7D/w3Ea6g5qXomY92oGNskuaoS IoVOoVymTtcipqJxRv2X37KRt+/HBiClJUG9X8vNUBkhhappqtwsWLf3YVuBR3Sa jHTMmO8t2hfxpCw8dpU09w7kRfy7WQ7bJst8T3UW7J/dSIhTl87Q1EpKsk2MZOol hxzDzcWDIkqhgQ8xDK6oWp7MSccWyYSmQItuVelgIzR9xj2dnf4qYYgNYOPOnnCc mjye+mH+o1G9RiGgLfBmBoAM+30LVWe+lK9RKtxN1SK9qJ/LsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOticqICC3pO9/vSzQt9IDoCLzCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvOGU5OWY4ZmUtMWRiZi0z MTBmLWE1NjMtY2RiM2M2ZDA4ZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAmOAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKz043j4XLIz2qR8zbh3GCjyiyUtA9qpHTc81I3yYKKTRcd3mFr4 i+ZB6rIoziE7A8Pqsw7wpAns0ry8IHiOtCNXUnZ924N+mfSOAwZsl47R6WTbCgK8 KJXc4DI1IAyco38t9WH+Mo7M4PADOy7EtXYsa1CTvbvaQLPEoHYuGATKdHL+iVM/ 9e5SWed7uDHh914EProFt8uqNjZ9BDVZ0By/+3cCQU0q9R6mogFeeT4mVYXu46gX Xx6E5t9ih6IeJFT8Hlgf6sg3Mg82vEXU57mNTGN3sftXCW7EKgd3kV6IBsqMw1xf TToRwmqW1aKqmScz/dN/SDnPgGp8Fig8vGs= -----END CERTIFICATE-----Generated at Sun Aug 24 03:58:14 2025 by rpki-client