$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa File: 98edf705-d568-3a9d-8a83-619621b2b369.roa (raw, json) Hash identifier: UVywkW/3Evlt+Dlp6+q5wEN3rcSiin97y98pSQzYJvg= Subject key identifier: 14:38:46:6B:7D:A6:71:B1:F7:64:B6:9A:38:56:04:2F:3F:87:3D:40 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584ADD66741A17EE98CC1C059B00 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 3423 IP address blocks: 2620:bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:74:1a:17:ee:98:cc:1c:05:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=30108d4f-af4c-4dd9-82b8-0182609420a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:cf:7c:1c:da:53:1c:8c:5e:c0:8e:22:cc: 19:39:2f:59:80:a1:13:18:1a:51:95:5f:8b:bd:e3: ca:79:ea:e9:2d:e1:6d:aa:a5:ba:aa:85:7a:13:a6: d1:25:b4:be:3a:43:cc:dd:a0:6d:d1:67:3c:8e:25: dc:6f:35:16:f8:b2:21:a2:d3:b1:82:5d:66:42:e3: 89:ef:49:c5:fa:18:7e:36:00:40:49:6b:0b:2e:ec: a9:62:c7:75:52:ae:5d:e5:85:63:8a:d0:18:03:d1: ab:4b:31:fb:e0:10:2c:9e:55:ef:3a:de:c2:e8:4f: 27:bc:0c:d8:c3:e6:31:a4:b5:bb:95:89:26:a0:ec: 41:6f:34:6d:69:3d:a0:a2:60:f3:45:9b:58:12:fb: 4a:45:e5:3c:7e:ab:22:20:88:c5:3d:34:50:c8:79: e2:39:c5:32:ff:8c:42:5b:f6:dd:0f:8e:67:21:dc: 67:64:b3:03:1f:e5:37:1f:2d:60:b0:22:f2:b8:9b: d9:82:29:1d:ec:f4:33:09:ae:68:ec:80:90:5f:d0: 0e:72:cf:1d:26:72:ad:d0:32:cf:ae:c8:b9:3e:7a: 51:c7:24:ff:b7:68:82:19:82:87:2d:ce:9d:1d:5e: 4f:99:46:ec:04:81:22:68:96:06:3e:b1:87:d5:01: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:38:46:6B:7D:A6:71:B1:F7:64:B6:9A:38:56:04:2F:3F:87:3D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2620:bf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:27:ac:f7:9b:d2:41:cb:12:7e:76:58:c9:a0:b0:40:ed:02: 69:36:08:6a:03:8a:09:0b:80:cb:fb:54:c6:58:77:e5:9a:91: 54:16:64:a5:b4:e2:3f:b2:ca:d3:d1:42:ad:e3:58:28:e8:97: 66:9c:68:33:97:60:9b:e1:ef:18:d3:72:7a:df:c0:18:94:ca: fa:ee:81:8c:a6:75:56:c4:c0:f2:b0:fa:c7:89:0b:95:10:dc: 89:d1:4e:9c:1e:d9:1e:22:76:71:1a:71:9c:1a:7e:13:71:cc: 29:d6:91:b6:32:2b:ca:76:a2:0b:43:1f:53:25:ce:e2:5b:9f: 86:82:bf:96:a1:3b:d9:a5:3c:8d:50:35:a4:65:09:72:a1:f4: 6d:d5:55:f9:ee:22:67:0f:54:a3:e5:3b:73:68:5e:9a:90:c7: 23:35:b0:92:18:e8:0e:90:bb:f7:2b:a9:9b:19:be:85:61:a8: 73:b1:e2:f9:9c:5d:99:4e:6d:74:aa:38:f9:6c:c8:ae:e2:ab: e8:64:fd:df:d2:0b:0d:31:8e:9a:df:24:d3:c7:9e:6e:fc:98: e7:8a:cb:19:71:11:9b:48:3b:52:97:58:5a:30:28:49:31:4d: 06:dd:b2:b5:3c:c1:2f:78:06:86:62:f8:08:79:92:b3:f7:55: 00:e0:ab:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErdZnQaF+6YzBwFmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MzAxMDhkNGYtYWY0Yy00ZGQ5LTgyYjgtMDE4MjYwOTQyMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu7PfBzaUxyMXsCOIswZOS9ZgKETGBpRlV+L vePKeerpLeFtqqW6qoV6E6bRJbS+OkPM3aBt0Wc8jiXcbzUW+LIhotOxgl1mQuOJ 70nF+hh+NgBASWsLLuypYsd1Uq5d5YVjitAYA9GrSzH74BAsnlXvOt7C6E8nvAzY w+YxpLW7lYkmoOxBbzRtaT2gomDzRZtYEvtKReU8fqsiIIjFPTRQyHniOcUy/4xC W/bdD45nIdxnZLMDH+U3Hy1gsCLyuJvZgikd7PQzCa5o7ICQX9AOcs8dJnKt0DLP rsi5PnpRxyT/t2iCGYKHLc6dHV5PmUbsBIEiaJYGPrGH1QHXXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBQ4Rmt9pnGx92S2mjhWBC8/hz1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvOThlZGY3MDUtZDU2OC0z YTlkLThhODMtNjE5NjIxYjJiMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACcnrPeb0kHLEn52WMmgsEDtAmk2CGoDigkLgMv7VMZYd+WakVQW ZKW04j+yytPRQq3jWCjol2acaDOXYJvh7xjTcnrfwBiUyvrugYymdVbEwPKw+seJ C5UQ3InRTpwe2R4idnEacZwafhNxzCnWkbYyK8p2ogtDH1MlzuJbn4aCv5ahO9ml PI1QNaRlCXKh9G3VVfnuImcPVKPlO3NoXpqQxyM1sJIY6A6Qu/crqZsZvoVhqHOx 4vmcXZlObXSqOPlsyK7iq+hk/d/SCw0xjprfJNPHnm78mOeKyxlxEZtIO1KXWFow KEkxTQbdsrU8wS94BoZi+Ah5krP3VQDgqyE= -----END CERTIFICATE-----Generated at Sun Aug 24 04:35:39 2025 by rpki-client