$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/78d8f39e-b80e-3c01-9f15-e3f5d7f01399.roa File: 78d8f39e-b80e-3c01-9f15-e3f5d7f01399.roa (raw, json) Hash identifier: DJCpfkxYhj8uFF4mn/8zVydH53r8ZLVBLfGjKF+iy50= Subject key identifier: 35:7B:92:01:FB:74:41:A4:F2:E5:3B:8C:50:0B:86:F4:E4:64:0B:A0 Certificate issuer: /CN=aace0f29-5693-492a-b1c9-a3bbc6ecf694 Certificate serial: 010D0C9F4328584ABD4BA53F3CF71103DFF86F80 Authority key identifier: AA:89:0A:A0:B6:05:79:8B:C3:84:5D:43:D2:25:ED:B5:D9:71:7E:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/78d8f39e-b80e-3c01-9f15-e3f5d7f01399.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 29773 IP address blocks: 2620:22:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/aace0f29-5693-492a-b1c9-a3bbc6ecf694.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/aace0f29-5693-492a-b1c9-a3bbc6ecf694.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a5:3f:3c:f7:11:03:df:f8:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aace0f29-5693-492a-b1c9-a3bbc6ecf694 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=e47d2fb9-07a1-4f13-9ef4-b035a4ec5b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e7:a3:30:7b:22:6e:1d:58:a6:5e:f8:f5:e0: 26:eb:9f:ce:37:f5:b0:32:3a:ba:db:5b:38:a6:b9: 84:3f:b0:75:5a:28:d5:e2:69:55:52:78:2c:bf:07: 70:a1:18:ed:13:67:59:b1:1b:49:9e:43:f7:1e:74: d9:78:e3:b2:bf:0d:27:c5:82:9c:39:42:88:8b:79: ff:f3:a9:1e:2a:a0:75:38:8a:6a:6d:73:e9:f3:22: 54:81:89:be:65:10:4f:e8:51:9d:de:3b:ec:a9:43: 02:eb:7a:cc:6f:11:92:3c:f5:49:d0:07:e0:b2:22: 16:96:5e:46:58:d0:30:63:93:2b:73:61:38:1b:bf: 0f:3a:6d:dd:25:a8:0d:5c:63:0a:da:40:56:67:44: 43:4e:02:68:26:1d:d3:c7:65:57:74:5e:8a:0b:01: 17:3f:6a:e5:26:35:e5:5b:4e:fd:3c:f5:91:5c:5e: d8:99:4a:9f:ac:c8:d1:38:fc:f4:d2:a8:8a:cd:9a: ba:e8:c7:f0:7a:73:d1:1c:11:f2:0b:53:52:11:db: 9a:fb:f7:8f:93:54:d8:04:d2:be:1e:d3:41:48:df: 25:2b:30:01:b0:5a:1c:e7:e6:81:2b:07:86:3f:bd: 14:b6:40:83:f8:d4:77:4f:d4:9d:b4:07:dd:ab:ab: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7B:92:01:FB:74:41:A4:F2:E5:3B:8C:50:0B:86:F4:E4:64:0B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/78d8f39e-b80e-3c01-9f15-e3f5d7f01399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/aace0f29-5693-492a-b1c9-a3bbc6ecf694.crl X509v3 Authority Key Identifier: keyid:AA:89:0A:A0:B6:05:79:8B:C3:84:5D:43:D2:25:ED:B5:D9:71:7E:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694.cer sbgp-ipAddrBlock: critical IPv6: 2620:22:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e3:70:5e:be:29:71:43:75:be:24:d9:bf:5f:c8:50:71:74: f8:31:76:12:4b:3c:15:e0:56:fa:5d:ad:38:38:47:25:b2:26: cd:f2:8c:63:9a:c6:49:a5:5e:a2:0f:12:3e:ed:f9:6f:eb:21: 30:8c:91:dd:e1:87:dd:b9:a2:ae:8b:2c:9e:e1:96:36:f9:86: c0:ce:bb:76:d8:94:13:51:6e:0c:b7:f6:73:2d:8f:e7:00:20: 5e:fd:f0:af:d3:28:8c:84:f8:18:04:68:1b:92:59:50:5e:e8: 60:fc:8a:b9:cc:4a:dd:09:92:14:5b:be:3e:3d:4b:2d:ae:52: e6:3f:35:4a:cc:3b:a9:e2:e4:fe:e6:15:8e:4e:f1:e6:a2:d8: 63:df:36:d3:0d:e9:d7:2d:ec:32:4b:1d:d2:40:ed:24:7e:f2: 7e:b0:29:36:9e:23:5b:82:eb:b5:37:82:ab:33:9c:1a:32:c2: a9:8e:81:af:25:fa:3a:92:4f:84:93:e1:ea:24:00:40:d5:f6: 3e:22:74:da:bb:9f:9a:18:a0:7b:aa:96:b8:8a:10:12:e5:c9: ca:76:07:95:9c:7d:c0:1c:29:ea:2a:2e:f9:5d:64:37:5c:44: 9f:fa:d9:d1:66:af:bf:14:a6:c7:b0:13:ca:7b:1d:a6:1c:39: af:9c:ca:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S6U/PPcRA9/4b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjZTBmMjktNTY5My00OTJhLWIxYzktYTNiYmM2ZWNm Njk0MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZTQ3ZDJmYjktMDdhMS00ZjEzLTllZjQtYjAzNWE0ZWM1YjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOejMHsibh1Ypl749eAm65/ON/WwMjq621s4 prmEP7B1WijV4mlVUngsvwdwoRjtE2dZsRtJnkP3HnTZeOOyvw0nxYKcOUKIi3n/ 86keKqB1OIpqbXPp8yJUgYm+ZRBP6FGd3jvsqUMC63rMbxGSPPVJ0AfgsiIWll5G WNAwY5Mrc2E4G78POm3dJagNXGMK2kBWZ0RDTgJoJh3Tx2VXdF6KCwEXP2rlJjXl W079PPWRXF7YmUqfrMjROPz00qiKzZq66MfwenPRHBHyC1NSEdua+/ePk1TYBNK+ HtNBSN8lKzABsFoc5+aBKweGP70UtkCD+NR3T9SdtAfdq6uetQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDV7kgH7dEGk8uU7jFALhvTkZAugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWNl MGYyOS01NjkzLTQ5MmEtYjFjOS1hM2JiYzZlY2Y2OTQvNzhkOGYzOWUtYjgwZS0z YzAxLTlmMTUtZTNmNWQ3ZjAxMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFjZTBmMjktNTY5My00OTJhLWIx YzktYTNiYmM2ZWNmNjk0L2FhY2UwZjI5LTU2OTMtNDkyYS1iMWM5LWEzYmJjNmVj ZjY5NC5jcmwwHwYDVR0jBBgwFoAUqokKoLYFeYvDhF1D0iXttdlxfvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWNlMGYyOS01NjkzLTQ5MmEtYjFjOS1hM2Ji YzZlY2Y2OTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIkAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABPjcF6+KXFDdb4k2b9fyFBxdPgxdhJLPBXgVvpdrTg4RyWyJs3y jGOaxkmlXqIPEj7t+W/rITCMkd3hh925oq6LLJ7hljb5hsDOu3bYlBNRbgy39nMt j+cAIF798K/TKIyE+BgEaBuSWVBe6GD8irnMSt0JkhRbvj49Sy2uUuY/NUrMO6ni 5P7mFY5O8eai2GPfNtMN6dct7DJLHdJA7SR+8n6wKTaeI1uC67U3gqsznBoywqmO ga8l+jqST4ST4eokAEDV9j4idNq7n5oYoHuqlriKEBLlycp2B5WcfcAcKeoqLvld ZDdcRJ/62dFmr78UpsewE8p7HaYcOa+cykg= -----END CERTIFICATE-----Generated at Sun Aug 24 01:12:41 2025 by rpki-client