$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/95a84b4d-a674-3f52-b01a-deae8cc47d84.roa File: 95a84b4d-a674-3f52-b01a-deae8cc47d84.roa (raw, json) Hash identifier: DCpc9j4KRVatU7pKa9tXQqW7ujLR9hEYBDdp9OM20Lc= Subject key identifier: 1F:D1:AF:47:D4:71:75:23:8F:0F:79:6D:F5:0A:B3:EB:83:3C:80:1D Certificate issuer: /CN=f7e210a1-7b8a-4256-a4d2-c01234095c68 Certificate serial: 010D0C9F4328584AC5ABB0FCCB5C4EDD18A86A80 Authority key identifier: 70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/95a84b4d-a674-3f52-b01a-deae8cc47d84.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 14450 IP address blocks: 2620:111:84::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:b0:fc:cb:5c:4e:dd:18:a8:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7e210a1-7b8a-4256-a4d2-c01234095c68 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=9e39d442-aad8-4511-9694-4decd382ce70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:94:75:32:27:26:23:ce:67:89:79:09:7f:97: e2:33:77:3e:1c:8b:14:6e:15:9a:6a:b2:2f:5f:15: 53:44:92:35:b3:47:c4:59:4a:df:a1:be:63:5c:28: 74:f2:18:67:15:2c:d2:67:ef:dd:1d:bf:fd:2c:76: 9b:06:e1:aa:83:25:3e:85:1f:28:a3:e5:b1:95:13: b7:04:19:ac:fd:eb:c7:55:20:96:4a:58:ed:b1:2a: 4d:ed:c1:06:a5:f6:8e:c3:99:87:8f:26:46:a5:e0: ee:5d:81:39:5d:54:0d:c9:7b:d9:6c:92:c0:fa:08: 4b:7c:0d:5a:d4:d0:43:ab:5b:0e:f7:40:4a:5e:b2: b3:cf:62:82:b5:48:40:4a:57:bd:a1:fc:fd:a3:a9: dc:c6:32:be:25:a2:47:95:1c:20:d6:51:5b:8a:04: 27:2b:a8:cc:e4:53:e4:8b:12:96:d5:cd:03:02:d2: df:e1:d4:d0:17:3a:aa:4a:19:14:24:5b:9e:a2:04: 8d:4c:f0:d0:9b:72:00:c6:02:cc:f2:ac:b9:25:0a: 86:0d:05:d7:96:d4:ea:1a:81:09:4d:20:fa:e6:d7: 81:cf:ef:40:2b:89:6f:8a:22:12:eb:f1:8a:2d:4e: 1f:5a:76:20:1f:cb:05:21:d6:56:e3:65:0f:ff:b1: 33:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D1:AF:47:D4:71:75:23:8F:0F:79:6D:F5:0A:B3:EB:83:3C:80:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/95a84b4d-a674-3f52-b01a-deae8cc47d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl X509v3 Authority Key Identifier: keyid:70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:84::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:23:c6:6d:1b:1a:f0:25:73:19:af:c1:79:40:f1:2f:10:0e: c4:ba:c1:ef:d6:50:59:2d:fe:41:c5:47:5a:c8:cc:06:79:75: cf:ab:bb:9c:45:61:5d:bb:3d:9c:6b:65:22:f4:9f:52:bb:49: 97:4e:56:85:9d:38:f6:32:00:0e:31:49:7b:ff:17:4d:90:a3: f4:d5:8a:93:dc:b1:17:c4:6c:67:f7:1f:33:ba:cf:fb:5d:f4: 90:37:5b:b0:9d:59:2a:f5:9d:fe:35:a0:48:71:db:04:82:5e: 4c:51:dd:28:68:65:d5:96:45:4c:3e:9c:c8:02:82:4b:4c:6e: d4:e1:85:37:98:9f:2e:21:60:3d:2f:2e:71:1b:e6:5c:5d:01: 01:3c:88:78:30:2f:54:46:6a:fb:2b:70:e9:c4:83:c5:2d:e9: 1f:c3:85:78:78:29:0f:e3:c9:64:a5:07:04:71:e8:fc:0a:ed: ee:d0:b1:8f:12:1b:c6:be:3b:43:73:fe:23:85:97:44:7c:60: ea:be:3b:45:76:02:db:f1:6e:99:1d:ce:d5:cb:db:cb:9f:a0: c9:69:fa:23:b8:bf:47:a3:d7:7a:e9:49:28:a3:13:3c:a2:29: 55:b0:43:89:e9:40:fa:56:db:f6:58:de:71:c9:82:1b:05:32: c3:7d:0b:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErFq7D8y1xO3RioaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdlMjEwYTEtN2I4YS00MjU2LWE0ZDItYzAxMjM0MDk1 YzY4MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OWUzOWQ0NDItYWFkOC00NTExLTk2OTQtNGRlY2QzODJjZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZR1MicmI85niXkJf5fiM3c+HIsUbhWaarIv XxVTRJI1s0fEWUrfob5jXCh08hhnFSzSZ+/dHb/9LHabBuGqgyU+hR8oo+WxlRO3 BBms/evHVSCWSljtsSpN7cEGpfaOw5mHjyZGpeDuXYE5XVQNyXvZbJLA+ghLfA1a 1NBDq1sO90BKXrKzz2KCtUhASle9ofz9o6ncxjK+JaJHlRwg1lFbigQnK6jM5FPk ixKW1c0DAtLf4dTQFzqqShkUJFueogSNTPDQm3IAxgLM8qy5JQqGDQXXltTqGoEJ TSD65teBz+9AK4lviiIS6/GKLU4fWnYgH8sFIdZW42UP/7EzlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB/Rr0fUcXUjjw95bfUKs+uDPIAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mN2Uy MTBhMS03YjhhLTQyNTYtYTRkMi1jMDEyMzQwOTVjNjgvOTVhODRiNGQtYTY3NC0z ZjUyLWIwMWEtZGVhZThjYzQ3ZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjdlMjEwYTEtN2I4YS00MjU2LWE0 ZDItYzAxMjM0MDk1YzY4L2Y3ZTIxMGExLTdiOGEtNDI1Ni1hNGQyLWMwMTIzNDA5 NWM2OC5jcmwwHwYDVR0jBBgwFoAUcGSmUQSRXVwaiHDXb2xULSerY3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mN2UyMTBhMS03YjhhLTQyNTYtYTRkMi1jMDEy MzQwOTVjNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEQCE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwjxm0bGvAlcxmvwXlA8S8QDsS6we/WUFkt/kHFR1rIzAZ5dc+r u5xFYV27PZxrZSL0n1K7SZdOVoWdOPYyAA4xSXv/F02Qo/TVipPcsRfEbGf3HzO6 z/td9JA3W7CdWSr1nf41oEhx2wSCXkxR3ShoZdWWRUw+nMgCgktMbtThhTeYny4h YD0vLnEb5lxdAQE8iHgwL1RGavsrcOnEg8Ut6R/DhXh4KQ/jyWSlBwRx6PwK7e7Q sY8SG8a+O0Nz/iOFl0R8YOq+O0V2AtvxbpkdztXL28ufoMlp+iO4v0ej13rpSSij EzyiKVWwQ4npQPpW2/ZY3nHJghsFMsN9C+I= -----END CERTIFICATE-----Generated at Sun Aug 24 05:35:36 2025 by rpki-client