$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8abe0c48-e1bc-34fc-9622-5a96f989842e.roa File: 8abe0c48-e1bc-34fc-9622-5a96f989842e.roa (raw, json) Hash identifier: 1b6bpa3T+lt9ztrw+GF1yLOVLnv3WrliF4TTaQMm0Vo= Subject key identifier: 16:C3:EC:69:3B:2F:77:DD:B5:FE:42:66:3E:EC:4D:BD:A1:EF:58:5F Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584AC0B869E9DE30778D9CB70858 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8abe0c48-e1bc-34fc-9622-5a96f989842e.roa Signing time: Tue 05 Aug 2025 06:27:32 +0000 ROA not before: Tue 05 Aug 2025 06:27:32 +0000 ROA not after: Mon 03 Nov 2025 07:27:32 +0000 asID: 62610 IP address blocks: 2604:980:e02f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:b8:69:e9:de:30:77:8d:9c:b7:08:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Aug 5 06:27:32 2025 GMT Not After : Nov 3 07:27:32 2025 GMT Subject: CN=1d0b7bc1-a777-49d7-9592-30e86b2d84f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:73:15:d6:d5:69:e5:31:66:c3:f3:27:60:dd: cb:87:5f:24:3e:ad:e6:3e:0b:da:cc:8f:a8:db:f7: 02:c9:be:69:c1:1f:35:0d:78:90:5e:b9:48:0b:72: 82:d9:90:12:e3:9d:84:a5:4e:d5:8c:53:59:39:95: 98:89:eb:6f:d1:92:80:9e:1a:0f:9e:4a:7a:69:9d: 1b:37:60:6e:73:53:2a:52:fd:90:54:b7:eb:c2:d7: 87:aa:55:4e:d6:ad:04:08:82:7f:a9:89:93:d2:12: 28:e6:6c:b3:9e:0f:ad:b4:aa:12:76:14:8e:02:22: 17:3d:53:9b:db:6d:10:40:dc:b4:8a:42:aa:7c:53: d1:e8:9d:a9:48:55:ca:0d:95:0c:8d:0f:02:a6:e5: bd:79:27:c2:a1:81:2f:0b:a9:74:b5:13:37:ff:e8: 25:49:a6:2b:c5:bc:cf:a3:2c:20:c0:87:2a:11:d8: de:49:d5:78:22:71:26:bb:16:39:b0:81:d8:e1:d3: 76:75:0d:72:8b:2c:94:92:87:6a:f4:c7:99:62:f9: f8:3d:f2:70:67:a6:da:cb:ed:40:de:22:18:f1:65: 7d:69:dc:c4:78:d7:f0:48:c4:3c:3e:80:14:c2:57: 0b:36:4a:f9:2d:4a:af:e7:b2:0e:5a:d7:db:6d:ab: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C3:EC:69:3B:2F:77:DD:B5:FE:42:66:3E:EC:4D:BD:A1:EF:58:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8abe0c48-e1bc-34fc-9622-5a96f989842e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv6: 2604:980:e02f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c9:94:4e:e5:a3:7e:7e:16:b4:f9:d4:bf:00:93:83:1b:68: a4:87:fd:e1:29:72:20:0e:be:3a:07:82:59:e9:ea:29:60:5f: 4e:d5:3e:c7:7c:f9:ac:2c:ef:e2:d9:7d:f5:5c:40:f8:eb:ef: fc:44:0d:9b:92:00:f2:19:93:16:3a:af:cb:03:f9:bb:0e:cb: e4:42:84:a1:b2:f3:ee:80:be:55:6a:cd:29:aa:99:38:ba:ef: af:03:69:c2:ab:9b:aa:6f:c5:44:d8:b1:c0:c2:1b:4b:b5:c4: a5:a5:a2:d8:ff:32:27:b6:2d:63:94:96:a7:2c:f3:f3:7f:3b: 82:ea:5a:9c:26:45:52:af:c4:34:34:d3:a5:4d:75:78:5d:98: 2a:5d:1a:63:86:ce:fd:20:0e:c9:0d:23:1a:2f:fa:4a:41:d5: 48:80:b5:3a:c6:71:51:35:48:11:12:dc:ea:fe:f6:1f:66:2b: d7:66:23:8f:e4:2e:28:ed:5b:61:02:86:3b:47:4c:5c:c4:b4: 2d:c7:af:06:b4:36:90:cc:95:bd:56:f8:f8:ac:3a:f2:9f:dc: 3c:f6:95:f2:1e:1c:24:ff:6a:53:96:23:a0:c5:d8:a1:af:52: b6:d3:44:e6:ae:d5:dd:0e:d5:0b:51:87:af:cd:d8:ed:72:bc: fb:1c:99:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErAuGnp3jB3jZy3CFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDgwNTA2MjczMloXDTI1MTEwMzA3MjczMlowLzEtMCsGA1UEAxMk MWQwYjdiYzEtYTc3Ny00OWQ3LTk1OTItMzBlODZiMmQ4NGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnMV1tVp5TFmw/MnYN3Lh18kPq3mPgvazI+o 2/cCyb5pwR81DXiQXrlIC3KC2ZAS452EpU7VjFNZOZWYietv0ZKAnhoPnkp6aZ0b N2Buc1MqUv2QVLfrwteHqlVO1q0ECIJ/qYmT0hIo5myzng+ttKoSdhSOAiIXPVOb 220QQNy0ikKqfFPR6J2pSFXKDZUMjQ8CpuW9eSfCoYEvC6l0tRM3/+glSaYrxbzP oywgwIcqEdjeSdV4InEmuxY5sIHY4dN2dQ1yiyyUkodq9MeZYvn4PfJwZ6bay+1A 3iIY8WV9adzEeNfwSMQ8PoAUwlcLNkr5LUqv57IOWtfbbau++wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBbD7Gk7L3fdtf5CZj7sTb2h71hfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOGFiZTBjNDgtZTFiYy0z NGZjLTk2MjItNWE5NmY5ODk4NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQJgOAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADvJlE7lo35+FrT51L8Ak4MbaKSH/eEpciAOvjoHglnp6ilgX07V Psd8+aws7+LZffVcQPjr7/xEDZuSAPIZkxY6r8sD+bsOy+RChKGy8+6AvlVqzSmq mTi6768DacKrm6pvxUTYscDCG0u1xKWlotj/Mie2LWOUlqcs8/N/O4LqWpwmRVKv xDQ006VNdXhdmCpdGmOGzv0gDskNIxov+kpB1UiAtTrGcVE1SBES3Or+9h9mK9dm I4/kLijtW2EChjtHTFzEtC3Hrwa0NpDMlb1W+PisOvKf3Dz2lfIeHCT/alOWI6DF 2KGvUrbTROau1d0O1QtRh6/N2O1yvPscmcM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:42 2025 by rpki-client