$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bc297aa-eb21-3ec3-9130-4df78212b950.roa File: 2bc297aa-eb21-3ec3-9130-4df78212b950.roa (raw, json) Hash identifier: Sbkm6/G+YD4YVeAaRITwNJB9rPIXcAzQe94Of61dtUc= Subject key identifier: 95:7D:6D:47:B5:7F:23:E5:6D:65:34:6D:7D:BF:B4:82:A4:BE:16:A8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C2E6D70B32A445A294F00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bc297aa-eb21-3ec3-9130-4df78212b950.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397219 IP address blocks: 2620:74:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:2e:6d:70:b3:2a:44:5a:29:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=d89e2bc5-ae00-491a-bde9-6909c0f17b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:60:28:82:d2:03:dd:ce:75:5f:2d:de:2e: 6a:dd:bf:b0:26:5e:ac:45:46:af:b9:8b:ac:93:51: 9f:cf:55:ee:b6:32:7a:78:5f:23:1c:d8:c5:09:b0: 22:19:09:bd:95:c8:4d:5c:fa:7c:f7:8e:e4:c4:3f: bf:69:a8:d0:6f:b5:cd:cd:ba:a0:f7:71:89:26:83: b3:e4:35:dd:77:9d:07:db:be:2b:29:2c:c4:04:6d: 68:94:53:f2:64:43:e7:5a:85:8d:45:98:e1:8d:98: 77:24:bf:da:db:17:18:dc:da:26:3b:cb:1e:a3:35: 38:15:1b:da:7f:11:95:88:bb:1c:38:05:0e:54:ce: 13:3f:5a:bb:6e:26:08:f8:2a:45:4e:06:b2:2d:d2: 43:75:78:7a:8b:a4:c1:c3:e5:55:1b:e1:0b:5f:1f: 52:d4:18:da:07:31:72:7a:eb:78:a8:e6:29:2b:0b: 80:3b:ac:9d:21:c3:57:50:4e:79:f3:e9:3d:19:34: 9e:6f:af:8f:11:4e:0a:e0:07:4a:81:83:4a:fb:d4: 46:bb:ea:7b:4e:b5:ca:4c:0c:29:17:e2:8a:1a:7e: 5b:80:db:32:48:ad:72:f3:1a:90:33:5c:da:67:86: c4:9d:7e:0d:65:5b:2d:80:6c:d2:89:e9:fc:ff:73: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:6D:47:B5:7F:23:E5:6D:65:34:6D:7D:BF:B4:82:A4:BE:16:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bc297aa-eb21-3ec3-9130-4df78212b950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ce:ff:f3:d1:68:de:56:8f:20:f5:7a:ac:5f:78:a3:87:79: 4c:4a:75:d4:a1:09:0d:6e:df:f0:a1:6a:42:5d:38:b4:62:fe: 45:9f:c8:9a:10:22:95:09:e2:fb:15:d3:7a:1f:5e:2f:19:00: a6:5a:44:3a:29:61:95:30:9b:67:15:3c:08:aa:ba:ed:c2:de: 5d:70:1b:ab:2c:be:3d:08:94:c9:31:52:c0:b8:8b:e9:50:77: 0a:0a:e3:a3:2c:7a:62:2e:56:a3:99:4a:b2:b3:da:c0:c5:35: e7:1e:f4:e6:c6:dc:ec:67:c9:4b:b1:02:a9:5c:8a:90:40:6c: ac:b3:c1:16:5e:b8:27:2f:33:29:70:6e:89:46:5d:3f:16:b1: 28:7b:75:45:d4:f7:b9:6c:ff:46:61:1a:4f:b9:38:2e:91:0b: cf:f4:73:1d:66:45:ac:ec:b4:c5:45:76:7d:12:88:2c:44:56: 02:4e:31:60:f4:20:60:fb:bb:e1:5a:c3:b3:b3:4b:d6:6e:f0: 6f:6f:56:2a:9a:27:77:f4:16:83:7b:7f:ac:42:98:2e:6d:79: 2a:16:f1:7c:7d:84:cc:f4:83:83:e3:e6:53:df:fd:4c:06:6b: 21:66:3e:45:e8:b4:4e:a5:44:4d:51:29:06:04:16:67:51:22: 15:13:02:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPC5tcLMqRFopTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDg5ZTJiYzUtYWUwMC00OTFhLWJkZTktNjkwOWMwZjE3YjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3VgKILSA93OdV8t3i5q3b+wJl6sRUavuYus k1Gfz1XutjJ6eF8jHNjFCbAiGQm9lchNXPp8947kxD+/aajQb7XNzbqg93GJJoOz 5DXdd50H274rKSzEBG1olFPyZEPnWoWNRZjhjZh3JL/a2xcY3NomO8seozU4FRva fxGViLscOAUOVM4TP1q7biYI+CpFTgayLdJDdXh6i6TBw+VVG+ELXx9S1BjaBzFy eut4qOYpKwuAO6ydIcNXUE558+k9GTSeb6+PEU4K4AdKgYNK+9RGu+p7TrXKTAwp F+KKGn5bgNsySK1y8xqQM1zaZ4bEnX4NZVstgGzSien8/3MN+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJV9bUe1fyPlbWU0bX2/tIKkvhaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmJjMjk3YWEtZWIyMS0z ZWMzLTkxMzAtNGRmNzgyMTJiOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB7O//PRaN5WjyD1eqxfeKOHeUxKddShCQ1u3/ChakJdOLRi/kWf yJoQIpUJ4vsV03ofXi8ZAKZaRDopYZUwm2cVPAiquu3C3l1wG6ssvj0IlMkxUsC4 i+lQdwoK46MsemIuVqOZSrKz2sDFNece9ObG3OxnyUuxAqlcipBAbKyzwRZeuCcv MylwbolGXT8WsSh7dUXU97ls/0ZhGk+5OC6RC8/0cx1mRazstMVFdn0SiCxEVgJO MWD0IGD7u+Faw7OzS9Zu8G9vViqaJ3f0FoN7f6xCmC5teSoW8Xx9hMz0g4Pj5lPf /UwGayFmPkXotE6lRE1RKQYEFmdRIhUTAps= -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:58 2025 by rpki-client