$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6cf1fe51-0b17-369e-bcc1-48fb292e753d.roa File: 6cf1fe51-0b17-369e-bcc1-48fb292e753d.roa (raw, json) Hash identifier: xnBTK5dqJgsJkz3UaewUnXoHhHX2blC4KGXlHKGldPg= Subject key identifier: EA:9E:65:C4:D6:3D:F0:E0:82:06:87:07:FB:C2:7B:56:23:9A:16:C3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C2E2BD578F03462B80A98 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6cf1fe51-0b17-369e-bcc1-48fb292e753d.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397215 IP address blocks: 2620:74:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:2e:2b:d5:78:f0:34:62:b8:0a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=90ee5132-abf1-4cbb-a6f1-99820b7f4f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e7:74:0c:30:02:9b:fe:92:ca:11:eb:e0:de: 63:11:0e:68:e3:97:cd:16:17:e1:3e:b7:cb:ed:5f: d6:a5:5c:48:f0:3b:51:e4:44:4e:43:6e:9a:bf:34: a5:cf:de:22:3e:9b:b1:05:3f:56:6e:53:d0:33:bc: 86:3b:21:fd:aa:27:9c:fd:74:d7:0a:c7:26:db:6e: 6a:36:28:26:e8:ec:b4:54:b1:dd:0d:4a:f5:61:f3: e2:50:0e:0c:a3:0e:c1:19:2d:4e:6d:d1:c2:45:6e: a4:6a:dc:de:b6:10:7f:18:1c:68:f4:59:75:a4:5b: ca:10:ee:2c:50:f9:da:60:6d:a1:b5:cd:81:39:0b: 65:6d:f1:d1:41:a0:9c:f2:4c:dc:d1:85:25:71:0a: 8f:21:89:b2:f9:c7:26:1f:ae:d3:09:bf:d5:8d:d9: a1:44:51:0b:96:4d:bd:43:07:a1:e7:66:e3:ad:f3: d9:12:da:e6:29:b2:3c:af:24:da:45:ef:25:fb:0b: 1f:ca:6f:d2:b9:ae:3a:c8:a4:e6:18:08:20:c5:56: a8:8e:33:2c:9d:09:9f:62:ca:e2:61:d6:78:5c:b5: 64:d7:53:1d:77:a6:2a:e8:ad:e2:eb:7e:99:d2:12: 56:11:8e:20:ba:3e:64:55:0a:14:50:b3:e8:c2:c9: fa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9E:65:C4:D6:3D:F0:E0:82:06:87:07:FB:C2:7B:56:23:9A:16:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6cf1fe51-0b17-369e-bcc1-48fb292e753d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:06:82:db:10:a2:62:1f:45:f2:32:4c:45:c1:40:aa:a4:b2: ae:a5:60:8b:63:e0:e1:36:b0:68:82:43:e1:6a:df:2f:3a:a0: db:ae:48:d9:6d:94:9e:31:2e:af:80:af:d1:81:0a:de:4a:a4: ab:a6:ab:05:45:db:49:f9:5f:d3:46:90:3a:b1:a3:7e:00:d6: d8:45:2e:7b:78:bd:55:a4:05:f2:5b:cc:dc:94:22:aa:cb:3a: 06:83:dd:2f:5b:93:f6:ff:a3:87:71:dd:21:c4:67:c9:e3:e3: 19:89:77:c3:63:82:1c:23:78:c4:63:4a:f8:7b:9a:92:c9:04: 78:8b:f0:b1:16:c3:e4:7f:50:f4:a5:a8:28:f7:65:05:39:43: 3e:f7:de:89:13:00:6d:1c:1f:a1:dd:14:99:e3:b4:0b:cd:eb: 8c:f9:04:6f:50:91:be:df:da:22:39:3f:03:ac:f7:f0:e4:1b: 92:46:25:cf:d8:4f:67:43:b2:0e:c8:ff:73:ac:df:49:49:67: 24:82:c9:13:55:db:98:ff:12:f0:66:e9:da:10:6e:6e:31:54: 31:ba:86:9a:00:cb:d8:6e:a8:f2:ea:a7:3e:97:97:18:ce:1f: 94:ab:a7:e7:6c:65:28:da:dc:d4:33:ee:5a:84:a6:e4:0d:d1: 14:ca:ee:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPC4r1XjwNGK4CpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OTBlZTUxMzItYWJmMS00Y2JiLWE2ZjEtOTk4MjBiN2Y0ZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOd0DDACm/6SyhHr4N5jEQ5o45fNFhfhPrfL 7V/WpVxI8DtR5EROQ26avzSlz94iPpuxBT9WblPQM7yGOyH9qiec/XTXCscm225q Nigm6Oy0VLHdDUr1YfPiUA4Mow7BGS1ObdHCRW6katzethB/GBxo9Fl1pFvKEO4s UPnaYG2htc2BOQtlbfHRQaCc8kzc0YUlcQqPIYmy+ccmH67TCb/VjdmhRFELlk29 Qweh52bjrfPZEtrmKbI8ryTaRe8l+wsfym/Sua46yKTmGAggxVaojjMsnQmfYsri YdZ4XLVk11Mdd6Yq6K3i636Z0hJWEY4guj5kVQoUULPowsn66wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOqeZcTWPfDgggaHB/vCe1YjmhbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNmNmMWZlNTEtMGIxNy0z NjllLWJjYzEtNDhmYjI5MmU3NTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFoGgtsQomIfRfIyTEXBQKqksq6lYItj4OE2sGiCQ+Fq3y86oNuu SNltlJ4xLq+Ar9GBCt5KpKumqwVF20n5X9NGkDqxo34A1thFLnt4vVWkBfJbzNyU IqrLOgaD3S9bk/b/o4dx3SHEZ8nj4xmJd8NjghwjeMRjSvh7mpLJBHiL8LEWw+R/ UPSlqCj3ZQU5Qz733okTAG0cH6HdFJnjtAvN64z5BG9Qkb7f2iI5PwOs9/DkG5JG Jc/YT2dDsg7I/3Os30lJZySCyRNV25j/EvBm6doQbm4xVDG6hpoAy9huqPLqpz6X lxjOH5Srp+dsZSja3NQz7lqEpuQN0RTK7gk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:50 2025 by rpki-client