$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa File: 9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa (raw, json) Hash identifier: t2TITidfXD9z3BclFqW9ompYRcm6LMQdYTZ7cSURjmA= Subject key identifier: 94:53:0F:89:9B:8B:45:A7:79:37:63:CB:BF:D0:D2:B8:C9:90:D1:03 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C2BB7900E6F56813DA540 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 12008 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:2b:b7:90:0e:6f:56:81:3d:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=5fd2c28a-8c9d-460c-8bb3-a86b0ae53e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:05:7e:22:56:0f:38:47:be:f3:79:8e:59: 54:4e:e9:4e:00:76:1e:ad:12:73:f3:0b:19:cf:18: 82:f1:0d:b6:7c:bf:60:28:46:92:4f:6c:32:a3:47: 1f:6b:4e:59:7b:e3:e7:ce:30:99:85:d2:1f:cd:77: 24:ac:69:a0:39:2d:5c:c0:cd:e2:5b:21:cd:ff:f7: 54:3d:98:b0:9c:97:32:33:42:84:d6:65:1d:e8:39: 7e:5c:48:fe:bd:1c:02:f6:25:57:15:48:52:b5:41: b3:4c:33:39:e1:9a:4e:9a:74:c4:45:fc:08:68:53: c1:7b:b0:25:35:01:fa:1d:69:34:eb:38:a3:f5:c6: 2f:78:94:97:01:28:b2:a7:67:55:53:e4:50:e9:22: 7a:81:e2:11:f0:4a:3f:d6:da:93:f6:85:4b:ca:f5: 43:b6:b5:7b:bf:ee:98:de:9b:23:51:ed:75:c1:50: 18:28:ce:fd:e7:82:a3:82:6c:a1:fe:4b:8a:26:55: 5f:db:1c:fd:b4:6a:dd:c0:fe:c7:f7:b9:2d:13:76: da:cf:d1:86:56:35:8e:a9:26:8e:36:f1:da:18:26: 51:d8:3a:92:4c:d5:0d:b7:52:bd:52:d8:32:d5:bd: f0:c0:96:52:55:77:77:67:a0:de:c6:bf:da:82:cc: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:53:0F:89:9B:8B:45:A7:79:37:63:CB:BF:D0:D2:B8:C9:90:D1:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:82:ed:e2:c1:3f:ba:27:9b:b6:39:6c:dc:2d:46:e8:bc:7d: 7a:26:04:1d:d0:88:74:c5:7b:80:5d:a7:4b:70:f8:e8:e0:ab: c4:cc:51:d1:07:c1:c5:9f:4f:df:28:cc:36:23:2d:51:d6:43: 7e:73:07:5a:b8:b2:91:7e:b9:de:1a:de:8c:ba:bb:f1:ce:fb: 78:e4:c1:b1:43:5e:67:d6:03:99:b7:8f:bb:26:44:17:f0:4a: e2:97:d7:70:27:a9:9b:72:65:d6:86:45:98:d5:54:ec:90:f8: f4:18:00:d4:dc:d7:80:51:9a:3c:02:a8:c1:83:97:3a:3a:60: 62:3a:c1:79:a3:71:58:bb:d7:6f:8a:41:02:45:2d:4d:f7:9b: a8:ca:59:eb:89:b8:2a:56:51:23:dc:69:d8:4c:e9:8f:11:a9: 55:ea:fc:69:b6:29:33:36:36:67:88:36:90:db:32:3a:99:0b: 5f:7c:95:1c:70:09:0b:bb:61:de:2e:d4:f1:ec:bf:4e:e8:11: 28:7f:6b:68:e7:32:16:84:31:1a:f0:de:57:ad:20:f1:9e:81: 50:9f:e8:51:69:21:b2:f4:17:27:30:7c:62:ae:e8:1e:7e:bb: 5b:45:e8:5c:d9:aa:df:3c:bd:61:e6:1c:ca:b4:c0:8f:30:c2: 62:42:54:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCu3kA5vVoE9pUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NWZkMmMyOGEtOGM5ZC00NjBjLThiYjMtYTg2YjBhZTUzZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLEFfiJWDzhHvvN5jllUTulOAHYerRJz8wsZ zxiC8Q22fL9gKEaST2wyo0cfa05Ze+PnzjCZhdIfzXckrGmgOS1cwM3iWyHN//dU PZiwnJcyM0KE1mUd6Dl+XEj+vRwC9iVXFUhStUGzTDM54ZpOmnTERfwIaFPBe7Al NQH6HWk06zij9cYveJSXASiyp2dVU+RQ6SJ6geIR8Eo/1tqT9oVLyvVDtrV7v+6Y 3psjUe11wVAYKM7954Kjgmyh/kuKJlVf2xz9tGrdwP7H97ktE3baz9GGVjWOqSaO NvHaGCZR2DqSTNUNt1K9Utgy1b3wwJZSVXd3Z6Dexr/agsw53wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJRTD4mbi0WneTdjy7/Q0rjJkNEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWEwYmNmMjktMTEyOC0z YjA1LThkMTItYWYyMjdlOWFkZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6C7eLBP7onm7Y5bNwtRui8fXomBB3QiHTFe4Bdp0tw+Ojgq8TM UdEHwcWfT98ozDYjLVHWQ35zB1q4spF+ud4a3oy6u/HO+3jkwbFDXmfWA5m3j7sm RBfwSuKX13AnqZtyZdaGRZjVVOyQ+PQYANTc14BRmjwCqMGDlzo6YGI6wXmjcVi7 12+KQQJFLU33m6jKWeuJuCpWUSPcadhM6Y8RqVXq/Gm2KTM2NmeINpDbMjqZC198 lRxwCQu7Yd4u1PHsv07oESh/a2jnMhaEMRrw3letIPGegVCf6FFpIbL0FycwfGKu 6B5+u1tF6FzZqt88vWHmHMq0wI8wwmJCVEo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:59:06 2025 by rpki-client