$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1189355-1ebb-3b62-8968-0dd6e052a41c.roa File: a1189355-1ebb-3b62-8968-0dd6e052a41c.roa (raw, json) Hash identifier: qHZzXPmaVRv9qSFLX15z5JKwIaItHZEYWaQyIWnKeUo= Subject key identifier: 88:3C:FE:C2:5A:65:7A:80:15:25:3B:78:ED:99:A5:D4:C7:E9:CC:5B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C2DE9BE796ADD78A42D00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1189355-1ebb-3b62-8968-0dd6e052a41c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 12008 IP address blocks: 2620:74:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:2d:e9:be:79:6a:dd:78:a4:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=15c88e5f-ff43-46ab-8e8d-353a47969337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bf:86:69:bf:aa:df:5b:53:28:57:51:bb:f9: 85:3f:a8:66:ca:4c:e3:74:c2:b7:b1:c2:e7:f9:a7: 1c:b0:a3:cf:d3:bf:ba:a3:e5:df:b8:48:7f:c8:9d: 65:41:bf:1f:f3:fe:09:f1:8c:8e:cf:ae:07:db:1d: dc:2d:6a:fe:2d:87:31:ae:21:09:1d:00:2f:69:9b: 00:85:49:32:22:65:13:50:b5:2c:60:9a:fa:70:6d: 15:ea:b0:d9:f2:6e:f3:25:e0:b6:76:67:e8:4d:c7: dc:cd:4b:fe:9e:02:bf:0c:f2:59:a4:14:61:4c:03: ce:c6:eb:ca:30:42:21:45:9d:7b:30:4b:a5:4c:58: 12:25:b9:f3:80:ca:5b:c9:9c:04:91:3d:35:f2:4d: cb:d5:0b:1d:bb:5d:1d:cb:da:47:87:b9:51:9f:89: bf:c3:3f:3d:c8:e3:20:35:18:57:2f:10:5b:96:ba: 0c:65:3f:d1:96:7b:a6:a0:46:0e:24:4e:ad:d2:89: 25:37:7f:12:24:3f:1f:82:42:53:1d:92:26:4d:e6: 9b:56:54:21:8a:3f:5d:62:1f:d8:3f:4b:c9:63:ab: 3e:1b:be:82:6b:46:ca:da:62:e1:45:9e:45:ff:7d: e2:34:a6:b7:8f:27:09:de:43:2a:d2:da:30:d8:93: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3C:FE:C2:5A:65:7A:80:15:25:3B:78:ED:99:A5:D4:C7:E9:CC:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1189355-1ebb-3b62-8968-0dd6e052a41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:aa:f0:cf:b7:e1:01:05:29:b2:57:24:c6:24:c5:12:1d:5c: 5a:e2:73:3f:b1:02:49:1f:6f:1b:b4:b3:63:6d:28:cd:d8:56: ca:b6:4a:d4:66:f4:c8:3d:2c:13:88:e2:34:08:12:ec:af:62: 0d:61:65:3f:b3:e9:fd:b9:af:49:a1:7b:cf:c3:b2:81:c5:5f: 26:bf:4e:f4:7e:ff:22:14:3a:89:75:78:29:ec:e2:a3:17:f5: 96:04:a0:2b:be:59:c2:94:25:2c:28:f1:f2:f1:34:fc:56:37: d9:30:e1:f0:22:e5:0f:86:ea:47:4a:cc:36:3a:30:e1:82:11: c6:bb:e7:56:75:b4:36:f9:7e:ab:80:29:53:84:e8:2b:a0:9e: 97:4f:76:b3:af:8b:4a:fb:d9:a4:c3:ff:ab:fe:61:a0:b0:ab: e4:31:48:5a:ef:b1:0e:84:0e:7c:aa:c2:9b:d5:2a:d2:b8:9e: 70:89:37:a1:c9:40:22:79:49:1d:8c:18:f0:ba:4b:79:4f:6e: 76:72:13:82:79:8f:a7:7d:5e:5e:aa:0f:8b:e6:30:b5:21:d2: 41:59:cd:96:2e:10:81:19:91:cd:4e:d2:56:12:2b:01:08:6b: ad:a4:2b:60:cb:6c:c9:4d:b0:74:bb:d4:a7:0a:4e:fa:21:11: 0f:f0:28:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPC3pvnlq3XikLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MTVjODhlNWYtZmY0My00NmFiLThlOGQtMzUzYTQ3OTY5MzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67+Gab+q31tTKFdRu/mFP6hmykzjdMK3scLn +accsKPP07+6o+XfuEh/yJ1lQb8f8/4J8YyOz64H2x3cLWr+LYcxriEJHQAvaZsA hUkyImUTULUsYJr6cG0V6rDZ8m7zJeC2dmfoTcfczUv+ngK/DPJZpBRhTAPOxuvK MEIhRZ17MEulTFgSJbnzgMpbyZwEkT018k3L1Qsdu10dy9pHh7lRn4m/wz89yOMg NRhXLxBblroMZT/RlnumoEYOJE6t0oklN38SJD8fgkJTHZImTeabVlQhij9dYh/Y P0vJY6s+G76Ca0bK2mLhRZ5F/33iNKa3jycJ3kMq0tow2JNcUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIg8/sJaZXqAFSU7eO2ZpdTH6cxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTExODkzNTUtMWViYi0z YjYyLTg5NjgtMGRkNmUwNTJhNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEWq8M+34QEFKbJXJMYkxRIdXFricz+xAkkfbxu0s2NtKM3YVsq2 StRm9Mg9LBOI4jQIEuyvYg1hZT+z6f25r0mhe8/DsoHFXya/TvR+/yIUOol1eCns 4qMX9ZYEoCu+WcKUJSwo8fLxNPxWN9kw4fAi5Q+G6kdKzDY6MOGCEca751Z1tDb5 fquAKVOE6CugnpdPdrOvi0r72aTD/6v+YaCwq+QxSFrvsQ6EDnyqwpvVKtK4nnCJ N6HJQCJ5SR2MGPC6S3lPbnZyE4J5j6d9Xl6qD4vmMLUh0kFZzZYuEIEZkc1O0lYS KwEIa62kK2DLbMlNsHS71KcKTvohEQ/wKLE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:35 2025 by rpki-client