$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad928355-953e-3a34-8d42-d167cac190ac.roa File: ad928355-953e-3a34-8d42-d167cac190ac.roa (raw, json) Hash identifier: 4VDQdCvhV64mLahHeHFQNeDBW5dZQTaNeBQrEBzy+BI= Subject key identifier: EF:46:D5:DC:01:FC:7B:2F:87:1D:9B:9F:DA:97:D0:7A:41:36:22:3D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C2FD4D722C711D870ABB8 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad928355-953e-3a34-8d42-d167cac190ac.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397242 IP address blocks: 2620:74:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:2f:d4:d7:22:c7:11:d8:70:ab:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=fd6fe5c2-72f3-4792-bb7e-8344b9ee0196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b5:0c:fb:e4:2b:ee:97:13:10:2d:19:08:2f: da:01:7c:36:79:e6:9e:dd:5d:dd:d4:c3:31:e2:38: ce:be:58:cb:b9:3b:49:e0:b9:e0:f2:09:c6:28:0d: b8:42:84:34:97:6e:e8:39:2a:8b:f0:60:26:ee:fc: 62:90:e4:8f:b0:81:10:6c:bb:97:5d:25:df:0c:e1: 65:7a:7c:fa:90:74:fb:cb:9c:d9:8c:71:72:38:ab: 8e:56:0e:48:c7:16:4b:22:b7:4f:92:89:e0:35:db: 7a:4c:28:d7:d6:c6:2e:15:c2:b6:22:94:1c:6f:bd: 67:de:f6:17:eb:fe:f3:3d:13:e1:b7:24:19:83:de: a5:91:17:8f:fa:ac:06:ff:02:56:a9:f1:2d:5f:e7: 48:b9:60:ca:46:e5:9c:94:d0:78:82:92:f9:6f:9b: 52:17:f5:46:ee:d4:91:6c:4a:19:e8:40:e8:4e:05: 9c:40:06:3b:12:7c:92:8d:c9:08:e7:0a:2a:37:9b: 92:70:e5:1a:c5:cf:ba:8e:85:60:63:6e:83:bb:ea: 29:b4:29:53:67:69:95:65:b1:42:f0:1c:ce:48:34: d4:ce:01:81:d3:d1:9f:df:34:5b:00:4f:43:5d:a1: 56:fb:f2:59:6f:d2:d8:c9:43:8a:6f:20:b8:3f:40: c7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:46:D5:DC:01:FC:7B:2F:87:1D:9B:9F:DA:97:D0:7A:41:36:22:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad928355-953e-3a34-8d42-d167cac190ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bb:3b:78:50:65:c9:7d:c9:40:58:64:f4:46:98:c2:5c:f6: 6c:9e:b7:c0:22:29:e6:13:e6:68:bd:e5:b9:fa:7d:7f:eb:bf: 34:2c:cf:89:4b:7e:bf:03:ce:8e:d9:49:44:12:f9:33:89:72: 08:f2:cf:1b:76:54:52:85:e4:39:55:34:90:9e:fd:33:ef:93: 59:5a:d9:1c:b5:b4:c1:24:99:8f:3c:cc:48:a4:ed:b5:b8:c2: d7:23:5a:ff:4a:dc:5e:33:30:29:48:ac:5a:70:e5:5b:79:13: 47:c7:1d:29:f9:3b:05:d5:5a:cc:dc:40:e3:7f:7e:d4:e1:d1: bf:0d:81:a5:d2:35:48:ad:b2:8f:45:65:9f:15:c7:c9:f0:3a: d8:57:3e:a8:c7:a5:a1:67:13:68:6f:dc:cd:c2:a1:a1:1c:43: 65:3a:8b:e3:ec:2e:8b:59:cd:a5:a9:3b:5f:9c:4d:1f:09:8b: ca:1b:8e:58:9e:0d:01:f6:76:36:19:c3:ab:8e:6d:81:34:c6: 3f:13:ed:b4:71:62:8c:48:d1:1b:f5:71:d0:4e:bb:99:4f:6b: ea:20:79:c0:94:43:0f:74:2b:cc:ac:ed:4c:49:51:f6:58:ee: da:7d:c0:48:d4:40:1a:f5:3c:65:d7:29:82:39:64:16:94:16: 83:39:19:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPC/U1yLHEdhwq7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZmQ2ZmU1YzItNzJmMy00NzkyLWJiN2UtODM0NGI5ZWUwMTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7UM++Qr7pcTEC0ZCC/aAXw2eeae3V3d1MMx 4jjOvljLuTtJ4Lng8gnGKA24QoQ0l27oOSqL8GAm7vxikOSPsIEQbLuXXSXfDOFl enz6kHT7y5zZjHFyOKuOVg5IxxZLIrdPkongNdt6TCjX1sYuFcK2IpQcb71n3vYX 6/7zPRPhtyQZg96lkReP+qwG/wJWqfEtX+dIuWDKRuWclNB4gpL5b5tSF/VG7tSR bEoZ6EDoTgWcQAY7EnySjckI5woqN5uScOUaxc+6joVgY26Du+optClTZ2mVZbFC 8BzOSDTUzgGB09Gf3zRbAE9DXaFW+/JZb9LYyUOKbyC4P0DHuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO9G1dwB/Hsvhx2bn9qX0HpBNiI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWQ5MjgzNTUtOTUzZS0z YTM0LThkNDItZDE2N2NhYzE5MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAu7O3hQZcl9yUBYZPRGmMJc9myet8AiKeYT5mi95bn6fX/rvzQs z4lLfr8Dzo7ZSUQS+TOJcgjyzxt2VFKF5DlVNJCe/TPvk1la2Ry1tMEkmY88zEik 7bW4wtcjWv9K3F4zMClIrFpw5Vt5E0fHHSn5OwXVWszcQON/ftTh0b8NgaXSNUit so9FZZ8Vx8nwOthXPqjHpaFnE2hv3M3CoaEcQ2U6i+PsLotZzaWpO1+cTR8Ji8ob jlieDQH2djYZw6uObYE0xj8T7bRxYoxI0Rv1cdBOu5lPa+ogecCUQw90K8ys7UxJ UfZY7tp9wEjUQBr1PGXXKYI5ZBaUFoM5GVg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:50:23 2025 by rpki-client