$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11dc48a3-fb78-3cf1-bdc6-f42610b9c399.roa File: 11dc48a3-fb78-3cf1-bdc6-f42610b9c399.roa (raw, json) Hash identifier: /tVkAEMYTaprAL8mwQMwUJpa8MJrKWW5eCBfE9tbFd4= Subject key identifier: CF:62:DF:AF:67:E9:0E:50:C4:74:EE:F7:42:1A:4A:85:42:EE:DA:B1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AE196BD6A355F67368F8B5560 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11dc48a3-fb78-3cf1-bdc6-f42610b9c399.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 22394 IP address blocks: 2001:4888:8017::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:bd:6a:35:5f:67:36:8f:8b:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=33cb65fd-ad42-4c8a-b42e-c7cddaef357d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a8:bf:bd:0c:53:c6:cf:8f:a7:b1:0a:01:20: 07:d0:a3:04:6d:32:be:02:d9:32:ae:66:be:b3:9e: a2:e3:4c:6a:90:d4:30:33:a7:0e:0d:13:1d:e4:ec: cc:83:4f:56:43:98:12:83:b5:de:da:a0:ec:eb:a9: ee:22:5a:a2:92:b5:f7:1a:13:1a:8e:7d:80:62:2a: 9b:92:26:ad:df:3b:7c:c3:74:09:91:13:29:8a:7e: 10:19:f3:67:93:2d:25:94:0e:92:91:93:aa:50:2d: 7d:37:70:47:bb:b1:1a:66:fc:d2:ae:b2:53:e7:e4: d1:7f:3c:25:84:c9:7a:97:25:bc:db:77:9a:6a:fb: bd:84:d8:89:b7:67:55:f8:78:32:36:aa:0a:b2:83: 3b:20:99:86:6b:73:73:1b:fb:ce:fa:7a:8f:0f:03: 48:58:98:86:25:0b:6e:27:d2:f2:7d:ed:82:2b:40: 2b:bb:b9:ca:32:b8:fa:02:92:da:4a:d6:3d:c9:95: c5:97:6f:c3:99:f0:fc:5c:bf:5d:93:da:90:f0:eb: 3f:19:cf:76:69:cf:17:11:1f:c5:67:04:02:6a:3f: a3:a9:a3:75:18:14:41:10:b3:02:ff:e8:66:dc:3c: c8:6d:45:97:07:81:ae:5e:93:31:32:17:20:23:42: fd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:62:DF:AF:67:E9:0E:50:C4:74:EE:F7:42:1A:4A:85:42:EE:DA:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11dc48a3-fb78-3cf1-bdc6-f42610b9c399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8017::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b3:08:9b:30:a5:db:d4:bc:43:af:a1:af:2c:eb:66:e3:61: 26:0b:a2:04:f8:18:02:bd:31:62:b2:fe:83:91:d5:72:f7:fd: 01:a1:c1:e2:d8:d4:78:a0:09:ab:f5:70:08:8d:05:53:e3:8d: 10:a6:37:42:c7:d3:4b:8a:34:f9:70:ac:d8:b5:53:13:20:55: f9:df:49:97:10:9f:e6:ac:67:90:3e:36:f9:ba:1f:99:d5:6a: 85:e2:f5:74:79:68:56:d3:d0:bf:14:10:a2:3e:a7:f5:c5:2b: 58:06:9f:ed:84:5f:75:c1:31:be:00:71:c0:15:88:87:19:38: 61:25:f1:5c:62:92:cf:3e:47:8d:8a:ef:7d:e7:35:bd:28:75: c6:a7:4a:ad:48:2c:c5:ef:3c:9d:bc:ea:f2:a5:49:a2:d3:b2: 06:b3:a3:c9:6f:c2:69:d4:22:b5:de:1b:e4:25:7d:82:25:40: c1:a6:40:90:ca:52:9b:3d:9b:c4:f0:e2:f5:89:67:51:71:6c: a3:63:5f:3d:02:45:b6:08:18:42:86:f1:0e:da:da:2b:a2:16: de:b7:16:70:58:80:6d:fa:2a:39:57:5b:7d:de:d8:25:c5:3f: aa:62:8b:37:cd:85:a7:ec:d6:9a:5c:72:f3:72:0c:1c:e8:f2: dd:78:99:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErhlr1qNV9nNo+LVWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MzNjYjY1ZmQtYWQ0Mi00YzhhLWI0MmUtYzdjZGRhZWYzNTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqi/vQxTxs+Pp7EKASAH0KMEbTK+Atkyrma+ s56i40xqkNQwM6cODRMd5OzMg09WQ5gSg7Xe2qDs66nuIlqikrX3GhMajn2AYiqb kiat3zt8w3QJkRMpin4QGfNnky0llA6SkZOqUC19N3BHu7EaZvzSrrJT5+TRfzwl hMl6lyW823eaavu9hNiJt2dV+HgyNqoKsoM7IJmGa3NzG/vO+nqPDwNIWJiGJQtu J9Lyfe2CK0Aru7nKMrj6ApLaStY9yZXFl2/DmfD8XL9dk9qQ8Os/Gc92ac8XER/F ZwQCaj+jqaN1GBRBELMC/+hm3DzIbUWXB4GuXpMxMhcgI0L9eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM9i369n6Q5QxHTu90IaSoVC7tqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTFkYzQ4YTMtZmI3OC0z Y2YxLWJkYzYtZjQyNjEwYjljMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6zCJswpdvUvEOvoa8s62bjYSYLogT4GAK9MWKy/oOR1XL3/QGh weLY1HigCav1cAiNBVPjjRCmN0LH00uKNPlwrNi1UxMgVfnfSZcQn+asZ5A+Nvm6 H5nVaoXi9XR5aFbT0L8UEKI+p/XFK1gGn+2EX3XBMb4AccAViIcZOGEl8Vxiks8+ R42K733nNb0odcanSq1ILMXvPJ286vKlSaLTsgazo8lvwmnUIrXeG+QlfYIlQMGm QJDKUps9m8Tw4vWJZ1FxbKNjXz0CRbYIGEKG8Q7a2iuiFt63FnBYgG36KjlXW33e 2CXFP6piizfNhafs1ppccvNyDBzo8t14mZs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:24 2025 by rpki-client