$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1eb468e-862a-34d8-80a7-a51a0b66f132.roa File: a1eb468e-862a-34d8-80a7-a51a0b66f132.roa (raw, json) Hash identifier: Jn+cBXaQ0CgZmt8jw9HHhiCELQukpuRzx7wDGbuBmfk= Subject key identifier: 7E:E8:CB:87:34:94:6C:58:29:40:FA:54:A9:C0:5D:9C:5A:7C:35:16 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AE196BDFD2655FF76DD626900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1eb468e-862a-34d8-80a7-a51a0b66f132.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 22394 IP address blocks: 2001:4888:8026::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:bd:fd:26:55:ff:76:dd:62:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=cdfe86e0-042d-4c93-973b-9fad33f5fc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:98:e6:8c:2e:39:95:bb:da:29:43:d0:48: 0d:2f:49:ad:4a:dc:b0:6a:48:21:97:e4:be:97:32: cc:c3:10:bf:19:f8:de:fb:5f:dc:7c:bf:70:c5:f1: c4:52:bf:5c:d3:cc:1f:73:62:ab:08:9d:f5:27:7f: c6:16:3e:9e:bf:41:29:4a:37:ef:6b:38:76:8a:66: 86:89:95:df:98:b7:64:66:aa:34:03:e4:63:1f:a6: ac:22:88:b2:4b:32:36:20:27:17:0b:d3:6a:da:47: ec:a3:3b:e0:83:9b:73:65:d4:64:1e:ab:76:76:7b: 29:67:c8:de:a8:11:08:1c:2b:2a:d1:dc:d7:b7:ab: 40:0b:78:b8:57:90:ec:13:93:ac:62:1a:d1:0e:3d: 17:5b:20:31:90:62:29:b3:7d:87:0e:60:28:e4:99: 4e:19:35:c4:1f:fc:7e:bd:45:4c:e5:5a:0d:d3:d5: 52:9a:40:b8:fc:51:58:a2:d9:ac:89:20:25:82:3c: 4c:75:69:ea:35:1f:b0:a1:99:b8:b7:c8:09:95:ab: bf:cc:86:50:42:07:54:c9:4b:16:d8:82:11:fa:cb: d3:7d:d6:2c:13:54:25:5f:a2:86:1b:4a:63:06:45: 4a:23:65:0f:32:dc:e7:4b:7f:a8:aa:92:5d:c3:b5: 7b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E8:CB:87:34:94:6C:58:29:40:FA:54:A9:C0:5D:9C:5A:7C:35:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1eb468e-862a-34d8-80a7-a51a0b66f132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8026::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:20:42:8b:95:fc:e3:93:28:72:44:97:1d:3a:88:c6:11:cc: 57:55:db:2b:56:0a:57:18:45:0b:f9:db:a1:7a:02:30:fa:f6: da:60:ca:d1:ee:3b:78:e4:48:fb:5c:4b:8a:e0:3f:53:de:0a: 9e:1d:91:63:90:3c:b1:cc:11:9c:c3:ed:17:10:26:3b:26:34: c9:e9:03:1b:85:5d:37:5e:41:c3:28:cc:c4:af:56:2b:38:03: c8:18:84:a3:a0:05:de:4e:3d:b3:55:63:f7:a7:29:be:bf:c7: c3:99:2b:dd:da:76:7f:87:fa:29:28:5b:ca:48:7c:ad:11:73: 3a:8b:40:0e:a5:60:95:5e:0e:f4:1c:b8:b7:c2:36:e1:17:c3: 4b:8c:4e:ab:75:55:0b:13:66:1e:ab:ae:22:82:5a:eb:c8:cf: 31:47:96:37:98:24:f1:94:5d:53:84:59:f9:e6:9a:58:23:c6: 9c:ce:93:e6:15:42:c8:d2:56:3f:4c:4b:97:58:a6:45:53:a1: 34:65:86:6d:b8:6f:9a:d9:2a:80:a1:a9:c8:05:05:a2:8c:a4: bf:a5:a1:f9:3b:59:cb:d2:32:85:cf:e5:ec:42:25:76:cf:18: bc:83:73:2e:12:cd:a7:e5:b7:b3:b8:55:c2:3a:6b:7f:d6:ed: a0:f3:c0:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErhlr39JlX/dt1iaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk Y2RmZTg2ZTAtMDQyZC00YzkzLTk3M2ItOWZhZDMzZjVmYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ+Y5owuOZW72ilD0EgNL0mtStywakghl+S+ lzLMwxC/Gfje+1/cfL9wxfHEUr9c08wfc2KrCJ31J3/GFj6ev0EpSjfvazh2imaG iZXfmLdkZqo0A+RjH6asIoiySzI2ICcXC9Nq2kfsozvgg5tzZdRkHqt2dnspZ8je qBEIHCsq0dzXt6tAC3i4V5DsE5OsYhrRDj0XWyAxkGIps32HDmAo5JlOGTXEH/x+ vUVM5VoN09VSmkC4/FFYotmsiSAlgjxMdWnqNR+woZm4t8gJlau/zIZQQgdUyUsW 2IIR+svTfdYsE1QlX6KGG0pjBkVKI2UPMtznS3+oqpJdw7V7TQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH7oy4c0lGxYKUD6VKnAXZxafDUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTFlYjQ2OGUtODYyYS0z NGQ4LTgwYTctYTUxYTBiNjZmMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKkgQouV/OOTKHJElx06iMYRzFdV2ytWClcYRQv526F6AjD69tpg ytHuO3jkSPtcS4rgP1PeCp4dkWOQPLHMEZzD7RcQJjsmNMnpAxuFXTdeQcMozMSv Vis4A8gYhKOgBd5OPbNVY/enKb6/x8OZK93adn+H+ikoW8pIfK0RczqLQA6lYJVe DvQcuLfCNuEXw0uMTqt1VQsTZh6rriKCWuvIzzFHljeYJPGUXVOEWfnmmlgjxpzO k+YVQsjSVj9MS5dYpkVToTRlhm24b5rZKoChqcgFBaKMpL+lofk7WcvSMoXP5exC JXbPGLyDcy4Szaflt7O4VcI6a3/W7aDzwL0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:42:34 2025 by rpki-client