$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a241abc7-44e5-303d-b68b-d56800874c3c.roa File: a241abc7-44e5-303d-b68b-d56800874c3c.roa (raw, json) Hash identifier: 5WwIG5Xx0RK4r7l1bJpZasgd98Qhqc4HNIupo3dZSQk= Subject key identifier: F3:45:58:7D:63:9D:44:60:1F:E1:6E:13:90:5C:EE:3C:C1:49:5E:0E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AE196BE97A1E11FA885109E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a241abc7-44e5-303d-b68b-d56800874c3c.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 22394 IP address blocks: 2001:4888:8038::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:be:97:a1:e1:1f:a8:85:10:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=36e11308-020a-463b-92d9-c0736b2fc6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:da:e1:de:da:ce:1b:6f:4f:4f:ba:fb:aa:6b: 5b:a3:f8:d5:da:29:8c:92:b7:6a:c2:93:bf:5d:6b: f9:fe:61:67:9b:2d:63:3d:3b:5d:ee:aa:da:aa:9f: 65:64:a7:b7:2d:5d:ea:36:00:23:b0:8d:36:25:6f: 67:ef:f5:da:02:80:86:a4:04:9b:6c:e9:8c:8d:e5: fc:4e:e3:19:85:3a:4c:04:e4:3e:0c:eb:b4:be:db: 78:6b:8c:74:95:ad:aa:e4:fe:a1:3d:d9:6a:17:11: 71:96:6f:3e:55:63:d2:55:a7:38:94:24:80:ec:1f: 34:49:e8:c9:27:0e:0b:6c:3f:21:6f:ef:1c:fa:6d: 68:88:9c:ba:f6:58:91:d1:d0:17:5b:90:03:f8:ae: 69:97:f6:c5:61:7a:63:d9:2e:b7:9f:6b:f6:bf:93: 22:f9:f3:76:f3:13:86:d4:98:c7:0c:c7:ff:49:51: 14:a5:5e:13:3a:fa:25:e4:1b:fd:94:47:af:81:b3: b5:50:ae:de:8b:5d:c9:57:7e:1c:8f:f1:c2:2c:01: 1e:76:d5:f2:1e:65:e0:90:9a:9b:a8:29:5d:91:df: fc:cd:e6:b4:e5:a8:03:ce:59:56:2f:70:9c:7f:20: 36:7d:5b:b0:c9:3a:0a:53:0f:4d:32:c7:d6:36:ec: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:45:58:7D:63:9D:44:60:1F:E1:6E:13:90:5C:EE:3C:C1:49:5E:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a241abc7-44e5-303d-b68b-d56800874c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8038::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:84:6d:a4:4b:b8:8d:b6:2f:55:0e:ef:fd:86:63:f9:bc:74: 49:85:fc:46:e2:77:cf:10:e3:0e:6d:93:49:f4:76:2b:b8:8f: c1:9b:34:df:f4:a5:a1:b6:9b:e3:89:97:d2:80:40:1b:3f:03: ec:fc:05:65:b3:36:30:c8:27:c9:13:fd:71:e2:2d:f8:19:2a: de:7c:6c:d1:68:60:6c:18:73:36:f7:ba:e1:00:3e:c0:0b:be: c6:2d:89:3a:e0:2e:25:73:e1:29:15:b0:41:63:41:e4:2c:95: 74:72:ab:91:f9:90:0d:90:b7:d3:be:0f:2b:29:aa:64:77:a1: c2:9e:79:94:34:84:fc:13:61:96:00:c9:56:d1:96:12:97:36: a4:df:dd:bd:e4:e9:2f:2f:ed:18:a5:61:27:d1:0e:ee:3c:bf: ae:43:b7:9c:6b:a2:39:4a:aa:79:8e:61:ee:e8:55:25:d6:a2: 5b:f4:cd:d5:78:01:07:73:2c:c6:ac:6e:bf:78:5e:e9:29:c0: b4:b0:d8:f3:43:4d:25:1a:6c:4e:f7:4c:d3:fe:25:82:2e:3e: fd:fa:7c:53:78:09:bd:0a:ec:85:93:c9:77:52:91:8c:c3:5c: 0b:f6:41:37:a3:bb:a0:08:c8:54:16:86:a2:5a:3a:9f:60:e2: 64:aa:8a:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErhlr6XoeEfqIUQngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MzZlMTEzMDgtMDIwYS00NjNiLTkyZDktYzA3MzZiMmZjNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtrh3trOG29PT7r7qmtbo/jV2imMkrdqwpO/ XWv5/mFnmy1jPTtd7qraqp9lZKe3LV3qNgAjsI02JW9n7/XaAoCGpASbbOmMjeX8 TuMZhTpMBOQ+DOu0vtt4a4x0la2q5P6hPdlqFxFxlm8+VWPSVac4lCSA7B80SejJ Jw4LbD8hb+8c+m1oiJy69liR0dAXW5AD+K5pl/bFYXpj2S63n2v2v5Mi+fN28xOG 1JjHDMf/SVEUpV4TOvol5Bv9lEevgbO1UK7ei13JV34cj/HCLAEedtXyHmXgkJqb qCldkd/8zea05agDzllWL3CcfyA2fVuwyToKUw9NMsfWNuwFxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPNFWH1jnURgH+FuE5Bc7jzBSV4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTI0MWFiYzctNDRlNS0z MDNkLWI2OGItZDU2ODAwODc0YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJeEbaRLuI22L1UO7/2GY/m8dEmF/Ebid88Q4w5tk0n0diu4j8Gb NN/0paG2m+OJl9KAQBs/A+z8BWWzNjDIJ8kT/XHiLfgZKt58bNFoYGwYczb3uuEA PsALvsYtiTrgLiVz4SkVsEFjQeQslXRyq5H5kA2Qt9O+DyspqmR3ocKeeZQ0hPwT YZYAyVbRlhKXNqTf3b3k6S8v7RilYSfRDu48v65Dt5xrojlKqnmOYe7oVSXWolv0 zdV4AQdzLMasbr94XukpwLSw2PNDTSUabE73TNP+JYIuPv36fFN4Cb0K7IWTyXdS kYzDXAv2QTeju6AIyFQWhqJaOp9g4mSqimI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:55 2025 by rpki-client