$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9d34ee9-47ee-3fe2-86f2-161d74c7da5b.roa File: b9d34ee9-47ee-3fe2-86f2-161d74c7da5b.roa (raw, json) Hash identifier: 4z7p4Hg+zlZI5CE9BA/bRzn3bJ7QK/V9Vz2xjKh3Nvg= Subject key identifier: 5F:02:95:D3:BC:40:7F:68:EC:5F:57:DF:E5:48:3B:CB:9F:BF:58:B4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AE196BF79B16E815CD4080E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9d34ee9-47ee-3fe2-86f2-161d74c7da5b.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 22394 IP address blocks: 2001:4888:8061::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:bf:79:b1:6e:81:5c:d4:08:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=4ffc2efa-4ae8-47c2-8de1-5b2cbb5e872d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:07:68:cf:05:9e:55:b5:bb:29:02:1e:e9: 39:84:c9:ad:ac:5f:6e:6c:4a:a7:17:3f:3e:2b:af: 25:c0:bd:a8:3a:dc:d6:cf:a2:64:9e:70:72:c4:d8: 57:91:fc:eb:8b:d7:a3:93:b7:46:5f:aa:c6:00:ad: 8d:61:d7:f3:91:a8:51:30:0d:30:ad:ec:06:96:2f: 25:2c:d8:3a:c2:50:c6:36:17:b2:8a:24:64:85:ab: 1d:89:92:a7:2b:b4:ea:db:cc:bc:78:96:67:c9:b1: 25:c5:78:a4:bd:6d:e3:b2:ba:e8:ec:37:32:9b:19: dd:6e:de:da:16:65:01:c4:40:c3:d0:07:ad:70:61: 6c:9b:fd:05:86:2e:3f:1b:f7:37:ae:e6:b5:c5:c9: e8:7b:a4:2e:a4:ca:a1:e9:d5:d0:23:36:f7:a8:a7: c8:c8:1a:7c:6f:c1:8f:1f:0d:c5:9f:5a:34:90:1d: 11:a5:a7:99:60:d6:cc:be:08:ee:19:42:09:eb:fd: 8a:e4:52:e4:ca:82:11:64:a5:1e:43:1d:e6:e3:59: bd:e9:49:91:0d:78:3e:61:80:28:ec:11:4f:07:6f: c8:66:4b:70:e9:61:1b:3a:68:47:f9:87:44:b2:d4: 6d:3c:d5:31:4f:4c:2d:f1:a5:69:29:59:03:2e:4a: e6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:02:95:D3:BC:40:7F:68:EC:5F:57:DF:E5:48:3B:CB:9F:BF:58:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9d34ee9-47ee-3fe2-86f2-161d74c7da5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8061::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:54:3b:d4:d3:a9:31:2e:bf:2d:e7:8c:f3:38:41:6f:82:66: 43:a8:2e:b2:44:ac:d6:0c:26:f5:ef:00:71:c8:bd:ed:34:d7: ab:b5:8f:78:2d:1b:a9:71:76:76:a1:00:73:dc:9a:b9:6b:d2: 7d:c9:a3:2b:71:67:75:36:8b:75:43:34:24:91:6b:a9:f9:cd: e2:de:23:62:4c:57:33:ed:2d:d4:7d:1a:c9:fc:28:7c:b1:25: 97:4b:93:7f:4f:0e:76:31:6f:9d:8e:19:4f:64:a0:4f:f1:81: 1c:19:7b:20:4b:c1:65:5f:bd:43:a1:f7:33:be:b5:dd:ff:62: 8a:d6:c0:b0:81:a9:4b:a1:9d:b1:79:de:a4:52:e5:a4:f4:ec: 9c:37:bd:9d:83:ad:f4:1c:83:36:d2:95:72:a3:3d:f2:7f:f5: 2f:ae:97:3f:50:60:97:27:6b:4e:53:7b:c9:86:33:b8:01:d3: 26:fc:f2:1b:29:ef:42:1c:f9:d6:e3:8c:e5:42:4d:27:10:2b: 53:61:8e:89:80:f4:7a:d0:b5:70:4d:aa:00:45:67:3b:59:a1: 60:e8:b7:90:27:f7:87:9b:63:a9:68:a0:e8:71:3d:08:3a:2a: c1:34:d0:ab:75:c8:34:81:bc:9f:13:2e:94:ef:75:8d:40:d9: a3:7b:d6:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErhlr95sW6BXNQIDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk NGZmYzJlZmEtNGFlOC00N2MyLThkZTEtNWIyY2JiNWU4NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7EHaM8FnlW1uykCHuk5hMmtrF9ubEqnFz8+ K68lwL2oOtzWz6JknnByxNhXkfzri9ejk7dGX6rGAK2NYdfzkahRMA0wrewGli8l LNg6wlDGNheyiiRkhasdiZKnK7Tq28y8eJZnybElxXikvW3jsrro7Dcymxndbt7a FmUBxEDD0AetcGFsm/0Fhi4/G/c3rua1xcnoe6QupMqh6dXQIzb3qKfIyBp8b8GP Hw3Fn1o0kB0RpaeZYNbMvgjuGUIJ6/2K5FLkyoIRZKUeQx3m41m96UmRDXg+YYAo 7BFPB2/IZktw6WEbOmhH+YdEstRtPNUxT0wt8aVpKVkDLkrmcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF8CldO8QH9o7F9X3+VIO8ufv1i0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjlkMzRlZTktNDdlZS0z ZmUyLTg2ZjItMTYxZDc0YzdkYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADRUO9TTqTEuvy3njPM4QW+CZkOoLrJErNYMJvXvAHHIve0016u1 j3gtG6lxdnahAHPcmrlr0n3JoytxZ3U2i3VDNCSRa6n5zeLeI2JMVzPtLdR9Gsn8 KHyxJZdLk39PDnYxb52OGU9koE/xgRwZeyBLwWVfvUOh9zO+td3/YorWwLCBqUuh nbF53qRS5aT07Jw3vZ2DrfQcgzbSlXKjPfJ/9S+ulz9QYJcna05Te8mGM7gB0yb8 8hsp70Ic+dbjjOVCTScQK1NhjomA9HrQtXBNqgBFZztZoWDot5An94ebY6looOhx PQg6KsE00Kt1yDSBvJ8TLpTvdY1A2aN71ik= -----END CERTIFICATE-----Generated at Sat Aug 23 13:20:29 2025 by rpki-client