$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/81dfee83-ca80-33e1-87cc-87e91050e0e8.roa File: 81dfee83-ca80-33e1-87cc-87e91050e0e8.roa (raw, json) Hash identifier: 6LbSpNoE2SeIWAf7oTL3HU9VxF2ZPzHXSYojLTRE/eo= Subject key identifier: 64:47:45:E1:3E:12:5D:B6:EB:C7:1E:55:7C:1E:B7:35:6F:F0:8E:2C Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Certificate serial: 010D0C9F4328584AF7EBDB8993D381C68AC157C0 Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/81dfee83-ca80-33e1-87cc-87e91050e0e8.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 30045 IP address blocks: 2620:62:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:db:89:93:d3:81:c6:8a:c1:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=0189213e-2b28-4cb0-9606-4ddff675679f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:71:54:ae:22:73:0a:2a:d2:dc:41:a1:11:2b: dd:a4:64:5b:76:1c:d1:89:ad:85:1c:2e:2f:8b:40: 2a:f4:0c:f1:22:37:4a:67:b0:5d:42:83:e3:18:1b: 92:48:18:73:cf:1b:dc:a8:64:95:5a:1d:7f:e6:93: 2c:cf:ce:52:de:79:76:f4:fa:7b:39:26:97:46:df: 4b:75:18:c7:3b:4e:6d:fc:fc:d7:95:e7:54:4e:ba: 2f:ca:b2:22:4c:ff:92:67:32:fe:ec:7f:0f:7e:bc: 91:52:40:ce:2c:e9:25:3b:32:7a:5e:99:2c:94:3a: f6:17:60:44:ed:a2:fc:13:b4:4c:c6:3f:8d:0d:95: ee:52:10:62:66:c0:87:c5:d3:49:1d:28:38:41:aa: 62:b9:e5:d9:25:38:06:04:16:cd:ae:ee:bc:f4:e0: 7c:61:ab:49:9f:6b:4b:a8:dc:59:05:9c:9a:bd:0f: 92:42:0b:0d:f4:c3:e8:78:db:46:90:1e:15:03:94: 29:dd:68:6d:e3:7b:85:b8:b6:eb:1a:a0:c8:6b:f3: f2:8d:b3:aa:0f:19:8f:c9:df:ab:23:b8:3f:7e:63: 7f:ea:4f:19:b8:b7:ce:07:65:ec:2e:21:5f:3f:ba: 1e:ad:81:4f:73:15:64:0c:bd:eb:b9:50:33:8d:de: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:47:45:E1:3E:12:5D:B6:EB:C7:1E:55:7C:1E:B7:35:6F:F0:8E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/81dfee83-ca80-33e1-87cc-87e91050e0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl X509v3 Authority Key Identifier: keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer sbgp-ipAddrBlock: critical IPv6: 2620:62:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d4:fb:96:0e:f0:26:31:55:d6:6a:1d:17:cd:3d:65:18:52: 82:bd:ad:f1:c3:f4:82:41:0e:de:b5:c8:53:36:4b:42:67:39: 2d:40:a2:eb:2e:87:45:1e:52:92:85:d5:e2:71:fc:8a:e7:22: 4f:d3:09:aa:05:74:6d:6c:a8:28:ad:ad:4e:a2:07:c5:22:68: c6:7b:17:7e:75:c5:01:02:b8:87:da:9e:ca:ff:53:3c:96:8e: 6e:be:3d:24:44:ca:11:6a:93:9e:96:fa:de:7f:d1:66:0f:32: 91:d9:d5:d3:74:45:ac:25:46:aa:a5:b3:6f:7f:36:15:f7:4a: 4c:69:bf:11:d6:52:2e:b5:47:00:e0:4a:2c:b3:e6:e5:f2:a4: a3:85:69:95:c1:83:48:da:55:4f:17:35:0f:6c:d7:53:24:69: 58:05:22:a3:04:9d:24:14:29:a9:9b:71:c9:7a:84:b5:b3:a1: 42:3d:47:f1:1d:5e:a5:1e:58:41:9b:3c:25:23:fc:f2:52:4a: e0:f5:7f:78:e6:ca:5d:db:a2:fc:12:ea:82:7c:ca:7a:82:d2: 7f:61:a8:8d:e8:56:8a:9b:e6:86:86:be:73:fd:d6:24:11:90: 09:b1:03:4f:6e:d9:ea:73:3b:39:5f:5e:58:0c:81:c8:12:a1: 05:be:4a:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr369uJk9OBxorBV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk YjZiMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MDE4OTIxM2UtMmIyOC00Y2IwLTk2MDYtNGRkZmY2NzU2NzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnFUriJzCirS3EGhESvdpGRbdhzRia2FHC4v i0Aq9AzxIjdKZ7BdQoPjGBuSSBhzzxvcqGSVWh1/5pMsz85S3nl29Pp7OSaXRt9L dRjHO05t/PzXledUTrovyrIiTP+SZzL+7H8PfryRUkDOLOklOzJ6XpkslDr2F2BE 7aL8E7RMxj+NDZXuUhBiZsCHxdNJHSg4QapiueXZJTgGBBbNru689OB8YatJn2tL qNxZBZyavQ+SQgsN9MPoeNtGkB4VA5Qp3Wht43uFuLbrGqDIa/PyjbOqDxmPyd+r I7g/fmN/6k8ZuLfOB2XsLiFfP7oerYFPcxVkDL3ruVAzjd4tSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGRHReE+El2268ceVXwetzVv8I4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvODFkZmVlODMtY2E4MC0z M2UxLTg3Y2MtODdlOTEwNTBlMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5 NmE5MWRiNmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAYkAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTU+5YO8CYxVdZqHRfNPWUYUoK9rfHD9IJBDt61yFM2S0JnOS1A ousuh0UeUpKF1eJx/IrnIk/TCaoFdG1sqCitrU6iB8UiaMZ7F351xQECuIfansr/ UzyWjm6+PSREyhFqk56W+t5/0WYPMpHZ1dN0RawlRqqls29/NhX3SkxpvxHWUi61 RwDgSiyz5uXypKOFaZXBg0jaVU8XNQ9s11MkaVgFIqMEnSQUKambccl6hLWzoUI9 R/EdXqUeWEGbPCUj/PJSSuD1f3jmyl3bovwS6oJ8ynqC0n9hqI3oVoqb5oaGvnP9 1iQRkAmxA09u2epzOzlfXlgMgcgSoQW+Su0= -----END CERTIFICATE-----Generated at Mon Aug 25 16:26:45 2025 by rpki-client