$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa File: 02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa (raw, json) Hash identifier: Jp7tfe0Oz+O3g9SbKKuZuXO1hQJcrTwA1+3nJOrqCKg= Subject key identifier: BA:7B:95:D3:71:4B:E7:E3:C4:BE:54:3E:EE:C6:63:B1:49:7C:EF:2F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C2BF9282A51A7A4859A80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397215 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:2b:f9:28:2a:51:a7:a4:85:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=985d113a-1b8d-433c-b14c-58c6bdd5a999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:e6:50:9c:79:a0:ff:af:84:63:c4:32:61: 86:d1:eb:7e:bd:8f:f4:6a:a6:3c:97:68:ef:53:c5: a6:40:16:a2:f8:5d:54:32:4f:70:07:cd:b5:96:8f: 6e:f7:60:6b:10:c1:a3:aa:38:bd:29:d1:5c:7f:03: 8a:1c:f4:02:64:2f:5b:3f:28:5d:f9:25:fc:a7:a7: 44:0e:8b:4c:e9:13:08:ee:e7:a9:96:64:6f:5b:d7: de:12:37:f7:2a:f9:ec:5a:ab:97:f7:01:7a:08:3a: fa:5c:b1:b7:dc:89:9f:b0:9a:b2:76:49:e7:c6:3c: 00:9e:39:7e:7b:1a:7e:8b:7c:19:30:2a:f8:a9:ab: 9f:21:ef:96:ef:54:4f:7d:0b:0f:87:61:10:6f:f1: 74:d3:9a:33:e6:20:37:34:d3:19:37:bf:fe:3c:a1: 76:81:fb:93:89:13:71:9e:64:1c:c6:f9:66:c5:2f: 2e:a7:f7:54:67:b9:4a:37:5a:16:78:84:82:20:c1: b4:a8:94:d2:cb:e5:ef:46:96:9c:8f:5c:3a:81:e0: ac:09:73:45:73:cb:c6:ad:73:bb:4d:38:00:c9:d0: 58:f9:ac:5e:c3:cf:5a:7c:8e:2f:01:32:71:7e:64: 4d:56:4b:46:be:8b:e2:e5:69:34:9f:d1:28:09:df: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7B:95:D3:71:4B:E7:E3:C4:BE:54:3E:EE:C6:63:B1:49:7C:EF:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2a:a6:15:af:d0:ef:e7:c6:7b:a6:0b:59:0f:fe:bc:77:f6: 39:f4:8d:18:17:54:00:c8:ed:2a:1b:aa:e8:2b:ba:de:c7:df: 2a:bd:5d:db:ea:80:92:a1:cd:f0:11:17:34:c7:84:9c:47:b9: a4:9d:e8:31:cd:52:1d:9c:0b:16:a6:fb:a3:a6:65:a8:af:e0: 05:e2:4c:f0:4e:44:9c:db:3f:64:15:35:a4:c5:0c:02:43:fa: 65:ed:b6:2c:e4:cf:c9:be:c3:99:3b:aa:2e:5a:f8:c7:1d:19: 22:32:7b:d4:37:c1:a0:89:4c:82:7c:e0:8f:d9:24:e7:1c:70: c3:d8:b5:98:70:7d:98:22:be:af:25:60:c8:2a:b9:da:36:83: 2e:6d:b8:3f:39:d7:df:72:3f:04:2d:4c:b6:c5:09:c1:01:14: 3a:f2:90:69:68:1f:e2:fb:e3:af:12:ef:0f:6a:82:ea:df:78: 2c:cf:d8:27:de:11:9b:8d:d9:92:4b:ed:fe:26:7f:f5:dc:c6: 7a:ee:c9:c7:60:0c:a7:23:77:a2:08:c1:78:bc:93:bf:3f:47: 05:8d:1f:d5:20:b6:71:82:cb:21:f5:e3:32:30:70:c2:d7:d0: 8c:7a:7f:ea:f5:7f:57:88:d7:4d:f7:c6:3e:64:ba:67:60:02: c0:03:d9:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCv5KCpRp6SFmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OTg1ZDExM2EtMWI4ZC00MzNjLWIxNGMtNThjNmJkZDVhOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn/mUJx5oP+vhGPEMmGG0et+vY/0aqY8l2jv U8WmQBai+F1UMk9wB821lo9u92BrEMGjqji9KdFcfwOKHPQCZC9bPyhd+SX8p6dE DotM6RMI7ueplmRvW9feEjf3KvnsWquX9wF6CDr6XLG33ImfsJqydknnxjwAnjl+ exp+i3wZMCr4qaufIe+W71RPfQsPh2EQb/F005oz5iA3NNMZN7/+PKF2gfuTiRNx nmQcxvlmxS8up/dUZ7lKN1oWeISCIMG0qJTSy+XvRpacj1w6geCsCXNFc8vGrXO7 TTgAydBY+axew89afI4vATJxfmRNVktGvovi5Wk0n9EoCd9kLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLp7ldNxS+fjxL5UPu7GY7FJfO8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDJhOWQ3NDctYjBkZi0z ZWY4LTlkNGEtOWE2NzM0MzYzNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQqphWv0O/nxnumC1kP/rx39jn0jRgXVADI7Sobqugrut7H3yq9 XdvqgJKhzfARFzTHhJxHuaSd6DHNUh2cCxam+6OmZaiv4AXiTPBORJzbP2QVNaTF DAJD+mXttizkz8m+w5k7qi5a+McdGSIye9Q3waCJTIJ84I/ZJOcccMPYtZhwfZgi vq8lYMgqudo2gy5tuD85199yPwQtTLbFCcEBFDrykGloH+L7468S7w9qgurfeCzP 2CfeEZuN2ZJL7f4mf/XcxnruycdgDKcjd6IIwXi8k78/RwWNH9UgtnGCyyH14zIw cMLX0Ix6f+r1f1eI1033xj5kumdgAsAD2RE= -----END CERTIFICATE-----Generated at Thu Oct 30 15:42:25 2025 by rpki-client