$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258106a7-6686-31b8-91f0-ae12a2627832.roa File: 258106a7-6686-31b8-91f0-ae12a2627832.roa (raw, json) Hash identifier: MFkmSiDXj1S0RFhe0QIeAZjN9tqTR3UTAEMqLmBaUEg= Subject key identifier: FF:46:ED:F5:59:50:D8:A0:0E:B1:65:85:CF:3F:AA:11:A3:82:B8:0D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AE196C03B37FE5FBADA1C7980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258106a7-6686-31b8-91f0-ae12a2627832.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 22394 IP address blocks: 2001:4888:802f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:c0:3b:37:fe:5f:ba:da:1c:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=adb3bad6-cd5b-435d-8d9a-f85ab84d17e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:40:fc:0e:55:60:ae:d9:ec:dd:95:4e:61: 03:40:a0:f1:50:bb:f1:15:d4:9a:d7:9e:7a:23:25: 70:7a:3c:5d:ea:43:2c:81:a7:17:07:8b:9d:c2:37: 3b:5c:e6:5c:77:1a:d1:9d:47:c8:d0:df:32:fd:5a: 00:df:a3:72:68:d4:05:0a:8b:3d:81:a6:a4:b9:1f: 1e:be:b4:87:63:65:9a:da:27:00:3e:06:9d:b0:00: e4:87:b9:38:34:d0:85:e4:e8:ed:49:cb:be:95:b3: 3b:62:6e:cf:b8:0f:35:f0:a0:4a:a7:8d:7b:37:60: bc:58:80:10:4a:e9:b8:bf:42:ae:28:b6:40:8c:24: bc:f8:85:e5:0b:47:b9:81:ed:49:e4:5b:9a:d2:a4: 7c:80:e7:50:96:27:78:84:d6:65:57:82:d4:7e:2f: b9:d0:82:9f:ca:c1:f9:73:86:58:de:1e:63:a1:43: 55:bd:1e:e1:ce:47:a0:bd:9f:8b:f4:d9:88:0d:a7: e9:69:48:e9:08:3e:77:34:34:36:9a:37:26:2b:17: 6e:14:52:ba:8f:30:d6:27:26:2a:94:32:7f:89:1d: f9:dd:e6:c2:01:b5:67:90:9e:38:e0:03:a8:71:0c: 50:4b:3d:9c:74:51:52:bc:86:11:59:60:24:7d:25: 83:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:46:ED:F5:59:50:D8:A0:0E:B1:65:85:CF:3F:AA:11:A3:82:B8:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258106a7-6686-31b8-91f0-ae12a2627832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:802f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:53:ae:f2:a9:63:5e:4a:5d:26:2f:b1:84:2b:01:40:87:4d: 2d:dd:b3:c8:1e:90:cb:e0:9d:2a:2d:b5:9e:9b:56:06:46:cc: c3:75:fb:16:9c:eb:15:15:0f:65:b9:70:6c:99:e8:dd:1b:49: 86:bf:aa:04:32:45:2c:e5:c9:a1:e3:70:a6:cb:c0:3a:63:44: e6:d5:53:7c:26:6e:73:46:62:0a:3a:69:98:b5:9a:83:d7:03: 81:3c:10:69:bb:03:12:ff:c3:a3:a9:00:69:21:a2:13:0e:25: 09:35:21:7d:da:8f:91:be:71:00:28:a3:47:0e:e5:cf:76:a1: 28:c2:ed:00:f1:4b:07:ea:9e:af:9a:80:e6:9f:4b:bb:15:57: 68:63:15:54:ed:0d:fd:c8:d6:d3:69:0d:37:29:aa:c5:02:8c: 7e:bb:31:a4:d0:58:a9:d6:e2:c8:47:15:11:0e:47:e6:04:7a: 15:ef:c5:b7:8f:a7:35:5f:bf:35:6c:20:d3:0e:af:4e:d6:68: 95:76:f1:6e:c8:24:be:54:b1:a9:3f:81:1b:9e:27:79:3a:e7: dc:7c:87:05:8e:70:85:bb:61:23:db:61:03:db:2d:08:48:23: 70:9c:00:73:8e:9f:7e:0e:52:83:ff:d3:9a:a3:4b:52:0a:d1: cb:3e:88:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErhlsA7N/5futoceYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YWRiM2JhZDYtY2Q1Yi00MzVkLThkOWEtZjg1YWI4NGQxN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxpA/A5VYK7Z7N2VTmEDQKDxULvxFdSa1556 IyVwejxd6kMsgacXB4udwjc7XOZcdxrRnUfI0N8y/VoA36NyaNQFCos9gaakuR8e vrSHY2Wa2icAPgadsADkh7k4NNCF5OjtScu+lbM7Ym7PuA818KBKp417N2C8WIAQ Sum4v0KuKLZAjCS8+IXlC0e5ge1J5Fua0qR8gOdQlid4hNZlV4LUfi+50IKfysH5 c4ZY3h5joUNVvR7hzkegvZ+L9NmIDafpaUjpCD53NDQ2mjcmKxduFFK6jzDWJyYq lDJ/iR353ebCAbVnkJ444AOocQxQSz2cdFFSvIYRWWAkfSWDIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP9G7fVZUNigDrFlhc8/qhGjgrgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjU4MTA2YTctNjY4Ni0z MWI4LTkxZjAtYWUxMmEyNjI3ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF1TrvKpY15KXSYvsYQrAUCHTS3ds8gekMvgnSottZ6bVgZGzMN1 +xac6xUVD2W5cGyZ6N0bSYa/qgQyRSzlyaHjcKbLwDpjRObVU3wmbnNGYgo6aZi1 moPXA4E8EGm7AxL/w6OpAGkhohMOJQk1IX3aj5G+cQAoo0cO5c92oSjC7QDxSwfq nq+agOafS7sVV2hjFVTtDf3I1tNpDTcpqsUCjH67MaTQWKnW4shHFREOR+YEehXv xbePpzVfvzVsINMOr07WaJV28W7IJL5Usak/gRueJ3k659x8hwWOcIW7YSPbYQPb LQhII3CcAHOOn34OUoP/05qjS1IK0cs+iNM= -----END CERTIFICATE-----Generated at Sat Nov 1 15:25:43 2025 by rpki-client