$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa File: 2cc6c38a-68cb-3c34-9564-f77e506f710d.roa (raw, json) Hash identifier: ImU3X+g3nvev2na5PRemMFk/XuOXQU/Egc2KlkCbw1U= Subject key identifier: D5:B4:E9:D4:6E:95:40:1A:7B:F6:49:25:0A:66:9D:89:8C:DB:FD:28 Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F4328584B33F1B46410A835E28A251B80 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 395494 IP address blocks: 2605:2cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b4:64:10:a8:35:e2:8a:25:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=b41c0b5a-9d71-4b9d-ba49-6d15c6887d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:19:5a:ba:fe:8b:ca:ba:46:43:df:96:9d:80: f0:26:73:5a:8b:38:1e:66:4f:56:64:f3:5b:47:57: da:21:02:27:9c:45:57:38:63:a7:04:f9:e3:f5:73: 46:76:5b:a4:9f:54:76:e6:be:2c:d7:da:19:4f:a3: ff:ae:2b:67:0e:dc:11:8d:a9:6d:42:e8:08:d8:68: 21:23:d1:e6:e2:40:99:8b:6a:f1:48:6e:51:a9:7f: 9f:24:b8:0d:89:64:c5:26:38:5e:66:57:c7:cb:3f: d3:ad:65:df:e3:a9:c5:b6:1b:2a:fc:34:20:23:47: f7:e2:fa:63:dd:b3:f4:f8:e4:32:68:d7:31:04:96: 40:db:d8:78:ca:6c:8f:9f:df:dc:38:f4:b0:ab:eb: 3a:17:fb:80:50:2a:1a:c7:e2:c2:8a:1f:3a:7c:c8: 88:c4:2c:de:ca:ef:3f:6b:2a:40:e9:89:3a:57:de: 62:98:3e:fc:ef:ed:15:cc:8e:c0:d9:ee:42:ab:90: ed:f0:e7:27:21:e1:db:f2:0e:58:9c:85:dc:8e:5f: c2:2a:2b:e8:58:13:a6:6d:6e:5b:79:4a:4d:11:84: 1d:15:59:4b:e9:d9:6f:e0:ae:61:5a:f4:b9:4a:4f: 53:00:5a:0e:c2:41:40:e9:a1:10:aa:71:33:37:e4: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B4:E9:D4:6E:95:40:1A:7B:F6:49:25:0A:66:9D:89:8C:DB:FD:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv6: 2605:2cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:10:6a:23:ed:a5:c7:4c:78:85:5b:f0:83:5f:07:3b:24:53: ee:fc:0f:93:11:0b:15:fb:e7:52:ab:cf:49:39:53:f9:c6:57: 9b:42:69:c5:87:51:6c:15:5c:b6:84:82:cc:55:a7:83:61:36: f5:1f:0b:83:01:b4:c3:35:5c:49:61:2f:73:32:8b:e2:4a:9f: 9d:fe:48:24:17:79:9f:16:67:3b:af:fb:43:45:94:91:22:f4: 51:56:ec:8f:19:b1:17:9b:1b:2b:5a:f5:69:b8:17:95:b4:32: 02:dc:16:b9:1e:9a:3a:f3:87:88:18:6c:70:22:b2:51:f2:a0: fa:49:ad:90:74:5e:07:88:85:b5:ec:28:5a:33:e4:51:87:63: 76:d8:57:3c:90:4a:d4:fa:f8:6b:8a:b2:c2:70:35:12:ea:2c: 99:ab:2a:0d:84:24:5b:de:ea:90:ed:9d:95:37:db:36:3c:7a: ab:e4:59:ec:b0:5f:bc:7c:50:74:81:f1:9b:c4:ba:87:8f:11: fe:91:88:51:24:94:96:22:87:d5:15:c4:08:13:bb:4c:8e:ee: 6a:67:63:fc:25:d4:b0:51:49:7b:63:ab:ae:3b:0f:ce:da:24: 5e:ac:fd:85:91:b2:98:b0:e1:f9:87:1f:91:ab:03:df:60:49: a0:fd:56:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8bRkEKg14oolG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YjQxYzBiNWEtOWQ3MS00YjlkLWJhNDktNmQxNWM2ODg3ZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBlauv6LyrpGQ9+WnYDwJnNaizgeZk9WZPNb R1faIQInnEVXOGOnBPnj9XNGdlukn1R25r4s19oZT6P/ritnDtwRjaltQugI2Ggh I9Hm4kCZi2rxSG5RqX+fJLgNiWTFJjheZlfHyz/TrWXf46nFthsq/DQgI0f34vpj 3bP0+OQyaNcxBJZA29h4ymyPn9/cOPSwq+s6F/uAUCoax+LCih86fMiIxCzeyu8/ aypA6Yk6V95imD787+0VzI7A2e5Cq5Dt8OcnIeHb8g5YnIXcjl/CKivoWBOmbW5b eUpNEYQdFVlL6dlv4K5hWvS5Sk9TAFoOwkFA6aEQqnEzN+TqrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNW06dRulUAae/ZJJQpmnYmM2/0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvMmNjNmMzOGEtNjhjYi0z YzM0LTk1NjQtZjc3ZTUwNmY3MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUswDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0EGoj7aXHTHiFW/CDXwc7JFPu/A+TEQsV++dSq89JOVP5xlebQmnF h1FsFVy2hILMVaeDYTb1HwuDAbTDNVxJYS9zMoviSp+d/kgkF3mfFmc7r/tDRZSR IvRRVuyPGbEXmxsrWvVpuBeVtDIC3Ba5Hpo684eIGGxwIrJR8qD6Sa2QdF4HiIW1 7ChaM+RRh2N22Fc8kErU+vhrirLCcDUS6iyZqyoNhCRb3uqQ7Z2VN9s2PHqr5Fns sF+8fFB0gfGbxLqHjxH+kYhRJJSWIofVFcQIE7tMju5qZ2P8JdSwUUl7Y6uuOw/O 2iRerP2FkbKYsOH5hx+RqwPfYEmg/VaL -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:36 2025 by rpki-client