$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa File: db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa (raw, json) Hash identifier: 3zrmkUqp8SaJYnB5p9/kmc8ITNqjGTcdP5Ipe+30fTM= Subject key identifier: D2:2E:18:D8:7F:DF:34:34:69:81:F7:26:C1:DA:B4:04:1C:83:71:84 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584B2FC199B24A2E94618D89C200 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 29838 IP address blocks: 2602:ffb5::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:99:b2:4a:2e:94:61:8d:89:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=4d813862-f737-45e2-99f6-53b9664c6646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5b:ca:bb:69:1b:88:58:11:81:26:26:29:5f: d3:dd:c0:a8:0b:5c:98:d9:f4:44:db:b9:d9:1b:4f: d5:19:4e:97:f1:17:a5:10:13:40:8a:bc:5e:4e:77: 03:47:8d:5f:52:b6:bb:4c:85:b2:d1:ed:08:e5:8b: 13:ab:6f:9e:f0:80:29:d4:3c:2b:46:bb:d1:da:ae: ef:e2:39:ee:fa:0b:01:f4:19:8c:76:b7:1e:c2:26: 04:87:9a:86:5a:32:fa:50:6e:bc:89:81:fb:06:f8: 00:2f:a4:55:0c:07:8d:7a:1f:a7:15:df:98:90:63: 6b:9a:14:2b:3f:b1:61:26:a6:20:fc:af:f7:af:86: db:3f:fb:3e:d9:59:6a:9e:f9:0f:87:19:b8:3d:a6: b0:b6:70:2e:a5:f4:3a:75:b8:91:0e:b9:3f:e6:ff: ef:8e:cd:aa:04:51:e0:b3:a1:bf:cf:15:87:ee:b7: 19:ff:7a:30:18:a1:1d:bd:ea:07:18:07:b6:92:0b: 86:fa:7e:a9:5b:0e:ea:eb:92:f4:10:d0:d7:9b:35: 8f:65:9b:b8:4f:f3:6b:69:f1:bb:f1:f4:96:89:00: 41:14:f1:3c:86:1f:b8:a7:eb:b2:c3:36:5e:1a:38: a6:c8:39:55:6b:ba:21:cc:6c:57:ca:4f:a1:cd:5c: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:18:D8:7F:DF:34:34:69:81:F7:26:C1:DA:B4:04:1C:83:71:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffb5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:14:65:ff:3c:b7:df:3c:94:e6:67:da:67:f8:23:0c:47:de: fc:bd:43:0b:ba:c6:32:87:82:5e:b0:f5:c9:58:cd:ee:6c:fb: a0:8a:41:4a:e2:84:23:68:68:5f:2b:2e:b1:25:76:7a:40:dd: 2b:59:c7:10:b5:7b:20:d6:0c:2f:1b:5e:f1:bd:a6:b2:5d:bb: 97:12:87:88:41:ff:01:b7:b1:d4:89:e9:a6:73:60:a5:a5:91: bc:95:41:f6:7c:dd:76:98:83:65:92:e1:46:06:74:79:0b:81: 34:1b:3a:cd:b1:8a:57:5c:a5:f1:e1:0f:36:8c:99:f1:ac:fe: 43:b3:d8:a8:a2:b2:2f:aa:9e:73:0d:58:a6:bf:08:36:ef:77: a5:d1:2d:c9:db:93:7a:0d:83:07:da:ed:56:b8:b8:a4:c6:ad: d6:63:81:34:74:1e:b7:6d:0a:40:30:b2:45:30:b8:96:46:f5: d6:16:c1:a8:86:d4:63:9e:5d:ca:21:de:88:ae:0b:28:88:91: 3b:61:f8:a1:5c:ec:1c:d9:fc:28:87:89:6a:fd:6c:72:32:c9: 7a:75:26:c3:1b:35:5a:ed:d1:f0:84:6b:fe:ee:9f:71:fe:a1: 76:a6:f9:fd:5b:bf:aa:e8:08:69:ef:e3:03:4b:9f:10:0e:14: e9:cd:84:bc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsvwZmySi6UYY2JwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NGQ4MTM4NjItZjczNy00NWUyLTk5ZjYtNTNiOTY2NGM2NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFvKu2kbiFgRgSYmKV/T3cCoC1yY2fRE27nZ G0/VGU6X8RelEBNAirxeTncDR41fUra7TIWy0e0I5YsTq2+e8IAp1DwrRrvR2q7v 4jnu+gsB9BmMdrcewiYEh5qGWjL6UG68iYH7BvgAL6RVDAeNeh+nFd+YkGNrmhQr P7FhJqYg/K/3r4bbP/s+2VlqnvkPhxm4PaawtnAupfQ6dbiRDrk/5v/vjs2qBFHg s6G/zxWH7rcZ/3owGKEdveoHGAe2kguG+n6pWw7q65L0ENDXmzWPZZu4T/NrafG7 8fSWiQBBFPE8hh+4p+uywzZeGjimyDlVa7ohzGxXyk+hzVzCRwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNIuGNh/3zQ0aYH3JsHatAQcg3GEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZGI0OGNiZWMtNDgxMS0z MWEzLTk4Y2YtYWI4YTNkZGUyMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/tQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIxRl/zy33zyU5mfaZ/gjDEfe/L1DC7rGMoeCXrD1yVjN7mz7oIpB SuKEI2hoXysusSV2ekDdK1nHELV7INYMLxte8b2msl27lxKHiEH/Abex1InppnNg paWRvJVB9nzddpiDZZLhRgZ0eQuBNBs6zbGKV1yl8eEPNoyZ8az+Q7PYqKKyL6qe cw1Ypr8INu93pdEtyduTeg2DB9rtVri4pMat1mOBNHQet20KQDCyRTC4lkb11hbB qIbUY55dyiHeiK4LKIiRO2H4oVzsHNn8KIeJav1scjLJenUmwxs1Wu3R8IRr/u6f cf6hdqb5/Vu/qugIae/jA0ufEA4U6c2EvA== -----END CERTIFICATE-----Generated at Sat Oct 11 10:10:02 2025 by rpki-client