$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa File: 2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa (raw, json) Hash identifier: a3TYsbezv33l14Nq3uSu2juSC2djGnOkkJcgIonOy9E= Subject key identifier: C0:81:D4:B0:F1:78:CF:53:CC:4E:3E:26:51:FF:AF:66:88:A5:F5:E6 Certificate issuer: /CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60 Certificate serial: 010D0C9F4328584B6BC75F7B2510185423483780 Authority key identifier: 56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397059 IP address blocks: 2620:4a:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5f:7b:25:10:18:54:23:48:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=9431ea43-de51-4924-a66a-b5dba79391a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:90:76:3f:2d:f1:da:f8:78:04:cd:df:61:9d: 40:55:24:10:6e:96:07:7b:d7:7e:60:e6:2d:f9:79: ae:fa:ac:36:60:8e:22:da:81:ad:51:26:17:dd:df: 34:4f:e9:0e:1e:0b:6b:0f:03:97:62:34:d8:74:e2: 36:26:0f:7e:76:bb:ce:07:91:46:e0:25:ea:bf:56: 8e:4e:67:d8:83:ea:2a:85:da:83:b1:2b:7a:1f:ae: d9:c7:8b:84:df:f5:4a:c3:73:21:22:52:bd:0e:ce: bd:9c:68:66:14:d0:7e:c3:c8:4e:e7:3f:dd:44:90: 0e:a8:d3:62:75:3a:1b:95:e4:04:b9:73:0e:a5:39: 87:7c:6d:07:88:b5:16:23:37:3a:a3:31:a1:f8:94: 26:ab:42:d6:21:17:3c:80:f8:83:fd:09:6e:68:67: 0e:39:dc:c2:78:a5:4a:85:66:56:6c:d6:22:17:ee: 4d:d7:4b:f2:e5:b3:40:c6:d0:35:ce:1b:57:da:fd: 78:b7:f4:5e:d2:6d:eb:39:56:e3:6c:7e:75:6f:59: 69:53:b3:21:02:b0:85:80:86:b5:fc:4d:43:c2:e6: 9e:cf:18:be:00:21:72:ba:3f:11:9f:7a:4e:3b:0b: a1:e0:35:ed:57:ba:9d:e2:9c:97:e2:44:af:d5:36: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:81:D4:B0:F1:78:CF:53:CC:4E:3E:26:51:FF:AF:66:88:A5:F5:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.crl X509v3 Authority Key Identifier: keyid:56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer sbgp-ipAddrBlock: critical IPv6: 2620:4a:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:41:b3:9d:a6:b4:5a:7b:12:a4:81:fe:6f:84:96:00:5d:ec: 0d:9e:3e:b6:ef:6f:77:d2:98:65:aa:4f:c4:e6:ab:95:ea:91: a6:c6:78:b9:c7:2a:ee:45:06:c0:89:c4:8a:84:0c:77:89:10: f2:7f:87:da:fd:f9:0b:35:d2:18:29:3b:b1:e0:b2:e2:74:df: 45:93:24:d6:91:ca:5e:b1:4e:b5:3f:e8:cd:09:d6:56:07:43: a8:c6:d2:e9:b7:a3:72:f1:a5:33:c3:63:92:d4:19:4e:a1:05: c7:a7:1f:5d:e1:02:ae:de:ae:80:0b:93:67:53:03:db:54:7d: db:28:a6:a5:90:43:66:3d:e5:9f:88:7f:36:7a:7e:13:56:83: 60:f6:5f:46:2a:87:53:08:25:9d:79:aa:66:ec:6e:2d:11:25: 24:c0:96:cb:1e:d7:76:ff:50:81:0e:d2:24:31:90:cc:bb:a9: 3f:15:27:b9:8d:b6:07:43:21:a1:23:80:a7:62:a0:ff:21:c7: 73:a0:8e:81:5f:f1:8f:a5:8a:85:c9:67:b4:03:da:6a:18:85: 4e:0d:70:b7:0b:bb:6e:21:f3:60:9b:ea:44:aa:26:6d:90:be: c0:9c:45:5e:9c:fc:86:24:e2:42:ff:31:bc:5e:c4:1c:a8:03: f6:1e:4b:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtrx197JRAYVCNIN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNjNzc2M2UtN2Y3Ni00OTkyLThhYTItZjU3MmQ1YjBi ZjYwMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OTQzMWVhNDMtZGU1MS00OTI0LWE2NmEtYjVkYmE3OTM5MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJB2Py3x2vh4BM3fYZ1AVSQQbpYHe9d+YOYt +Xmu+qw2YI4i2oGtUSYX3d80T+kOHgtrDwOXYjTYdOI2Jg9+drvOB5FG4CXqv1aO TmfYg+oqhdqDsSt6H67Zx4uE3/VKw3MhIlK9Ds69nGhmFNB+w8hO5z/dRJAOqNNi dTobleQEuXMOpTmHfG0HiLUWIzc6ozGh+JQmq0LWIRc8gPiD/QluaGcOOdzCeKVK hWZWbNYiF+5N10vy5bNAxtA1zhtX2v14t/Re0m3rOVbjbH51b1lpU7MhArCFgIa1 /E1Dwuaezxi+ACFyuj8Rn3pOOwuh4DXtV7qd4pyX4kSv1TbnUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMCB1LDxeM9TzE4+JlH/r2aIpfXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yY2M3 NzYzZS03Zjc2LTQ5OTItOGFhMi1mNTcyZDViMGJmNjAvMmFkMWExM2YtYzFiZS0z YzlmLWJkZGEtNWUwY2YzMWU4ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmNjNzc2M2UtN2Y3Ni00OTkyLThh YTItZjU3MmQ1YjBiZjYwLzJjYzc3NjNlLTdmNzYtNDk5Mi04YWEyLWY1NzJkNWIw YmY2MC5jcmwwHwYDVR0jBBgwFoAUVn8HWBaldDIrfGjo70r+n8FG504wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yY2M3NzYzZS03Zjc2LTQ5OTItOGFhMi1mNTcy ZDViMGJmNjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAItBs52mtFp7EqSB/m+ElgBd7A2ePrbvb3fSmGWqT8Tmq5XqkabG eLnHKu5FBsCJxIqEDHeJEPJ/h9r9+Qs10hgpO7HgsuJ030WTJNaRyl6xTrU/6M0J 1lYHQ6jG0um3o3LxpTPDY5LUGU6hBcenH13hAq7eroALk2dTA9tUfdsopqWQQ2Y9 5Z+IfzZ6fhNWg2D2X0Yqh1MIJZ15qmbsbi0RJSTAlsse13b/UIEO0iQxkMy7qT8V J7mNtgdDIaEjgKdioP8hx3OgjoFf8Y+lioXJZ7QD2moYhU4NcLcLu24h82Cb6kSq Jm2QvsCcRV6c/IYk4kL/MbxexByoA/YeS/w= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:25 2025 by rpki-client