$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/af2b6aa7-90f5-33a6-8fd6-8c316298bcc7.roa File: af2b6aa7-90f5-33a6-8fd6-8c316298bcc7.roa (raw, json) Hash identifier: yhUF45zKqEkOQDn1X8yjf7rqmPJXXnLzq8TxXsG54Sc= Subject key identifier: B4:26:BC:9E:D9:32:40:AA:A7:83:B8:B5:77:54:2B:16:0C:30:48:AE Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584B16A15F79515BD74C3F96FF80 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/af2b6aa7-90f5-33a6-8fd6-8c316298bcc7.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 13371 IP address blocks: 2600:2704:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5f:79:51:5b:d7:4c:3f:96:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=115fc7ba-f3ce-4b66-ae61-b18e3386c9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:f3:13:f2:39:e5:40:b8:ad:b9:00:16:7f: a1:05:82:cd:c6:af:b2:12:a3:f6:79:e1:b0:5c:c6: 5d:5b:bb:8f:89:30:60:ab:96:72:15:b0:0c:88:4d: 8c:4b:86:22:52:74:77:5f:a7:29:b2:4c:e6:64:4a: 04:d2:10:39:e3:58:b6:23:8e:31:c1:cf:bf:90:ce: 5d:94:56:d2:6c:53:d3:4e:36:b0:63:57:0a:f5:32: 86:b0:aa:c1:17:1b:14:e3:17:14:30:a8:ff:66:4a: 7c:42:4a:25:d8:34:d3:17:cf:53:d2:e4:a0:fe:d4: b7:b9:86:4f:5f:93:06:25:08:2e:22:c4:6e:47:45: 44:ee:ec:99:26:49:4f:4f:9c:06:18:87:f9:e8:36: 7e:e9:ec:6f:cd:45:35:77:b8:29:cc:48:ff:9e:78: ef:69:67:57:5f:7d:a9:26:bd:96:a0:a0:81:01:e2: 81:de:86:f8:6a:5e:c2:12:5d:e2:1a:9f:17:0b:72: 2d:17:08:27:50:0c:01:8d:ed:10:46:c3:30:97:22: d0:ac:16:7b:ea:04:1f:05:44:29:d3:92:e6:06:54: 1d:8c:4d:c0:69:ed:79:72:59:8a:cb:ed:e8:4c:1e: cc:f2:3d:0f:6f:91:dc:c8:17:e8:e1:f7:c1:10:dd: e0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:26:BC:9E:D9:32:40:AA:A7:83:B8:B5:77:54:2B:16:0C:30:48:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/af2b6aa7-90f5-33a6-8fd6-8c316298bcc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2704:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:46:89:3a:c3:2a:18:52:d2:8f:9f:ee:4f:32:49:1d:09:8d: ea:98:e1:95:db:36:49:85:04:35:22:2f:5a:5b:2a:28:05:57: c1:e8:eb:08:71:bd:af:b1:13:f6:68:ec:0f:f4:14:76:1e:ed: 78:62:cd:3c:fa:69:16:6c:f2:fe:28:af:e6:7c:fb:19:e4:e7: 07:60:e0:2a:1c:b0:fd:74:74:97:cd:b2:2e:05:6a:42:2f:9c: 5b:c3:57:15:05:50:8b:0d:de:b2:f2:8a:b6:16:a4:a7:d3:cd: ca:b5:59:93:a0:be:c4:ea:56:1e:f4:10:7c:ef:0c:d3:e1:69: 6d:90:f4:23:62:d7:c8:24:ac:bf:7d:e5:0f:04:08:f6:04:52: 76:b1:16:ac:9d:3e:fa:d4:92:90:3d:8a:b6:4c:41:92:f4:f4: 76:ab:ea:c9:db:43:42:2b:fd:16:86:b0:3b:d1:90:ae:ed:31: b7:4b:36:d4:51:10:94:43:38:e5:a5:e7:7b:dc:12:f1:d6:e7: c8:be:27:72:12:51:a4:c5:a5:86:61:cd:13:9b:3b:98:18:fc: 22:ad:85:4e:6b:95:f4:40:42:fb:af:4d:88:5d:2b:5b:d9:13: 44:43:14:f3:98:7c:f1:ab:8b:51:bc:98:52:30:ed:75:94:7a: 82:d7:3a:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsWoV95UVvXTD+W/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTE1ZmM3YmEtZjNjZS00YjY2LWFlNjEtYjE4ZTMzODZjOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzvzE/I55UC4rbkAFn+hBYLNxq+yEqP2eeGw XMZdW7uPiTBgq5ZyFbAMiE2MS4YiUnR3X6cpskzmZEoE0hA541i2I44xwc+/kM5d lFbSbFPTTjawY1cK9TKGsKrBFxsU4xcUMKj/Zkp8Qkol2DTTF89T0uSg/tS3uYZP X5MGJQguIsRuR0VE7uyZJklPT5wGGIf56DZ+6exvzUU1d7gpzEj/nnjvaWdXX32p Jr2WoKCBAeKB3ob4al7CEl3iGp8XC3ItFwgnUAwBje0QRsMwlyLQrBZ76gQfBUQp 05LmBlQdjE3Aae15clmKy+3oTB7M8j0Pb5HcyBfo4ffBEN3gLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQmvJ7ZMkCqp4O4tXdUKxYMMEiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvYWYyYjZhYTctOTBmNS0z M2E2LThmZDYtOGMzMTYyOThiY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAnBAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1GiTrDKhhS0o+f7k8ySR0JjeqY4ZXbNkmFBDUiL1pbKigFV8Ho 6whxva+xE/Zo7A/0FHYe7XhizTz6aRZs8v4or+Z8+xnk5wdg4CocsP10dJfNsi4F akIvnFvDVxUFUIsN3rLyirYWpKfTzcq1WZOgvsTqVh70EHzvDNPhaW2Q9CNi18gk rL995Q8ECPYEUnaxFqydPvrUkpA9irZMQZL09Har6snbQ0Ir/RaGsDvRkK7tMbdL NtRREJRDOOWl53vcEvHW58i+J3ISUaTFpYZhzRObO5gY/CKthU5rlfRAQvuvTYhd K1vZE0RDFPOYfPGri1G8mFIw7XWUeoLXOv8= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:11 2025 by rpki-client