$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa File: 17073da9-1980-383a-b12c-971b97acfc86.roa (raw, json) Hash identifier: F0GR2vkVWk4wDDjiLgBPAbe3PCdK1o8JhH5bJ8x4/qw= Subject key identifier: 36:90:25:6D:6A:71:99:23:A6:7E:FC:40:46:CA:C7:88:4B:4F:02:0D Certificate issuer: /CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Certificate serial: 010D0C9F4328584B39870A709346724712425B00 Authority key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 32507 IP address blocks: 2602:f84c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:0a:70:93:46:72:47:12:42:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=83446a74-304a-47ca-8be4-8304cdc08bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f0:3b:2e:fb:89:e7:0f:80:b8:fd:9d:ed:48: 1a:79:46:f7:ae:48:c8:5c:ed:2d:75:85:ff:cb:f9: 19:0c:c0:e9:73:59:ca:51:9b:17:04:03:a9:a9:fe: a1:7a:b3:bd:e0:e4:9b:55:ff:6f:8d:7c:12:87:95: 38:33:5d:be:9f:35:39:93:46:8b:d2:8d:84:49:a3: e6:f8:0a:1b:48:25:92:bf:54:b7:3a:9e:cf:18:01: f2:49:82:57:71:5a:3a:4d:72:c8:cc:4a:da:f7:73: cf:61:66:e2:dd:06:5f:42:6e:47:51:19:09:4c:99: 13:d9:f3:c6:fa:f5:0b:1e:ed:52:b9:e0:0d:dd:40: 52:96:2e:0f:ff:99:e7:0e:72:7c:80:e4:7a:76:2c: 03:22:85:47:e0:d3:a2:19:d6:eb:f0:05:ec:8e:81: 14:01:d9:b5:6a:48:27:87:92:c9:06:25:d8:f0:44: 24:88:5d:cf:de:15:53:fb:a7:5f:21:be:b3:56:9b: 76:65:6b:4d:ed:23:c8:5c:fa:9d:cb:d3:e3:ad:f3: fe:7b:68:58:43:b2:61:a9:90:c0:72:59:93:12:dd: 6c:1a:f3:eb:3e:1c:ae:fe:e7:f8:dc:84:20:71:f5: 54:85:99:ec:a0:2a:a3:37:9f:74:c2:0d:2f:4f:60: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:90:25:6D:6A:71:99:23:A6:7E:FC:40:46:CA:C7:88:4B:4F:02:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl X509v3 Authority Key Identifier: keyid:04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:87:82:fe:4c:e8:a3:a2:98:88:87:23:f2:84:0b:d5:dc:5f: bf:e3:ea:63:10:4c:3e:2d:af:e4:33:98:70:33:30:18:4b:38: 99:f1:f2:8f:40:33:56:2f:b2:2d:f5:b1:84:35:c7:99:d5:0c: 70:7d:a4:b7:9b:b0:6f:78:ef:ea:c2:a5:73:d2:16:f5:90:00: 36:1d:6b:40:32:63:f2:f1:75:24:7c:83:bf:3d:10:cc:27:ef: b1:a8:95:dc:cd:02:34:88:d1:bd:b6:a1:82:44:83:93:23:80: 14:33:e7:89:75:b3:d2:ae:0f:c6:c5:bb:dc:a0:49:0c:67:52: 5b:be:06:c3:45:38:22:dd:c3:f3:41:95:ef:a0:55:4a:cc:1c: 7b:0b:32:3c:7d:1b:8d:eb:7d:7b:fc:34:4e:e3:65:85:06:df: 48:fd:06:a6:97:2d:2a:9b:bd:9c:90:f7:4e:e6:4b:7f:cf:2c: 99:c8:b8:c3:1a:d2:2c:ef:a4:be:a3:68:84:39:49:bd:bf:8b: 5b:e6:40:ce:eb:b5:6e:a3:3c:58:1f:f2:4d:d0:47:7c:1f:de: 98:37:fc:9e:ab:f0:86:44:e7:d8:40:c0:2d:3a:94:9d:8c:49: 0c:29:c2:9c:20:1c:a1:ed:b5:6e:64:ab:91:4c:c9:92:a3:e8: b6:81:1a:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs5hwpwk0ZyRxJCWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5 N2RhMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ODM0NDZhNzQtMzA0YS00N2NhLThiZTQtODMwNGNkYzA4YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfA7LvuJ5w+AuP2d7UgaeUb3rkjIXO0tdYX/ y/kZDMDpc1nKUZsXBAOpqf6herO94OSbVf9vjXwSh5U4M12+nzU5k0aL0o2ESaPm +AobSCWSv1S3Op7PGAHySYJXcVo6TXLIzEra93PPYWbi3QZfQm5HURkJTJkT2fPG +vULHu1SueAN3UBSli4P/5nnDnJ8gOR6diwDIoVH4NOiGdbr8AXsjoEUAdm1akgn h5LJBiXY8EQkiF3P3hVT+6dfIb6zVpt2ZWtN7SPIXPqdy9PjrfP+e2hYQ7JhqZDA clmTEt1sGvPrPhyu/uf43IQgcfVUhZnsoCqjN590wg0vT2BrVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDaQJW1qcZkjpn78QEbKx4hLTwINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Y2Fm YmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvMTcwNzNkYTktMTk4MC0z ODNhLWIxMmMtOTcxYjk3YWNmYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWNhZmJkMzItN2Q2ZS00Mjk3LTlh YzUtZGMxMjBhYWE5N2RhLzVjYWZiZDMyLTdkNmUtNDI5Ny05YWM1LWRjMTIwYWFh OTdkYS5jcmwwHwYDVR0jBBgwFoAUBA171YO4i3ZvSYgkTFBwi0y3h1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEy MGFhYTk3ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4TAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGHgv5M6KOimIiHI/KEC9XcX7/j6mMQTD4tr+QzmHAzMBhLOJnx 8o9AM1Yvsi31sYQ1x5nVDHB9pLebsG947+rCpXPSFvWQADYda0AyY/LxdSR8g789 EMwn77GoldzNAjSI0b22oYJEg5MjgBQz54l1s9KuD8bFu9ygSQxnUlu+BsNFOCLd w/NBle+gVUrMHHsLMjx9G43rfXv8NE7jZYUG30j9BqaXLSqbvZyQ907mS3/PLJnI uMMa0izvpL6jaIQ5Sb2/i1vmQM7rtW6jPFgf8k3QR3wf3pg3/J6r8IZE59hAwC06 lJ2MSQwpwpwgHKHttW5kq5FMyZKj6LaBGv8= -----END CERTIFICATE-----Generated at Fri Oct 10 03:53:13 2025 by rpki-client