$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa File: d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa (raw, json) Hash identifier: 2ZDPWXDZ+TPNvdbRhSYl/eT0uhVjdOnVUzrtVE3mByY= Subject key identifier: 0F:6A:99:3F:52:C2:95:40:91:FF:5B:19:72:DB:22:92:0F:44:21:C2 Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Certificate serial: 010D0C9F4328584AFC1C106ECAFDC2A2DF803240 Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 399825 IP address blocks: 2602:80a:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:10:6e:ca:fd:c2:a2:df:80:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=66c574e4-8065-4d10-bd06-4fe164453b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ac:0a:af:18:d4:2a:6d:dd:23:fc:7a:fc:ea: 60:6d:ef:a9:2f:d8:5e:60:57:99:cf:af:2c:a8:cc: b3:62:30:e6:1e:10:52:10:43:c9:b2:56:37:f5:72: f4:b3:32:57:9d:9c:b7:98:8d:37:70:8d:85:f6:76: 03:4e:1c:ee:a9:89:be:32:cb:86:4a:68:45:28:f9: 9f:cd:db:24:81:9b:89:b0:69:d4:43:b2:91:a5:5f: 77:02:8e:de:48:57:d8:1c:87:5d:71:c2:49:ba:1d: 14:d5:ee:0d:9e:bf:8d:35:bd:d9:8f:85:84:ec:37: 7e:2b:88:47:9a:1b:86:0c:64:cf:44:30:9b:cc:cd: cf:ab:a7:88:01:cb:7b:b7:4d:ab:a7:47:53:98:90: c3:1d:26:b4:3f:c7:15:2f:96:bd:04:8c:ac:13:75: 20:0e:ee:44:57:9a:7e:52:bd:1c:71:97:3a:1c:70: 77:86:8e:02:52:7a:b1:87:99:a1:1c:dd:36:e3:3f: dd:e7:20:4f:b1:fe:03:a4:24:b3:4a:16:5d:66:d6: 73:bc:39:4b:36:c6:6a:e5:60:32:5f:d0:d7:c7:99: 7d:24:b3:1f:7e:86:0e:c2:e6:50:d8:bf:1a:4c:54: 35:6c:e9:a8:b4:a5:c9:79:88:72:60:ff:69:86:8f: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6A:99:3F:52:C2:95:40:91:FF:5B:19:72:DB:22:92:0F:44:21:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl X509v3 Authority Key Identifier: keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer sbgp-ipAddrBlock: critical IPv6: 2602:80a:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f7:75:35:2b:78:18:c1:93:06:e6:af:7c:25:65:4f:cb:d4: e5:95:58:46:24:bd:1b:53:ec:06:a6:9d:bd:9d:9c:b3:4a:19: af:91:1c:9a:30:4d:83:e6:c9:83:2c:29:8b:3f:1b:d3:44:3f: 87:74:a4:2b:81:b9:74:02:b7:f5:65:04:1b:e1:0e:67:4f:24: 68:99:2f:28:62:fc:83:bd:9e:85:03:cf:21:23:6d:d4:78:7e: 14:ea:8c:ce:b4:37:fd:56:52:e6:bd:9f:1e:b5:a7:07:88:1c: f9:28:6a:f0:ab:2a:a0:78:22:f9:16:9f:6b:46:f3:74:43:11: 58:00:1a:3e:a2:9b:41:38:01:f7:3c:f8:c4:91:5e:ab:20:59: 70:cf:02:0b:90:29:49:bf:73:3c:82:12:fb:d4:24:1c:fa:fc: ef:0b:67:b4:76:b6:5d:ab:a4:ca:27:79:5a:4f:da:59:61:db: 8b:71:e6:9f:dd:74:43:4e:20:45:31:5e:a8:04:2c:7d:6d:7d: 53:51:42:d1:9e:82:3d:5a:17:e3:2b:65:6a:11:f4:08:f7:33: d8:7c:01:9b:47:4a:1a:68:89:ce:41:99:44:24:e8:6b:1b:41: a3:3a:01:cf:e1:be:a9:a7:86:05:26:79:fc:86:bb:fd:fb:ca: 0d:ab:e4:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8HBBuyv3Cot+AMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgyNWU4ZmItMWI5Yy00M2M0LThmOWYtNDBkZjFjNzE2 MjExMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NjZjNTc0ZTQtODA2NS00ZDEwLWJkMDYtNGZlMTY0NDUzYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+awKrxjUKm3dI/x6/Opgbe+pL9heYFeZz68s qMyzYjDmHhBSEEPJslY39XL0szJXnZy3mI03cI2F9nYDThzuqYm+MsuGSmhFKPmf zdskgZuJsGnUQ7KRpV93Ao7eSFfYHIddccJJuh0U1e4Nnr+NNb3Zj4WE7Dd+K4hH mhuGDGTPRDCbzM3Pq6eIAct7t02rp0dTmJDDHSa0P8cVL5a9BIysE3UgDu5EV5p+ Ur0ccZc6HHB3ho4CUnqxh5mhHN024z/d5yBPsf4DpCSzShZdZtZzvDlLNsZq5WAy X9DXx5l9JLMffoYOwuZQ2L8aTFQ1bOmotKXJeYhyYP9pho9CuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA9qmT9SwpVAkf9bGXLbIpIPRCHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1 ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRmMWM3MTYyMTEvZDY3YTViNjEtMDhmZi0z ZDkwLWFmMGMtNDM1ZWQ4YTBhY2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODgyNWU4ZmItMWI5Yy00M2M0LThm OWYtNDBkZjFjNzE2MjExLzg4MjVlOGZiLTFiOWMtNDNjNC04ZjlmLTQwZGYxYzcx NjIxMS5jcmwwHwYDVR0jBBgwFoAU1MWAixuM7+uEMt0GMxiIU9SksN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRm MWM3MTYyMTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIICjAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABP3dTUreBjBkwbmr3wlZU/L1OWVWEYkvRtT7Aamnb2dnLNKGa+R HJowTYPmyYMsKYs/G9NEP4d0pCuBuXQCt/VlBBvhDmdPJGiZLyhi/IO9noUDzyEj bdR4fhTqjM60N/1WUua9nx61pweIHPkoavCrKqB4IvkWn2tG83RDEVgAGj6im0E4 Afc8+MSRXqsgWXDPAguQKUm/czyCEvvUJBz6/O8LZ7R2tl2rpMoneVpP2llh24tx 5p/ddENOIEUxXqgELH1tfVNRQtGegj1aF+MrZWoR9Aj3M9h8AZtHShpoic5BmUQk 6GsbQaM6Ac/hvqmnhgUmefyGu/37yg2r5MY= -----END CERTIFICATE-----Generated at Fri Oct 10 03:55:42 2025 by rpki-client