$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/668a0aeb-328b-3b87-9b83-66ab809813fb.roa File: 668a0aeb-328b-3b87-9b83-66ab809813fb.roa (raw, json) Hash identifier: /H//FpnGnh6vI44wiH6uuXthTtZ8NarqDyp2iTIWFpE= Subject key identifier: AC:F1:AE:A5:D6:9F:38:E0:4C:75:BA:EB:BA:0B:41:C5:4D:9A:70:81 Certificate issuer: /CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d Certificate serial: 010D0C9F4328584AFAB6855F70D598F828992080 Authority key identifier: 6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/668a0aeb-328b-3b87-9b83-66ab809813fb.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 401385 IP address blocks: 2602:f8d4::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:85:5f:70:d5:98:f8:28:99:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=902f295e-9016-43b5-b4c1-4a5ccad1ba31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d8:72:d3:57:c8:3b:5b:fe:bb:ac:87:02:a5: 2b:c5:f6:21:cd:67:b4:d9:52:1a:d7:9c:0c:1a:77: 5e:8d:2c:8e:58:7b:7e:07:5b:4a:a0:78:15:b7:a8: 2a:84:c6:7a:79:11:8c:c2:83:0a:53:15:a9:6d:08: ca:c4:80:b5:a3:74:77:5c:89:19:53:34:5f:88:8c: 8c:1f:b1:24:a6:6f:f0:03:22:a0:70:dc:a4:f4:74: 35:3b:e2:c2:1f:e2:e3:d6:ae:27:c4:fe:48:bc:d0: b0:4d:f4:27:00:79:07:9f:4e:dc:0b:f1:07:29:c6: 06:52:98:c6:1c:64:56:0f:ba:19:2c:1b:d7:f4:38: fe:cc:92:93:c8:08:aa:1e:7e:f3:b0:d6:76:9d:48: 20:63:94:37:67:c8:be:98:7e:81:35:84:54:8f:86: e4:c6:c3:1f:f1:38:d8:e6:03:d7:44:fd:e3:12:c7: 86:d1:e7:9d:bb:7a:0e:a7:cd:9e:c3:f9:da:25:ae: 37:ad:1e:1c:75:78:23:bd:ba:6c:72:36:3f:46:c3: 7f:96:32:f7:79:db:3f:e0:44:7d:ff:af:05:a7:ff: 00:ba:3d:f7:6f:c2:0a:32:5b:c0:8e:89:c3:b6:b1: 2f:46:14:f6:bd:15:84:01:7b:e9:75:db:d2:48:8a: 07:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F1:AE:A5:D6:9F:38:E0:4C:75:BA:EB:BA:0B:41:C5:4D:9A:70:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/668a0aeb-328b-3b87-9b83-66ab809813fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl X509v3 Authority Key Identifier: keyid:6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8d4::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b2:bd:69:23:88:6e:c6:21:8e:68:9b:78:2d:30:de:18:f3: 96:c2:78:78:af:dd:47:88:e6:29:ee:2b:2b:3f:93:3a:a0:f4: 36:61:81:4c:e4:46:79:4c:26:da:02:15:e0:ad:28:e2:bb:53: c3:83:fe:5d:9e:3b:e5:25:4e:1c:fc:14:9a:aa:71:b6:d7:79: ac:f3:20:6f:96:6b:0b:8a:c3:29:43:36:fa:07:d9:74:fa:da: 70:54:d0:95:e3:59:3a:69:2b:dd:e4:78:2c:42:c1:24:88:34: 99:e5:24:1f:0e:72:a7:d8:2a:2f:5b:93:6c:96:b1:d2:70:d2: a9:87:40:cd:3f:c1:ff:ba:ae:80:df:ac:6b:3d:45:33:f3:67: 49:5e:41:49:3b:1d:f7:c4:e6:02:ef:5e:c6:db:77:c0:9d:f9: ad:75:eb:0a:e8:97:d4:25:dd:dd:eb:fd:3e:57:af:53:4a:5d: 78:0e:c6:c9:3a:30:1b:8e:66:63:7e:59:70:c2:f4:1c:b1:60: 9e:d4:b6:ba:5e:6a:ba:bd:a4:f1:0f:6f:3f:39:16:fa:35:fb: 81:be:4d:ec:84:fc:70:86:9b:b8:43:05:3c:38:78:1c:a3:bd: 46:38:c5:9b:a7:6a:53:f3:a5:29:a6:9f:73:0c:77:6c:45:26: 08:d6:7c:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr6toVfcNWY+CiZIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmNjZWYtN2MzMC00YTQwLTkwY2EtY2UxNzAzYTIy YTFkMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk OTAyZjI5NWUtOTAxNi00M2I1LWI0YzEtNGE1Y2NhZDFiYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAothy01fIO1v+u6yHAqUrxfYhzWe02VIa15wM GndejSyOWHt+B1tKoHgVt6gqhMZ6eRGMwoMKUxWpbQjKxIC1o3R3XIkZUzRfiIyM H7Ekpm/wAyKgcNyk9HQ1O+LCH+Lj1q4nxP5IvNCwTfQnAHkHn07cC/EHKcYGUpjG HGRWD7oZLBvX9Dj+zJKTyAiqHn7zsNZ2nUggY5Q3Z8i+mH6BNYRUj4bkxsMf8TjY 5gPXRP3jEseG0eedu3oOp82ew/naJa43rR4cdXgjvbpscjY/RsN/ljL3eds/4ER9 /68Fp/8Auj33b8IKMlvAjonDtrEvRhT2vRWEAXvpddvSSIoHEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKzxrqXWnzjgTHW667oLQcVNmnCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMmIy Y2NlZi03YzMwLTRhNDAtOTBjYS1jZTE3MDNhMjJhMWQvNjY4YTBhZWItMzI4Yi0z Yjg3LTliODMtNjZhYjgwOTgxM2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTJiMmNjZWYtN2MzMC00YTQwLTkw Y2EtY2UxNzAzYTIyYTFkL2EyYjJjY2VmLTdjMzAtNGE0MC05MGNhLWNlMTcwM2Ey MmExZC5jcmwwHwYDVR0jBBgwFoAUb/OlDaNR+7VH64u4PGhPsFxkHBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMmIyY2NlZi03YzMwLTRhNDAtOTBjYS1jZTE3 MDNhMjJhMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL41AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI+yvWkjiG7GIY5om3gtMN4Y85bCeHiv3UeI5inuKys/kzqg9DZh gUzkRnlMJtoCFeCtKOK7U8OD/l2eO+UlThz8FJqqcbbXeazzIG+WawuKwylDNvoH 2XT62nBU0JXjWTppK93keCxCwSSINJnlJB8OcqfYKi9bk2yWsdJw0qmHQM0/wf+6 roDfrGs9RTPzZ0leQUk7HffE5gLvXsbbd8Cd+a116wrol9Ql3d3r/T5Xr1NKXXgO xsk6MBuOZmN+WXDC9ByxYJ7Utrpearq9pPEPbz85Fvo1+4G+TeyE/HCGm7hDBTw4 eByjvUY4xZunalPzpSmmn3MMd2xFJgjWfOM= -----END CERTIFICATE-----Generated at Fri Oct 10 21:00:36 2025 by rpki-client