$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa File: 4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa (raw, json) Hash identifier: Vhb9h5m5xNmw9Ay5ja5YZdcIBlsAba0rrbAJIayWrGQ= Subject key identifier: 82:0A:DA:A1:40:EF:30:10:8E:17:F4:15:42:25:82:E6:1C:DE:7B:20 Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Certificate serial: 010D0C9F4328584B1AD1AFEAB619D0DA3F47AC00 Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 212001 IP address blocks: 2602:fd50:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:af:ea:b6:19:d0:da:3f:47:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=d8d6507f-ebc0-42ac-8baf-d0d201e9fa51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:1f:dd:3c:6e:c2:f8:30:97:f1:12:52:fb: fb:16:f9:57:ec:8b:1d:bf:17:e0:06:f2:dc:a4:8c: 0d:96:8f:87:68:33:69:57:c5:f7:23:c6:64:14:79: 89:39:93:5c:d1:ef:3e:67:77:87:8f:bd:5a:b7:09: 4c:fe:5b:db:50:48:5f:50:ad:64:a2:62:12:1e:68: 56:e5:16:fc:ee:79:cd:43:76:62:22:9a:3c:ba:2e: c3:38:3f:2f:cc:20:fc:78:06:12:92:94:0a:0c:f8: dc:78:82:90:6e:9a:a7:ac:47:50:d9:dc:8a:1a:2a: 12:ab:02:45:8f:ad:39:4d:a4:92:96:a4:7d:e0:5e: c9:85:a0:87:11:01:ef:3b:38:b5:22:93:1c:74:92: 8f:d6:ec:f3:0c:12:6a:28:8b:bc:16:73:fc:00:75: 47:c0:ab:db:28:05:a8:a5:20:29:2a:74:ce:e5:30: f5:bc:35:c0:bb:1f:5b:7a:9e:aa:9b:f2:33:5a:72: c7:8f:5a:ca:ee:bb:ce:43:b6:0b:e6:db:44:97:a5: 68:a3:47:df:55:31:c7:aa:a9:27:84:1e:a7:dd:ab: 9e:be:29:e3:de:87:d7:9a:8f:35:95:22:60:4a:d6: 79:bd:b2:a5:15:16:01:a0:ca:25:0e:1d:2d:ad:92: d5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0A:DA:A1:40:EF:30:10:8E:17:F4:15:42:25:82:E6:1C:DE:7B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl X509v3 Authority Key Identifier: keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd50:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2f:6a:17:3a:72:c5:23:e2:d1:b2:70:0b:b4:97:f2:ae:64: 21:c9:e7:2d:68:a3:cd:d7:40:6e:c2:e6:0f:7d:4a:c0:60:aa: 74:a6:2f:76:3c:87:ad:d7:6c:f6:36:d1:db:f5:df:f9:6b:28: 3d:03:0b:8c:c4:36:5a:c4:20:0c:eb:da:0b:c5:a2:22:f2:c4: d7:f8:e5:10:92:74:c2:00:8e:5c:30:bb:fe:2c:15:da:81:86: 88:be:39:2b:50:5d:95:48:49:da:6f:76:a6:a0:97:e8:f1:6d: a4:cb:4a:e0:1d:0f:1d:b8:76:40:a0:b3:cf:82:72:04:9e:9c: 00:af:4d:bb:9a:c0:ff:42:30:93:3b:63:d4:aa:dd:8e:64:be: de:ad:ab:d8:06:82:f1:2d:d7:0c:61:3e:7f:cf:ca:9c:3d:98: 01:67:7d:4f:b2:ae:b8:cc:04:7a:a4:01:02:bf:01:14:19:a5: 1c:95:d1:cc:81:29:35:da:9d:aa:7a:0e:df:5e:72:86:28:18: d3:e5:8a:85:1d:33:52:85:33:3b:e8:f1:9b:57:cf:62:4f:8e: cf:2a:f4:64:95:0a:c7:b1:6c:8c:51:05:84:5e:82:83:68:78: de:4f:3d:f1:63:4b:69:e6:49:fb:5a:26:af:db:f1:c8:f5:6c: 24:ab:86:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0a/qthnQ2j9HrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3 ZWU3MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDhkNjUwN2YtZWJjMC00MmFjLThiYWYtZDBkMjAxZTlmYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDEf3Txuwvgwl/ESUvv7FvlX7IsdvxfgBvLc pIwNlo+HaDNpV8X3I8ZkFHmJOZNc0e8+Z3eHj71atwlM/lvbUEhfUK1komISHmhW 5Rb87nnNQ3ZiIpo8ui7DOD8vzCD8eAYSkpQKDPjceIKQbpqnrEdQ2dyKGioSqwJF j605TaSSlqR94F7JhaCHEQHvOzi1IpMcdJKP1uzzDBJqKIu8FnP8AHVHwKvbKAWo pSApKnTO5TD1vDXAux9bep6qm/IzWnLHj1rK7rvOQ7YL5ttEl6Voo0ffVTHHqqkn hB6n3auevinj3ofXmo81lSJgStZ5vbKlFRYBoMolDh0trZLV1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIIK2qFA7zAQjhf0FUIlguYc3nsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvNDM5MWNmZTItYzQ0Mi0z OGEzLWJjNWItNjBjZWE4ZjRlNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3 YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1 N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw MWU3NTdlZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9UIAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYvahc6csUj4tGycAu0l/KuZCHJ5y1oo83XQG7C5g99SsBgqnSm L3Y8h63XbPY20dv13/lrKD0DC4zENlrEIAzr2gvFoiLyxNf45RCSdMIAjlwwu/4s FdqBhoi+OStQXZVISdpvdqagl+jxbaTLSuAdDx24dkCgs8+CcgSenACvTbuawP9C MJM7Y9Sq3Y5kvt6tq9gGgvEt1wxhPn/Pypw9mAFnfU+yrrjMBHqkAQK/ARQZpRyV 0cyBKTXanap6Dt9ecoYoGNPlioUdM1KFMzvo8ZtXz2JPjs8q9GSVCsexbIxRBYRe goNoeN5PPfFjS2nmSftaJq/b8cj1bCSrhvw= -----END CERTIFICATE-----Generated at Sat Oct 11 13:00:48 2025 by rpki-client