$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa File: 4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa (raw, json) Hash identifier: btthWgiKNPFAeCfbLLWAPiNUXgyOSwTl4wusw24iaL0= Subject key identifier: C5:FC:F6:27:4C:EE:36:3D:00:24:0C:01:C4:3B:0D:54:92:26:E8:D3 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584B36BC539CE270C4341955B7A0 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 46733 IP address blocks: 2602:f9f4:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:53:9c:e2:70:c4:34:19:55:b7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=5c07f6ee-d01d-4fbe-826d-60d638252a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7a:c6:f3:94:4a:77:2a:03:e6:03:81:78:84: bb:a0:77:4f:7f:63:00:d5:97:25:e1:50:d6:bf:73: 82:b7:46:82:50:1c:64:1f:f0:45:99:21:2d:cd:a5: ca:63:ea:1e:1a:41:23:bf:b8:a7:f0:1f:28:7d:4c: 76:55:a6:7b:61:bd:fd:bb:fe:30:21:f8:a7:c3:d9: d0:4a:d3:43:80:29:e5:8f:a2:be:fd:8b:1f:09:ae: 16:5a:28:13:be:d5:2a:c4:05:6e:d5:99:e8:67:83: 59:ae:a3:89:fe:34:5b:76:52:e4:74:d9:e4:ca:27: 77:5e:a7:38:87:82:7c:dd:a6:08:b2:c3:11:10:cf: cf:68:97:34:b8:b7:c0:48:71:e4:0f:e2:33:33:90: 97:84:fb:c2:ba:77:6d:83:ff:75:c2:c2:1e:dc:20: 56:94:4e:96:9d:3b:fe:bf:c7:64:70:1e:5d:23:38: 5b:42:3d:e3:7c:48:81:ab:3c:83:43:00:f3:83:f9: 1c:f6:cc:5a:23:a1:5c:4c:d6:95:ab:65:45:7e:53: 54:8d:03:40:bd:06:db:d0:2b:00:0f:86:57:53:21: 78:a2:82:e8:0c:26:b4:d6:b6:1f:e7:aa:cb:24:7e: 94:39:1d:05:47:37:72:fc:0e:d7:b7:aa:e5:6b:b1: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FC:F6:27:4C:EE:36:3D:00:24:0C:01:C4:3B:0D:54:92:26:E8:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f4:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5f:1e:cd:3c:fa:01:bc:0e:f0:4b:a2:a6:88:9c:44:9d:04: c5:d5:d7:10:e7:69:d1:d2:3b:a9:9f:6a:48:06:dc:e9:62:91: d9:36:1f:a1:08:d3:7c:0d:2c:a6:3a:c4:76:cc:4b:a2:af:7d: c5:1b:78:5a:82:46:fa:59:37:4e:b8:69:9d:6c:a9:4e:c9:bc: 54:50:4e:af:31:74:40:72:be:10:08:db:d5:18:4f:04:53:31: c9:ee:9b:af:10:62:7e:f0:df:0d:7e:db:39:8a:fa:38:2c:08: 62:06:7a:bd:5c:2b:fd:cd:7e:52:e9:dd:7c:d8:bc:5c:0d:f0: c0:22:48:56:d1:36:f2:12:66:4a:cd:4e:74:88:d3:25:13:66: e4:56:e5:75:5d:9d:e3:25:99:f6:4b:16:cf:96:e8:46:bd:b4: 68:27:62:88:bb:18:a5:b7:e0:56:3f:10:9e:0f:8d:cb:10:3a: fa:34:57:63:ac:e9:c3:81:7f:51:9d:7c:f5:e4:d0:88:e1:df: 4f:ce:6c:ed:cb:03:3e:5a:99:4a:54:fc:43:7f:78:e8:ad:2a: 02:ff:4f:ef:73:27:51:b4:07:e4:7d:d7:40:b6:3d:d1:18:79: 40:2a:42:6c:ed:fa:3b:6d:28:16:8c:c9:20:27:e5:12:70:62: 78:b1:94:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs2vFOc4nDENBlVt6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk NWMwN2Y2ZWUtZDAxZC00ZmJlLTgyNmQtNjBkNjM4MjUyYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3rG85RKdyoD5gOBeIS7oHdPf2MA1Zcl4VDW v3OCt0aCUBxkH/BFmSEtzaXKY+oeGkEjv7in8B8ofUx2VaZ7Yb39u/4wIfinw9nQ StNDgCnlj6K+/YsfCa4WWigTvtUqxAVu1ZnoZ4NZrqOJ/jRbdlLkdNnkyid3Xqc4 h4J83aYIssMREM/PaJc0uLfASHHkD+IzM5CXhPvCundtg/91wsIe3CBWlE6WnTv+ v8dkcB5dIzhbQj3jfEiBqzyDQwDzg/kc9sxaI6FcTNaVq2VFflNUjQNAvQbb0CsA D4ZXUyF4ooLoDCa01rYf56rLJH6UOR0FRzdy/A7Xt6rla7E/VQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMX89idM7jY9ACQMAcQ7DVSSJujTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvNGUzYWM4MGYtZWM3MC0z NzViLTgyOWEtMmNlMTY2ZWQ1ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL59AAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVfHs08+gG8DvBLoqaInESdBMXV1xDnadHSO6mfakgG3Olikdk2 H6EI03wNLKY6xHbMS6KvfcUbeFqCRvpZN064aZ1sqU7JvFRQTq8xdEByvhAI29UY TwRTMcnum68QYn7w3w1+2zmK+jgsCGIGer1cK/3NflLp3XzYvFwN8MAiSFbRNvIS ZkrNTnSI0yUTZuRW5XVdneMlmfZLFs+W6Ea9tGgnYoi7GKW34FY/EJ4PjcsQOvo0 V2Os6cOBf1GdfPXk0Ijh30/ObO3LAz5amUpU/EN/eOitKgL/T+9zJ1G0B+R910C2 PdEYeUAqQmzt+jttKBaMySAn5RJwYnixlIo= -----END CERTIFICATE-----Generated at Wed Oct 8 19:36:49 2025 by rpki-client