$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/0ca7652f-80fb-3822-9a49-891d6974860f.roa File: 0ca7652f-80fb-3822-9a49-891d6974860f.roa (raw, json) Hash identifier: kn7I0rkm2nKQEU2QnCsZ4rx17vDtCMroLTAcu/vd2p8= Subject key identifier: DE:4C:5A:83:5A:CE:57:DC:67:EF:22:51:B5:46:34:91:61:B2:44:87 Certificate issuer: /CN=cd737608-8321-4248-8093-6c1db3c96df0 Certificate serial: 010D0C9F4328584B0CDC048B2E71F02A76653800 Authority key identifier: 7B:CF:5F:74:38:94:E6:B4:5E:B5:BC:33:52:DB:AE:64:64:58:65:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/0ca7652f-80fb-3822-9a49-891d6974860f.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 3580 IP address blocks: 2602:81a:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/cd737608-8321-4248-8093-6c1db3c96df0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/cd737608-8321-4248-8093-6c1db3c96df0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:04:8b:2e:71:f0:2a:76:65:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd737608-8321-4248-8093-6c1db3c96df0 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=df124f8b-7970-46a0-90a7-512309d22725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:89:93:e2:56:8f:04:0b:7e:a4:50:32:18: 66:57:5a:8a:b5:94:4e:19:81:71:ad:a3:ee:af:d9: 4c:37:64:e0:49:7b:ac:f8:84:ad:ee:7b:38:4a:55: 0d:db:24:00:87:f0:f8:54:87:c5:44:70:b7:2c:d1: c4:9f:d3:70:75:fa:e0:77:6d:07:e0:4c:ab:9b:a3: de:43:4a:10:18:8d:ab:e8:a4:25:98:75:83:2e:3b: 2a:ae:63:0a:9f:73:c6:e3:ee:72:f6:9b:90:2d:e2: 26:88:cf:a1:31:ed:31:94:79:0f:09:7f:00:9d:90: 02:36:ad:d0:ef:1e:c8:04:54:5e:05:7e:42:49:a0: 1e:ad:a9:06:8a:c8:d1:7b:ae:09:bb:25:d0:9b:2a: 92:dd:55:ff:7a:7f:82:6d:b8:ba:a9:b2:b6:2a:17: b1:98:2d:3b:b4:5e:3e:66:a0:51:70:2d:ae:59:32: 7a:9e:f1:98:9f:f8:7f:d5:05:e7:3a:e2:4d:75:78: 7d:01:51:06:0e:69:be:bb:69:39:2d:ce:d5:ff:72: dc:89:13:5d:14:98:17:b7:da:39:74:4b:c5:1a:d3: 12:09:d3:f7:60:0b:04:5c:54:a2:c4:cf:60:9b:57: ac:d5:ec:80:bd:2b:f5:01:1a:9f:1e:84:07:7d:39: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4C:5A:83:5A:CE:57:DC:67:EF:22:51:B5:46:34:91:61:B2:44:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/0ca7652f-80fb-3822-9a49-891d6974860f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/cd737608-8321-4248-8093-6c1db3c96df0.crl X509v3 Authority Key Identifier: keyid:7B:CF:5F:74:38:94:E6:B4:5E:B5:BC:33:52:DB:AE:64:64:58:65:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0.cer sbgp-ipAddrBlock: critical IPv6: 2602:81a:a001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:45:4a:c8:44:40:a8:2e:16:7e:27:86:42:8d:03:47:8b:06: 94:05:5b:ac:2b:13:ac:6e:58:25:d9:70:48:c2:01:43:73:bb: 27:6e:66:1f:b8:90:69:2f:a1:5b:c8:be:3f:a7:14:13:6f:f7: df:4e:57:ec:f8:af:cc:42:98:6a:c1:75:77:e4:76:5b:8d:2c: fb:ce:0d:46:cd:fb:48:8c:1a:d2:95:f2:9b:ee:14:56:12:56: 34:8b:bc:99:4a:af:33:ba:35:5c:fb:4f:55:18:76:b7:23:b0: 86:b9:4b:b7:da:ac:8f:2d:d0:c6:b1:e4:63:e7:f7:1c:fc:4e: 1e:80:a7:b6:22:e2:ef:f5:79:71:30:7a:83:5d:c5:16:89:10: e0:ba:c3:dc:32:49:48:e1:c6:eb:c6:b9:3b:c3:91:ad:9e:a3: 2f:a0:6c:69:07:eb:4a:1b:de:ff:8a:ed:bb:82:73:cc:57:a5: 81:6f:07:08:af:e4:e3:85:93:7e:d5:05:0b:82:9a:58:08:2f: 63:27:be:eb:3e:70:05:dc:ea:ec:4e:07:41:d5:ea:cf:87:01: 29:64:d3:78:83:9a:a5:53:da:8c:d7:69:0d:c7:47:41:0d:8e: 73:c8:f8:9b:36:a8:c5:ff:72:44:c1:eb:8e:2e:5f:d7:f2:0a: ef:b3:78:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3ASLLnHwKnZlOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3Mzc2MDgtODMyMS00MjQ4LTgwOTMtNmMxZGIzYzk2 ZGYwMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZGYxMjRmOGItNzk3MC00NmEwLTkwYTctNTEyMzA5ZDIyNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinGJk+JWjwQLfqRQMhhmV1qKtZROGYFxraPu r9lMN2TgSXus+ISt7ns4SlUN2yQAh/D4VIfFRHC3LNHEn9Nwdfrgd20H4Eyrm6Pe Q0oQGI2r6KQlmHWDLjsqrmMKn3PG4+5y9puQLeImiM+hMe0xlHkPCX8AnZACNq3Q 7x7IBFReBX5CSaAerakGisjRe64JuyXQmyqS3VX/en+Cbbi6qbK2KhexmC07tF4+ ZqBRcC2uWTJ6nvGYn/h/1QXnOuJNdXh9AVEGDmm+u2k5Lc7V/3LciRNdFJgXt9o5 dEvFGtMSCdP3YAsEXFSixM9gm1es1eyAvSv1ARqfHoQHfTkDvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN5MWoNazlfcZ+8iUbVGNJFhskSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZDcz NzYwOC04MzIxLTQyNDgtODA5My02YzFkYjNjOTZkZjAvMGNhNzY1MmYtODBmYi0z ODIyLTlhNDktODkxZDY5NzQ4NjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2Q3Mzc2MDgtODMyMS00MjQ4LTgw OTMtNmMxZGIzYzk2ZGYwL2NkNzM3NjA4LTgzMjEtNDI0OC04MDkzLTZjMWRiM2M5 NmRmMC5jcmwwHwYDVR0jBBgwFoAUe89fdDiU5rRetbwzUtuuZGRYZdQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZDczNzYwOC04MzIxLTQyNDgtODA5My02YzFk YjNjOTZkZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIGqAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKZFSshEQKguFn4nhkKNA0eLBpQFW6wrE6xuWCXZcEjCAUNzuydu Zh+4kGkvoVvIvj+nFBNv999OV+z4r8xCmGrBdXfkdluNLPvODUbN+0iMGtKV8pvu FFYSVjSLvJlKrzO6NVz7T1UYdrcjsIa5S7farI8t0Max5GPn9xz8Th6Ap7Yi4u/1 eXEweoNdxRaJEOC6w9wySUjhxuvGuTvDka2eoy+gbGkH60ob3v+K7buCc8xXpYFv Bwiv5OOFk37VBQuCmlgIL2Mnvus+cAXc6uxOB0HV6s+HASlk03iDmqVT2ozXaQ3H R0ENjnPI+Js2qMX/ckTB644uX9fyCu+zeK0= -----END CERTIFICATE-----Generated at Fri Oct 10 14:46:36 2025 by rpki-client