$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/fe1cd1c0-6914-3a3a-96dc-eb863b64fa3f.roa File: fe1cd1c0-6914-3a3a-96dc-eb863b64fa3f.roa (raw, json) Hash identifier: mj2eOvT5pwc545ujUfdzipp1oAUV31uGV+1Vky/3UlM= Subject key identifier: 39:21:75:26:33:C1:A3:03:50:E8:C2:0F:B1:35:30:82:E0:B2:6D:54 Certificate issuer: /CN=d8b8c303-7bcf-45f4-a693-24fb9d54010c Certificate serial: 010D0C9F4328584B36BC44540B44C6AD8884FF80 Authority key identifier: 30:6B:01:F4:84:22:E5:CD:24:F0:A0:E9:A5:35:43:98:91:55:CD:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/fe1cd1c0-6914-3a3a-96dc-eb863b64fa3f.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 31986 IP address blocks: 2602:817:a000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:44:54:0b:44:c6:ad:88:84:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8b8c303-7bcf-45f4-a693-24fb9d54010c Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=d10fbfcf-d0b4-4d68-ab4d-89f02e131828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:60:8d:63:60:1f:9c:67:32:17:9d:2f:f4: 7f:f9:39:45:4e:cf:d5:24:12:1b:02:ff:82:c0:0b: a1:5b:27:bf:b2:f4:7c:cc:e3:4b:0f:35:21:04:aa: 8b:d7:3f:66:48:9b:60:6a:ba:cf:b3:27:0c:7f:88: 00:c1:7f:2e:7d:32:4e:9e:d8:60:dc:de:23:13:e9: 28:9f:07:37:1e:64:7c:03:aa:e0:9c:27:4a:0c:0d: 69:b2:39:05:20:a5:6e:06:54:01:13:66:d3:98:ec: 7d:21:98:40:77:e8:90:cc:73:c6:f8:f7:66:17:b0: 53:05:da:04:d8:c5:d3:88:dc:64:69:a2:7c:cf:f7: 1b:71:21:2a:36:6f:96:2f:5d:eb:ac:2c:79:64:49: 59:f4:c5:b2:f9:2f:38:dd:f6:62:62:8f:4a:29:f2: ed:80:f9:db:69:19:69:ea:4b:40:85:d9:c2:b6:d3: 99:f6:3d:fb:3f:3e:ca:e1:b6:ba:68:9b:b4:dc:48: af:af:af:d8:7d:55:e8:ed:7b:d1:86:ec:ff:45:ce: 5d:2a:56:19:6d:3a:a1:fa:3f:74:ae:91:af:60:93: d4:2e:c9:d7:2f:d8:09:20:66:af:1e:3e:25:2b:b5: 8f:34:ba:bc:77:06:ca:20:9c:03:74:30:dd:3c:d3: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:75:26:33:C1:A3:03:50:E8:C2:0F:B1:35:30:82:E0:B2:6D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/fe1cd1c0-6914-3a3a-96dc-eb863b64fa3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.crl X509v3 Authority Key Identifier: keyid:30:6B:01:F4:84:22:E5:CD:24:F0:A0:E9:A5:35:43:98:91:55:CD:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:a000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:73:fc:1e:60:0a:9e:b2:30:1c:05:f3:20:6a:fa:18:0b:5a: 60:fb:32:76:c2:fe:5d:50:aa:3f:ef:ed:f7:be:3b:b3:61:7e: b9:17:f1:ee:22:aa:cb:f4:1f:c3:70:ae:71:8e:31:90:af:aa: e5:9f:b9:01:df:c8:b8:6a:5c:1b:2b:50:6f:09:b6:c4:a8:85: e3:66:08:18:d3:69:8a:1a:59:d2:12:02:35:09:ad:7e:57:9f: 1c:a9:be:d3:f8:99:5b:95:7a:34:65:f1:bf:e6:56:10:c3:08: 69:d7:89:b1:72:4b:6d:4a:a0:04:48:97:41:f9:06:b8:6a:bf: 64:08:6f:f8:95:8c:ad:92:5b:45:f9:7d:33:dd:f9:d2:1c:03: 7a:f3:93:57:93:df:2b:01:a7:32:16:f4:46:94:0f:bf:b9:7d: 76:2d:21:5d:c9:be:3f:6e:dc:06:50:0e:de:94:1f:d8:ae:d9: a0:1c:d5:d0:d3:be:5d:98:3c:06:33:31:ec:a5:28:2d:02:02: fd:d3:9e:a0:1f:b5:c8:8d:db:37:9b:3b:e0:78:c4:ca:da:0a: 69:f1:fc:66:d7:ed:ca:cc:d1:67:6c:ec:90:ac:30:10:2b:e3: 94:a6:44:74:9c:7f:16:d5:d8:1b:76:98:4a:ad:9b:4b:dd:1f: 08:29:7d:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs2vERUC0TGrYiE/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhiOGMzMDMtN2JjZi00NWY0LWE2OTMtMjRmYjlkNTQw MTBjMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDEwZmJmY2YtZDBiNC00ZDY4LWFiNGQtODlmMDJlMTMxODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZZgjWNgH5xnMhedL/R/+TlFTs/VJBIbAv+C wAuhWye/svR8zONLDzUhBKqL1z9mSJtgarrPsycMf4gAwX8ufTJOnthg3N4jE+ko nwc3HmR8A6rgnCdKDA1psjkFIKVuBlQBE2bTmOx9IZhAd+iQzHPG+PdmF7BTBdoE 2MXTiNxkaaJ8z/cbcSEqNm+WL13rrCx5ZElZ9MWy+S843fZiYo9KKfLtgPnbaRlp 6ktAhdnCttOZ9j37Pz7K4ba6aJu03Eivr6/YfVXo7XvRhuz/Rc5dKlYZbTqh+j90 rpGvYJPULsnXL9gJIGavHj4lK7WPNLq8dwbKIJwDdDDdPNPFKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDkhdSYzwaMDUOjCD7E1MILgsm1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOGI4 YzMwMy03YmNmLTQ1ZjQtYTY5My0yNGZiOWQ1NDAxMGMvZmUxY2QxYzAtNjkxNC0z YTNhLTk2ZGMtZWI4NjNiNjRmYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDhiOGMzMDMtN2JjZi00NWY0LWE2 OTMtMjRmYjlkNTQwMTBjL2Q4YjhjMzAzLTdiY2YtNDVmNC1hNjkzLTI0ZmI5ZDU0 MDEwYy5jcmwwHwYDVR0jBBgwFoAUMGsB9IQi5c0k8KDppTVDmJFVzfYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOGI4YzMwMy03YmNmLTQ1ZjQtYTY5My0yNGZi OWQ1NDAxMGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIF6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGxz/B5gCp6yMBwF8yBq+hgLWmD7MnbC/l1Qqj/v7fe+O7NhfrkX 8e4iqsv0H8NwrnGOMZCvquWfuQHfyLhqXBsrUG8JtsSoheNmCBjTaYoaWdISAjUJ rX5XnxypvtP4mVuVejRl8b/mVhDDCGnXibFyS21KoARIl0H5Brhqv2QIb/iVjK2S W0X5fTPd+dIcA3rzk1eT3ysBpzIW9EaUD7+5fXYtIV3Jvj9u3AZQDt6UH9iu2aAc 1dDTvl2YPAYzMeylKC0CAv3TnqAftciN2zebO+B4xMraCmnx/GbX7crM0Wds7JCs MBAr45SmRHScfxbV2Bt2mEqtm0vdHwgpfVg= -----END CERTIFICATE-----Generated at Fri Oct 10 17:33:54 2025 by rpki-client