$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa File: 65b660a1-3975-385b-add8-d9b4f1e98a18.roa (raw, json) Hash identifier: bwFzWPsf6VRh8igDwEyDqTVefCg0a5ZuUQmraLwcjEs= Subject key identifier: D6:B2:B6:E7:D5:D7:CF:F7:D1:91:5E:F2:7F:F9:77:D4:94:3D:99:C4 Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Certificate serial: 010D0C9F4328584B328C42C3E66ACA15EEA39880 Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 64199 IP address blocks: 2602:fa78::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:42:c3:e6:6a:ca:15:ee:a3:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=486e8559-3709-4a4a-bea1-02f9406a2b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:a0:17:66:d3:7d:2e:b0:48:ca:b9:d9:a6: 69:b9:22:27:3c:52:7f:89:ed:23:ad:da:fe:fb:15: e9:03:53:35:ab:4a:79:e8:68:96:4c:1c:49:13:58: 02:d8:ed:d3:e0:72:ce:89:22:f0:9c:de:5b:8f:3a: d7:d4:b0:e8:c2:1d:f4:97:8e:51:fc:a3:a7:dd:eb: e4:9a:ae:d7:17:13:8b:e3:ef:f6:43:8b:13:ba:94: 0e:c6:7b:a4:65:17:0e:d8:18:a3:e2:f2:e1:98:27: 56:5e:61:0a:09:0b:38:78:0a:8b:cd:70:bf:fd:8e: 72:a1:c5:a2:1b:07:a5:d5:42:fd:4e:aa:a5:48:07: 2c:80:1f:b6:18:35:8d:e8:3b:0e:59:a8:e8:a7:1d: b0:ec:02:f6:a1:e0:39:7b:34:b8:1d:8c:fa:52:e5: 1b:3c:1c:88:85:83:cc:54:73:99:43:29:81:55:7e: e8:39:03:fa:0a:92:6e:05:7b:9b:ef:a3:45:a6:fa: 52:ed:f0:ae:71:c7:e8:52:93:d7:56:6f:5d:69:db: 92:66:97:e1:b1:a2:a0:40:b5:c0:3f:52:c1:11:e3: d1:a0:52:b6:cf:b8:1c:56:c0:ed:9c:d5:d7:f4:e0: 7f:f4:12:73:c6:f5:28:53:80:07:23:60:9c:0a:98: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B2:B6:E7:D5:D7:CF:F7:D1:91:5E:F2:7F:F9:77:D4:94:3D:99:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl X509v3 Authority Key Identifier: keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa78::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:63:5c:10:2e:ab:21:a2:cf:c3:1a:a1:41:80:b4:1f:cb:f6: 78:2a:17:d8:1f:72:e2:46:c3:49:02:5d:7a:8b:d4:5f:89:6d: 66:48:13:f6:d4:51:65:93:38:86:ca:0f:00:0d:ea:65:52:2c: b9:a6:62:4d:50:fb:8b:ef:79:cb:19:52:e7:81:c8:da:ff:ff: 09:51:30:ee:4c:f9:b2:de:5e:74:2c:ba:05:7a:4a:cf:79:ad: 20:ca:c0:b8:4c:06:0f:6e:3b:5e:33:a5:01:62:25:86:08:4a: eb:70:19:92:b1:31:9d:c4:6d:56:da:41:cd:94:39:f1:ab:3c: 45:31:9a:8f:64:7e:83:d2:de:8c:d3:b0:56:ba:9f:4c:10:89: 34:d5:32:4d:9d:04:f7:7c:9e:41:24:73:e2:b0:dc:e4:f8:55: bd:0f:18:ae:c8:33:e2:9f:87:87:b8:1d:1d:cb:4e:34:b9:f6: ca:86:c7:39:34:4b:3e:d9:86:7d:2d:ac:cf:b3:84:0b:a0:50: 8b:a7:5d:b5:a0:ec:fa:aa:c6:7e:1f:89:63:16:68:41:0e:2e: 8c:4a:c9:d6:6d:49:45:cd:5c:21:fd:3d:b0:b8:98:8f:21:d4: 0d:0f:78:07:f7:8c:09:16:f8:ba:6d:c7:95:15:ef:0d:84:d2: 57:30:84:cc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsyjELD5mrKFe6jmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh N2M3MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NDg2ZTg1NTktMzcwOS00YTRhLWJlYTEtMDJmOTQwNmEyYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMGgF2bTfS6wSMq52aZpuSInPFJ/ie0jrdr+ +xXpA1M1q0p56GiWTBxJE1gC2O3T4HLOiSLwnN5bjzrX1LDowh30l45R/KOn3evk mq7XFxOL4+/2Q4sTupQOxnukZRcO2Bij4vLhmCdWXmEKCQs4eAqLzXC//Y5yocWi Gwel1UL9TqqlSAcsgB+2GDWN6DsOWajopx2w7AL2oeA5ezS4HYz6UuUbPByIhYPM VHOZQymBVX7oOQP6CpJuBXub76NFpvpS7fCuccfoUpPXVm9daduSZpfhsaKgQLXA P1LBEePRoFK2z7gcVsDtnNXX9OB/9BJzxvUoU4AHI2CcCpiLowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNaytufV18/30ZFe8n/5d9SUPZnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3 YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvNjViNjYwYTEtMzk3NS0z ODViLWFkZDgtZDliNGYxZTk4YTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4 NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4 YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm YjUwOGE3YzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6eAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlGNcEC6rIaLPwxqhQYC0H8v2eCoX2B9y4kbDSQJdeovUX4ltZkgT 9tRRZZM4hsoPAA3qZVIsuaZiTVD7i+95yxlS54HI2v//CVEw7kz5st5edCy6BXpK z3mtIMrAuEwGD247XjOlAWIlhghK63AZkrExncRtVtpBzZQ58as8RTGaj2R+g9Le jNOwVrqfTBCJNNUyTZ0E93yeQSRz4rDc5PhVvQ8Yrsgz4p+Hh7gdHctONLn2yobH OTRLPtmGfS2sz7OEC6BQi6ddtaDs+qrGfh+JYxZoQQ4ujErJ1m1JRc1cIf09sLiY jyHUDQ94B/eMCRb4um3HlRXvDYTSVzCEzA== -----END CERTIFICATE-----Generated at Sat Sep 20 00:43:01 2025 by rpki-client