$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/5d009bc0-f95f-3fc9-9179-4427d37e9302.roa File: 5d009bc0-f95f-3fc9-9179-4427d37e9302.roa (raw, json) Hash identifier: uHeX/3Y0cbg5KqNx4BSf77bmChNGdk1LTDkpqw0VBIw= Subject key identifier: 5E:6B:57:C9:27:9A:E5:25:FE:B3:97:82:14:E5:D7:5C:C2:F7:D8:A2 Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Certificate serial: 010D0C9F4328584AF9513D4D7441E60C5FC86C80 Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/5d009bc0-f95f-3fc9-9179-4427d37e9302.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 14618 IP address blocks: 2602:80f:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3d:4d:74:41:e6:0c:5f:c8:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=31c88af3-4f96-4386-b6c1-a2be40f54564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:5b:3b:17:2d:79:cc:76:6f:7d:a1:0f:e5: e1:53:f9:c7:f7:ee:9c:96:2c:a4:ed:03:fc:27:23: 02:db:8f:37:15:88:93:bb:6c:ee:a2:53:fd:3f:67: a6:43:a7:cd:b3:27:48:87:df:6d:36:fe:c4:82:d5: 25:a8:9d:fc:7a:f8:ab:bd:08:22:22:5b:9c:01:6a: a5:55:e4:49:8a:22:5a:95:4c:d4:f6:af:91:3d:6d: 4c:19:55:d5:ee:e0:e0:b9:87:ae:62:1b:36:5b:01: f7:97:ad:d2:ff:12:4a:b4:23:2e:69:2d:17:e1:a1: 55:51:9b:e9:d9:72:99:33:ff:49:29:3f:c6:62:56: e9:be:3f:35:02:1b:6c:6a:6c:38:af:d0:b6:9d:a5: 23:11:c7:3b:80:5d:97:41:a1:ce:8a:dd:7c:ea:97: 5e:eb:e4:a0:d9:51:d3:92:13:9b:c6:4f:ae:37:87: d5:dd:25:d9:af:bf:45:ba:95:c6:7c:d4:20:da:f7: cd:b0:1f:31:bf:86:00:da:e5:1d:11:09:d5:18:d9: fc:79:ab:f5:eb:6a:55:9d:6a:59:1a:87:ed:61:aa: 80:ba:4d:e0:3c:28:81:b8:a8:70:2d:dd:e9:40:ea: 5e:ce:aa:7f:c4:0a:8b:45:58:b9:0b:7d:22:15:46: ab:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6B:57:C9:27:9A:E5:25:FE:B3:97:82:14:E5:D7:5C:C2:F7:D8:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/5d009bc0-f95f-3fc9-9179-4427d37e9302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl X509v3 Authority Key Identifier: keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer sbgp-ipAddrBlock: critical IPv6: 2602:80f:9000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f2:dd:01:7b:6b:91:b6:4c:98:82:a7:f4:61:fe:36:e5:9d: 7d:63:70:c5:29:d4:bc:ed:a7:d3:56:89:02:b2:4b:35:a9:78: 40:b0:9e:74:60:20:90:14:af:f5:b7:6c:dd:ca:43:a0:bb:26: fd:07:1e:55:28:77:bf:8c:f6:10:92:c2:79:71:54:8a:17:85: e9:9a:25:05:73:25:c1:72:32:44:aa:d8:9c:93:75:f8:82:e4: 5d:78:63:62:74:bb:ae:5b:b6:a0:ec:84:36:34:ae:ae:a7:33: 47:55:8c:5c:13:ce:1a:65:b7:f2:7a:5a:31:50:42:d1:22:36: ad:26:fd:33:71:f1:d7:dc:c9:46:dd:45:09:03:a0:7f:e8:29: 26:33:3a:1b:46:f4:e5:16:d4:f0:4b:d6:b8:b4:a8:08:61:80: 94:89:78:be:9b:b0:21:4c:93:b4:82:ea:aa:a0:ca:0e:2e:a3: 9d:9d:a0:4c:e6:21:02:f7:16:17:6a:8f:92:90:4c:26:9b:34: af:ea:c3:68:6e:d2:dd:2b:e9:31:05:3a:49:22:f6:66:cb:75: 08:d7:52:5b:40:c7:2f:92:80:54:0a:62:6c:b6:8f:8f:ec:f9: c5:22:70:74:3d:7b:f8:26:d1:dd:83:11:06:e4:e6:f5:5a:37: 45:c2:1c:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr5UT1NdEHmDF/IbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl MWVlMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MzFjODhhZjMtNGY5Ni00Mzg2LWI2YzEtYTJiZTQwZjU0NTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmdbOxctecx2b32hD+XhU/nH9+6cliyk7QP8 JyMC2483FYiTu2zuolP9P2emQ6fNsydIh99tNv7EgtUlqJ38evirvQgiIlucAWql VeRJiiJalUzU9q+RPW1MGVXV7uDguYeuYhs2WwH3l63S/xJKtCMuaS0X4aFVUZvp 2XKZM/9JKT/GYlbpvj81Ahtsamw4r9C2naUjEcc7gF2XQaHOit186pde6+Sg2VHT khObxk+uN4fV3SXZr79FupXGfNQg2vfNsB8xv4YA2uUdEQnVGNn8eav162pVnWpZ GoftYaqAuk3gPCiBuKhwLd3pQOpezqp/xAqLRVi5C30iFUarLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF5rV8knmuUl/rOXghTl11zC99iiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3 Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvNWQwMDliYzAtZjk1Zi0z ZmM5LTkxNzktNDQyN2QzN2U5MzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4 ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl NjhkOGUxZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIID5AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTy3QF7a5G2TJiCp/Rh/jblnX1jcMUp1Lztp9NWiQKySzWpeECw nnRgIJAUr/W3bN3KQ6C7Jv0HHlUod7+M9hCSwnlxVIoXhemaJQVzJcFyMkSq2JyT dfiC5F14Y2J0u65btqDshDY0rq6nM0dVjFwTzhplt/J6WjFQQtEiNq0m/TNx8dfc yUbdRQkDoH/oKSYzOhtG9OUW1PBL1ri0qAhhgJSJeL6bsCFMk7SC6qqgyg4uo52d oEzmIQL3Fhdqj5KQTCabNK/qw2hu0t0r6TEFOkki9mbLdQjXUltAxy+SgFQKYmy2 j4/s+cUicHQ9e/gm0d2DEQbk5vVaN0XCHN8= -----END CERTIFICATE-----Generated at Sun Aug 31 21:57:50 2025 by rpki-client