$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/042aff4e-de27-3cdd-a018-c593abc4aa90.roa File: 042aff4e-de27-3cdd-a018-c593abc4aa90.roa (raw, json) Hash identifier: NXbvw1FE7ASvQhioxnqTwOM0kfJBX565TYvgZaDty5g= Subject key identifier: 30:85:DC:63:16:CA:93:42:F1:37:F9:11:9A:59:48:44:44:AF:5A:54 Certificate issuer: /CN=37e69330-3024-406b-b60a-0d95e25f2334 Certificate serial: 010D0C9F4328584B36BC54623C0C17B64E398E40 Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/042aff4e-de27-3cdd-a018-c593abc4aa90.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 401390 IP address blocks: 2602:f7da:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:54:62:3c:0c:17:b6:4e:39:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=a7452c05-c08b-449c-92a1-759ea17b3861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:3b:3d:16:79:6b:e1:65:35:20:2e:7d:b7: ed:12:bd:8e:7f:85:81:ae:e3:9f:6c:0f:c7:d2:9a: ce:45:b8:ec:91:ef:20:02:03:1e:0e:8d:25:c0:58: 4f:60:dc:c6:dc:8f:9f:8d:1c:08:b3:db:15:d4:27: 65:d4:8d:59:4c:07:1e:9c:98:fe:d8:c0:1b:e4:30: 6b:53:ca:8c:5c:da:86:0e:f4:db:a4:ea:25:20:4d: e6:25:ce:b4:7e:a3:7c:c2:18:4e:f9:08:c3:59:d7: 58:9d:13:c7:76:4b:cb:9b:0b:8a:1a:a5:c6:03:8d: be:cb:c3:71:0a:5c:da:2b:5a:f8:ee:e6:18:aa:6d: ae:95:f3:5e:7e:33:d8:47:aa:00:96:fb:ac:ee:6d: 3f:09:26:d7:25:eb:2b:c8:94:0f:c9:f9:0e:a1:da: a1:40:b7:16:55:f6:97:69:8a:05:51:69:c7:a5:2d: 3e:d2:ad:ea:ad:c3:8a:af:ad:d4:df:70:b0:5a:ae: 12:f5:d3:2e:d3:03:7b:d2:8f:90:6d:b0:46:86:67: c0:80:ba:cc:db:f4:ba:45:16:5e:3b:8f:8f:cf:61: 15:10:32:78:39:8e:fc:5c:0e:68:6b:8b:fd:fb:83: 3d:e1:6a:68:76:8c:75:91:06:78:42:a3:b7:42:75: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:85:DC:63:16:CA:93:42:F1:37:F9:11:9A:59:48:44:44:AF:5A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/042aff4e-de27-3cdd-a018-c593abc4aa90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl X509v3 Authority Key Identifier: keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7da:33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:50:c4:26:c0:a9:6d:b1:f8:0d:cb:ab:6d:c6:28:3d:44:03: 1b:26:73:de:0b:81:84:25:7f:b1:3b:ee:42:d5:55:e6:1c:8b: bd:c3:9b:1d:ef:df:a5:39:13:4c:22:fe:98:82:dd:82:2a:ca: e7:d4:50:d6:13:a4:fe:aa:08:8c:fd:91:b6:26:5f:c4:eb:c2: 00:29:98:b6:6b:0d:10:09:02:fc:dc:22:06:fc:32:27:04:96: 60:42:e2:ff:ca:a6:7f:c2:f3:21:ba:30:28:8b:ae:49:90:52: 53:c6:87:7a:06:04:de:7a:d3:a1:27:c1:04:2e:79:9d:f0:3c: bc:79:34:78:92:b3:6f:3d:97:94:ae:8c:4c:d4:3f:52:dd:79: e7:b2:54:96:c2:ad:c9:f5:53:f1:89:71:fd:7e:67:b7:5e:d9: 2f:0f:14:87:cb:78:17:1c:54:31:20:e3:f8:9a:6f:d8:b1:9d: 0a:ef:c4:87:4f:d3:eb:6a:15:99:ef:81:5d:fa:22:32:9a:d0: d7:ed:24:9a:14:cb:58:c3:2d:92:6a:f8:5f:d4:bb:b6:d3:d6: 90:01:80:7a:97:e6:d1:d3:ee:43:7a:fc:fc:9b:a7:a2:b2:ef: 29:d9:19:35:4b:a1:6c:31:8e:2c:28:76:8c:31:e1:7e:6a:35: e2:22:3b:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs2vFRiPAwXtk45jkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy MzM0MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk YTc0NTJjMDUtYzA4Yi00NDljLTkyYTEtNzU5ZWExN2IzODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7M7PRZ5a+FlNSAufbftEr2Of4WBruOfbA/H 0prORbjske8gAgMeDo0lwFhPYNzG3I+fjRwIs9sV1Cdl1I1ZTAcenJj+2MAb5DBr U8qMXNqGDvTbpOolIE3mJc60fqN8whhO+QjDWddYnRPHdkvLmwuKGqXGA42+y8Nx ClzaK1r47uYYqm2ulfNefjPYR6oAlvus7m0/CSbXJesryJQPyfkOodqhQLcWVfaX aYoFUWnHpS0+0q3qrcOKr63U33CwWq4S9dMu0wN70o+QbbBGhmfAgLrM2/S6RRZe O4+Pz2EVEDJ4OY78XA5oa4v9+4M94Wpodox1kQZ4QqO3QnXKQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDCF3GMWypNC8Tf5EZpZSEREr1pUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2 OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvMDQyYWZmNGUtZGUyNy0z Y2RkLWEwMTgtYzU5M2FiYzRhYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2 MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1 ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gAz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVQxCbAqW2x+A3Lq23GKD1EAxsmc94LgYQlf7E77kLVVeYci73D mx3v36U5E0wi/piC3YIqyufUUNYTpP6qCIz9kbYmX8TrwgApmLZrDRAJAvzcIgb8 MicElmBC4v/Kpn/C8yG6MCiLrkmQUlPGh3oGBN5606EnwQQueZ3wPLx5NHiSs289 l5SujEzUP1LdeeeyVJbCrcn1U/GJcf1+Z7de2S8PFIfLeBccVDEg4/iab9ixnQrv xIdP0+tqFZnvgV36IjKa0NftJJoUy1jDLZJq+F/Uu7bT1pABgHqX5tHT7kN6/Pyb p6Ky7ynZGTVLoWwxjiwodowx4X5qNeIiO2s= -----END CERTIFICATE-----Generated at Fri Sep 19 03:51:57 2025 by rpki-client