$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/ffcde842-ac39-3b0c-9e55-05e9d07e2856.roa File: ffcde842-ac39-3b0c-9e55-05e9d07e2856.roa (raw, json) Hash identifier: EQVDStqzYaAT4tpSiGLc9/Fv1Rk5w/Kp5ImwrXEaHrM= Subject key identifier: F1:8A:7F:7D:6D:8B:8B:F2:F4:9A:D8:96:14:3E:E0:88:34:9C:3B:3C Certificate issuer: /CN=37e69330-3024-406b-b60a-0d95e25f2334 Certificate serial: 010D0C9F4328584B276181787A4AD613F3D90000 Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/ffcde842-ac39-3b0c-9e55-05e9d07e2856.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 401390 IP address blocks: 2602:f7da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:81:78:7a:4a:d6:13:f3:d9:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=002a1f33-733a-449e-978b-63434c973f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:bb:0a:cf:91:63:b4:be:c4:01:cb:52:1e: b1:89:db:33:f4:08:25:9d:19:2b:80:d2:04:c9:d3: 0a:03:c3:c0:0e:34:1a:6d:3a:aa:df:e9:78:10:90: 0e:64:73:76:83:88:8c:e6:68:8c:3f:26:89:72:44: 0f:62:e4:7b:72:17:d2:a1:d7:e5:f2:77:c7:15:00: 0f:ca:82:cb:2d:9d:0b:00:1c:c7:31:ea:ea:6c:3e: f9:f9:d2:e0:83:b3:db:af:0e:38:6c:9c:c1:15:93: c3:93:40:da:b9:c5:0e:b8:5c:21:44:e2:52:39:e7: 01:96:78:7e:9a:ce:41:d7:e4:57:d4:28:b9:22:ee: 90:30:4f:11:db:d4:dc:d9:86:8f:b0:66:02:c7:ed: 21:bb:c8:aa:f8:c3:41:48:0d:c8:49:e7:99:61:94: c8:ab:c5:31:51:fe:c1:91:ba:be:9a:fd:fb:1c:57: 32:01:cc:88:9f:21:13:44:74:55:75:cd:d9:ef:94: c0:ad:11:29:4c:4a:67:85:e1:7d:95:32:1c:3c:9f: 13:c0:ce:de:7e:e1:b6:8d:75:e2:bd:fa:69:45:b9: 8b:99:1d:9e:20:bc:f0:1b:a8:ec:81:c4:09:54:b6: ed:e0:6b:ef:89:e6:9f:f9:ed:bc:dc:98:22:73:f8: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8A:7F:7D:6D:8B:8B:F2:F4:9A:D8:96:14:3E:E0:88:34:9C:3B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/ffcde842-ac39-3b0c-9e55-05e9d07e2856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl X509v3 Authority Key Identifier: keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f5:31:41:ee:54:04:ea:ee:ac:12:ef:65:5e:31:a5:c8:8c: e3:7f:36:93:91:4e:e9:e7:1a:9e:9b:a6:44:6f:9d:c8:ed:7b: 09:2d:e8:9a:d8:c6:e4:df:df:ec:57:84:13:08:ab:b3:18:25: 76:0d:47:3d:70:1e:6f:a3:23:06:93:0a:a2:3a:37:eb:d2:fe: 7d:bc:64:cf:a6:36:6b:d2:2a:d8:11:5d:85:7c:e5:c4:02:cf: f1:44:46:e5:d6:9f:70:c6:b5:c0:52:89:8f:06:f3:3c:d5:6d: c5:fb:41:7a:23:42:63:b6:f4:67:d6:97:4a:3a:87:56:cf:76: d6:e2:18:80:f6:01:e6:d4:d1:77:23:bd:6f:f3:92:96:68:51: 3e:5a:ec:bc:1b:42:be:81:20:68:3d:93:09:e8:c4:08:29:c5: 36:69:ec:59:63:5c:a3:02:01:a6:f1:97:79:78:5b:58:95:3e: f8:e1:c1:59:6d:96:b7:d9:63:65:ae:0f:84:aa:1f:71:1d:45: b1:bd:54:ed:07:48:db:81:31:27:08:71:9e:d9:3a:23:67:98: 8d:35:1e:e5:4f:fe:2a:69:d3:1e:dc:50:a4:06:e6:4b:22:1e: 90:10:e5:92:d2:f4:a2:8c:c7:f3:2a:73:87:01:ee:25:a3:99: 5d:4b:94:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsnYYF4ekrWE/PZAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy MzM0MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk MDAyYTFmMzMtNzMzYS00NDllLTk3OGItNjM0MzRjOTczZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ67Cs+RY7S+xAHLUh6xidsz9AglnRkrgNIE ydMKA8PADjQabTqq3+l4EJAOZHN2g4iM5miMPyaJckQPYuR7chfSodfl8nfHFQAP yoLLLZ0LABzHMerqbD75+dLgg7Pbrw44bJzBFZPDk0DaucUOuFwhROJSOecBlnh+ ms5B1+RX1Ci5Iu6QME8R29Tc2YaPsGYCx+0hu8iq+MNBSA3ISeeZYZTIq8UxUf7B kbq+mv37HFcyAcyInyETRHRVdc3Z75TArREpTEpnheF9lTIcPJ8TwM7efuG2jXXi vfppRbmLmR2eILzwG6jsgcQJVLbt4Gvvieaf+e283Jgic/gkEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPGKf31ti4vy9JrYlhQ+4Ig0nDs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2 OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvZmZjZGU4NDItYWMzOS0z YjBjLTllNTUtMDVlOWQwN2UyODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2 MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1 ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGf1MUHuVATq7qwS72VeMaXIjON/NpORTunnGp6bpkRvncjtewkt 6JrYxuTf3+xXhBMIq7MYJXYNRz1wHm+jIwaTCqI6N+vS/n28ZM+mNmvSKtgRXYV8 5cQCz/FERuXWn3DGtcBSiY8G8zzVbcX7QXojQmO29GfWl0o6h1bPdtbiGID2AebU 0XcjvW/zkpZoUT5a7LwbQr6BIGg9kwnoxAgpxTZp7FljXKMCAabxl3l4W1iVPvjh wVltlrfZY2WuD4SqH3EdRbG9VO0HSNuBMScIcZ7ZOiNnmI01HuVP/ipp0x7cUKQG 5ksiHpAQ5ZLS9KKMx/Mqc4cB7iWjmV1LlEo= -----END CERTIFICATE-----Generated at Fri Sep 19 03:51:48 2025 by rpki-client