$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa File: 628493d1-603c-3129-8b8d-fbf6af96be8e.roa (raw, json) Hash identifier: 0A422VF23qReZE5w9WKPZR+bgxY0/N/92iUXoC5N1Gc= Subject key identifier: FD:07:3F:1F:43:AA:10:DE:D2:9A:B1:AD:92:32:07:DD:BE:FE:EF:ED Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F4328584B0FA6BCCE5CAB40E007E03B80 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 53727 IP address blocks: 2602:f982:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:bc:ce:5c:ab:40:e0:07:e0:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=662c083d-4223-46f3-afe5-f8f5e4eefa94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:7c:5b:cc:af:bd:88:92:29:c5:93:72:50: 08:c8:57:f4:2f:9f:1c:1f:f3:7a:66:a0:e1:88:10: 2a:ac:2c:f4:bf:bf:b8:ae:a9:d5:ed:eb:d3:42:0d: 63:56:18:d2:e2:5f:72:c5:77:53:6c:40:7d:19:92: c2:ae:3b:91:29:ae:fc:40:46:f3:cb:c9:fc:22:69: f4:c6:ff:79:fc:d9:47:45:5c:fb:c5:6e:a4:88:bb: 0c:20:9b:0e:b6:26:fc:3b:a7:86:a4:1c:15:32:ef: 08:fd:e1:47:3b:be:7d:00:f8:0a:80:ab:db:f9:2c: 13:72:bb:26:51:55:20:c3:6b:2f:f1:c3:95:30:2b: 2b:1d:93:e4:bf:36:03:28:fa:90:51:0c:f2:58:b4: a5:1e:c7:2a:91:92:ab:7d:09:85:e9:86:13:c0:13: 6e:cb:a6:43:77:62:40:79:44:fe:b6:8e:54:17:04: 40:fb:4d:54:82:bf:b0:80:ae:40:a2:e6:8e:a5:b1: 88:69:02:32:c1:65:c2:3b:8f:46:73:3b:fd:ad:80: 4f:33:9b:6b:a4:5a:03:2c:4c:4c:de:db:02:93:aa: a2:68:e7:ce:5f:be:4a:da:f6:fc:0e:ee:6d:af:f7: a4:d6:3f:5b:85:95:6a:e8:6e:89:5c:a5:18:5d:e5: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:07:3F:1F:43:AA:10:DE:D2:9A:B1:AD:92:32:07:DD:BE:FE:EF:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f982:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b3:00:1b:d8:eb:03:a3:ef:3c:32:d6:ef:a9:ab:a4:13:35: b0:35:55:0f:37:76:f2:0c:ca:a5:d5:e9:34:8d:67:0d:21:f9: cc:dd:78:43:03:e0:7f:f3:a3:f0:d8:ed:77:a9:1f:5b:80:94: 8d:3c:0c:e2:fc:22:05:72:76:6e:05:25:62:b8:45:06:74:af: 5a:38:9d:28:73:0b:47:3d:0a:c2:40:79:aa:1b:21:04:cc:4f: dc:53:24:02:eb:99:c1:fa:9d:02:84:9b:bb:4e:9e:ad:5a:66: 8e:b8:61:51:b4:0b:8a:14:c0:cd:67:86:7b:84:3f:93:50:28: 42:30:02:5f:70:34:f3:b9:17:a1:76:6b:49:e6:74:d6:9e:32: d2:18:59:63:e3:5f:6e:46:de:fe:79:df:22:bc:53:cc:9d:ac: 6d:0a:41:70:19:23:77:b4:b4:ae:17:6a:f0:f5:5a:7c:2a:41: 48:a9:ad:dd:4a:2d:06:da:ba:1b:3e:75:47:46:c1:9d:d5:f5: 34:bf:2b:6c:8c:dc:ae:94:ee:d4:ae:4c:0e:8d:2d:27:fb:03: 3c:b1:1b:1f:66:61:47:9e:65:33:8e:dc:38:36:56:b0:cf:22: 35:b0:af:74:88:bd:74:9d:9a:d0:ec:96:09:7f:9c:87:4b:ed: f8:e1:d7:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsPprzOXKtA4AfgO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk NjYyYzA4M2QtNDIyMy00NmYzLWFmZTUtZjhmNWU0ZWVmYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnh8W8yvvYiSKcWTclAIyFf0L58cH/N6ZqDh iBAqrCz0v7+4rqnV7evTQg1jVhjS4l9yxXdTbEB9GZLCrjuRKa78QEbzy8n8Imn0 xv95/NlHRVz7xW6kiLsMIJsOtib8O6eGpBwVMu8I/eFHO759APgKgKvb+SwTcrsm UVUgw2sv8cOVMCsrHZPkvzYDKPqQUQzyWLSlHscqkZKrfQmF6YYTwBNuy6ZDd2JA eUT+to5UFwRA+01Ugr+wgK5AouaOpbGIaQIywWXCO49Gczv9rYBPM5trpFoDLExM 3tsCk6qiaOfOX75K2vb8Du5tr/ek1j9bhZVq6G6JXKUYXeXB9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP0HPx9DqhDe0pqxrZIyB92+/u/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvNjI4NDkzZDEtNjAzYy0z MTI5LThiOGQtZmJmNmFmOTZiZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ggEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOzABvY6wOj7zwy1u+pq6QTNbA1VQ83dvIMyqXV6TSNZw0h+czd eEMD4H/zo/DY7XepH1uAlI08DOL8IgVydm4FJWK4RQZ0r1o4nShzC0c9CsJAeaob IQTMT9xTJALrmcH6nQKEm7tOnq1aZo64YVG0C4oUwM1nhnuEP5NQKEIwAl9wNPO5 F6F2a0nmdNaeMtIYWWPjX25G3v553yK8U8ydrG0KQXAZI3e0tK4XavD1WnwqQUip rd1KLQbauhs+dUdGwZ3V9TS/K2yM3K6U7tSuTA6NLSf7AzyxGx9mYUeeZTOO3Dg2 VrDPIjWwr3SIvXSdmtDslgl/nIdL7fjh1z0= -----END CERTIFICATE-----Generated at Mon Sep 15 07:58:58 2025 by rpki-client