$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/8acaa046-3712-3e7a-aa6b-e2484070f373.roa File: 8acaa046-3712-3e7a-aa6b-e2484070f373.roa (raw, json) Hash identifier: jAMJqIOpVCvzwF8KJ0grQuTM/X1D1rlB9J0gKaK20io= Subject key identifier: 69:90:83:D2:80:A9:C9:84:5C:9A:67:E4:50:35:06:E6:D8:45:C3:47 Certificate issuer: /CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Certificate serial: 010D0C9F4328584B004BE8B84DCD4710FFCA5F00 Authority key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/8acaa046-3712-3e7a-aa6b-e2484070f373.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 395332 IP address blocks: 2602:fb69::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e8:b8:4d:cd:47:10:ff:ca:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=813a3138-f532-4512-b91c-5e5ffdc79498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:5e:81:a4:f6:31:25:84:4d:81:c7:f0:34: 92:24:ce:b1:41:47:41:01:65:e6:34:27:44:d7:33: 68:c0:85:72:10:d7:77:7b:54:c3:bf:29:e2:1f:77: ea:f5:9a:c4:ba:e7:85:2f:71:ed:a6:80:08:a8:ee: 6f:70:b1:11:27:97:98:16:4d:19:a3:a3:80:5a:cc: e0:07:ed:e9:e2:7e:f3:5e:f3:98:8b:6b:e4:89:fe: f9:51:d8:ee:ad:ba:96:d6:3b:6b:f7:d2:67:92:4e: f5:62:cb:d0:11:5c:58:91:35:7a:df:9f:30:3f:be: 7d:af:68:b2:cb:33:db:32:61:5e:82:37:47:04:32: 83:f2:a8:89:d9:4d:e0:2b:43:64:07:7e:77:6f:f0: bf:6d:60:93:ae:14:d4:fb:a1:a9:51:56:8d:f3:e3: f9:b1:35:82:c6:99:3c:bd:8c:24:03:0d:a4:35:1b: e4:17:43:bf:17:10:aa:63:54:8b:13:c7:01:bc:e5: b7:ab:ac:a3:69:5c:c2:ac:22:00:45:d2:53:ef:70: 27:66:2a:86:07:e0:f4:6e:bd:88:9a:25:e2:fb:59: f2:05:bb:32:00:66:3f:29:23:23:34:ac:e3:be:6c: 26:cb:80:90:f2:2f:35:5c:9b:46:e9:32:81:60:54: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:90:83:D2:80:A9:C9:84:5C:9A:67:E4:50:35:06:E6:D8:45:C3:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/8acaa046-3712-3e7a-aa6b-e2484070f373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl X509v3 Authority Key Identifier: keyid:E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb69::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3a:39:18:81:a2:41:09:83:dc:a9:00:7c:54:7c:03:46:04: b8:78:0a:b5:ec:c9:92:70:a7:d7:f1:6c:39:e8:19:69:bc:b5: 12:b2:d7:51:e5:86:79:a6:b5:3a:46:c7:7a:7e:5b:3f:84:d7: 99:f1:e0:2b:29:8a:86:9b:3c:6b:7a:c2:15:eb:8e:a7:e5:08: c8:b6:ba:34:69:3d:c7:c9:48:da:2a:ed:17:da:5a:42:e0:41: fe:2f:72:aa:1c:ab:9b:87:02:5d:52:1b:e1:26:f2:c4:b7:2b: 2e:b0:51:33:51:da:8c:8e:96:5b:ff:8d:ae:f0:7f:90:c2:0a: 6b:7e:aa:f9:08:3f:e2:d6:f6:50:a3:35:b1:d9:8d:e1:a9:03: 7f:f1:6d:53:8c:19:d6:2e:a8:59:91:c4:77:ed:62:08:19:5e: b4:f4:a0:68:63:ee:b4:65:6e:47:90:71:fe:b3:30:67:fe:46: 72:96:75:73:20:83:a4:89:3c:c9:21:05:ad:d6:c5:fd:94:9d: 52:fd:76:2f:e9:74:d7:ac:5c:fe:78:14:ab:d5:8b:e2:5b:0b: f3:f6:56:be:ce:f6:e4:9b:19:44:5d:50:af:72:48:c3:39:eb: 5c:c5:21:51:19:19:d4:f5:45:54:a2:02:db:9d:79:95:f1:57: 26:10:ad:f1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsAS+i4Tc1HEP/KXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MyYjA4ZjktYjNkYy00Y2Y2LTg3MGMtYTczMGI4NjBj NDkxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ODEzYTMxMzgtZjUzMi00NTEyLWI5MWMtNWU1ZmZkYzc5NDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG9egaT2MSWETYHH8DSSJM6xQUdBAWXmNCdE 1zNowIVyENd3e1TDvyniH3fq9ZrEuueFL3HtpoAIqO5vcLERJ5eYFk0Zo6OAWszg B+3p4n7zXvOYi2vkif75UdjurbqW1jtr99Jnkk71YsvQEVxYkTV6358wP759r2iy yzPbMmFegjdHBDKD8qiJ2U3gK0NkB353b/C/bWCTrhTU+6GpUVaN8+P5sTWCxpk8 vYwkAw2kNRvkF0O/FxCqY1SLE8cBvOW3q6yjaVzCrCIARdJT73AnZiqGB+D0br2I miXi+1nyBbsyAGY/KSMjNKzjvmwmy4CQ8i81XJtG6TKBYFReJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGmQg9KAqcmEXJpn5FA1BubYRcNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jYzJi MDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2MGM0OTEvOGFjYWEwNDYtMzcxMi0z ZTdhLWFhNmItZTI0ODQwNzBmMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2MyYjA4ZjktYjNkYy00Y2Y2LTg3 MGMtYTczMGI4NjBjNDkxL2NjMmIwOGY5LWIzZGMtNGNmNi04NzBjLWE3MzBiODYw YzQ5MS5jcmwwHwYDVR0jBBgwFoAU4R+/KOrwSwaL4CtRyr1gO43HGJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jYzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMw Yjg2MGM0OTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7aQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaDo5GIGiQQmD3KkAfFR8A0YEuHgKtezJknCn1/FsOegZaby1ErLX UeWGeaa1OkbHen5bP4TXmfHgKymKhps8a3rCFeuOp+UIyLa6NGk9x8lI2irtF9pa QuBB/i9yqhyrm4cCXVIb4SbyxLcrLrBRM1HajI6WW/+NrvB/kMIKa36q+Qg/4tb2 UKM1sdmN4akDf/FtU4wZ1i6oWZHEd+1iCBletPSgaGPutGVuR5Bx/rMwZ/5GcpZ1 cyCDpIk8ySEFrdbF/ZSdUv12L+l016xc/ngUq9WL4lsL8/ZWvs725JsZRF1Qr3JI wznrXMUhURkZ1PVFVKIC2515lfFXJhCt8Q== -----END CERTIFICATE-----Generated at Tue Sep 16 03:05:04 2025 by rpki-client