$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa File: f30c9c21-4317-3091-8c73-74cf7dd4b318.roa (raw, json) Hash identifier: Uay0Udw08dt6bYeJ/SU0GGB18UjBz4PZSbN+RCDR0QU= Subject key identifier: 6D:06:F2:91:B1:CE:F4:AD:95:43:F4:AA:84:F6:41:27:93:AD:89:25 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584B047BFEC05F1D39E8231DD498 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 400679 IP address blocks: 2602:fb82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fe:c0:5f:1d:39:e8:23:1d:d4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=a9e3762f-da06-4967-9bc6-cd4569e381a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2c:e1:db:77:32:78:fc:38:d4:08:f7:72:46: 1a:9c:93:c2:90:b6:53:5e:36:c8:00:78:40:06:e8: ac:f0:b7:4f:f4:04:e2:c0:99:74:c9:55:3f:c3:ea: 7c:13:bc:70:c0:34:98:5b:c6:16:ea:32:d9:f4:90: a8:12:35:cf:40:7c:74:c6:fe:d8:d9:13:44:92:d3: 82:89:09:8b:89:cb:16:13:b5:43:c7:45:25:0f:10: 8b:d7:e4:28:e5:a4:ec:0f:cf:be:9c:70:04:ba:84: 00:83:26:e5:29:f0:01:61:60:47:76:f6:f8:b0:68: ac:de:f2:ed:c0:ae:90:a8:49:ab:a3:0b:dc:63:9b: 39:b1:a0:c7:a9:28:6f:aa:af:5b:08:3f:da:fc:c1: f3:f7:0e:8b:c4:81:21:6e:fb:35:3e:f7:ac:83:9c: 13:e8:ab:81:91:75:c2:16:5b:84:e0:8f:55:79:52: ff:ec:2f:bf:e6:f8:06:25:4a:ce:72:aa:0b:56:b8: 68:d3:d1:2c:cc:8b:ec:65:fe:f1:19:12:d8:94:80: 00:d9:18:9d:34:b9:1d:a3:33:15:57:9c:91:c0:5c: 25:8b:b9:92:fc:2c:ef:62:f0:2a:86:1c:df:c0:6f: 41:8b:d1:3c:97:1d:4f:34:b3:54:18:a1:a2:5e:a6: ec:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:06:F2:91:B1:CE:F4:AD:95:43:F4:AA:84:F6:41:27:93:AD:89:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:bb:ee:6f:d8:36:00:15:b0:e7:63:24:60:8a:77:ed:14:23: 12:b3:41:26:46:a9:6d:66:3e:2b:98:b2:1e:d2:aa:1d:90:e3: 04:c3:4c:4c:56:2e:d3:67:cb:61:86:c9:d6:cb:a8:83:2a:0c: 9a:4a:15:b4:21:ef:71:90:13:57:25:48:f0:b1:bd:44:54:e2: 2f:9f:c8:ca:fa:63:79:53:71:de:ba:26:3f:81:7d:4d:12:12: a1:91:a3:f2:f1:3f:b0:59:c2:76:41:9d:46:26:35:80:4e:ff: 68:df:0c:09:8a:0c:94:00:e5:85:e5:47:68:b1:d9:df:b7:fc: e7:41:a1:06:b2:6b:de:ad:a7:f7:9c:fe:9a:f5:08:90:d6:9c: 14:e7:88:38:b8:61:0c:a0:8d:c7:65:cb:0d:df:04:f8:0e:81: cb:ab:38:e4:6b:54:b5:eb:5e:4e:c7:c4:29:01:bf:48:64:0c: 2f:07:57:3d:d2:da:3e:c2:7c:21:69:b6:2a:f5:ff:e2:a0:1b: 3e:92:c0:c6:4b:77:f7:66:2a:a0:95:3d:c1:49:0f:7c:08:45: b3:ce:5a:aa:6a:b0:f0:53:66:ea:cb:f0:ba:72:5d:64:aa:bf: 4b:d2:2d:f9:43:35:37:09:26:ad:60:6f:38:a1:78:f6:88:56: ea:65:d0:36 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsEe/7AXx056CMd1JgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YTllMzc2MmYtZGEwNi00OTY3LTliYzYtY2Q0NTY5ZTM4MWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCzh23cyePw41Aj3ckYanJPCkLZTXjbIAHhA Buis8LdP9ATiwJl0yVU/w+p8E7xwwDSYW8YW6jLZ9JCoEjXPQHx0xv7Y2RNEktOC iQmLicsWE7VDx0UlDxCL1+Qo5aTsD8++nHAEuoQAgyblKfABYWBHdvb4sGis3vLt wK6QqEmrowvcY5s5saDHqShvqq9bCD/a/MHz9w6LxIEhbvs1Pvesg5wT6KuBkXXC FluE4I9VeVL/7C+/5vgGJUrOcqoLVrho09EszIvsZf7xGRLYlIAA2RidNLkdozMV V5yRwFwli7mS/CzvYvAqhhzfwG9Bi9E8lx1PNLNUGKGiXqbsWQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG0G8pGxzvStlUP0qoT2QSeTrYklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvZjMwYzljMjEtNDMxNy0z MDkxLThjNzMtNzRjZjdkZDRiMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7ggAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjrvub9g2ABWw52MkYIp37RQjErNBJkapbWY+K5iyHtKqHZDjBMNM TFYu02fLYYbJ1suogyoMmkoVtCHvcZATVyVI8LG9RFTiL5/IyvpjeVNx3romP4F9 TRISoZGj8vE/sFnCdkGdRiY1gE7/aN8MCYoMlADlheVHaLHZ37f850GhBrJr3q2n 95z+mvUIkNacFOeIOLhhDKCNx2XLDd8E+A6By6s45GtUteteTsfEKQG/SGQMLwdX PdLaPsJ8IWm2KvX/4qAbPpLAxkt392YqoJU9wUkPfAhFs85aqmqw8FNm6svwunJd ZKq/S9It+UM1NwkmrWBvOKF49ohW6mXQNg== -----END CERTIFICATE-----Generated at Mon Sep 15 06:41:25 2025 by rpki-client