$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/bcec47f2-9a1e-36ca-aa36-c2b114b450ef.roa File: bcec47f2-9a1e-36ca-aa36-c2b114b450ef.roa (raw, json) Hash identifier: set4xHjBzzSeEDFwQFKCR0T2a4tptxSCflO6YEMeYJs= Subject key identifier: E7:EC:0E:E7:55:7D:21:F2:4B:C5:60:94:08:42:9D:23:55:43:7B:71 Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584AFEE6A86891805C768B5FE180 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/bcec47f2-9a1e-36ca-aa36-c2b114b450ef.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 40249 IP address blocks: 2602:fb78:1::/48 maxlen: 48 2602:fb78:2::/48 maxlen: 48 2602:fb78:3::/48 maxlen: 48 2602:fb78:4::/48 maxlen: 48 2602:fb78:5::/48 maxlen: 48 2602:fb78:6::/48 maxlen: 48 2602:fb78:7::/48 maxlen: 48 2602:fb78:8::/48 maxlen: 48 2602:fb78:9::/48 maxlen: 48 2602:fb78:a::/48 maxlen: 48 2602:fb78:b::/48 maxlen: 48 2602:fb78:c::/48 maxlen: 48 2602:fb78:d::/48 maxlen: 48 2602:fb78:e::/48 maxlen: 48 2602:fb78:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a8:68:91:80:5c:76:8b:5f:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=d68b0dd6-84cc-467b-ab7b-3bba033ce465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:7c:5c:02:a1:1b:d6:45:ab:b4:36:09:6d: bc:f3:0e:70:d2:7b:3f:f7:8a:a7:7a:72:7e:f6:17: 11:8d:c8:7f:a0:3f:58:9e:7c:f8:43:64:57:e5:fd: a1:27:36:af:b7:94:0b:32:1a:f6:ba:2e:c0:85:4c: 19:d7:77:e8:b2:d2:b4:3d:5a:a7:37:d1:f5:2f:07: 59:f1:47:b8:e7:dd:43:85:9f:33:20:d0:38:1a:9d: 57:47:a3:d7:82:4a:30:46:37:9d:31:fd:aa:6e:39: 86:ae:0c:26:14:f3:c0:43:06:c1:b5:be:73:9d:08: 4c:60:e0:b0:57:4f:3a:bb:1e:6b:0d:3b:d3:70:c3: 19:4b:ad:9a:92:62:9d:d9:20:05:c3:bd:84:c2:82: 03:32:84:49:f7:1a:63:59:fe:50:51:19:f3:8c:e4: 2f:d3:cb:f1:ee:c5:1f:df:eb:22:97:96:2c:7a:53: bc:90:13:ec:47:ad:57:4c:eb:8c:fc:6a:d0:16:1f: 56:7e:d8:ce:dd:af:a2:66:8c:ef:78:d1:14:d0:c1: d5:13:cb:5f:59:59:20:73:35:2e:c5:19:93:c7:7a: fd:2f:e4:cf:04:86:c6:ae:c2:64:bf:06:62:d0:fa: d7:cf:5a:ad:c5:db:f3:c0:30:67:59:30:73:89:3e: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EC:0E:E7:55:7D:21:F2:4B:C5:60:94:08:42:9D:23:55:43:7B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/bcec47f2-9a1e-36ca-aa36-c2b114b450ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb78:1::-2602:fb78:f:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:fc:54:e9:1d:2b:cb:6c:a2:0c:e3:7b:d0:d2:8d:42:87:4f: 09:24:11:d9:98:52:4a:90:b7:5f:18:48:43:65:3b:4d:71:72: b2:34:1b:b7:57:9c:ad:20:06:7e:db:d5:a2:45:47:69:1c:a1: 0d:f6:48:01:0d:9d:f4:29:3a:f1:87:21:7c:5d:68:0c:cb:91: e2:e4:8d:e6:cd:fb:3d:05:5a:35:c5:7b:cb:47:50:c2:f1:f4: a0:f0:80:bd:c4:df:bd:8c:e0:e7:20:e0:03:c7:d3:e4:2a:61: 8a:4c:1c:d6:fe:9e:c9:4d:b8:1d:eb:f1:a3:02:42:06:8a:10: 91:03:51:2d:86:fa:e7:9e:f2:1e:10:1e:13:e2:3f:f3:73:f2: 33:32:90:0b:fa:8f:45:93:8a:fb:ba:2f:26:8a:7f:33:ed:3c: ff:79:76:c9:6f:81:92:7f:da:0a:e1:1f:0a:4e:06:ca:af:c9: 4b:6a:64:21:37:d3:d7:d4:88:8d:cc:78:70:a8:24:cf:ca:ca: c4:e6:36:f0:ce:fb:18:33:b4:2f:1f:45:b8:da:d8:21:38:20: c0:3d:df:a0:2c:44:b1:81:84:af:4f:90:6a:a8:ad:2c:b7:dc: 5e:c6:5a:97:c1:bd:4e:fe:ce:7c:19:f7:88:03:15:65:c7:4b: ea:ef:6a:a7 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEr+5qhokYBcdotf4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDY4YjBkZDYtODRjYy00NjdiLWFiN2ItM2JiYTAzM2NlNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSh8XAKhG9ZFq7Q2CW288w5w0ns/94qnenJ+ 9hcRjch/oD9Ynnz4Q2RX5f2hJzavt5QLMhr2ui7AhUwZ13fostK0PVqnN9H1LwdZ 8Ue4591DhZ8zINA4Gp1XR6PXgkowRjedMf2qbjmGrgwmFPPAQwbBtb5znQhMYOCw V086ux5rDTvTcMMZS62akmKd2SAFw72EwoIDMoRJ9xpjWf5QURnzjOQv08vx7sUf 3+sil5YselO8kBPsR61XTOuM/GrQFh9WftjO3a+iZozveNEU0MHVE8tfWVkgczUu xRmTx3r9L+TPBIbGrsJkvwZi0PrXz1qtxdvzwDBnWTBziT4CdwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFOfsDudVfSHyS8VglAhCnSNVQ3txMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvYmNlYzQ3ZjItOWExZS0z NmNhLWFhMzYtYzJiMTE0YjQ1MGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAvt4 AAEDBwQmAvt4AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAOPxU6R0ry2yiDON70NKNQodPCSQR2ZhSSpC3 XxhIQ2U7TXFysjQbt1ecrSAGftvVokVHaRyhDfZIAQ2d9Ck68YchfF1oDMuR4uSN 5s37PQVaNcV7y0dQwvH0oPCAvcTfvYzg5yDgA8fT5Cphikwc1v6eyU24HevxowJC BooQkQNRLYb6557yHhAeE+I/83PyMzKQC/qPRZOK+7ovJop/M+08/3l2yW+Bkn/a CuEfCk4Gyq/JS2pkITfT19SIjcx4cKgkz8rKxOY28M77GDO0Lx9FuNrYITggwD3f oCxEsYGEr0+QaqitLLfcXsZal8G9Tv7OfBn3iAMVZcdL6u9qpw== -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:20 2025 by rpki-client