$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa File: f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa (raw, json) Hash identifier: lPheXW3jxp8utxfj1BMOh/7zkwIQN4ZWuJBZl+4ZgAk= Subject key identifier: 40:A6:C6:CB:D1:D9:E4:0C:F0:A7:A5:CA:A4:C2:B6:1E:F2:09:80:D6 Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584AFEE6A852E07948F61562AE40 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 0 IP address blocks: 2602:fb78::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a8:52:e0:79:48:f6:15:62:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=b2615a7d-8bf5-4950-9911-6cda72bfccb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:3d:65:88:c1:9f:78:46:ab:5d:c4:5b:5d: 6d:f6:a2:22:ce:89:33:ee:59:db:02:6e:4a:91:b1: ea:71:75:8a:c4:48:14:c6:30:63:b7:7f:1b:2c:7e: 59:4d:74:04:0c:cd:7e:1b:16:ac:c0:8b:c6:01:8f: 47:4c:e1:0a:b2:3a:3d:26:af:d4:95:0e:7f:c2:e9: c2:b7:8c:4b:71:1a:d3:1c:2f:63:26:15:ed:be:43: 36:fe:60:4a:4b:94:70:da:67:02:e9:59:c3:dc:00: 67:d7:a0:6c:1a:c3:be:1f:bd:89:a9:7a:bc:6a:60: d4:67:2f:2f:a5:77:0a:97:5b:51:fb:2c:6a:3f:9f: 4f:15:00:25:08:1e:ae:3e:32:6e:66:60:ce:dd:b5: 94:e7:8d:b7:ca:96:83:47:11:01:10:a1:83:0b:fd: 00:6d:34:e3:73:8c:ee:8b:4d:d5:b1:e0:2b:3f:a8: 01:1e:47:0b:f3:29:7d:17:55:d3:ab:cf:ea:50:81: 37:54:fa:47:74:fc:08:d6:e0:a7:a3:80:dc:5d:c5: 65:17:01:79:47:28:49:2e:56:d8:c4:6a:01:f0:f6: 79:16:79:fe:c0:a9:ca:4a:f8:03:8c:42:a2:d2:6a: 28:09:f8:79:05:5b:05:a7:e8:83:a0:d1:b3:c2:0a: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A6:C6:CB:D1:D9:E4:0C:F0:A7:A5:CA:A4:C2:B6:1E:F2:09:80:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb78::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:fe:67:1a:3b:de:90:25:35:90:9b:7e:32:20:ec:74:34:a6: f8:eb:45:bf:02:d5:a0:99:40:34:a9:82:3f:02:0f:f0:c2:cd: a2:88:b1:81:2c:7e:80:66:9f:86:ef:98:f7:d4:73:11:2a:51: b8:70:32:ec:2c:5c:09:d6:a0:e8:f5:fc:1a:5d:6d:cd:5d:8e: 9c:bf:9c:cf:12:18:e9:df:d1:37:dc:92:15:21:f5:a6:b0:cd: 39:9d:56:9e:e5:17:a0:68:6d:b9:dd:79:ca:eb:07:3b:71:53: bc:21:4d:c2:09:c1:4f:94:8e:4a:96:71:7e:9e:f0:97:fc:76: b5:85:1e:47:dc:57:69:70:56:43:c3:44:34:d5:12:86:34:e0: 15:99:ff:5e:02:3f:46:d5:48:fe:3a:bc:9f:43:8c:fb:47:0a: fb:e1:15:cd:11:ea:e0:e6:05:5e:57:d2:f2:53:bd:10:c7:64: 5b:f5:35:b7:20:5b:f5:d7:c0:a0:78:39:d4:82:26:36:fd:d6: fc:26:9e:f6:be:fe:79:2c:73:ac:69:3f:72:64:2a:e0:86:6f: c7:ae:a0:7c:a4:66:15:03:35:13:00:86:6e:e2:cc:c5:29:fc: a7:ce:b3:ff:1c:20:93:ef:b0:cb:0e:a1:00:d9:cb:a1:23:b0: 7b:df:34:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr+5qhS4HlI9hVirkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YjI2MTVhN2QtOGJmNS00OTUwLTk5MTEtNmNkYTcyYmZjY2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDA9ZYjBn3hGq13EW11t9qIizokz7lnbAm5K kbHqcXWKxEgUxjBjt38bLH5ZTXQEDM1+GxaswIvGAY9HTOEKsjo9Jq/UlQ5/wunC t4xLcRrTHC9jJhXtvkM2/mBKS5Rw2mcC6VnD3ABn16BsGsO+H72JqXq8amDUZy8v pXcKl1tR+yxqP59PFQAlCB6uPjJuZmDO3bWU5423ypaDRxEBEKGDC/0AbTTjc4zu i03VseArP6gBHkcL8yl9F1XTq8/qUIE3VPpHdPwI1uCno4DcXcVlFwF5RyhJLlbY xGoB8PZ5Fnn+wKnKSvgDjEKi0mooCfh5BVsFp+iDoNGzwgpbuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFECmxsvR2eQM8KelyqTCth7yCYDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvZjlmN2VhMmItNjE0ZC0z YmM5LThmYTMtOTg0M2FlYmVlZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7eAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADX+Zxo73pAlNZCbfjIg7HQ0pvjrRb8C1aCZQDSpgj8CD/DCzaKI sYEsfoBmn4bvmPfUcxEqUbhwMuwsXAnWoOj1/Bpdbc1djpy/nM8SGOnf0TfckhUh 9aawzTmdVp7lF6BobbndecrrBztxU7whTcIJwU+UjkqWcX6e8Jf8drWFHkfcV2lw VkPDRDTVEoY04BWZ/14CP0bVSP46vJ9DjPtHCvvhFc0R6uDmBV5X0vJTvRDHZFv1 NbcgW/XXwKB4OdSCJjb91vwmnva+/nksc6xpP3JkKuCGb8euoHykZhUDNRMAhm7i zMUp/KfOs/8cIJPvsMsOoQDZy6EjsHvfNAs= -----END CERTIFICATE-----Generated at Wed Oct 8 14:02:15 2025 by rpki-client