$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2860ae75-8a05-35fe-8a8d-51a035799a48.roa File: 2860ae75-8a05-35fe-8a8d-51a035799a48.roa (raw, json) Hash identifier: vms+/MBYU+GCJDOi5rNk4Wk/4w5E6yJD2uV90IJw31c= Subject key identifier: 85:4A:D0:CD:9E:A6:62:F6:2A:60:24:03:8D:F2:FA:79:02:60:E1:F2 Certificate issuer: /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961 Certificate serial: 010D0C9F4328584B1806E2F367C49DBD79D79E80 Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2860ae75-8a05-35fe-8a8d-51a035799a48.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 25759 IP address blocks: 2602:fa3d:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e2:f3:67:c4:9d:bd:79:d7:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=a129bd9e-818e-47ef-a934-e817db86c8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f5:66:0c:55:a0:d3:dc:7d:5f:23:25:53:9f: a7:83:a6:ea:11:c7:0f:1e:17:e3:75:b9:6e:d5:d0: 6c:24:c5:13:3c:fd:80:5f:18:3d:6e:16:d6:77:8c: f8:77:ed:bc:2f:f1:c6:02:ca:35:f8:6e:dc:7f:5e: fb:70:26:8c:03:fd:20:30:11:16:5e:7b:62:4a:ed: ee:4e:05:be:19:55:46:30:23:90:82:40:32:7e:98: 1f:e6:b2:33:18:f9:60:79:be:60:ba:fc:79:06:ef: 3f:a5:4b:f2:d8:8f:44:90:78:a6:6e:02:e6:ef:d8: 2c:24:08:65:c2:50:7b:cc:3c:30:d0:00:a5:13:21: e7:84:32:83:43:45:96:cf:2b:f1:1c:3b:87:c3:e0: 86:69:a7:75:84:1a:7c:8a:06:dc:44:e9:aa:aa:93: 2c:f7:2b:e8:44:90:f6:b1:da:ba:ba:b2:71:5d:8f: e5:de:45:07:8c:66:59:2e:3b:d9:bd:fe:56:2c:74: fe:3f:68:f8:ed:1c:da:c2:1f:71:df:53:97:d3:04: 90:e1:86:fe:f2:03:f3:ba:a6:a9:96:02:c7:c7:91: e5:52:a8:94:22:4e:6b:1a:39:00:c2:e8:d7:cb:ce: 62:ba:b6:77:c4:9f:f6:86:1f:d3:94:c2:b1:46:22: d8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4A:D0:CD:9E:A6:62:F6:2A:60:24:03:8D:F2:FA:79:02:60:E1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2860ae75-8a05-35fe-8a8d-51a035799a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl X509v3 Authority Key Identifier: keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa3d:c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5c:e8:13:aa:d8:dd:38:ae:5e:f9:a1:b9:71:62:25:1b:a3: 63:b4:2d:f8:a1:1d:d7:e2:74:99:f4:2f:86:cd:f4:33:58:27: f2:0f:e2:7c:ad:8c:17:5b:87:b7:92:df:a3:7b:5a:24:a8:39: a8:a5:5d:39:f8:37:67:26:54:d9:82:2a:81:ea:29:9a:2a:c1: 03:c4:e6:62:1b:d3:c5:bf:a9:52:40:46:58:73:dc:94:d2:01: 8e:c7:66:ba:a1:0d:98:79:c2:fc:0e:0d:e6:1b:f5:4d:15:64: 99:90:49:e5:98:b9:3e:2f:ae:46:4a:47:86:e5:64:7c:21:9a: 28:ec:10:b0:9b:df:d2:f8:ef:26:32:dd:47:be:6b:b4:47:74: 25:d4:40:66:f8:c6:b1:ed:04:d8:7f:da:53:c6:3e:2c:72:51: 66:9d:62:0d:88:e5:b9:08:6a:4f:5a:12:43:b2:2c:04:d8:30: 5d:37:d9:97:af:1b:a4:61:6c:0e:4b:71:eb:7e:74:c0:67:fa: 5b:77:b4:49:e5:00:ab:b4:61:14:01:dc:b1:0f:a7:4d:32:fd: 81:b3:d2:d6:20:87:d0:fe:3e:9f:67:bd:08:23:80:33:4b:7e: a2:9e:b4:ad:38:98:e0:6d:f8:6b:48:71:0c:92:27:ab:78:af: 30:5e:29:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBuLzZ8SdvXnXnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJhMDMwNjQtMDI4OC00ZWM0LWI3M2YtZDZiYTFkNjM5 OTYxMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTEyOWJkOWUtODE4ZS00N2VmLWE5MzQtZTgxN2RiODZjOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofVmDFWg09x9XyMlU5+ng6bqEccPHhfjdblu 1dBsJMUTPP2AXxg9bhbWd4z4d+28L/HGAso1+G7cf177cCaMA/0gMBEWXntiSu3u TgW+GVVGMCOQgkAyfpgf5rIzGPlgeb5guvx5Bu8/pUvy2I9EkHimbgLm79gsJAhl wlB7zDww0AClEyHnhDKDQ0WWzyvxHDuHw+CGaad1hBp8igbcROmqqpMs9yvoRJD2 sdq6urJxXY/l3kUHjGZZLjvZvf5WLHT+P2j47Rzawh9x31OX0wSQ4Yb+8gPzuqap lgLHx5HlUqiUIk5rGjkAwujXy85iurZ3xJ/2hh/TlMKxRiLYUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVK0M2epmL2KmAkA43y+nkCYOHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YmEw MzA2NC0wMjg4LTRlYzQtYjczZi1kNmJhMWQ2Mzk5NjEvMjg2MGFlNzUtOGEwNS0z NWZlLThhOGQtNTFhMDM1Nzk5YTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGJhMDMwNjQtMDI4OC00ZWM0LWI3 M2YtZDZiYTFkNjM5OTYxLzRiYTAzMDY0LTAyODgtNGVjNC1iNzNmLWQ2YmExZDYz OTk2MS5jcmwwHwYDVR0jBBgwFoAU1bCh9ujIDJsNuG89eCAve3nUrdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YmEwMzA2NC0wMjg4LTRlYzQtYjczZi1kNmJh MWQ2Mzk5NjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6PQDB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBc6BOq2N04rl75oblxYiUbo2O0LfihHdfidJn0L4bN9DNYJ/IP 4nytjBdbh7eS36N7WiSoOailXTn4N2cmVNmCKoHqKZoqwQPE5mIb08W/qVJARlhz 3JTSAY7HZrqhDZh5wvwODeYb9U0VZJmQSeWYuT4vrkZKR4blZHwhmijsELCb39L4 7yYy3Ue+a7RHdCXUQGb4xrHtBNh/2lPGPixyUWadYg2I5bkIak9aEkOyLATYMF03 2ZevG6RhbA5Lcet+dMBn+lt3tEnlAKu0YRQB3LEPp00y/YGz0tYgh9D+Pp9nvQgj gDNLfqKetK04mOBt+GtIcQySJ6t4rzBeKcc= -----END CERTIFICATE-----Generated at Mon Sep 8 10:49:08 2025 by rpki-client