$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa File: d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa (raw, json) Hash identifier: mUA6MrAmBUPwTx5wjrJaFYpwottnek13I15rYQUzK8A= Subject key identifier: 19:8C:5E:AD:D3:AB:44:BC:34:2D:0E:AA:87:C8:7B:01:6A:6B:B4:86 Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584B0A116BE505A2565EF9BA4600 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 54309 IP address blocks: 2602:fa3c::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6b:e5:05:a2:56:5e:f9:ba:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=7bd9f29a-ed16-4188-8e44-dfb7fd612f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:6c:fc:9a:86:d2:00:fc:9b:6c:0d:3a:4a: 96:e9:63:75:08:11:4f:21:aa:9d:6a:ac:a4:18:a1: 14:ba:75:95:5f:4e:14:fd:5c:13:3a:a1:7b:71:2c: bc:54:01:e6:d2:fa:a3:46:06:eb:eb:b2:37:47:cc: 79:7e:34:35:f0:23:21:87:d7:4f:00:ff:02:c8:25: 52:b6:a4:0e:1f:a4:f0:11:3a:f8:53:1e:9e:63:c7: 4b:7b:20:d2:21:18:4b:f0:e6:a9:c0:ee:5f:15:f0: 9b:29:3d:08:4c:b3:75:27:b3:72:9a:72:7e:a0:82: 71:b8:c4:6d:f7:07:f7:50:47:f0:2f:c7:af:b0:6d: d2:a6:8a:47:5e:b6:9b:76:12:84:9e:93:8b:07:37: c8:84:9c:e2:c5:59:cc:a2:77:43:ed:e6:da:34:b4: f5:78:e8:c7:68:53:84:33:09:ef:eb:9d:80:ad:28: b4:d8:58:c3:fd:10:46:96:6d:69:b0:82:f2:d9:f7: 2a:a8:d4:ba:ae:5c:c5:1d:9d:b9:28:6c:44:a1:39: 3f:10:d7:d2:3d:b3:7e:1a:8c:ac:37:0e:6f:a6:74: a1:d0:5f:55:bb:98:82:ed:00:4e:e3:72:ff:0e:b8: 5e:5a:98:ca:3f:8a:73:f2:fe:27:a5:e8:99:b8:f5: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8C:5E:AD:D3:AB:44:BC:34:2D:0E:AA:87:C8:7B:01:6A:6B:B4:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa3c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:bf:70:3e:84:c0:5c:07:8f:e2:14:20:84:8e:fb:c6:7c:1a: 10:08:38:55:14:9f:c5:b6:e1:44:33:01:e5:b0:a3:a9:76:85: 56:00:4a:ef:b7:9f:d2:6b:42:8e:64:7d:5f:bc:11:4b:f4:3c: c4:f1:9b:b9:cb:51:8a:08:9f:26:7f:98:31:5c:f9:75:c2:20: 4d:de:88:df:df:af:94:c7:d3:08:6a:13:91:31:25:8d:48:a2: 1e:db:39:a3:f1:37:66:1c:16:1d:90:e7:c9:dd:ba:5f:11:be: b5:8f:18:3c:17:ca:19:ff:d9:76:57:af:c6:4c:f7:30:50:06: 59:02:2d:85:e5:db:75:29:68:b1:09:8d:1d:bc:9a:99:43:e3: 70:26:35:cf:3a:48:56:7a:43:e0:86:48:10:96:09:09:c3:f7: e1:04:97:95:48:1d:30:d2:b6:c5:9b:cd:61:bb:95:5e:c6:6d: 70:81:bc:9a:d7:84:ca:74:df:9f:c4:e2:a9:9a:f2:1f:2a:5f: 8e:67:9e:39:2f:99:6b:00:f0:e9:ef:e4:b0:8f:3b:d6:d2:0a: 00:d6:79:a1:7a:47:77:a3:c3:6b:75:3c:d5:e2:ed:62:4f:40: 65:ba:99:73:84:5e:e8:18:64:b9:14:20:23:9a:64:7f:44:c6: bd:02:99:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsKEWvlBaJWXvm6RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk N2JkOWYyOWEtZWQxNi00MTg4LThlNDQtZGZiN2ZkNjEyZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWJs/JqG0gD8m2wNOkqW6WN1CBFPIaqdaqyk GKEUunWVX04U/VwTOqF7cSy8VAHm0vqjRgbr67I3R8x5fjQ18CMhh9dPAP8CyCVS tqQOH6TwETr4Ux6eY8dLeyDSIRhL8OapwO5fFfCbKT0ITLN1J7NymnJ+oIJxuMRt 9wf3UEfwL8evsG3SpopHXrabdhKEnpOLBzfIhJzixVnMondD7ebaNLT1eOjHaFOE Mwnv652ArSi02FjD/RBGlm1psILy2fcqqNS6rlzFHZ25KGxEoTk/ENfSPbN+Goys Nw5vpnSh0F9Vu5iC7QBO43L/DrheWpjKP4pz8v4npeiZuPVKCQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBmMXq3Tq0S8NC0OqofIewFqa7SGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvZDY2YmEzM2UtMWE4Ny0z ZjdhLWEzY2EtODI5YzIzZGIyYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6PAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhL9wPoTAXAeP4hQghI77xnwaEAg4VRSfxbbhRDMB5bCjqXaFVgBK 77ef0mtCjmR9X7wRS/Q8xPGbuctRigifJn+YMVz5dcIgTd6I39+vlMfTCGoTkTEl jUiiHts5o/E3ZhwWHZDnyd26XxG+tY8YPBfKGf/Zdlevxkz3MFAGWQItheXbdSlo sQmNHbyamUPjcCY1zzpIVnpD4IZIEJYJCcP34QSXlUgdMNK2xZvNYbuVXsZtcIG8 mteEynTfn8TiqZryHypfjmeeOS+ZawDw6e/ksI871tIKANZ5oXpHd6PDa3U81eLt Yk9AZbqZc4Re6BhkuRQgI5pkf0TGvQKZAQ== -----END CERTIFICATE-----Generated at Sat Sep 13 15:58:15 2025 by rpki-client