$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/97c027da-6d39-3b13-a764-2759d5652401.roa File: 97c027da-6d39-3b13-a764-2759d5652401.roa (raw, json) Hash identifier: tYHWw6E7V/ay2MTngkydaXd8GowCojHNUuRv+hFQz9k= Subject key identifier: 8A:6D:21:66:A0:86:FE:A4:DE:D4:A3:AA:73:4B:44:FD:AF:E2:0B:D8 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584AFEE6CCB31BB28B6640A72A80 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/97c027da-6d39-3b13-a764-2759d5652401.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 62553 IP address blocks: 2602:f71e:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:cc:b3:1b:b2:8b:66:40:a7:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=527fd611-72bb-4a7d-adee-8d9b91b805ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:e9:a5:26:8b:e5:56:4f:8b:02:1d:db:3d: 8c:8d:1e:7d:b7:27:e9:e5:11:13:65:24:11:a5:01: 05:2f:b7:ae:6c:c3:5c:30:20:e6:28:0a:d6:ee:29: 86:29:d8:e3:0b:a0:96:2e:27:7a:95:4c:c2:98:00: 1b:ca:8e:f5:f6:c2:ea:89:f2:c7:c2:19:41:e2:c2: 2f:5a:4b:f8:63:63:43:68:50:01:10:b5:9e:f4:70: 6f:5d:06:bb:42:9e:97:e7:26:09:8b:4b:cc:dc:3c: 51:35:ee:28:e5:5c:a0:29:14:26:7c:80:1a:54:ca: f5:a6:f1:2f:8a:27:73:83:9c:16:6f:75:77:24:69: 7c:ea:47:28:cf:20:d5:ca:f8:24:57:61:10:4c:bb: 38:f1:07:cc:a3:de:83:e6:18:ba:44:21:78:13:58: b9:06:89:e7:a9:28:e9:2e:2e:83:b2:04:42:b6:40: 2d:b6:c1:94:f9:d7:87:5b:8c:ca:08:86:d1:66:42: eb:e1:69:12:89:f3:b1:3f:5e:90:0a:e1:0e:30:66: 3d:da:3e:a8:8e:84:73:65:a2:a8:eb:19:79:ad:58: 8c:8b:4d:01:92:fe:61:37:8d:a9:f7:67:03:1e:81: b8:e5:06:d1:a2:26:6c:63:f4:f6:2b:f5:71:e4:0a: fc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6D:21:66:A0:86:FE:A4:DE:D4:A3:AA:73:4B:44:FD:AF:E2:0B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/97c027da-6d39-3b13-a764-2759d5652401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1c:39:f2:c8:c3:e9:54:f4:5b:17:6c:7c:ba:9a:23:95:00: 50:df:a8:99:8f:a8:41:40:f7:bf:f0:80:39:1b:e1:c3:13:1e: 6c:2e:32:dc:2e:3e:e5:5d:f4:a9:b4:48:e4:6f:f0:8f:61:be: 27:66:4b:0a:17:3d:d4:aa:01:a9:e4:b2:dc:0b:c3:c1:8a:0b: 06:4d:e9:1d:31:c9:ed:85:6b:9b:8c:c1:95:d1:e9:27:a7:0b: 27:77:bd:2c:b0:5c:6e:0b:05:d5:1d:fa:3e:88:37:07:ab:7c: f3:d9:13:c7:e1:7e:f6:ef:3b:45:82:bd:c2:15:61:bf:73:ec: ce:24:fa:a3:5b:b8:12:ed:4b:30:15:eb:42:c6:d0:86:07:91: ab:d5:d0:7f:fa:6b:dc:c9:cf:51:88:a6:02:c1:95:38:6c:58: 18:08:0f:53:e3:06:5c:7c:47:ad:37:7b:0e:99:5a:c8:0a:f7: d1:34:8b:85:6a:66:b3:9b:1f:90:05:7f:ec:43:1a:a8:27:dd: 4e:ac:a2:ec:b5:44:6f:b5:4c:22:20:27:51:69:48:75:71:6f: a0:6f:7f:08:82:41:17:aa:09:ff:7f:b7:a9:7f:f9:1e:a8:eb: c4:19:c0:2b:79:bf:b1:6d:63:5d:19:12:01:c1:ad:9d:64:e0: e9:7c:c6:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr+5syzG7KLZkCnKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NTI3ZmQ2MTEtNzJiYi00YTdkLWFkZWUtOGQ5YjkxYjgwNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMfppSaL5VZPiwId2z2MjR59tyfp5RETZSQR pQEFL7eubMNcMCDmKArW7imGKdjjC6CWLid6lUzCmAAbyo719sLqifLHwhlB4sIv Wkv4Y2NDaFABELWe9HBvXQa7Qp6X5yYJi0vM3DxRNe4o5VygKRQmfIAaVMr1pvEv iidzg5wWb3V3JGl86kcozyDVyvgkV2EQTLs48QfMo96D5hi6RCF4E1i5BonnqSjp Li6DsgRCtkAttsGU+deHW4zKCIbRZkLr4WkSifOxP16QCuEOMGY92j6ojoRzZaKo 6xl5rViMi00Bkv5hN42p92cDHoG45QbRoiZsY/T2K/Vx5Ar8oQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIptIWaghv6k3tSjqnNLRP2v4gvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvOTdjMDI3ZGEtNmQzOS0z YjEzLWE3NjQtMjc1OWQ1NjUyNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3HgBB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABscOfLIw+lU9FsXbHy6miOVAFDfqJmPqEFA97/wgDkb4cMTHmwu MtwuPuVd9Km0SORv8I9hvidmSwoXPdSqAankstwLw8GKCwZN6R0xye2Fa5uMwZXR 6SenCyd3vSywXG4LBdUd+j6INwerfPPZE8fhfvbvO0WCvcIVYb9z7M4k+qNbuBLt SzAV60LG0IYHkavV0H/6a9zJz1GIpgLBlThsWBgID1PjBlx8R603ew6ZWsgK99E0 i4VqZrObH5AFf+xDGqgn3U6souy1RG+1TCIgJ1FpSHVxb6BvfwiCQReqCf9/t6l/ +R6o68QZwCt5v7FtY10ZEgHBrZ1k4Ol8xig= -----END CERTIFICATE-----Generated at Tue Sep 9 23:33:06 2025 by rpki-client