$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa File: ecfa0f99-7baa-3072-8fa5-53106bacf901.roa (raw, json) Hash identifier: TWlBkQNGMtWdx89VjBSAE7mKBkzzwfVBfSRpNUPC/tw= Subject key identifier: 10:1B:28:75:FE:FA:C5:54:5E:13:81:EE:9B:E1:EB:2E:A0:19:33:65 Certificate issuer: /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Certificate serial: 010D0C9F4328584AF5212D1456E86129AA55AF80 Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 34553 IP address blocks: 2602:809:3004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2d:14:56:e8:61:29:aa:55:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=c14fbe10-0e17-488d-92b8-f0a64bcd977b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:77:9b:16:ee:62:d9:99:ef:95:1d:13:59:42: 3c:c7:b3:19:93:e2:5f:b7:f3:ca:4d:07:96:20:90: 8b:51:e4:72:22:a4:d1:f0:a1:cd:1c:8a:0a:14:17: 78:1f:3c:ff:29:1b:15:90:f0:d2:18:9b:4e:f6:1e: 21:05:d6:18:09:23:1f:d5:d4:25:9b:ef:4a:a3:ba: 8e:a3:e1:76:00:2f:ad:4b:3b:5c:5b:a8:77:a1:55: 86:d4:ac:eb:d5:f5:e1:8e:13:f0:c0:98:41:ea:5b: 0a:bb:e8:76:4e:7c:ec:80:bc:07:2b:8f:64:7d:b6: a7:ad:89:87:26:22:80:2b:99:26:32:14:1f:92:b3: 32:12:b8:0f:47:5a:52:c4:37:17:2c:23:94:96:a5: 2f:de:2a:de:60:6b:f8:cc:8d:83:6a:a4:af:d7:86: 00:0e:53:57:10:e5:c2:0c:72:ae:1a:f9:91:6d:8e: 46:5a:d8:ef:5e:7c:e3:3b:75:f5:77:46:d9:e6:bb: f6:21:06:19:76:14:75:2d:70:89:70:17:d4:5d:af: 64:ad:33:c8:1b:ce:96:d2:c0:b6:b5:7b:be:a5:fa: 02:99:61:29:e7:54:ff:06:c4:17:6c:73:16:c7:a9: ef:49:80:43:f6:cb:62:45:92:2e:e4:ff:01:06:52: f4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1B:28:75:FE:FA:C5:54:5E:13:81:EE:9B:E1:EB:2E:A0:19:33:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl X509v3 Authority Key Identifier: keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:809:3004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:62:44:e6:99:c6:c9:b0:3a:86:7c:e2:50:bc:1c:d7:4a:59: 94:1d:71:c9:0e:37:a3:48:ba:9a:ba:a1:a6:ef:72:d7:d0:00: 06:b0:f5:c9:d3:66:ee:d6:c3:4a:99:7e:77:ee:c0:93:6f:2f: 1a:fd:a3:83:1a:f6:81:10:0a:3b:76:b3:88:c4:fa:09:60:e3: 79:c0:72:59:3b:79:1d:d8:56:1e:e0:78:80:85:b8:27:e2:d6: d4:23:f5:ea:a2:af:bd:e4:a6:49:69:84:33:d5:ee:94:f6:e4: bb:7f:52:cb:a4:ad:22:cc:87:ef:4f:cf:a6:d2:3e:5c:b6:22: f8:73:4e:32:aa:ff:36:d9:6f:54:8c:21:e1:9c:b7:95:10:8f: af:dd:43:c5:b3:62:64:ed:a9:21:93:3e:5f:88:1f:83:2d:4d: 67:48:9b:53:62:1e:87:5b:b2:2f:14:82:e0:da:c5:b1:c8:bc: d2:62:7d:d5:7d:85:22:5f:0a:0e:5f:70:20:ce:ce:60:76:b7: 8b:55:6b:a6:73:29:cb:be:15:a3:38:7e:5f:45:0a:89:d2:31: d4:42:28:31:9b:7e:f5:ba:f1:90:d7:12:f8:b8:4f:80:16:4f: 36:ab:f1:20:1d:b3:51:0e:a8:2d:cf:43:67:fa:01:f5:76:ce: 7a:5f:73:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IS0UVuhhKapVr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3NzJiNGItMTVmYi00YjM4LWI1MDUtZGZlOTE1ZGFl OWNkMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzE0ZmJlMTAtMGUxNy00ODhkLTkyYjgtZjBhNjRiY2Q5NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHebFu5i2ZnvlR0TWUI8x7MZk+Jft/PKTQeW IJCLUeRyIqTR8KHNHIoKFBd4Hzz/KRsVkPDSGJtO9h4hBdYYCSMf1dQlm+9Ko7qO o+F2AC+tSztcW6h3oVWG1Kzr1fXhjhPwwJhB6lsKu+h2TnzsgLwHK49kfbanrYmH JiKAK5kmMhQfkrMyErgPR1pSxDcXLCOUlqUv3ireYGv4zI2DaqSv14YADlNXEOXC DHKuGvmRbY5GWtjvXnzjO3X1d0bZ5rv2IQYZdhR1LXCJcBfUXa9krTPIG86W0sC2 tXu+pfoCmWEp51T/BsQXbHMWx6nvSYBD9stiRZIu5P8BBlL0FwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBAbKHX++sVUXhOB7pvh6y6gGTNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3 MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5MTVkYWU5Y2QvZWNmYTBmOTktN2JhYS0z MDcyLThmYTUtNTMxMDZiYWNmOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGM3NzJiNGItMTVmYi00YjM4LWI1 MDUtZGZlOTE1ZGFlOWNkLzBjNzcyYjRiLTE1ZmItNGIzOC1iNTA1LWRmZTkxNWRh ZTljZC5jcmwwHwYDVR0jBBgwFoAU8UVSzOYiTilOFS1c5L3dBToItXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5 MTVkYWU5Y2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICTAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADViROaZxsmwOoZ84lC8HNdKWZQdcckON6NIupq6oabvctfQAAaw 9cnTZu7Ww0qZfnfuwJNvLxr9o4Ma9oEQCjt2s4jE+glg43nAclk7eR3YVh7geICF uCfi1tQj9eqir73kpklphDPV7pT25Lt/UsukrSLMh+9Pz6bSPly2IvhzTjKq/zbZ b1SMIeGct5UQj6/dQ8WzYmTtqSGTPl+IH4MtTWdIm1NiHodbsi8UguDaxbHIvNJi fdV9hSJfCg5fcCDOzmB2t4tVa6ZzKcu+FaM4fl9FConSMdRCKDGbfvW68ZDXEvi4 T4AWTzar8SAds1EOqC3PQ2f6AfV2znpfcyQ= -----END CERTIFICATE-----Generated at Wed Oct 8 21:35:59 2025 by rpki-client