$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/63557a11-1132-331f-b85a-320f32aec529.roa File: 63557a11-1132-331f-b85a-320f32aec529.roa (raw, json) Hash identifier: pgNFSZhLYsScnvwV3gIPDv2RNLjtukpRKsPsFyorA9U= Subject key identifier: DA:52:1D:76:9D:56:28:81:84:94:76:FF:8E:35:9D:43:F2:D5:A5:D7 Certificate issuer: /CN=8309265c-1311-43ce-adf7-732012b108fd Certificate serial: 010D0C9F4328584B5DD1F687B2AF8F35FE23F740 Authority key identifier: 65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/63557a11-1132-331f-b85a-320f32aec529.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 397720 IP address blocks: 2602:fdc2:200::/44 maxlen: 44 2602:fdc2:300::/44 maxlen: 44 2602:fdc2:700::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f6:87:b2:af:8f:35:fe:23:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8309265c-1311-43ce-adf7-732012b108fd Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=28044ff5-ed61-4e0e-be6e-51003365744c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:3d:34:7b:8c:8a:9a:0f:5a:41:9a:40:89: 42:8b:cd:3b:1f:ed:8e:94:18:56:dc:5f:4c:c8:dc: 2a:7b:5b:14:6c:22:c2:de:83:d5:99:60:60:bf:ef: b6:c4:dd:ee:db:ee:91:0b:75:d7:37:20:6e:33:d9: 6a:b6:63:47:4c:b1:66:ab:c7:77:05:67:57:a4:bf: 4a:2f:0c:5d:e1:90:30:7f:83:1e:27:c4:43:39:65: e0:e6:2b:ae:7c:d8:21:85:82:17:bf:6a:e9:a8:b5: be:1e:de:53:9c:42:18:e5:f8:8a:d6:12:c5:7e:07: 81:6f:6f:3c:2c:b4:23:a2:65:53:7b:69:39:43:e1: 4d:bf:bb:6a:f0:c1:13:60:b9:40:fd:81:84:4e:db: 5d:21:f7:d1:85:62:5f:29:3b:aa:84:77:e1:35:e1: 71:47:a6:8c:05:f2:60:d5:a8:bb:68:16:cf:7f:33: 31:bb:06:dd:ee:a6:4e:13:35:4a:43:27:0a:ff:8c: df:87:22:1e:dc:50:66:6c:1b:f0:0d:81:58:9f:e8: 73:04:90:84:0b:83:5d:b7:b7:a5:7e:0a:4a:01:05: dc:c5:f1:8e:73:b3:b9:0b:c9:c9:f0:c9:f7:92:ab: 9a:2f:dd:7a:d4:f2:91:3f:7d:45:fb:85:5f:95:c7: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:52:1D:76:9D:56:28:81:84:94:76:FF:8E:35:9D:43:F2:D5:A5:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/63557a11-1132-331f-b85a-320f32aec529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl X509v3 Authority Key Identifier: keyid:65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdc2:200::/44 2602:fdc2:300::/44 2602:fdc2:700::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:37:fb:41:47:d2:2b:32:37:03:92:f9:6c:73:3f:30:2b:ee: 7c:97:6d:22:13:07:95:a5:32:81:b0:a5:cc:d6:5d:c7:15:02: 86:47:f0:fb:68:b5:79:8a:0b:20:bb:dc:a0:52:7e:46:11:e7: bc:73:6d:c2:37:b4:a9:d6:3a:f3:e7:db:8c:7c:8d:74:8f:c5: b0:f7:dd:2f:12:e7:dd:38:e6:0b:7a:54:27:6c:44:2f:13:ca: 94:25:33:71:7b:00:68:ec:dc:20:b9:08:1b:80:e0:ba:39:66: dc:5c:ca:53:3b:8a:d8:5a:bb:f3:c5:0a:9e:3e:db:d7:c9:ff: 20:97:f2:94:41:ec:6d:cf:ec:e4:54:02:9e:3e:54:85:1b:80: 47:5a:8f:e4:b9:5e:64:19:3c:92:93:ad:9c:b7:dc:0c:e3:3a: 9f:f1:72:28:9e:85:20:d9:bf:9a:08:29:4f:76:66:7e:42:26: 7f:5f:bb:92:05:a8:2d:73:a0:e8:fb:e3:cf:5c:98:80:8e:70: fe:d5:92:03:1d:1f:9b:a8:77:73:56:15:04:37:fb:ed:27:7a: 9f:1f:d5:45:5a:cf:c2:0a:90:ac:52:b4:f4:22:ed:a3:51:e9: 12:de:68:93:f4:ce:35:33:10:6f:8c:99:f6:a1:f0:f5:4e:93: 8a:00:f7:6c -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEtd0faHsq+PNf4j90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMwOTI2NWMtMTMxMS00M2NlLWFkZjctNzMyMDEyYjEw OGZkMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MjgwNDRmZjUtZWQ2MS00ZTBlLWJlNmUtNTEwMDMzNjU3NDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgQ9NHuMipoPWkGaQIlCi807H+2OlBhW3F9M yNwqe1sUbCLC3oPVmWBgv++2xN3u2+6RC3XXNyBuM9lqtmNHTLFmq8d3BWdXpL9K Lwxd4ZAwf4MeJ8RDOWXg5iuufNghhYIXv2rpqLW+Ht5TnEIY5fiK1hLFfgeBb288 LLQjomVTe2k5Q+FNv7tq8METYLlA/YGETttdIffRhWJfKTuqhHfhNeFxR6aMBfJg 1ai7aBbPfzMxuwbd7qZOEzVKQycK/4zfhyIe3FBmbBvwDYFYn+hzBJCEC4Ndt7el fgpKAQXcxfGOc7O5C8nJ8Mn3kquaL9161PKRP31F+4VflcdWiwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFNpSHXadViiBhJR2/441nUPy1aXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzA5 MjY1Yy0xMzExLTQzY2UtYWRmNy03MzIwMTJiMTA4ZmQvNjM1NTdhMTEtMTEzMi0z MzFmLWI4NWEtMzIwZjMyYWVjNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMwOTI2NWMtMTMxMS00M2NlLWFk ZjctNzMyMDEyYjEwOGZkLzgzMDkyNjVjLTEzMTEtNDNjZS1hZGY3LTczMjAxMmIx MDhmZC5jcmwwHwYDVR0jBBgwFoAUZS4Ut/XErcrCbvafn2Dq+iMmzAIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzA5MjY1Yy0xMzExLTQzY2UtYWRmNy03MzIw MTJiMTA4ZmQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEJgL9wgIA AwcEJgL9wgMAAwcEJgL9wgcAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEc3+0FH0isyNwOS+WxzPzAr7nyX bSITB5WlMoGwpczWXccVAoZH8PtotXmKCyC73KBSfkYR57xzbcI3tKnWOvPn24x8 jXSPxbD33S8S59045gt6VCdsRC8TypQlM3F7AGjs3CC5CBuA4Lo5ZtxcylM7itha u/PFCp4+29fJ/yCX8pRB7G3P7ORUAp4+VIUbgEdaj+S5XmQZPJKTrZy33AzjOp/x ciiehSDZv5oIKU92Zn5CJn9fu5IFqC1zoOj7489cmICOcP7VkgMdH5uod3NWFQQ3 ++0nep8f1UVaz8IKkKxStPQi7aNR6RLeaJP0zjUzEG+Mmfah8PVOk4oA92w= -----END CERTIFICATE-----Generated at Wed Oct 15 16:55:27 2025 by rpki-client