$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/ae28b417-abca-34de-886d-a26abcbfc678.roa File: ae28b417-abca-34de-886d-a26abcbfc678.roa (raw, json) Hash identifier: riQOoINcuU0PFzUiA8cRdJ1JASFA4broIiPt80jbt8o= Subject key identifier: E4:84:44:04:C7:DA:AE:1E:3B:21:C8:75:51:8D:38:0C:13:9A:59:92 Certificate issuer: /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176 Certificate serial: 010D0C9F4328584B4E77134D9FC2ACAF713E1A80 Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/ae28b417-abca-34de-886d-a26abcbfc678.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 20473 IP address blocks: 2602:fccd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:13:4d:9f:c2:ac:af:71:3e:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=df6fd001-8fe0-4f84-905a-a7ea8b7f47de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:1f:4a:27:fc:c1:92:23:3a:1e:1e:8d:18: 39:cb:89:cc:b2:ef:9d:fb:e8:00:a3:ed:b2:d2:ed: 20:eb:f9:99:e0:f0:f6:68:45:fe:9a:6c:61:3e:fc: f2:1c:84:0c:72:7b:ae:c0:80:a7:20:e5:39:63:70: 57:0c:e1:46:ff:5a:a4:8f:71:57:ea:21:cc:26:8f: 2b:c2:cf:86:40:5a:5a:e0:ec:05:75:d3:c1:95:3c: 07:1f:f7:a1:8a:ea:67:71:d1:c5:84:70:16:94:97: 01:4c:03:e9:49:92:0e:f1:57:b6:b9:b2:ca:2c:e9: bf:c8:13:50:19:d4:d2:0a:81:f2:6a:49:91:73:2a: 82:42:2e:8d:53:fb:46:7a:9a:c5:c6:e1:41:ec:23: d5:be:cd:16:2d:bd:cf:a8:83:63:09:91:f4:8d:33: ca:9d:fa:48:86:d1:89:20:a2:57:d7:01:83:34:da: ac:7b:7d:36:6c:a1:39:da:b2:1b:56:7f:dc:81:34: c9:f3:41:49:2d:af:8f:37:61:80:74:75:9d:39:a4: 61:ec:e0:bc:7d:63:3b:a3:66:b4:9a:da:00:d1:fe: 6f:76:b1:98:2c:8f:ef:2a:e9:35:3c:0b:4e:69:12: 3d:3f:f7:12:af:32:81:17:53:6a:fe:e7:1d:db:a8: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:84:44:04:C7:DA:AE:1E:3B:21:C8:75:51:8D:38:0C:13:9A:59:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/ae28b417-abca-34de-886d-a26abcbfc678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl X509v3 Authority Key Identifier: keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer sbgp-ipAddrBlock: critical IPv6: 2602:fccd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6f:8f:1b:97:47:c3:cc:1f:48:f5:9f:78:48:ad:18:d4:5e: 81:c1:58:ce:6e:03:e2:b3:17:56:78:ee:d3:ab:b8:3a:99:bb: 09:4a:93:10:eb:74:f3:cb:4b:19:03:c9:67:dc:27:c2:1d:bd: 32:c0:c8:e4:e0:b5:08:9d:ae:7c:bd:13:47:fd:0a:9a:42:78: a4:22:1a:3c:2c:dc:97:89:80:a1:45:17:c6:fb:44:1d:27:19: 0e:a1:b4:b5:ac:91:30:e4:a6:3f:ce:9f:af:38:22:fe:58:86: 59:29:aa:5a:1d:5c:e1:cd:73:47:f8:15:1d:e4:c1:b0:32:52: 58:aa:09:a7:21:2c:98:c0:51:0d:99:8b:b0:8c:11:db:a2:55: 69:c0:0c:77:15:e4:9b:85:fa:12:ec:34:16:1c:19:15:3d:6d: 89:7e:9f:70:5d:0b:6a:88:4d:46:6b:df:8e:59:42:a2:c6:32: 89:81:0e:c8:74:c6:d4:a2:c1:c5:4c:ba:15:cc:6c:f5:ca:92: 91:2d:77:e6:40:8f:f0:7c:2c:c2:bd:da:13:40:0d:4b:09:c7: c3:59:9f:ce:f0:6d:89:11:f7:92:9c:19:5f:b0:0b:3a:90:53: 23:90:fb:cb:97:6a:a4:cb:1c:da:b2:b6:c6:4b:e6:e3:fd:9d: 58:7b:22:f2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtOdxNNn8Ksr3E+GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJmM2FmYjEtMmJmNC00NzE2LTkwM2ItMjlkZmExZTg4 MTc2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGY2ZmQwMDEtOGZlMC00Zjg0LTkwNWEtYTdlYThiN2Y0N2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUUfSif8wZIjOh4ejRg5y4nMsu+d++gAo+2y 0u0g6/mZ4PD2aEX+mmxhPvzyHIQMcnuuwICnIOU5Y3BXDOFG/1qkj3FX6iHMJo8r ws+GQFpa4OwFddPBlTwHH/ehiupncdHFhHAWlJcBTAPpSZIO8Ve2ubLKLOm/yBNQ GdTSCoHyakmRcyqCQi6NU/tGeprFxuFB7CPVvs0WLb3PqINjCZH0jTPKnfpIhtGJ IKJX1wGDNNqse302bKE52rIbVn/cgTTJ80FJLa+PN2GAdHWdOaRh7OC8fWM7o2a0 mtoA0f5vdrGYLI/vKuk1PAtOaRI9P/cSrzKBF1Nq/ucd26gaMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOSERATH2q4eOyHIdVGNOAwTmlmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jMmYz YWZiMS0yYmY0LTQ3MTYtOTAzYi0yOWRmYTFlODgxNzYvYWUyOGI0MTctYWJjYS0z NGRlLTg4NmQtYTI2YWJjYmZjNjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzJmM2FmYjEtMmJmNC00NzE2LTkw M2ItMjlkZmExZTg4MTc2L2MyZjNhZmIxLTJiZjQtNDcxNi05MDNiLTI5ZGZhMWU4 ODE3Ni5jcmwwHwYDVR0jBBgwFoAUa1BZ6Q1zBxnfTw0LwaPk2KTTppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jMmYzYWZiMS0yYmY0LTQ3MTYtOTAzYi0yOWRm YTFlODgxNzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8zQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWG+PG5dHw8wfSPWfeEitGNRegcFYzm4D4rMXVnju06u4Opm7CUqT EOt088tLGQPJZ9wnwh29MsDI5OC1CJ2ufL0TR/0KmkJ4pCIaPCzcl4mAoUUXxvtE HScZDqG0tayRMOSmP86frzgi/liGWSmqWh1c4c1zR/gVHeTBsDJSWKoJpyEsmMBR DZmLsIwR26JVacAMdxXkm4X6Euw0FhwZFT1tiX6fcF0LaohNRmvfjllCosYyiYEO yHTG1KLBxUy6Fcxs9cqSkS135kCP8Hwswr3aE0ANSwnHw1mfzvBtiRH3kpwZX7AL OpBTI5D7y5dqpMsc2rK2xkvm4/2dWHsi8g== -----END CERTIFICATE-----Generated at Mon Oct 13 22:16:04 2025 by rpki-client