$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/dfa2f452-fa91-392b-afb3-a4b8898c342c.roa File: dfa2f452-fa91-392b-afb3-a4b8898c342c.roa (raw, json) Hash identifier: woyJ+BvJN04Z0wARFKrQJzkvkwCzsshbbQnM/b+7dSk= Subject key identifier: 30:75:59:7F:D6:79:F6:F0:25:45:CC:DE:1E:81:AF:9B:AB:6F:70:E8 Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F4328584AF9C3DBA2B438195656409900 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/dfa2f452-fa91-392b-afb3-a4b8898c342c.roa Signing time: Mon 25 Aug 2025 16:51:40 +0000 ROA not before: Mon 25 Aug 2025 16:51:40 +0000 ROA not after: Sun 23 Nov 2025 17:51:40 +0000 asID: 139299 IP address blocks: 2602:f92a:d000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c3:db:a2:b4:38:19:56:56:40:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Aug 25 16:51:40 2025 GMT Not After : Nov 23 17:51:40 2025 GMT Subject: CN=772f7d1f-c9a2-4e15-afea-1fe31eab8280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:ea:06:6c:ce:f2:ab:dc:dd:6c:65:d1:fc: 50:65:32:45:d0:fd:37:2d:9a:81:d6:76:97:6e:4a: 96:db:5d:a8:8f:b7:64:38:a2:d2:ee:a7:fd:26:b4: 44:86:cd:a9:09:ce:d8:4e:eb:cd:83:d3:ed:7c:ab: eb:f1:a9:36:b2:f6:78:25:06:0e:81:9d:64:88:ad: d7:07:3d:40:ba:6c:3b:e9:aa:dc:2f:6d:01:8b:de: 3b:af:8a:26:68:d6:99:e0:38:63:b3:03:d2:72:ac: 83:f8:7c:4e:87:66:d2:22:aa:3b:b1:84:51:02:50: a2:a2:20:69:3e:58:2d:56:41:5d:67:cd:b4:19:a3: ca:14:29:42:8f:a7:00:99:af:c1:9e:c1:f8:2d:cc: 7d:1d:93:02:d5:d7:54:7b:45:c1:98:a2:7e:e2:cc: 88:51:37:f4:1e:0d:8b:6f:70:bf:b2:03:a9:6c:fc: 5c:11:e9:12:d3:77:59:53:70:81:54:5b:33:72:c6: ea:ef:d0:52:9d:83:9a:9b:0a:1e:30:1f:77:46:1f: 05:ca:03:85:44:3e:7b:12:e6:cf:20:7f:6d:e2:12: 28:b0:4a:7c:f7:18:68:e9:05:64:c5:5e:4d:ef:c9: e4:f6:76:94:7f:e5:f8:e0:dc:03:46:4a:2a:6a:35: 74:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:75:59:7F:D6:79:F6:F0:25:45:CC:DE:1E:81:AF:9B:AB:6F:70:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/dfa2f452-fa91-392b-afb3-a4b8898c342c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f92a:d000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f0:11:27:95:e5:88:8b:66:a6:6e:a2:1f:1a:3c:32:5d:94: 8f:c0:fd:e7:44:80:40:3f:ba:ee:76:e7:ce:b4:7a:c6:eb:2b: fb:5d:ac:ae:d3:05:bc:45:6b:76:aa:c7:0b:3c:e5:5c:5b:a7: c0:eb:4f:2c:a3:bc:58:03:13:ce:f6:1c:12:a5:39:86:04:bc: 3a:48:fd:5f:4f:d2:04:ab:f2:c5:85:74:42:ee:3e:a7:27:f6: 72:90:56:0d:d1:57:7d:ee:c5:c7:da:4e:54:cb:bc:da:3c:e8: 21:60:79:21:85:0a:1c:ef:f1:41:68:ca:c6:2b:cc:71:3f:a9: 0b:6b:78:81:bf:ed:33:dc:30:85:3c:2c:06:d9:92:ce:14:30: 71:2a:3a:a5:40:a9:a1:40:20:2d:d3:61:55:9a:2b:97:fc:55: 43:5c:d2:da:09:e2:61:e7:50:6c:07:6d:f2:e3:e4:42:68:41: cc:ee:f8:69:eb:0b:75:23:b0:9b:13:86:59:3f:8c:60:f1:2c: cd:81:1f:87:e6:70:da:69:c0:68:32:ab:5c:09:cd:8d:f9:70: 75:46:83:2d:73:86:82:90:0f:c4:01:95:7f:8c:db:04:a2:e3: c5:5a:dd:5b:c5:0b:d0:d9:2c:d7:9c:a2:cb:a5:f3:86:53:77: 78:32:e4:85 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr5w9uitDgZVlZAmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MDgyNTE2NTE0MFoXDTI1MTEyMzE3NTE0MFowLzEtMCsGA1UEAxMk NzcyZjdkMWYtYzlhMi00ZTE1LWFmZWEtMWZlMzFlYWI4MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAfqBmzO8qvc3Wxl0fxQZTJF0P03LZqB1naX bkqW212oj7dkOKLS7qf9JrREhs2pCc7YTuvNg9PtfKvr8ak2svZ4JQYOgZ1kiK3X Bz1Aumw76arcL20Bi947r4omaNaZ4DhjswPScqyD+HxOh2bSIqo7sYRRAlCioiBp PlgtVkFdZ820GaPKFClCj6cAma/BnsH4Lcx9HZMC1ddUe0XBmKJ+4syIUTf0Hg2L b3C/sgOpbPxcEekS03dZU3CBVFszcsbq79BSnYOamwoeMB93Rh8FygOFRD57EubP IH9t4hIosEp89xho6QVkxV5N78nk9naUf+X44NwDRkoqajV0ZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDB1WX/WefbwJUXM3h6Br5urb3DoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvZGZhMmY0NTItZmE5MS0z OTJiLWFmYjMtYTRiODg5OGMzNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5KtAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVvARJ5XliItmpm6iHxo8Ml2Uj8D950SAQD+67nbnzrR6xusr+12s rtMFvEVrdqrHCzzlXFunwOtPLKO8WAMTzvYcEqU5hgS8Okj9X0/SBKvyxYV0Qu4+ pyf2cpBWDdFXfe7Fx9pOVMu82jzoIWB5IYUKHO/xQWjKxivMcT+pC2t4gb/tM9ww hTwsBtmSzhQwcSo6pUCpoUAgLdNhVZorl/xVQ1zS2gniYedQbAdt8uPkQmhBzO74 aesLdSOwmxOGWT+MYPEszYEfh+Zw2mnAaDKrXAnNjflwdUaDLXOGgpAPxAGVf4zb BKLjxVrdW8UL0Nks15yiy6XzhlN3eDLkhQ== -----END CERTIFICATE-----Generated at Sun Sep 7 02:27:07 2025 by rpki-client