$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e1bfcbfd-9adb-3745-8045-4cdcf9bf877c.roa File: e1bfcbfd-9adb-3745-8045-4cdcf9bf877c.roa (raw, json) Hash identifier: xxljrfgX77hkB1tD4/fhPGcT+wtSOc2PqUAo5NvvbBw= Subject key identifier: AC:13:BC:EF:D7:8B:22:B3:F5:26:7B:4F:80:47:4C:DA:B6:1F:68:31 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584AF5213290E7AAB1DC5F77E200 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e1bfcbfd-9adb-3745-8045-4cdcf9bf877c.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 31898 IP address blocks: 2602:fdaa:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:32:90:e7:aa:b1:dc:5f:77:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=5e50f42b-0d01-444b-990b-6e4cc1cd3708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dc:17:07:2e:af:fc:09:2b:9f:19:06:bd:74: 65:42:76:48:80:43:c1:5a:14:26:a9:de:0a:e1:6f: 25:08:d4:73:f1:ba:81:aa:56:37:1d:b9:a0:f3:50: ef:f2:0c:af:41:f6:09:b4:23:0d:3a:cc:66:5d:58: 34:73:82:dc:ce:1d:56:44:42:b1:9d:5a:9d:2c:33: d4:2b:03:82:e3:9d:4c:c5:04:5f:bb:3d:66:58:ab: 11:cd:e7:d0:21:9a:8a:7c:6c:2d:72:8b:35:0f:25: 45:10:70:3f:d8:30:9f:1f:af:ba:94:86:ec:ff:31: 2f:70:bd:26:80:6a:45:2b:93:c1:24:37:61:a9:48: 47:59:aa:0a:a5:59:e6:da:09:20:5f:b2:49:81:1e: 45:c3:15:75:f3:52:04:34:6c:19:47:ab:87:47:b9: df:46:0e:6e:b1:80:07:a8:0f:53:18:c6:49:98:38: 8e:1c:8f:49:ac:23:fb:f3:a7:29:51:da:e6:46:33: 99:ca:1d:25:5f:e8:75:85:c6:d6:96:b0:43:3d:39: b0:da:b7:83:60:a1:e7:4f:4a:1f:46:93:9f:81:7d: fd:fa:a0:62:4a:54:33:dc:62:7b:a9:50:2d:95:a8: 3c:f7:9e:14:d2:95:c7:31:77:52:b5:b0:c7:5e:71: 81:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:13:BC:EF:D7:8B:22:B3:F5:26:7B:4F:80:47:4C:DA:B6:1F:68:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e1bfcbfd-9adb-3745-8045-4cdcf9bf877c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:16:e2:ed:90:db:ce:71:da:68:3e:66:1e:74:c3:27:94:1c: 9c:31:ce:b4:87:ef:be:54:a2:2a:46:eb:63:02:bc:09:10:8b: 8b:85:65:ae:50:4b:da:94:b7:8a:d9:b6:01:8b:62:68:da:a5: 90:92:52:9d:90:40:c1:ac:9f:61:3a:5f:17:21:36:f7:0a:9e: 22:10:35:87:f8:92:6f:43:4d:16:95:96:c6:8d:52:69:d9:76: cc:e1:11:94:db:b2:6a:94:fb:90:b9:27:e7:29:5c:1c:17:bd: 22:f1:83:f1:d5:43:ad:03:b5:55:ba:24:95:2d:b1:b0:8b:7b: 8f:18:89:d0:64:b1:21:f9:25:5f:34:50:be:39:1d:61:e1:70: 48:a2:34:ba:db:f7:ce:1c:0c:73:2c:2d:e1:96:ce:db:54:7d: 8d:36:cb:a0:ab:91:a2:c1:73:d9:be:81:ef:af:93:82:8e:c3: 9d:0c:ca:ea:48:a1:87:bc:c9:bd:9f:e3:ef:04:60:bb:29:0f: 40:a3:5d:ad:24:26:07:16:fc:16:de:2d:e4:9c:af:6c:59:85: f1:20:29:99:4e:61:ab:f7:0c:15:44:08:f9:60:4f:8b:ff:45: 79:96:db:95:0e:31:00:49:e2:2d:30:e5:5d:ea:1d:29:17:1e: 50:ed:af:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1ITKQ56qx3F934gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NWU1MGY0MmItMGQwMS00NDRiLTk5MGItNmU0Y2MxY2QzNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdwXBy6v/AkrnxkGvXRlQnZIgEPBWhQmqd4K 4W8lCNRz8bqBqlY3Hbmg81Dv8gyvQfYJtCMNOsxmXVg0c4Lczh1WREKxnVqdLDPU KwOC451MxQRfuz1mWKsRzefQIZqKfGwtcos1DyVFEHA/2DCfH6+6lIbs/zEvcL0m gGpFK5PBJDdhqUhHWaoKpVnm2gkgX7JJgR5FwxV181IENGwZR6uHR7nfRg5usYAH qA9TGMZJmDiOHI9JrCP786cpUdrmRjOZyh0lX+h1hcbWlrBDPTmw2reDYKHnT0of RpOfgX39+qBiSlQz3GJ7qVAtlag8954U0pXHMXdStbDHXnGBKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKwTvO/XiyKz9SZ7T4BHTNq2H2gxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvZTFiZmNiZmQtOWFkYi0z NzQ1LTgwNDUtNGNkY2Y5YmY4NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4W4u2Q285x2mg+Zh50wyeUHJwxzrSH775UoipG62MCvAkQi4uF Za5QS9qUt4rZtgGLYmjapZCSUp2QQMGsn2E6XxchNvcKniIQNYf4km9DTRaVlsaN UmnZdszhEZTbsmqU+5C5J+cpXBwXvSLxg/HVQ60DtVW6JJUtsbCLe48YidBksSH5 JV80UL45HWHhcEiiNLrb984cDHMsLeGWzttUfY02y6CrkaLBc9m+ge+vk4KOw50M yupIoYe8yb2f4+8EYLspD0CjXa0kJgcW/BbeLeScr2xZhfEgKZlOYav3DBVECPlg T4v/RXmW25UOMQBJ4i0w5V3qHSkXHlDtr9U= -----END CERTIFICATE-----Generated at Tue Aug 26 12:21:45 2025 by rpki-client