$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa File: e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa (raw, json) Hash identifier: wmW2KLrY+/+7oi/qShYjclg2+RHAQ/x9WqslJLG9wBI= Subject key identifier: 94:51:6C:30:77:26:66:69:26:8E:A9:73:97:B5:22:F6:E9:00:00:FC Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Certificate serial: 010D0C9F4328584B0E4165E6F52EB0B444054340 Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 8987 IP address blocks: 2602:f9e7:2c::/47 maxlen: 48 2602:f9e7:30::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:65:e6:f5:2e:b0:b4:44:05:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=5045d94c-ca41-4922-9245-d0c65615b451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:e2:c8:3b:ac:ac:d6:e7:e1:f0:cd:b5:07: 20:e7:7e:de:40:10:36:3e:f9:9b:5e:61:4d:22:dc: 4c:fa:2d:9c:04:88:d8:a2:5a:b5:73:03:a9:02:31: 14:d1:39:ac:cd:f2:f2:45:53:d8:2d:72:0a:08:eb: 2c:46:d5:54:27:09:94:f8:c6:a4:ac:19:e9:4e:e7: fc:10:b0:b3:4e:9c:ef:37:e0:63:23:fc:25:b5:28: 19:0d:59:01:c8:d6:8e:8d:c9:01:23:fd:0b:f6:5a: e4:6d:93:cc:5c:be:6e:3e:06:f3:e1:80:60:09:f4: a9:b2:2a:73:83:21:86:04:3a:6a:22:49:5a:56:a8: 98:d8:ec:a6:80:6d:94:e5:31:7c:ad:fb:08:e4:a3: b7:48:f4:83:5c:35:90:33:b5:b5:63:c6:16:d4:2f: 0b:2a:72:93:1e:35:86:32:51:cf:30:39:bd:a3:81: 93:41:43:8c:ed:a2:04:85:9b:6f:4b:64:ba:d3:80: 68:b5:67:48:53:06:2d:c2:f5:fe:2c:60:f3:ed:20: b4:2f:8b:bd:ee:7a:3b:ae:7a:ea:36:60:c5:14:7d: 71:bd:43:cc:4f:9c:af:c8:d2:f3:b0:1e:41:77:e4: 50:67:5a:9f:ba:47:ce:3d:2c:05:63:c9:a8:c2:44: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:51:6C:30:77:26:66:69:26:8E:A9:73:97:B5:22:F6:E9:00:00:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl X509v3 Authority Key Identifier: keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9e7:2c::/47 2602:f9e7:30::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:3c:bc:2d:87:8f:14:13:75:62:e0:f6:56:1d:13:df:03:2a: 0a:0f:71:33:be:49:8e:c7:eb:c5:b5:19:6a:c8:92:b6:a6:3c: 40:00:99:4f:51:7e:13:aa:b7:d2:76:92:d7:77:55:ad:e1:d9: 87:92:e7:56:48:7c:11:b7:56:de:9f:29:84:1e:e3:11:c4:63: 0f:28:ba:76:fc:1b:dc:7e:5d:b9:2c:ad:17:d7:04:3e:f4:e9: fe:3e:44:67:af:74:ba:37:7e:77:03:32:b5:dd:1f:f9:06:50: 87:ee:05:6b:1c:3b:69:05:7d:df:59:ad:d6:1e:1e:f4:d8:0c: f1:ff:77:25:78:55:2d:24:54:22:d5:4e:06:9a:0c:74:2b:2d: 23:32:de:86:62:fe:d9:b0:be:04:62:8d:bb:a2:3b:06:2d:d8: a1:93:d9:e2:2d:26:49:3b:52:99:f5:85:f0:18:11:5b:72:8a: c0:28:32:16:d5:0f:69:c0:fd:8d:f3:f4:7e:f6:5f:4a:e1:5c: 45:a3:2d:90:24:d8:ec:01:d3:11:93:50:88:02:79:71:a2:8b: 79:d2:4a:2d:59:c3:a0:b2:c6:95:b0:3c:11:be:0f:1c:d7:e1: 34:83:88:c5:a6:50:28:c0:ec:63:b4:e0:32:2d:4a:06:95:a3: 7f:2f:32:e2 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsOQWXm9S6wtEQFQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj MzRmMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTA0NWQ5NGMtY2E0MS00OTIyLTkyNDUtZDBjNjU2MTViNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g/iyDusrNbn4fDNtQcg537eQBA2PvmbXmFN ItxM+i2cBIjYolq1cwOpAjEU0TmszfLyRVPYLXIKCOssRtVUJwmU+MakrBnpTuf8 ELCzTpzvN+BjI/wltSgZDVkByNaOjckBI/0L9lrkbZPMXL5uPgbz4YBgCfSpsipz gyGGBDpqIklaVqiY2OymgG2U5TF8rfsI5KO3SPSDXDWQM7W1Y8YW1C8LKnKTHjWG MlHPMDm9o4GTQUOM7aIEhZtvS2S604BotWdIUwYtwvX+LGDz7SC0L4u97no7rnrq NmDFFH1xvUPMT5yvyNLzsB5Bd+RQZ1qfukfOPSwFY8mowkSpWQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJRRbDB3JmZpJo6pc5e1IvbpAAD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvZTlkN2RhZTUtY2EzNi0z ZGRkLThkOGMtZjFiZTJlYTA1MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm NDZmMmMzNGYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBJgL55wAs AwcDJgL55wAwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAG48vC2HjxQTdWLg9lYdE98DKgoPcTO+SY7H68W1 GWrIkramPEAAmU9RfhOqt9J2ktd3Va3h2YeS51ZIfBG3Vt6fKYQe4xHEYw8ounb8 G9x+XbksrRfXBD706f4+RGevdLo3fncDMrXdH/kGUIfuBWscO2kFfd9ZrdYeHvTY DPH/dyV4VS0kVCLVTgaaDHQrLSMy3oZi/tmwvgRijbuiOwYt2KGT2eItJkk7Upn1 hfAYEVtyisAoMhbVD2nA/Y3z9H72X0rhXEWjLZAk2OwB0xGTUIgCeXGii3nSSi1Z w6CyxpWwPBG+DxzX4TSDiMWmUCjA7GO04DItSgaVo38vMuI= -----END CERTIFICATE-----Generated at Fri Sep 5 02:42:36 2025 by rpki-client