$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/197b09c9-4518-3c62-9de3-be06e9cfed3a.roa File: 197b09c9-4518-3c62-9de3-be06e9cfed3a.roa (raw, json) Hash identifier: Xg1dTZuhuxzR54EQbVrECb0GBsgqiRFevQklcwlzow0= Subject key identifier: D7:C0:B8:56:1A:C5:D6:55:FA:23:A0:C9:DA:F7:51:17:80:33:A8:86 Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0 Certificate serial: 010D0C9F4328584B1BB23FA3759302741DBB0200 Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/197b09c9-4518-3c62-9de3-be06e9cfed3a.roa Signing time: Sat 06 Sep 2025 20:33:40 +0000 ROA not before: Sat 06 Sep 2025 20:33:40 +0000 ROA not after: Fri 05 Dec 2025 21:33:40 +0000 asID: 213465 IP address blocks: 2602:299:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1b:b2:3f:a3:75:93:02:74:1d:bb:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0 Validity Not Before: Sep 6 20:33:40 2025 GMT Not After : Dec 5 21:33:40 2025 GMT Subject: CN=5245b4ca-3f2d-4c8f-a0f7-d2039a78dd05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:4f:0f:40:30:dc:b3:a3:21:bb:62:cd:8d: 82:8c:22:dd:bd:07:78:13:8a:46:3d:42:ca:93:da: 86:b5:3c:e7:aa:bc:fa:26:9d:da:5a:7e:74:1c:9c: 42:55:0a:3e:3c:77:d9:17:66:03:10:b5:18:04:43: e3:20:75:19:8d:b8:10:db:3a:5d:7c:af:3b:08:0b: f4:47:9f:8b:60:65:f1:57:67:ac:c3:6f:24:88:0f: ee:70:7b:10:9c:de:37:e4:ab:b0:36:36:52:c0:2d: 83:01:8c:08:eb:13:f1:e0:05:67:38:08:f7:d8:64: 41:a5:6b:f6:f7:57:36:e5:b4:a2:c2:d2:9d:e2:2f: d0:9e:39:6e:a0:f4:21:1a:d8:d3:e1:f9:75:27:7a: 9e:ad:21:f1:a4:09:67:f8:f5:f2:21:14:b5:4f:a3: 28:83:a5:b0:bb:14:b6:4c:f6:76:f5:bc:b4:8d:e2: bc:ef:68:47:b0:bf:7a:8e:c4:46:7c:20:c6:e1:fb: de:e6:b8:1b:62:67:fa:5b:4d:85:0e:f1:6f:b7:d9: 35:8d:11:15:ce:c0:4f:9e:33:c3:aa:1a:e9:70:3d: 3f:e1:ba:2a:15:82:e1:34:64:ff:cb:0c:66:d9:62: bc:3e:50:93:18:15:3f:22:bb:c5:25:d9:e8:c6:59: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C0:B8:56:1A:C5:D6:55:FA:23:A0:C9:DA:F7:51:17:80:33:A8:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/197b09c9-4518-3c62-9de3-be06e9cfed3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl X509v3 Authority Key Identifier: keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer sbgp-ipAddrBlock: critical IPv6: 2602:299:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a0:85:1c:4d:47:0d:61:d4:f4:be:13:3c:8f:0a:e2:12:69: cf:68:24:d2:64:a2:3c:80:55:e9:50:a5:25:24:ba:b7:a9:a2: b0:0b:98:6a:45:ad:2e:21:23:c5:08:8a:71:18:bc:d0:42:1d: f9:db:4a:f5:0e:1a:f2:f7:fa:fe:74:3d:4e:4f:0c:89:e4:28: 11:52:c5:2a:26:cf:2d:18:e8:4f:12:c9:9d:9f:6d:db:cb:82: 29:6d:96:6d:c9:c4:e1:ce:8d:a1:1c:58:1a:2e:5a:8e:c4:a5: b0:c9:5e:5f:03:c7:e9:42:e5:9b:c7:08:94:ee:03:65:6b:ff: 76:38:03:a2:c2:e5:59:2b:d8:bb:09:b0:cb:c9:19:f4:5d:f7: 7d:e2:a0:94:c1:f3:82:a4:56:7e:69:a4:d4:15:da:72:84:de: 17:3b:ca:ce:33:65:48:6d:e3:66:ad:fd:02:61:67:85:ef:d6: 2f:c9:7b:6a:31:11:5c:32:d8:29:c6:53:9a:af:1a:bf:26:11: 37:99:fc:e7:e7:ac:14:1e:df:25:ea:18:b6:5f:9f:48:3a:c6: 2b:72:f7:8b:29:04:b5:ba:10:50:a0:d3:c6:5c:3b:43:f8:1d: 20:8c:25:5f:4d:f0:9e:cd:ea:ac:ea:93:da:ce:27:26:b0:9b: e7:fc:40:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsbsj+jdZMCdB27AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ4YzkxNjctZTgxNi00ODM0LThmY2MtZjhiMGY5M2Zl NmEwMB4XDTI1MDkwNjIwMzM0MFoXDTI1MTIwNTIxMzM0MFowLzEtMCsGA1UEAxMk NTI0NWI0Y2EtM2YyZC00YzhmLWEwZjctZDIwMzlhNzhkZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9xPD0Aw3LOjIbtizY2CjCLdvQd4E4pGPULK k9qGtTznqrz6Jp3aWn50HJxCVQo+PHfZF2YDELUYBEPjIHUZjbgQ2zpdfK87CAv0 R5+LYGXxV2esw28kiA/ucHsQnN435KuwNjZSwC2DAYwI6xPx4AVnOAj32GRBpWv2 91c25bSiwtKd4i/QnjluoPQhGtjT4fl1J3qerSHxpAln+PXyIRS1T6Mog6WwuxS2 TPZ29by0jeK872hHsL96jsRGfCDG4fve5rgbYmf6W02FDvFvt9k1jREVzsBPnjPD qhrpcD0/4boqFYLhNGT/ywxm2WK8PlCTGBU/IrvFJdnoxlmwXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNfAuFYaxdZV+iOgydr3UReAM6iGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDhj OTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkzZmU2YTAvMTk3YjA5YzktNDUxOC0z YzYyLTlkZTMtYmUwNmU5Y2ZlZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQ4YzkxNjctZTgxNi00ODM0LThm Y2MtZjhiMGY5M2ZlNmEwLzFkOGM5MTY3LWU4MTYtNDgzNC04ZmNjLWY4YjBmOTNm ZTZhMC5jcmwwHwYDVR0jBBgwFoAUimZZZr5AkQJF+JSyyEvT4ZHHDMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIw ZjkzZmU2YTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICmQAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6ghRxNRw1h1PS+EzyPCuISac9oJNJkojyAVelQpSUkureporAL mGpFrS4hI8UIinEYvNBCHfnbSvUOGvL3+v50PU5PDInkKBFSxSomzy0Y6E8SyZ2f bdvLgiltlm3JxOHOjaEcWBouWo7EpbDJXl8Dx+lC5ZvHCJTuA2Vr/3Y4A6LC5Vkr 2LsJsMvJGfRd933ioJTB84KkVn5ppNQV2nKE3hc7ys4zZUht42at/QJhZ4Xv1i/J e2oxEVwy2CnGU5qvGr8mETeZ/OfnrBQe3yXqGLZfn0g6xity94spBLW6EFCg08Zc O0P4HSCMJV9N8J7N6qzqk9rOJyawm+f8QDo= -----END CERTIFICATE-----Generated at Tue Sep 9 07:28:00 2025 by rpki-client