$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/be756b92-6acc-3494-9eeb-3de9866cb967.roa File: be756b92-6acc-3494-9eeb-3de9866cb967.roa (raw, json) Hash identifier: LyeCc7Jso1kROBEd4iukMujyGXkpiCn+SKDRGG970mY= Subject key identifier: E0:C3:45:C1:81:19:30:14:7A:75:41:75:7F:AA:71:6E:13:8F:08:16 Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Certificate serial: 010D0C9F4328584B05E13E3494816323036D6980 Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/be756b92-6acc-3494-9eeb-3de9866cb967.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 212071 IP address blocks: 2602:faa1::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:3e:34:94:81:63:23:03:6d:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=29fc13b7-b40e-44ff-8efa-08e30e53276b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:43:c3:6f:44:a3:4c:05:b0:bd:f0:b8:73: e2:43:c3:06:06:6c:ce:c3:56:29:32:c3:ff:98:4e: 71:b2:a7:c8:b3:3a:fd:f8:71:23:7e:1b:97:5c:e4: 07:e3:5d:68:ff:74:28:f5:25:6a:b7:03:2d:6a:9a: 7e:0f:3a:80:06:f7:bc:b1:14:9d:a5:7f:b5:91:ea: 54:59:28:7c:f5:da:dd:a4:04:f7:05:84:2f:21:34: c5:89:0c:50:c4:49:c1:8a:32:05:1a:74:90:e6:0d: f7:04:27:69:f8:23:a7:05:5a:df:08:41:59:ac:97: 16:57:a0:a6:27:82:9e:c7:b7:d4:d9:33:8f:8a:f2: 47:05:81:a9:3b:96:48:57:22:09:cb:df:98:14:32: 53:9b:36:eb:4c:71:e3:07:7d:57:a5:e6:8b:b3:f0: 22:5b:94:39:2e:05:10:49:94:66:a8:09:64:ed:44: c7:4a:be:d3:cd:a4:34:77:6f:19:ee:35:6f:ad:8a: 59:87:95:6f:0e:1b:75:f7:b0:ab:59:09:93:c0:3b: 2d:78:ae:3b:3f:ee:2d:c5:5c:b1:bd:79:02:22:db: 31:cc:d0:d8:fb:a2:aa:80:35:ab:10:83:ef:4c:c2: 86:39:df:d0:7c:28:02:e3:92:82:02:96:1d:a2:e7: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C3:45:C1:81:19:30:14:7A:75:41:75:7F:AA:71:6E:13:8F:08:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/be756b92-6acc-3494-9eeb-3de9866cb967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl X509v3 Authority Key Identifier: keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer sbgp-ipAddrBlock: critical IPv6: 2602:faa1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:12:aa:63:3a:c1:a2:1d:70:99:9a:fc:85:db:c3:31:c0:70: e9:88:90:81:ad:f0:94:65:4c:8c:d9:02:6b:11:82:5c:4d:e4: 68:a6:7d:7f:b9:45:d0:7e:4b:9c:fa:1c:e7:8f:68:bf:a7:b0: 94:33:6b:53:9e:68:5b:55:f6:21:b3:37:ac:9f:e0:1a:f6:c9: 45:fd:d2:eb:e9:8b:fd:2d:a9:fe:38:93:2b:20:e1:3f:01:73: de:c8:d6:02:e1:31:2f:78:d4:7a:c6:00:eb:32:96:0e:55:ac: 58:ef:f8:cf:b9:d6:54:4e:72:ee:c6:1e:08:a2:d4:9b:c5:a9: 48:73:34:0e:cc:d4:d6:61:7a:15:77:30:4f:8e:04:bf:c1:a1: 42:31:d9:0f:23:16:48:dd:92:4b:a7:3f:5f:ce:cd:50:19:99: 6f:38:84:14:02:a8:6f:24:18:00:3c:dd:69:b0:84:b1:58:a8: ed:cf:1a:b1:53:ac:1e:c6:83:6e:be:c7:9b:8b:d7:9a:3f:53: 65:e3:ea:4e:c1:50:68:f4:69:b0:19:23:3e:7d:2a:a1:62:87: e0:48:8a:a4:d4:06:2c:f6:3a:92:16:62:80:f3:f3:cb:47:6e: 15:9a:79:74:ea:ac:2e:f6:a8:fa:41:84:6c:d8:69:e9:55:85: bf:09:da:fe -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsF4T40lIFjIwNtaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZGQ4OGMtNmNkYy00ODc1LThjZGQtYTNjNjUzZTJm ZDdmMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk MjlmYzEzYjctYjQwZS00NGZmLThlZmEtMDhlMzBlNTMyNzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbpDw29Eo0wFsL3wuHPiQ8MGBmzOw1YpMsP/ mE5xsqfIszr9+HEjfhuXXOQH411o/3Qo9SVqtwMtapp+DzqABve8sRSdpX+1kepU WSh89drdpAT3BYQvITTFiQxQxEnBijIFGnSQ5g33BCdp+COnBVrfCEFZrJcWV6Cm J4Kex7fU2TOPivJHBYGpO5ZIVyIJy9+YFDJTmzbrTHHjB31XpeaLs/AiW5Q5LgUQ SZRmqAlk7UTHSr7TzaQ0d28Z7jVvrYpZh5VvDht197CrWQmTwDsteK47P+4txVyx vXkCItsxzNDY+6KqgDWrEIPvTMKGOd/QfCgC45KCApYdoueG8wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFODDRcGBGTAUenVBdX+qcW4TjwgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYzlk ZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2NTNlMmZkN2YvYmU3NTZiOTItNmFjYy0z NDk0LTllZWItM2RlOTg2NmNiOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2M5ZGQ4OGMtNmNkYy00ODc1LThj ZGQtYTNjNjUzZTJmZDdmLzNjOWRkODhjLTZjZGMtNDg3NS04Y2RkLWEzYzY1M2Uy ZmQ3Zi5jcmwwHwYDVR0jBBgwFoAUuPbrieuZ6dp3eM1QTVcnnFIPkG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYzlkZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2 NTNlMmZkN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6oQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARBKqYzrBoh1wmZr8hdvDMcBw6YiQga3wlGVMjNkCaxGCXE3kaKZ9 f7lF0H5LnPoc549ov6ewlDNrU55oW1X2IbM3rJ/gGvbJRf3S6+mL/S2p/jiTKyDh PwFz3sjWAuExL3jUesYA6zKWDlWsWO/4z7nWVE5y7sYeCKLUm8WpSHM0DszU1mF6 FXcwT44Ev8GhQjHZDyMWSN2SS6c/X87NUBmZbziEFAKobyQYADzdabCEsVio7c8a sVOsHsaDbr7Hm4vXmj9TZePqTsFQaPRpsBkjPn0qoWKH4EiKpNQGLPY6khZigPPz y0duFZp5dOqsLvao+kGEbNhp6VWFvwna/g== -----END CERTIFICATE-----Generated at Wed Sep 10 03:34:20 2025 by rpki-client