$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa File: d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa (raw, json) Hash identifier: MYVadGem1fm5lAb5X1wgy7MMl7GYJPXc6B+9MG9yJGA= Subject key identifier: 3E:A3:0E:00:1E:94:30:03:40:02:B3:2B:90:4F:9B:8A:7D:4A:89:51 Certificate issuer: /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Certificate serial: 010D0C9F4328584B3986FDA27A7C22FF7666CA00 Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 11399 IP address blocks: 2602:811:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:fd:a2:7a:7c:22:ff:76:66:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=424bd82a-7e7b-40f1-9ee7-37009b9a51ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:bd:32:94:75:15:54:08:f8:01:39:1b:17: 6e:2b:1c:ea:8f:77:b6:74:41:a6:59:ca:59:58:ef: e3:10:bb:30:ea:0c:cd:c0:d4:51:95:15:da:5e:44: 00:06:56:82:da:9a:ad:ac:e5:8b:27:1e:68:06:5c: 2e:d9:4f:c1:d8:60:c7:54:8d:58:a4:dd:6c:62:b8: c0:5f:f6:fe:09:42:59:95:20:84:6f:e2:97:93:96: c4:7d:9a:20:c3:91:be:ff:c1:8f:60:c9:14:a8:48: 19:8d:69:4c:a7:b7:e7:75:ea:9a:39:55:bc:46:11: 23:9a:7c:34:ea:89:44:61:fb:79:3f:dc:72:72:08: e1:5e:d0:c5:5e:e8:55:1d:4e:c3:89:b0:61:58:1e: 61:b8:d6:c6:c5:03:19:27:7e:53:50:be:9a:f2:db: 80:51:27:d0:b1:d5:a1:71:18:80:4c:97:83:e7:69: 0e:ce:6b:2b:0c:ad:ee:5d:d4:9d:e4:74:c8:81:41: cc:73:97:47:1e:16:f2:05:9a:91:60:3d:fa:a3:63: 92:a8:5f:90:81:dc:56:9c:b6:11:85:02:7c:2c:ad: 83:6c:6b:d1:b2:af:d3:ab:a1:5b:44:43:7d:f4:07: d7:e0:04:0d:f3:c5:e2:83:9f:c9:4f:fa:57:37:81: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A3:0E:00:1E:94:30:03:40:02:B3:2B:90:4F:9B:8A:7D:4A:89:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl X509v3 Authority Key Identifier: keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer sbgp-ipAddrBlock: critical IPv6: 2602:811:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e4:0d:9c:a0:48:79:1c:74:f5:a2:0e:ea:1d:b6:45:a5:d7: 70:33:ab:32:7d:05:0d:45:1b:5e:13:18:38:ba:76:ed:4c:f3: b7:8e:d4:03:91:a4:f0:4b:cc:97:3a:13:b1:07:38:88:b7:05: 5c:d2:33:a9:ca:e1:a7:28:c2:dc:ea:9f:8d:25:c3:4c:35:9f: 7c:8e:49:f5:1a:24:3a:6d:24:ec:bc:29:c5:1a:f4:bf:4a:f2: 42:56:ab:8e:fe:9d:71:0a:37:02:25:46:04:62:e5:f5:64:95: 1c:07:18:66:3d:f9:3d:f9:49:c1:ba:7b:14:6d:0c:36:a3:50: f6:f2:6d:0d:59:d5:9b:d2:4c:a5:ba:65:5f:db:a3:44:72:f0: 30:2b:3c:2a:ad:dc:7f:79:a9:fc:d1:09:bb:b7:93:fe:7a:d7: 16:f3:03:4c:5b:48:e4:8c:04:02:ce:88:e2:7a:9f:ad:77:f1: 78:bb:d3:0f:d4:6e:de:0f:71:00:e5:4f:ee:eb:c2:3f:b4:32: 5a:29:29:03:3f:08:af:69:37:20:1d:28:1e:16:da:34:c3:0f: 42:43:67:e3:57:49:7a:db:82:36:7e:04:eb:ff:4b:17:ba:a3: 83:7e:ca:6a:53:76:45:03:19:de:19:33:83:70:39:1c:29:83: 51:a1:d9:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs5hv2ienwi/3ZmygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwZWE3OGMtOTFlMi00NWUyLWI1OTYtZWVlZWRkNTI5 ZTNlMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NDI0YmQ4MmEtN2U3Yi00MGYxLTllZTctMzcwMDliOWE1MWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaC9MpR1FVQI+AE5GxduKxzqj3e2dEGmWcpZ WO/jELsw6gzNwNRRlRXaXkQABlaC2pqtrOWLJx5oBlwu2U/B2GDHVI1YpN1sYrjA X/b+CUJZlSCEb+KXk5bEfZogw5G+/8GPYMkUqEgZjWlMp7fndeqaOVW8RhEjmnw0 6olEYft5P9xycgjhXtDFXuhVHU7DibBhWB5huNbGxQMZJ35TUL6a8tuAUSfQsdWh cRiATJeD52kOzmsrDK3uXdSd5HTIgUHMc5dHHhbyBZqRYD36o2OSqF+QgdxWnLYR hQJ8LK2DbGvRsq/Tq6FbREN99AfX4AQN88Xig5/JT/pXN4GtqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD6jDgAelDADQAKzK5BPm4p9SolRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81OTBl YTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVlZGQ1MjllM2UvZDNhN2FlYTMtYmE1Zi0z M2E3LWIwMGEtMzA2MjY5Y2M3MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTkwZWE3OGMtOTFlMi00NWUyLWI1 OTYtZWVlZWRkNTI5ZTNlLzU5MGVhNzhjLTkxZTItNDVlMi1iNTk2LWVlZWVkZDUy OWUzZS5jcmwwHwYDVR0jBBgwFoAUcy9X58uXp+rbNiLQZg076YuCboUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81OTBlYTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVl ZGQ1MjllM2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIETAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAALkDZygSHkcdPWiDuodtkWl13AzqzJ9BQ1FG14TGDi6du1M87eO 1AORpPBLzJc6E7EHOIi3BVzSM6nK4acowtzqn40lw0w1n3yOSfUaJDptJOy8KcUa 9L9K8kJWq47+nXEKNwIlRgRi5fVklRwHGGY9+T35ScG6exRtDDajUPbybQ1Z1ZvS TKW6ZV/bo0Ry8DArPCqt3H95qfzRCbu3k/561xbzA0xbSOSMBALOiOJ6n6138Xi7 0w/Ubt4PcQDlT+7rwj+0MlopKQM/CK9pNyAdKB4W2jTDD0JDZ+NXSXrbgjZ+BOv/ Sxe6o4N+ympTdkUDGd4ZM4NwORwpg1Gh2b0= -----END CERTIFICATE-----Generated at Thu Sep 18 12:42:42 2025 by rpki-client