$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa File: 83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa (raw, json) Hash identifier: /YF8ZWrO3Re08xFNweYhBdhGBXGJS2yZvUvcNM43hSo= Subject key identifier: 70:98:ED:7C:5F:0B:60:D4:89:DC:F3:BA:9C:B7:3B:68:78:71:91:EE Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F4328584B1C36CB663921CB662C42D180 Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 198005 IP address blocks: 2602:fbc7:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:cb:66:39:21:cb:66:2c:42:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=8495a790-e904-4a95-ae7b-a19ddeb93f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:62:2d:ae:ac:20:e1:dd:a5:d5:08:15:1f:3d: fd:e4:a7:15:d6:32:75:9b:8e:cb:77:60:3f:b0:a0: 5d:ec:d0:6d:0c:08:c9:85:a7:95:f7:0f:b8:38:72: 11:46:b5:17:5f:74:59:75:54:f1:45:c1:d6:17:b1: 9a:b6:f2:83:80:68:0e:6d:c8:19:6c:82:c1:6d:d6: d0:0f:af:9a:e0:d3:54:bd:03:25:41:95:c6:aa:5d: a6:77:a3:31:ae:b7:66:4f:19:4e:26:28:9d:a0:43: f4:62:41:34:4d:6a:7e:2c:19:71:3f:29:66:19:e1: 78:4b:db:07:59:a9:af:b4:45:0c:65:45:a3:84:83: 01:c4:8d:e6:25:f9:06:c8:ec:35:14:0e:31:51:8e: 84:94:fc:b5:3b:b7:1b:41:a4:06:ae:f1:14:f9:6a: 97:ab:05:c4:85:75:50:ca:9b:73:12:e2:40:f7:fa: 7e:80:c2:f9:8f:05:be:ac:b7:3b:60:20:f2:97:39: a8:68:42:4a:70:0f:ec:88:4e:21:26:c4:21:85:e8: 70:ec:51:c0:39:2e:ec:3e:74:73:f3:7a:c0:5a:44: 14:9c:ae:7c:4a:81:32:eb:38:dc:e8:2d:65:5c:18: 49:0f:a4:1e:ab:ff:f1:47:70:77:45:7b:90:f1:37: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:98:ED:7C:5F:0B:60:D4:89:DC:F3:BA:9C:B7:3B:68:78:71:91:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbc7:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:62:fd:cd:a0:21:ad:a5:82:7c:56:05:ae:75:67:3f:4d:a5: e8:80:69:44:d7:41:35:70:31:ad:1b:26:86:15:a9:fb:49:e0: 52:c6:8f:f9:53:a8:bc:10:7b:48:30:38:87:75:13:e1:a8:d0: 40:5a:ac:7b:d9:14:7e:a2:3a:10:5b:10:07:d7:21:b0:94:5b: 26:62:cc:22:5b:89:b5:09:63:26:61:6a:aa:f9:77:1a:50:4f: fc:98:1a:01:9a:47:76:bf:a2:23:94:8b:a5:20:f9:46:9f:eb: a1:83:b4:f2:4e:f5:86:75:5a:61:6d:56:b7:19:94:ab:4a:14: 3f:15:85:4f:39:14:ab:eb:af:61:f4:18:b7:2a:6c:9f:b0:d9: 77:00:4c:43:57:7e:aa:df:af:0d:96:96:2f:6d:e4:49:9b:4c: 14:6e:48:84:88:fc:1d:77:37:45:f1:d6:4f:60:30:13:84:94: e4:87:cc:5a:2f:01:95:dc:c2:b7:c5:b7:08:38:da:38:53:bb: 8c:2a:2b:e5:c8:bd:1e:3f:ac:16:21:56:6f:38:b5:52:15:bf: 08:47:c9:60:96:12:46:81:49:27:73:d2:da:2b:3a:1a:3a:9f: 2d:fb:65:34:00:71:7e:26:24:c8:3d:0a:a0:34:b1:e1:fa:e6: 86:22:4a:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNstmOSHLZixC0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ODQ5NWE3OTAtZTkwNC00YTk1LWFlN2ItYTE5ZGRlYjkzZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22Itrqwg4d2l1QgVHz395KcV1jJ1m47Ld2A/ sKBd7NBtDAjJhaeV9w+4OHIRRrUXX3RZdVTxRcHWF7GatvKDgGgObcgZbILBbdbQ D6+a4NNUvQMlQZXGql2md6MxrrdmTxlOJiidoEP0YkE0TWp+LBlxPylmGeF4S9sH WamvtEUMZUWjhIMBxI3mJfkGyOw1FA4xUY6ElPy1O7cbQaQGrvEU+WqXqwXEhXVQ yptzEuJA9/p+gML5jwW+rLc7YCDylzmoaEJKcA/siE4hJsQhhehw7FHAOS7sPnRz 83rAWkQUnK58SoEy6zjc6C1lXBhJD6Qeq//xR3B3RXuQ8TcRIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHCY7XxfC2DUidzzupy3O2h4cZHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvODNiY2VjOTktZGUyZS0z YzMwLTk3OGMtZjZmNmUxMmZmMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7xwAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVi/c2gIa2lgnxWBa51Zz9NpeiAaUTXQTVwMa0bJoYVqftJ4FLG j/lTqLwQe0gwOId1E+Go0EBarHvZFH6iOhBbEAfXIbCUWyZizCJbibUJYyZhaqr5 dxpQT/yYGgGaR3a/oiOUi6Ug+Uaf66GDtPJO9YZ1WmFtVrcZlKtKFD8VhU85FKvr r2H0GLcqbJ+w2XcATENXfqrfrw2Wli9t5EmbTBRuSISI/B13N0Xx1k9gMBOElOSH zFovAZXcwrfFtwg42jhTu4wqK+XIvR4/rBYhVm84tVIVvwhHyWCWEkaBSSdz0tor Oho6ny37ZTQAcX4mJMg9CqA0seH65oYiSr0= -----END CERTIFICATE-----Generated at Tue Sep 16 00:49:26 2025 by rpki-client