$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa File: af5c3765-147f-3db1-b56e-1f20fa7259fc.roa (raw, json) Hash identifier: OBqWKoFSpXxOia88K5e/XnA/bySthFYLfJiCZFhI6hY= Subject key identifier: 23:6F:94:2C:D8:7C:B6:61:21:96:31:44:DF:53:78:EC:00:E5:D9:26 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584B21CC265C5BC95A6D100EB900 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 399275 IP address blocks: 2602:fcc0:3333::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:26:5c:5b:c9:5a:6d:10:0e:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=89bca29a-7cc6-4d65-b991-24683470639b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:6a:09:17:b8:d9:39:ca:1d:1b:fc:dc:d9: e8:cb:d2:37:63:e1:b3:2f:67:b5:54:f9:db:0f:d7: ed:26:85:32:a8:09:49:76:19:c1:3c:d8:a6:64:f4: c6:1e:3e:63:ca:de:45:6c:de:ea:ee:80:86:cb:27: f3:03:17:5e:39:66:d0:37:7e:cf:ce:75:1f:63:bb: 11:9b:53:57:ed:08:3d:b0:66:58:fa:42:38:7d:7a: a7:ea:1b:59:4a:b2:00:9c:10:9a:a5:08:eb:ec:0e: 30:62:48:bd:74:55:39:07:3a:35:eb:49:d4:b2:c1: d4:32:cf:a1:06:a9:20:fa:d3:b3:57:a2:72:f8:e8: 7d:be:a4:65:b9:23:1c:cb:5a:86:29:26:18:eb:d3: 87:7c:7c:3a:83:df:17:c0:cb:f3:57:f9:5c:9d:71: 2d:4a:b5:3a:5d:8a:eb:c6:59:41:7e:7d:24:39:0c: 99:37:f7:7e:c8:52:bf:59:a0:69:fe:a8:bb:4c:74: 31:68:c8:8d:26:68:ac:8e:0e:fc:62:2b:b5:f0:77: 93:bb:ad:39:de:26:69:e6:72:23:ad:55:43:b6:66: b2:46:ce:17:54:ff:11:8e:03:2b:b6:3e:31:53:8f: e7:5a:4c:2c:16:11:f2:eb:76:dc:e2:0f:2d:ef:0c: 9d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6F:94:2C:D8:7C:B6:61:21:96:31:44:DF:53:78:EC:00:E5:D9:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:3333::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2c:31:f6:1b:bc:5b:4f:ae:f5:ce:51:f5:c5:5b:05:f6:fa: 38:27:72:4b:4c:ff:2b:0a:cb:13:61:5e:fe:46:97:90:ad:be: 92:35:bd:05:70:4c:50:aa:9a:80:2e:a2:05:3f:47:31:cf:94: fa:69:1e:6d:5a:54:90:95:ba:e8:c8:57:80:6b:80:6a:2d:cb: 9e:14:9c:0d:00:bc:2c:61:ad:62:39:f2:36:43:8e:39:50:42: c2:7b:c0:69:f3:bd:9b:6a:0f:a1:3c:f4:ba:24:0e:8a:78:24: 03:55:f9:8a:a6:f0:c2:ab:05:ae:db:07:39:98:15:13:ce:9d: f6:8e:bf:a0:63:e2:fd:10:9a:04:41:52:72:6e:58:2a:3e:96: 6d:7b:ee:d3:54:32:cc:6d:a2:b1:00:f4:4c:cc:33:41:79:81: 52:d1:ed:52:e5:2e:fb:5c:52:0a:67:72:87:62:0e:fc:78:d2: f2:77:72:75:15:e7:ed:97:e0:52:08:be:6d:84:65:e7:9c:8a: 28:e1:73:55:ed:98:a3:19:4a:01:51:7c:60:e8:ce:48:a3:54: 55:01:09:37:7c:90:67:b8:d8:b2:ba:d0:a7:15:9b:e7:02:91: c5:a9:eb:ae:a5:b7:10:3c:56:7a:9c:94:cb:e7:97:63:ef:f6: e0:5f:87:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEshzCZcW8labRAOuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ODliY2EyOWEtN2NjNi00ZDY1LWI5OTEtMjQ2ODM0NzA2MzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/pqCRe42TnKHRv83Nnoy9I3Y+GzL2e1VPnb D9ftJoUyqAlJdhnBPNimZPTGHj5jyt5FbN7q7oCGyyfzAxdeOWbQN37PznUfY7sR m1NX7Qg9sGZY+kI4fXqn6htZSrIAnBCapQjr7A4wYki9dFU5Bzo160nUssHUMs+h Bqkg+tOzV6Jy+Oh9vqRluSMcy1qGKSYY69OHfHw6g98XwMvzV/lcnXEtSrU6XYrr xllBfn0kOQyZN/d+yFK/WaBp/qi7THQxaMiNJmisjg78Yiu18HeTu6053iZp5nIj rVVDtmayRs4XVP8RjgMrtj4xU4/nWkwsFhHy63bc4g8t7wydxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNvlCzYfLZhIZYxRN9TeOwA5dkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvYWY1YzM3NjUtMTQ3Zi0z ZGIxLWI1NmUtMWYyMGZhNzI1OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wDMz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4sMfYbvFtPrvXOUfXFWwX2+jgncktM/ysKyxNhXv5Gl5CtvpI1 vQVwTFCqmoAuogU/RzHPlPppHm1aVJCVuujIV4BrgGoty54UnA0AvCxhrWI58jZD jjlQQsJ7wGnzvZtqD6E89LokDop4JANV+Yqm8MKrBa7bBzmYFRPOnfaOv6Bj4v0Q mgRBUnJuWCo+lm177tNUMsxtorEA9EzMM0F5gVLR7VLlLvtcUgpncodiDvx40vJ3 cnUV5+2X4FIIvm2EZeeciijhc1XtmKMZSgFRfGDozkijVFUBCTd8kGe42LK60KcV m+cCkcWp666ltxA8VnqclMvnl2Pv9uBfh+k= -----END CERTIFICATE-----Generated at Wed Sep 17 00:59:09 2025 by rpki-client