$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa File: 4a9eb50d-2780-3043-b84e-a510d52cdef8.roa (raw, json) Hash identifier: IghTnm4M6WqNzLAeZEppc4W/Q7e75+I0Hc1URcCbpC4= Subject key identifier: FC:AE:A6:22:DF:52:14:62:BD:85:A4:97:25:A7:D7:2F:2D:A8:41:72 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584B33F1A7C0C86126F0B41D7990 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 174 IP address blocks: 2602:2b7:100::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a7:c0:c8:61:26:f0:b4:1d:79:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=615a0281-41d3-4ed4-93e9-faf57a0ec72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:c6:30:13:b0:60:77:77:9a:5b:b2:2f:2e: fd:9d:24:d7:f8:ef:37:b5:21:80:de:fb:c0:a3:4b: f0:4f:3c:da:43:66:de:18:bb:70:bb:ed:89:2c:c3: f7:2e:ac:84:6a:45:3b:c5:da:08:7d:40:c7:88:23: d7:5b:44:c9:e7:ca:8d:91:fb:db:85:6c:72:f3:e9: 70:2c:f6:a4:32:1a:01:48:7f:97:2b:0e:88:61:86: 30:f0:22:21:1b:d7:d2:74:e6:b8:18:06:87:66:38: 42:13:31:d5:f4:5e:c8:39:98:f2:65:59:6e:55:e2: 93:54:b7:93:bf:79:f8:d4:d7:8f:d7:b6:56:45:d8: d6:ba:8c:52:0a:88:84:3b:77:64:97:15:60:c2:f2: bb:71:ee:e3:49:44:17:15:bc:49:9f:4a:02:e8:ff: a2:57:5c:3b:81:20:59:8d:d7:05:1a:0b:cb:4e:ba: 51:8e:b8:d2:de:0b:70:74:04:17:b4:92:e7:46:19: af:83:65:ec:17:8f:d3:c4:01:7e:26:44:15:3d:77: 21:38:62:26:58:1e:fb:32:eb:10:f3:e6:d1:64:49: c6:4f:a0:78:64:c4:48:f2:58:4a:5d:8a:c8:87:f7: 25:06:46:a1:73:05:d2:dd:f1:4b:5a:78:b0:60:a1: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AE:A6:22:DF:52:14:62:BD:85:A4:97:25:A7:D7:2F:2D:A8:41:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d4:3e:c8:43:10:73:85:cb:78:74:ac:49:7c:f5:ea:06:ee: 8a:c8:7f:a4:bb:0c:b9:b6:2a:20:c0:6c:13:0c:b2:07:4b:3b: aa:04:b6:60:8b:29:68:89:fb:5e:99:8e:65:58:76:9e:a3:1e: 1c:0e:48:41:c3:77:42:a0:70:e4:7f:e9:6c:02:71:bd:f8:39: 8e:f8:22:20:ee:86:00:a8:fa:3d:51:18:1e:65:8d:51:5d:e4: 22:3d:03:ff:16:23:e8:35:89:e3:c3:ca:87:b5:0d:92:07:ca: 1c:14:26:65:31:d8:d1:fa:fa:2c:30:34:bd:87:a1:f8:ae:13: 68:ea:40:39:62:74:88:ae:16:be:34:97:6b:ce:87:b6:69:68: 09:2f:f6:d6:ce:74:7c:a3:a6:d6:98:48:42:23:c8:3a:0b:66: ca:62:22:c9:d3:7e:7f:44:6a:e7:63:fa:45:d1:62:01:ad:09: 89:23:7e:b8:cd:29:cc:34:24:fe:ef:f1:00:16:e7:af:01:cf: 8f:5e:c9:95:4f:82:12:db:8b:12:38:e8:b4:84:a6:12:fc:e3: 39:14:4e:f1:3c:ec:9b:ec:f3:31:d6:28:3d:77:31:d9:88:4b: d8:e0:22:bd:25:58:0d:ad:42:81:e9:a1:99:12:13:80:60:43: fd:78:b6:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsz8afAyGEm8LQdeZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NjE1YTAyODEtNDFkMy00ZWQ0LTkzZTktZmFmNTdhMGVjNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx7GMBOwYHd3mluyLy79nSTX+O83tSGA3vvA o0vwTzzaQ2beGLtwu+2JLMP3LqyEakU7xdoIfUDHiCPXW0TJ58qNkfvbhWxy8+lw LPakMhoBSH+XKw6IYYYw8CIhG9fSdOa4GAaHZjhCEzHV9F7IOZjyZVluVeKTVLeT v3n41NeP17ZWRdjWuoxSCoiEO3dklxVgwvK7ce7jSUQXFbxJn0oC6P+iV1w7gSBZ jdcFGgvLTrpRjrjS3gtwdAQXtJLnRhmvg2XsF4/TxAF+JkQVPXchOGImWB77MusQ 8+bRZEnGT6B4ZMRI8lhKXYrIh/clBkahcwXS3fFLWniwYKEwvwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPyupiLfUhRivYWklyWn1y8tqEFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNGE5ZWI1MGQtMjc4MC0z MDQzLWI4NGUtYTUxMGQ1MmNkZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgICtwEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV9Q+yEMQc4XLeHSsSXz16gbuish/pLsMubYqIMBsEwyyB0s7qgS2 YIspaIn7XpmOZVh2nqMeHA5IQcN3QqBw5H/pbAJxvfg5jvgiIO6GAKj6PVEYHmWN UV3kIj0D/xYj6DWJ48PKh7UNkgfKHBQmZTHY0fr6LDA0vYeh+K4TaOpAOWJ0iK4W vjSXa86HtmloCS/21s50fKOm1phIQiPIOgtmymIiydN+f0Rq52P6RdFiAa0JiSN+ uM0pzDQk/u/xABbnrwHPj17JlU+CEtuLEjjotISmEvzjORRO8Tzsm+zzMdYoPXcx 2YhL2OAivSVYDa1CgemhmRITgGBD/Xi2ug== -----END CERTIFICATE-----Generated at Tue Oct 14 17:49:47 2025 by rpki-client