$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/8f45e8d1-2145-396a-8fc1-870c6a976845.roa File: 8f45e8d1-2145-396a-8fc1-870c6a976845.roa (raw, json) Hash identifier: 7szQy/3e6r7vlP+fegdPeD0YZ4Cv6u7nxFTLCXDcmLY= Subject key identifier: 0F:41:15:4C:67:02:DE:9C:79:8F:39:F7:DE:56:7B:6E:56:44:D0:F5 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F4328584B4081AB3BB7EE86B90316B700 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/8f45e8d1-2145-396a-8fc1-870c6a976845.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 2602:277:f00::/47 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ab:3b:b7:ee:86:b9:03:16:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=ecb7663a-dd1e-4591-a8a6-222ae781ab71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:32:10:52:a7:48:77:64:e0:d0:f5:9a:6c:b6: 6f:cd:e1:64:1d:e2:1b:59:e9:fa:28:7f:df:06:67: ff:56:f0:d3:e7:a0:a1:1d:f7:31:b9:07:54:67:d8: da:d5:a9:5e:35:72:43:4f:31:db:e3:c3:29:c6:e1: bf:99:90:e3:05:4d:94:a1:64:6a:b2:67:1a:46:d8: 01:fe:8e:f0:46:39:25:e6:bd:09:98:a2:e4:aa:75: 79:9f:72:bc:e9:63:eb:f4:72:ef:c4:96:7a:5b:d0: fe:f5:03:cf:15:62:04:9b:20:cc:ef:8f:25:a1:b4: 4e:10:15:ee:88:73:b7:23:e1:ca:3a:f4:cf:11:3d: 66:49:24:91:c6:66:7a:b5:72:cd:aa:10:a2:b2:84: b4:50:26:93:3b:c7:53:81:52:33:09:99:cc:b6:f6: 91:e4:7d:c7:96:38:79:2d:3f:45:22:f0:fb:eb:c3: 29:1a:d3:a8:dc:84:4a:4d:21:dd:58:9b:c7:de:79: 34:f9:eb:c4:2e:c8:d2:36:61:04:8a:fe:f6:4d:6c: e4:97:74:c6:ef:1b:be:be:a5:51:1a:2f:11:2a:b1: 5c:ec:28:94:e8:c6:ca:57:e1:e0:ff:38:17:0f:d3: e8:d6:42:35:0b:2a:68:05:30:67:d3:fc:ae:ba:0f: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:41:15:4C:67:02:DE:9C:79:8F:39:F7:DE:56:7B:6E:56:44:D0:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/8f45e8d1-2145-396a-8fc1-870c6a976845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:f00::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:16:b5:cc:05:9c:9c:35:f5:20:7b:86:50:15:6e:42:12:11: fc:54:22:d1:eb:67:fa:b6:2e:ff:2e:44:e9:1f:8d:79:e4:da: c2:58:2d:7e:40:21:c4:75:91:07:0a:c4:3e:7b:8c:bf:7c:37: 5f:20:f6:98:ae:1e:23:99:bb:a7:de:4c:c8:3b:13:9c:21:7f: 7a:7c:5e:ba:92:00:dc:d9:ce:50:47:41:8a:4a:f0:76:52:a6: 93:8e:23:b9:91:9b:c1:e0:32:21:12:7d:92:a4:7f:37:8e:88: 44:a0:bc:f6:a6:b8:c3:60:0f:77:12:16:36:05:a1:b6:d7:48: d7:81:85:2e:37:77:de:8b:15:46:c1:63:a4:35:6a:99:22:eb: f8:e6:f3:ab:af:95:78:d1:c2:f5:ff:b5:66:64:9e:c8:34:b5: a8:d8:80:74:87:23:8a:e5:bd:1a:99:15:ef:0b:33:bc:b3:a2: 6d:08:17:d8:5a:9c:d0:27:40:2d:b9:04:53:59:ae:53:12:c4: 75:6b:66:09:f6:a1:5d:43:fc:7a:89:8a:03:4c:4b:0e:ed:fe: 95:0b:6a:59:56:31:f3:03:df:cb:31:f5:07:ba:22:b4:28:57: b8:9f:33:4a:dd:98:a4:ce:5b:e2:d0:0a:e8:18:f1:5d:bb:b6: ab:cf:dd:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgas7t+6GuQMWtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZWNiNzY2M2EtZGQxZS00NTkxLWE4YTYtMjIyYWU3ODFhYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDIQUqdId2Tg0PWabLZvzeFkHeIbWen6KH/f Bmf/VvDT56ChHfcxuQdUZ9ja1aleNXJDTzHb48MpxuG/mZDjBU2UoWRqsmcaRtgB /o7wRjkl5r0JmKLkqnV5n3K86WPr9HLvxJZ6W9D+9QPPFWIEmyDM748lobROEBXu iHO3I+HKOvTPET1mSSSRxmZ6tXLNqhCisoS0UCaTO8dTgVIzCZnMtvaR5H3Hljh5 LT9FIvD768MpGtOo3IRKTSHdWJvH3nk0+evELsjSNmEEiv72TWzkl3TG7xu+vqVR Gi8RKrFc7CiU6MbKV+Hg/zgXD9Po1kI1CypoBTBn0/yuug8X4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA9BFUxnAt6ceY85995We25WRND1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvOGY0NWU4ZDEtMjE0NS0z OTZhLThmYzEtODcwYzZhOTc2ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgICdw8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0WtcwFnJw19SB7hlAVbkISEfxUItHrZ/q2Lv8uROkfjXnk2sJY LX5AIcR1kQcKxD57jL98N18g9piuHiOZu6feTMg7E5whf3p8XrqSANzZzlBHQYpK 8HZSppOOI7mRm8HgMiESfZKkfzeOiESgvPamuMNgD3cSFjYFobbXSNeBhS43d96L FUbBY6Q1apki6/jm86uvlXjRwvX/tWZknsg0tajYgHSHI4rlvRqZFe8LM7yzom0I F9hanNAnQC25BFNZrlMSxHVrZgn2oV1D/HqJigNMSw7t/pULallWMfMD38sx9Qe6 IrQoV7ifM0rdmKTOW+LQCugY8V27tqvP3cs= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:23 2025 by rpki-client