$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/843faa0c-cfed-3624-b1d7-29c9a1f2e126.roa File: 843faa0c-cfed-3624-b1d7-29c9a1f2e126.roa (raw, json) Hash identifier: 2PCpHfDo7MKPjxSchuk9dCdRqPw8x63W5AZzDvlv/rk= Subject key identifier: 22:CA:A0:80:DA:E0:54:F3:A8:4A:75:68:33:F8:B9:3F:7B:6D:47:E1 Certificate issuer: /CN=cd7304e1-3bc1-43c1-b035-93ee027063db Certificate serial: 010D0C9F4328584B0E4166842EE54402D365F380 Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/843faa0c-cfed-3624-b1d7-29c9a1f2e126.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 62925 IP address blocks: 2602:fa93:ff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:66:84:2e:e5:44:02:d3:65:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=e2a0e209-543d-4e69-8bd6-ba74078a5b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:92:0e:81:48:1b:16:cb:41:0e:dc:71:1b:d1: f2:c7:64:7d:5f:93:d7:11:74:84:ca:70:52:57:61: 3c:2a:e9:26:7e:b2:01:81:82:fb:c8:a8:c4:e5:15: 8c:21:5b:10:32:7e:5e:3c:e0:be:f8:2b:57:bf:c9: e5:5a:4d:f8:f8:2f:4a:bb:2f:25:19:3d:00:09:b9: 6c:bf:27:0a:92:69:5d:5f:04:7a:34:dc:b3:6f:30: 41:ee:0b:ca:2d:38:52:27:9f:89:d0:fd:eb:e1:e3: e3:33:a0:76:f4:45:f5:0f:48:a2:e0:da:6c:c7:28: 8b:d7:38:04:6c:23:69:0f:c1:0b:61:39:50:21:cd: ef:13:dc:cc:36:7b:0f:2f:34:b0:c8:f1:97:a4:fc: 33:41:94:88:64:52:36:70:64:8a:7d:c7:4d:13:36: 7d:20:3f:10:12:ff:ed:be:66:f4:1f:9d:33:f9:5b: 4c:cd:6b:e4:6d:f9:b6:1f:91:4f:83:29:ed:fb:de: 2a:5a:eb:ac:04:74:64:67:38:be:93:7e:1b:cb:76: 00:6c:cd:7c:df:f7:9d:b9:2e:16:c3:0f:21:de:1e: 47:cc:cc:89:4d:96:d6:7c:02:91:51:5b:d8:34:47: 0a:5b:84:54:1b:62:03:5c:0d:8d:27:ab:85:a0:8b: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:A0:80:DA:E0:54:F3:A8:4A:75:68:33:F8:B9:3F:7B:6D:47:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/843faa0c-cfed-3624-b1d7-29c9a1f2e126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl X509v3 Authority Key Identifier: keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa93:ff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:bf:43:fc:41:74:5e:7a:7b:80:58:90:6b:0f:dc:30:d9:d0: cd:e3:c6:90:34:1f:13:a1:1b:93:42:c0:ee:63:07:4d:75:6e: db:cf:33:ce:63:ca:35:98:d0:1f:90:1e:cb:e4:d6:cf:e6:49: 4a:e0:35:46:44:39:04:8e:9e:5f:b0:4e:03:1d:73:ae:c0:8a: b3:05:c3:cf:aa:8f:d2:64:d3:bc:fe:ba:a6:9f:06:37:fc:9c: 37:58:4b:36:28:9b:eb:ad:fc:89:7d:34:40:2a:e6:40:51:ec: 64:52:ec:02:9c:78:df:00:8d:f2:2b:04:f2:04:ef:e9:15:95: df:88:8b:c7:ea:d4:67:8c:ad:53:25:f4:d5:a8:20:7b:6b:39: 79:03:da:1d:da:9b:84:2d:1c:ac:a8:8c:4c:6a:71:e3:4b:64: 09:d6:21:a9:f6:df:c3:e5:5a:d1:59:8a:6d:87:57:78:eb:55: a8:7f:5c:b4:bf:a9:27:fd:d0:eb:f3:57:89:ee:e5:03:0a:63: d1:e3:d4:fe:be:94:78:d0:7e:b3:92:e1:aa:e6:80:03:8d:26: 9a:6a:96:0f:af:3f:fb:52:5a:e5:51:42:56:aa:90:7e:ef:a3: 32:91:c1:a1:be:8a:00:45:cb:21:41:5d:b5:a8:e2:b1:cd:51: b1:c8:e4:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsOQWaELuVEAtNl84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3MzA0ZTEtM2JjMS00M2MxLWIwMzUtOTNlZTAyNzA2 M2RiMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTJhMGUyMDktNTQzZC00ZTY5LThiZDYtYmE3NDA3OGE1YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5IOgUgbFstBDtxxG9Hyx2R9X5PXEXSEynBS V2E8KukmfrIBgYL7yKjE5RWMIVsQMn5ePOC++CtXv8nlWk34+C9Kuy8lGT0ACbls vycKkmldXwR6NNyzbzBB7gvKLThSJ5+J0P3r4ePjM6B29EX1D0ii4NpsxyiL1zgE bCNpD8ELYTlQIc3vE9zMNnsPLzSwyPGXpPwzQZSIZFI2cGSKfcdNEzZ9ID8QEv/t vmb0H50z+VtMzWvkbfm2H5FPgynt+94qWuusBHRkZzi+k34by3YAbM183/eduS4W ww8h3h5HzMyJTZbWfAKRUVvYNEcKW4RUG2IDXA2NJ6uFoIumGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCLKoIDa4FTzqEp1aDP4uT97bUfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZDcz MDRlMS0zYmMxLTQzYzEtYjAzNS05M2VlMDI3MDYzZGIvODQzZmFhMGMtY2ZlZC0z NjI0LWIxZDctMjljOWExZjJlMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2Q3MzA0ZTEtM2JjMS00M2MxLWIw MzUtOTNlZTAyNzA2M2RiL2NkNzMwNGUxLTNiYzEtNDNjMS1iMDM1LTkzZWUwMjcw NjNkYi5jcmwwHwYDVR0jBBgwFoAU7rmdZNXt9QBRjGNxx50ffKrFHZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZDczMDRlMS0zYmMxLTQzYzEtYjAzNS05M2Vl MDI3MDYzZGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6kw/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK6/Q/xBdF56e4BYkGsP3DDZ0M3jxpA0HxOhG5NCwO5jB011btvP M85jyjWY0B+QHsvk1s/mSUrgNUZEOQSOnl+wTgMdc67AirMFw8+qj9Jk07z+uqaf Bjf8nDdYSzYom+ut/Il9NEAq5kBR7GRS7AKceN8AjfIrBPIE7+kVld+Ii8fq1GeM rVMl9NWoIHtrOXkD2h3am4QtHKyojExqceNLZAnWIan238PlWtFZim2HV3jrVah/ XLS/qSf90OvzV4nu5QMKY9Hj1P6+lHjQfrOS4armgAONJppqlg+vP/tSWuVRQlaq kH7vozKRwaG+igBFyyFBXbWo4rHNUbHI5L8= -----END CERTIFICATE-----Generated at Sat Sep 13 19:33:13 2025 by rpki-client