$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa File: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (raw, json) Hash identifier: qlBWgQVHIokIjDb6QASxIynORN+xy8Kc7Lulq2B7wKg= Subject key identifier: FE:13:1B:D6:98:5C:2F:D2:FD:F4:E7:01:EA:44:8A:6A:4C:E0:7E:15 Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584AF6868DCE906597D9BFE29480 Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 400792 IP address blocks: 2602:f75b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:8d:ce:90:65:97:d9:bf:e2:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=d1b02c41-6262-467c-83ef-ddf6dd846367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6a:d6:62:fe:5d:51:3f:de:b8:8e:88:c2:f5: ff:5e:55:b6:f8:a4:2b:75:0e:1d:96:45:0c:36:6b: 51:28:ae:69:0e:c6:d6:9c:39:c7:08:a1:4e:48:72: 9f:8a:fc:2b:96:e5:55:7f:50:5d:8e:98:3e:84:f3: 8b:5c:a1:5e:1d:d1:1d:e6:6c:a2:d1:fb:ea:34:30: fb:02:51:d5:f3:9a:6b:05:30:7d:f2:2b:62:23:de: f2:f4:5b:c4:cc:db:25:99:af:48:1f:b1:4b:dc:2e: 84:5b:e4:01:34:0f:32:b7:f2:cd:d2:39:50:08:2e: 65:4b:cc:51:13:cf:c3:b8:d2:a6:13:f4:4b:20:6c: ae:0f:4f:a6:df:06:18:a0:5b:60:ee:ff:21:16:18: a1:a7:5d:99:59:f0:9e:ba:78:7c:6b:99:72:db:f4: 02:2a:c0:f8:d2:66:b3:d6:4d:2c:15:62:b8:cb:fc: 6b:4c:54:ce:b1:b1:7e:06:64:f1:73:7f:bf:8a:76: 89:5b:fe:bc:7d:da:a0:62:6c:56:b2:37:67:6f:bb: a0:02:30:dc:a2:83:bd:83:2e:32:46:41:9e:f3:7c: ee:51:f1:5b:95:3f:80:8f:2f:7b:05:e4:9e:f1:b5: d7:54:5f:df:f1:05:af:50:a6:ed:70:28:e6:4b:5e: 3b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:13:1B:D6:98:5C:2F:D2:FD:F4:E7:01:EA:44:8A:6A:4C:E0:7E:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f75b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ca:ac:ed:8a:fd:f4:15:a7:07:5e:0f:5f:6a:1a:64:89:0c: 75:e9:fb:85:8a:48:53:0a:58:a9:42:5a:1b:4d:ed:d6:ed:1c: 72:f3:b5:91:ab:a5:64:bf:80:b1:4a:b2:cd:d6:03:5d:43:00: 61:e2:0a:c2:ce:41:c1:d5:16:d6:b9:18:48:f7:48:e6:79:12: 0e:9d:35:e1:e2:17:ad:ff:d1:f5:15:e0:28:d7:1f:58:cf:a2: dc:ae:e7:33:e2:f5:1a:c3:df:cc:a0:77:47:e8:23:e2:d9:a3: 37:ac:d8:dc:f8:ca:e7:2b:93:2d:8b:42:9d:f8:95:b0:5a:15: 28:3d:f9:ae:4e:db:08:ab:b7:88:61:07:7d:28:77:82:49:c8: 68:8a:53:35:68:9a:18:20:56:42:a1:d0:28:85:52:e3:d2:d3: 46:3e:a1:49:38:6a:2e:6f:b8:12:25:0c:b7:e4:16:f5:75:43: 12:de:ac:18:a3:f1:4d:05:c9:b9:c0:2e:e6:92:09:26:7b:3c: d5:57:09:82:46:4a:46:14:45:56:68:75:6f:b2:7b:a2:73:d7: 35:3c:6b:ed:53:e1:6a:4b:35:fa:78:a3:79:3b:1e:e8:ab:07: 28:d4:89:5c:a5:5e:24:63:49:ea:cd:a8:04:6e:11:10:f1:1e: bd:56:ca:15 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr2ho3OkGWX2b/ilIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZDFiMDJjNDEtNjI2Mi00NjdjLTgzZWYtZGRmNmRkODQ2MzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGrWYv5dUT/euI6IwvX/XlW2+KQrdQ4dlkUM NmtRKK5pDsbWnDnHCKFOSHKfivwrluVVf1Bdjpg+hPOLXKFeHdEd5myi0fvqNDD7 AlHV85prBTB98itiI97y9FvEzNslma9IH7FL3C6EW+QBNA8yt/LN0jlQCC5lS8xR E8/DuNKmE/RLIGyuD0+m3wYYoFtg7v8hFhihp12ZWfCeunh8a5ly2/QCKsD40maz 1k0sFWK4y/xrTFTOsbF+BmTxc3+/inaJW/68fdqgYmxWsjdnb7ugAjDcooO9gy4y RkGe83zuUfFblT+Ajy97BeSe8bXXVF/f8QWvUKbtcCjmS147nQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP4TG9aYXC/S/fTnAepEimpM4H4VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvNDMwNGQ2YjAtNGY2MS0z MGM5LWEwZWYtZTNlODNlOTRlNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3WwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbcqs7Yr99BWnB14PX2oaZIkMden7hYpIUwpYqUJaG03t1u0ccvO1 kaulZL+AsUqyzdYDXUMAYeIKws5BwdUW1rkYSPdI5nkSDp014eIXrf/R9RXgKNcf WM+i3K7nM+L1GsPfzKB3R+gj4tmjN6zY3PjK5yuTLYtCnfiVsFoVKD35rk7bCKu3 iGEHfSh3gknIaIpTNWiaGCBWQqHQKIVS49LTRj6hSThqLm+4EiUMt+QW9XVDEt6s GKPxTQXJucAu5pIJJns81VcJgkZKRhRFVmh1b7J7onPXNTxr7VPhaks1+nijeTse 6KsHKNSJXKVeJGNJ6s2oBG4REPEevVbKFQ== -----END CERTIFICATE-----Generated at Wed Sep 10 13:24:28 2025 by rpki-client