$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa File: 99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa (raw, json) Hash identifier: 9MXX51Mgi/qHiRucmsUodfMc2U2Cf0E9qwU6Q4/0HQQ= Subject key identifier: CF:9E:FA:06:11:01:C1:0A:ED:FC:10:5B:25:FA:B0:C6:4D:D7:9E:3C Certificate issuer: /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5 Certificate serial: 010D0C9F4328584B2496D8B5803FBBE95610C080 Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 14432 IP address blocks: 2602:f965:80::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d8:b5:80:3f:bb:e9:56:10:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=72e692fe-f7e1-46b0-80a5-a808f4c4f297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:a5:31:d5:2c:e8:95:8a:57:5e:98:81:8c: 5d:50:eb:78:5f:5e:51:85:10:ec:c4:19:88:a8:12: 27:a5:5b:63:73:b7:66:6d:46:c6:85:f9:11:e4:4d: 75:b6:5b:60:38:c0:18:0a:ba:ef:43:43:9c:77:28: fb:79:44:57:1d:5f:ba:67:35:f3:b5:38:b3:7f:a7: 22:67:50:64:ca:44:7d:d5:9c:0b:80:03:14:56:f7: 91:85:f0:bb:bc:58:8e:4d:65:e1:4d:aa:cf:28:b1: fa:22:95:05:3e:eb:dc:52:71:eb:f2:f9:67:06:89: 8f:ff:35:3e:87:8d:b3:72:a8:cf:bb:17:0b:f7:a1: be:bb:fe:ba:b1:5b:09:db:84:e5:c7:68:49:f1:dd: 10:4a:b2:90:1d:b3:a5:8a:e2:b4:d2:7c:d3:fd:83: 4e:e0:a9:6f:0a:f6:49:e7:77:9b:3d:99:df:dc:36: 33:6c:8e:59:e8:3d:28:cd:45:29:e1:26:b7:e0:88: 14:05:e2:ea:4f:c5:63:9a:3a:a1:43:30:67:54:8a: b2:b4:32:40:cd:08:6f:32:e8:fc:4c:59:00:ab:89: dc:0f:3d:9c:2f:0a:c7:20:c8:d8:e1:21:15:e8:fd: b3:e5:24:b1:e4:89:6a:50:9e:e7:2e:4f:f3:ab:78: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9E:FA:06:11:01:C1:0A:ED:FC:10:5B:25:FA:B0:C6:4D:D7:9E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl X509v3 Authority Key Identifier: keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:f965:80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:db:9c:0f:b7:a9:4c:c4:6d:6a:e8:e5:e8:68:ca:85:29:00: d2:08:41:90:f4:8f:a6:46:3f:88:55:e3:7a:42:a7:39:3c:26: 08:3a:5e:05:5a:40:1b:c0:6e:61:80:3b:7c:2f:01:d7:0a:61: 30:41:dd:c5:76:8a:da:d6:68:19:8b:cb:d1:47:55:f5:a8:fd: ca:d8:fb:8e:c4:ad:6a:a1:1b:21:8a:c4:59:11:f9:fc:97:55: 59:32:7a:30:e4:96:5e:34:de:07:60:01:06:4e:62:8a:48:5c: 2b:01:1b:3e:09:00:1c:d6:6b:b5:6d:97:df:db:ef:ea:2e:a4: 94:2a:ce:85:65:50:54:18:dc:ce:fe:2b:92:a5:f1:18:15:b7: 25:31:38:a8:25:89:db:73:1d:00:c6:24:d2:02:46:0f:ad:3b: c2:15:74:da:dc:96:71:73:f4:71:1d:92:68:1e:98:d6:51:08: cd:7e:5b:2d:d9:b4:f2:94:18:58:7c:e0:89:78:a2:76:ab:64: 1b:38:1d:3d:8f:fd:7e:50:5d:1c:d9:46:33:88:a5:1b:8c:35: 5c:35:54:43:c1:91:30:76:91:7f:27:42:27:52:81:61:0b:95: b5:f2:05:da:59:ca:22:1e:45:34:6e:d9:f5:64:49:88:a9:e6: c1:6b:4f:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsklti1gD+76VYQwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFhOGUwMTgtODhmNC00MDY3LTkzNWUtZWY4ZTIwYTU1 M2M1MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NzJlNjkyZmUtZjdlMS00NmIwLTgwYTUtYTgwOGY0YzRmMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mulMdUs6JWKV16YgYxdUOt4X15RhRDsxBmI qBInpVtjc7dmbUbGhfkR5E11tltgOMAYCrrvQ0Ocdyj7eURXHV+6ZzXztTizf6ci Z1BkykR91ZwLgAMUVveRhfC7vFiOTWXhTarPKLH6IpUFPuvcUnHr8vlnBomP/zU+ h42zcqjPuxcL96G+u/66sVsJ24Tlx2hJ8d0QSrKQHbOliuK00nzT/YNO4KlvCvZJ 53ebPZnf3DYzbI5Z6D0ozUUp4Sa34IgUBeLqT8VjmjqhQzBnVIqytDJAzQhvMuj8 TFkAq4ncDz2cLwrHIMjY4SEV6P2z5SSx5IlqUJ7nLk/zq3jctwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM+e+gYRAcEK7fwQWyX6sMZN1548MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMWE4 ZTAxOC04OGY0LTQwNjctOTM1ZS1lZjhlMjBhNTUzYzUvOTljMzQxMzktYTFkMi0z MmRkLWI1ZjQtMmFhOTYzMTU4NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTFhOGUwMTgtODhmNC00MDY3LTkz NWUtZWY4ZTIwYTU1M2M1L2ExYThlMDE4LTg4ZjQtNDA2Ny05MzVlLWVmOGUyMGE1 NTNjNS5jcmwwHwYDVR0jBBgwFoAUdezwcZfkdSWR6NkbnryrZ+1adSMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMWE4ZTAxOC04OGY0LTQwNjctOTM1ZS1lZjhl MjBhNTUzYzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgL5ZQCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADbbnA+3qUzEbWro5ehoyoUpANIIQZD0j6ZGP4hV43pCpzk8Jgg6 XgVaQBvAbmGAO3wvAdcKYTBB3cV2itrWaBmLy9FHVfWo/crY+47ErWqhGyGKxFkR +fyXVVkyejDkll403gdgAQZOYopIXCsBGz4JABzWa7Vtl9/b7+oupJQqzoVlUFQY 3M7+K5Kl8RgVtyUxOKglidtzHQDGJNICRg+tO8IVdNrclnFz9HEdkmgemNZRCM1+ Wy3ZtPKUGFh84Il4onarZBs4HT2P/X5QXRzZRjOIpRuMNVw1VEPBkTB2kX8nQidS gWELlbXyBdpZyiIeRTRu2fVkSYip5sFrT+I= -----END CERTIFICATE-----Generated at Tue Sep 16 04:29:02 2025 by rpki-client