$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a343a3a2f34382d3438203d3e20323135333634.roa File: 323630323a663764633a343a3a2f34382d3438203d3e20323135333634.roa (raw, json) Hash identifier: xOEnSo5XGEo/jT6SFKZAQjxCoQ3ypB2vu16ipC9nxiQ= Subject key identifier: 09:EF:F6:36:B0:D4:6C:7F:B8:4F:16:F8:38:E7:CD:94:03:3E:F6:DD Certificate issuer: /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Certificate serial: 22BB88AFC37BDBB9952325E42BEAC31FB4FEAC7F Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a343a3a2f34382d3438203d3e20323135333634.roa Signing time: Thu 16 Oct 2025 16:11:37 +0000 ROA not before: Thu 16 Oct 2025 16:06:37 +0000 ROA not after: Thu 15 Oct 2026 16:11:37 +0000 asID: 215364 IP address blocks: 2602:f7dc:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bb:88:af:c3:7b:db:b9:95:23:25:e4:2b:ea:c3:1f:b4:fe:ac:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Validity Not Before: Oct 16 16:06:37 2025 GMT Not After : Oct 15 16:11:37 2026 GMT Subject: CN=09EFF636B0D46C7FB84F16F838E7CD94033EF6DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:25:43:be:8a:f9:0d:1e:4f:bb:86:51:33:27: ee:2b:be:91:ac:a1:0a:54:67:01:e0:7e:03:a1:a7: 5b:c0:2b:e1:0c:53:93:95:76:7b:d1:9d:37:e4:fc: 8b:4f:1a:b0:f0:de:b0:3f:e5:50:ba:a2:b3:b6:c4: 81:02:a9:dc:92:04:97:d0:4a:d9:bc:ea:1a:e1:58: ac:93:ee:0b:bb:5b:44:07:39:11:40:96:f3:71:1f: f0:c4:51:6e:85:0c:2c:01:aa:63:2c:d2:3f:e3:22: ce:47:f2:a9:e3:9c:8a:c2:b4:df:93:54:af:81:d0: 5d:86:85:c7:b8:5e:85:40:e3:2e:65:2a:33:2b:58: 2d:a1:08:d1:cc:41:a7:40:9a:5d:1a:c6:2f:23:fc: 25:3b:1e:b7:75:76:56:61:21:ac:6b:9d:a7:8f:a5: 93:a3:4c:dd:c3:2a:be:96:95:58:3e:99:f8:6f:fb: fd:9b:3a:21:00:3f:41:51:41:01:a7:9f:49:52:ef: 29:0f:a3:1a:ee:b0:f2:fb:ee:2c:ce:90:e1:f7:a5: 6c:9f:c4:94:8d:d4:ad:7b:de:24:c3:54:d5:ea:f4: 7d:1c:77:55:33:9c:31:8a:9e:48:50:77:2f:20:52: cc:9a:06:cf:5b:5e:da:18:09:1a:c9:61:83:08:39: d3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EF:F6:36:B0:D4:6C:7F:B8:4F:16:F8:38:E7:CD:94:03:3E:F6:DD X509v3 Authority Key Identifier: keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a343a3a2f34382d3438203d3e20323135333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f7dc:4::/48 Signature Algorithm: sha256WithRSAEncryption 8f:ef:6e:bc:83:3d:c3:d5:38:28:9a:36:02:a8:9a:0b:35:a5: 9c:5b:3d:c6:79:f6:bc:c1:a1:5d:95:63:ba:cc:f4:ac:66:76: a0:8c:26:2f:d6:57:3f:0a:f2:82:01:a3:c3:91:af:0c:ac:02: 22:e2:47:c1:fc:e8:e8:e2:de:17:90:cc:e1:93:4d:2e:51:04: 9c:17:9e:8b:c7:b4:63:6d:e9:c6:e0:62:7f:ad:1a:6c:f4:d9: 1a:0e:28:9f:2c:54:a3:fe:a9:35:6c:f5:4f:c9:29:a1:ff:8e: 64:f4:0c:b1:e3:12:ef:5d:f4:43:28:a4:93:ab:27:71:16:4f: d0:9c:24:16:7a:5f:b0:de:cf:aa:9c:fd:58:f4:4f:9a:66:7c: 2c:bd:3e:0d:f0:4b:c8:ff:51:e1:d9:a9:de:05:70:0f:64:b7: c0:1c:24:b4:14:26:f3:8d:08:2a:c6:60:65:63:ea:61:98:bc: 19:44:99:e8:ae:e1:7b:66:e6:df:47:75:d6:b4:28:b2:1e:90: 70:e5:6f:82:83:df:b4:fc:81:19:94:41:69:d2:aa:54:c4:25: e3:99:bb:77:f7:48:cf:d5:d0:50:4a:3c:3c:e4:d7:4a:69:8e: 95:4a:85:98:5f:ac:62:c6:e8:51:c1:76:43:92:e8:5b:8c:da: ba:73:c4:51 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUIruIr8N727mVIyXkK+rDH7T+rH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjUxMDE2MTYwNjM3WhcNMjYxMDE1MTYxMTM3 WjAzMTEwLwYDVQQDEygwOUVGRjYzNkIwRDQ2QzdGQjg0RjE2RjgzOEU3Q0Q5NDAz M0VGNkREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSVDvor5DR5P u4ZRMyfuK76RrKEKVGcB4H4DoadbwCvhDFOTlXZ70Z035PyLTxqw8N6wP+VQuqKz tsSBAqnckgSX0ErZvOoa4Visk+4Lu1tEBzkRQJbzcR/wxFFuhQwsAapjLNI/4yLO R/Kp45yKwrTfk1SvgdBdhoXHuF6FQOMuZSozK1gtoQjRzEGnQJpdGsYvI/wlOx63 dXZWYSGsa52nj6WTo0zdwyq+lpVYPpn4b/v9mzohAD9BUUEBp59JUu8pD6Ma7rDy ++4szpDh96Vsn8SUjdSte94kw1TV6vR9HHdVM5wxip5IUHcvIFLMmgbPW17aGAka yWGDCDnTswIDAQABo4ICuTCCArUwHQYDVR0OBBYEFAnv9jaw1Gx/uE8W+DjnzZQD PvbdMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4 NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw OGIzZTI4NTE0YS8wLzMyMzYzMDMyM2E2NjM3NjQ2MzNhMzQzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjMxMzUzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvfcAAQwDQYJKoZI hvcNAQELBQADggEBAI/vbryDPcPVOCiaNgKomgs1pZxbPcZ59rzBoV2VY7rM9Kxm dqCMJi/WVz8K8oIBo8ORrwysAiLiR8H86Oji3heQzOGTTS5RBJwXnovHtGNt6cbg Yn+tGmz02RoOKJ8sVKP+qTVs9U/JKaH/jmT0DLHjEu9d9EMopJOrJ3EWT9CcJBZ6 X7Dez6qc/Vj0T5pmfCy9Pg3wS8j/UeHZqd4FcA9kt8AcJLQUJvONCCrGYGVj6mGY vBlEmeiu4Xtm5t9Hdda0KLIekHDlb4KD37T8gRmUQWnSqlTEJeOZu3f3SM/V0FBK PDzk10ppjpVKhZhfrGLG6FHBdkOS6FuM2rpzxFE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:50 2025 by rpki-client