$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/3622a41a-88f5-30f1-900e-6a1e3b9cbc19.roa File: 3622a41a-88f5-30f1-900e-6a1e3b9cbc19.roa (raw, json) Hash identifier: Lm9UwOV5fxIp0gnSsmkKSe0krBrhCUcKd3lHO/Si6h4= Subject key identifier: A9:F6:AC:00:28:26:35:EF:21:C6:2A:64:A2:A5:70:7C:34:3A:0F:09 Certificate issuer: /CN=e97da778-a1f6-4dad-9d0a-d3a070010373 Certificate serial: 010D0C9F4328584ADECBB29F3612CC9B5C0B6780 Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/3622a41a-88f5-30f1-900e-6a1e3b9cbc19.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 21538 IP address blocks: 2602:fc30::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b2:9f:36:12:cc:9b:5c:0b:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=6edb454e-1fe4-4c9d-afcf-4d8cb12b5eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:50:da:04:86:3b:8a:2d:cf:66:0e:96:2d:a4: b6:02:5b:9e:e4:7d:b2:c3:15:eb:e9:8b:01:38:4f: 33:c3:a1:7b:38:aa:3a:cd:fd:60:80:da:14:d5:f9: cd:1e:a3:23:bf:ce:7d:97:4f:3e:c4:e9:b4:46:a4: e0:89:41:08:2d:ba:ac:cb:e7:ee:5c:c7:0e:f0:61: bf:2e:b2:e5:7f:44:09:30:02:59:76:0f:f2:92:22: e1:f5:59:fe:7d:04:60:01:27:06:86:02:9f:94:01: 89:df:c5:a5:48:5f:29:e5:4f:5b:6d:8e:5e:9a:1a: 04:fe:91:95:65:23:d8:36:af:91:f1:b8:f1:12:d8: f8:92:44:10:fa:e0:0e:71:60:b9:4f:33:cc:2b:84: a1:c0:a0:f2:a0:72:90:b2:c1:61:b0:2a:92:08:1b: 97:ca:c7:70:a2:e2:61:7c:77:ba:f8:a0:6b:f0:5f: f5:a1:aa:2c:57:32:1a:8c:80:cb:ac:5b:e1:f8:63: b6:b2:c1:3d:48:0d:b4:48:2d:12:84:24:36:a6:d5: a2:03:9e:f4:d4:02:b5:ce:1b:2e:0b:28:36:13:fb: 17:c0:17:b0:45:92:2c:49:eb:9e:36:d8:10:90:2a: 6e:79:cb:4c:e0:c0:3d:44:96:38:58:14:b3:46:2e: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F6:AC:00:28:26:35:EF:21:C6:2A:64:A2:A5:70:7C:34:3A:0F:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/3622a41a-88f5-30f1-900e-6a1e3b9cbc19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl X509v3 Authority Key Identifier: keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc30::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:4a:aa:69:57:f3:8a:5e:89:30:1d:69:67:6c:af:82:be:0b: be:ba:91:1e:18:bc:f1:17:43:b4:1d:83:e8:0d:8f:52:86:5f: 62:0a:a7:73:8f:0a:ab:07:05:69:39:29:be:1a:b6:0c:dc:2e: d3:8f:46:10:f7:53:d0:c1:57:e4:22:36:3c:b8:94:f4:3a:30: 7e:bf:5a:5c:3b:5b:e8:3f:44:c6:0d:c6:d7:50:1b:c2:af:47: 3d:9a:37:d7:01:b4:0e:ed:40:85:11:32:d9:4a:da:c7:b4:3e: 31:dc:3d:59:01:bc:e7:ae:c8:bc:2b:bd:23:57:6c:7d:36:a7: b5:ac:8a:66:d0:70:b5:07:ef:68:83:6a:51:a3:88:f4:a5:5a: 0a:0a:7a:7b:30:38:f9:20:6a:64:82:c4:7f:69:00:29:48:1f: 8c:62:35:a6:24:bc:fd:70:3a:58:b6:d9:dd:4a:3e:28:fc:e6: 84:10:52:9f:48:73:08:bf:d6:31:85:39:c4:15:5b:87:f2:56: 2f:74:fa:05:04:4a:e7:72:60:44:9d:fb:1e:5e:d4:3f:f6:e2: 59:7c:9b:10:22:60:0c:bf:c2:08:20:9a:c6:dd:58:a5:30:87: cd:20:15:74:ff:d0:23:97:17:68:50:48:a2:cb:5d:b2:03:62: dc:a7:80:4a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErey7KfNhLMm1wLZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3ZGE3NzgtYTFmNi00ZGFkLTlkMGEtZDNhMDcwMDEw MzczMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NmVkYjQ1NGUtMWZlNC00YzlkLWFmY2YtNGQ4Y2IxMmI1ZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFDaBIY7ii3PZg6WLaS2Alue5H2ywxXr6YsB OE8zw6F7OKo6zf1ggNoU1fnNHqMjv859l08+xOm0RqTgiUEILbqsy+fuXMcO8GG/ LrLlf0QJMAJZdg/ykiLh9Vn+fQRgAScGhgKflAGJ38WlSF8p5U9bbY5emhoE/pGV ZSPYNq+R8bjxEtj4kkQQ+uAOcWC5TzPMK4ShwKDyoHKQssFhsCqSCBuXysdwouJh fHe6+KBr8F/1oaosVzIajIDLrFvh+GO2ssE9SA20SC0ShCQ2ptWiA5701AK1zhsu Cyg2E/sXwBewRZIsSeueNtgQkCpuectM4MA9RJY4WBSzRi5iiwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKn2rAAoJjXvIcYqZKKlcHw0Og8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdk YTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAwMTAzNzMvMzYyMmE0MWEtODhmNS0z MGYxLTkwMGUtNmExZTNiOWNiYzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk3ZGE3NzgtYTFmNi00ZGFkLTlk MGEtZDNhMDcwMDEwMzczL2U5N2RhNzc4LWExZjYtNGRhZC05ZDBhLWQzYTA3MDAx MDM3My5jcmwwHwYDVR0jBBgwFoAUMuC2ppBpQiEgQL1KkOWS4I8ee6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2Ew NzAwMTAzNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8MAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoEqqaVfzil6JMB1pZ2yvgr4LvrqRHhi88RdDtB2D6A2PUoZfYgqn c48KqwcFaTkpvhq2DNwu049GEPdT0MFX5CI2PLiU9Dowfr9aXDtb6D9Exg3G11Ab wq9HPZo31wG0Du1AhREy2Urax7Q+Mdw9WQG8567IvCu9I1dsfTantayKZtBwtQfv aINqUaOI9KVaCgp6ezA4+SBqZILEf2kAKUgfjGI1piS8/XA6WLbZ3Uo+KPzmhBBS n0hzCL/WMYU5xBVbh/JWL3T6BQRK53JgRJ37Hl7UP/biWXybECJgDL/CCCCaxt1Y pTCHzSAVdP/QI5cXaFBIostdsgNi3KeASg== -----END CERTIFICATE-----Generated at Sun Aug 24 02:57:00 2025 by rpki-client