$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/22cf0846-fd39-3926-8f9b-709b5a41a148.roa File: 22cf0846-fd39-3926-8f9b-709b5a41a148.roa (raw, json) Hash identifier: dtMngRQTXSrsaCchLgcnzQaKYaC0l4eN1jMLAn0WhYI= Subject key identifier: 72:B0:DD:37:01:B4:CF:17:18:7E:8E:D0:73:E4:EF:8E:07:E8:7A:21 Certificate issuer: /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8 Certificate serial: 010D0C9F4328584B6FF73E5158D290DE7DC80990 Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/22cf0846-fd39-3926-8f9b-709b5a41a148.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 209481 IP address blocks: 2602:f93b:400::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:3e:51:58:d2:90:de:7d:c8:09:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=ae6f28fb-b455-4e6f-919b-3ad4c5da6b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:8d:b5:c2:a5:78:e7:a0:73:4e:2f:ea:e1: 04:f9:f9:0b:a7:71:a4:bf:bc:5e:18:3c:42:1f:98: dd:16:1f:7a:18:00:6a:75:73:1e:75:8b:f9:86:c9: 9e:f3:f9:bc:5f:a9:d1:94:4a:22:14:6d:af:8b:d8: 8a:7f:ab:81:65:50:51:ff:88:c3:b7:65:4d:7f:c5: 47:63:ce:ea:f0:54:45:e0:40:1c:4a:a4:72:db:f3: ae:ba:4b:ea:a1:a7:8e:e2:88:f5:65:d9:d5:ed:bd: a4:bc:6f:06:80:45:36:f2:41:b2:9b:a5:16:3d:5b: 5f:8d:55:5d:15:e0:53:af:a1:67:e1:53:7a:61:a6: 1f:53:7a:ac:da:6f:43:56:e0:41:cc:ac:6b:25:e8: 96:38:2f:f2:e7:fa:16:f4:97:0f:1d:85:e0:44:92: 8e:bd:c1:b8:ca:2d:6c:7d:a3:93:58:80:6e:98:0d: 41:17:2d:43:90:32:16:8c:a5:40:23:0f:bd:69:73: 60:62:ef:39:31:59:c1:c7:67:c8:f7:cf:01:33:3d: 78:d8:5c:a1:55:a4:e4:18:f9:ae:98:7f:5f:f4:57: 4a:80:05:a3:02:e0:cc:17:47:51:a3:42:2e:33:79: f3:f8:5f:0a:6d:29:b5:ae:4f:8a:19:c6:c2:85:9a: df:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B0:DD:37:01:B4:CF:17:18:7E:8E:D0:73:E4:EF:8E:07:E8:7A:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/22cf0846-fd39-3926-8f9b-709b5a41a148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl X509v3 Authority Key Identifier: keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f93b:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:06:c5:08:fc:7e:5d:2a:97:cd:f4:40:1f:47:b0:fc:b0:87: 2f:6d:e8:78:85:d2:7a:e7:9e:e8:8f:67:88:7d:09:9b:48:5a: de:58:14:2a:a7:0b:7c:a0:2b:7a:b6:19:f8:6a:ff:cf:6c:fc: b1:bb:a3:9f:70:8a:e1:9f:6d:f6:ff:2a:1d:fc:6e:15:f7:db: c4:ff:6d:96:4e:6d:d0:34:9f:db:51:71:09:7a:b0:b2:4d:7c: 6b:29:4d:91:f7:70:56:31:a5:9a:9f:51:79:cf:e8:9e:eb:9a: 80:17:a4:b7:73:d5:d7:0b:40:d3:94:98:c9:10:e0:ba:93:76: 89:75:df:ec:36:48:00:47:9a:03:91:c8:56:fe:fb:89:73:db: 96:80:28:dd:f1:6c:9d:7b:1b:46:75:d7:ab:f9:59:ba:7c:b2: ce:d3:4f:7b:49:6f:38:57:cc:8e:7c:21:02:5e:ff:41:86:6a: d7:0b:46:4f:bf:ff:e4:6e:1d:e8:2b:9f:98:9f:9b:1a:f4:12: 43:64:29:9f:48:6b:8f:9b:fe:04:c5:14:38:4a:11:f6:b1:4a: a4:b1:9b:0d:3f:df:cf:0e:4a:46:20:b0:f6:6b:67:66:7d:25: ef:4d:e4:4c:9e:58:1f:c5:e4:2f:e9:c6:6e:0d:8c:86:db:37: e6:73:94:17 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtv9z5RWNKQ3n3ICZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlYzJkYTUtNTRmZS00ZDdhLThiMDYtMTU4ODc0Nzdj MmU4MB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk YWU2ZjI4ZmItYjQ1NS00ZTZmLTkxOWItM2FkNGM1ZGE2YjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fqNtcKleOegc04v6uEE+fkLp3Gkv7xeGDxC H5jdFh96GABqdXMedYv5hsme8/m8X6nRlEoiFG2vi9iKf6uBZVBR/4jDt2VNf8VH Y87q8FRF4EAcSqRy2/OuukvqoaeO4oj1ZdnV7b2kvG8GgEU28kGym6UWPVtfjVVd FeBTr6Fn4VN6YaYfU3qs2m9DVuBBzKxrJeiWOC/y5/oW9JcPHYXgRJKOvcG4yi1s faOTWIBumA1BFy1DkDIWjKVAIw+9aXNgYu85MVnBx2fI988BMz142FyhVaTkGPmu mH9f9FdKgAWjAuDMF0dRo0IuM3nz+F8KbSm1rk+KGcbChZrfSwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHKw3TcBtM8XGH6O0HPk744H6HohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xN2Vj MmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4NzQ3N2MyZTgvMjJjZjA4NDYtZmQzOS0z OTI2LThmOWItNzA5YjVhNDFhMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTdlYzJkYTUtNTRmZS00ZDdhLThi MDYtMTU4ODc0NzdjMmU4LzE3ZWMyZGE1LTU0ZmUtNGQ3YS04YjA2LTE1ODg3NDc3 YzJlOC5jcmwwHwYDVR0jBBgwFoAUyPPC9itSfvJd8ScSn/7szOwOiEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xN2VjMmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4 NzQ3N2MyZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL5OwQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZQbFCPx+XSqXzfRAH0ew/LCHL23oeIXSeuee6I9niH0Jm0ha3lgU KqcLfKArerYZ+Gr/z2z8sbujn3CK4Z9t9v8qHfxuFffbxP9tlk5t0DSf21FxCXqw sk18aylNkfdwVjGlmp9Rec/onuuagBekt3PV1wtA05SYyRDgupN2iXXf7DZIAEea A5HIVv77iXPbloAo3fFsnXsbRnXXq/lZunyyztNPe0lvOFfMjnwhAl7/QYZq1wtG T7//5G4d6CufmJ+bGvQSQ2Qpn0hrj5v+BMUUOEoR9rFKpLGbDT/fzw5KRiCw9mtn Zn0l703kTJ5YH8XkL+nGbg2Mhts35nOUFw== -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:37 2025 by rpki-client