$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa File: 57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa (raw, json) Hash identifier: 0yosYnpm/QAFQHFWNxZSBdUaDK3dAWOskqVnin2Jfqw= Subject key identifier: 7A:80:52:95:0E:39:3F:DE:FD:90:A4:E3:26:1B:74:21:71:FE:78:2A Certificate issuer: /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Certificate serial: 010D0C9F4328584B4616FDBE586F6F167CC2A880 Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 29802 IP address blocks: 2602:f972:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:fd:be:58:6f:6f:16:7c:c2:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=5263e1b9-6862-42ad-b73b-934694b5cb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:fc:40:70:0f:d9:b1:75:2a:83:0a:8d:8e: 89:07:ed:35:c8:33:90:1b:87:d7:75:36:f5:2d:cd: 97:c7:82:87:70:26:62:d7:9e:60:f0:f8:93:44:a3: 56:ac:33:17:b6:0e:8b:00:88:39:ec:4a:1d:43:83: 75:1c:06:10:05:65:56:fa:26:2c:c8:05:c9:48:02: e5:fb:0b:ca:35:30:d4:1d:f5:6d:2a:ef:d7:e1:cf: d5:d3:4c:17:39:32:5a:2d:5f:94:0b:1a:ef:f7:e5: e6:74:95:f1:b6:72:b3:4c:14:72:a0:68:be:48:2c: 83:de:76:d5:a6:30:74:a1:16:02:28:f3:6a:86:9b: d8:08:5a:c8:b4:3b:31:8d:b0:e6:18:6a:e5:a1:28: cd:f5:bf:a9:75:76:c8:bd:66:35:ce:c9:90:73:32: 87:18:71:1c:e8:1c:48:9f:92:fb:e0:d3:7f:c8:be: b2:e3:8f:21:c4:06:55:01:7d:9e:5f:51:7e:3f:87: 46:93:ac:d2:b6:e0:82:7a:1c:60:83:67:16:e0:5c: a7:73:9e:fc:a7:60:9a:35:81:79:1f:65:e7:a6:44: 67:ec:4e:d5:42:1f:77:ec:64:2d:57:87:af:c7:3b: cd:09:ba:c6:4d:51:39:e5:c8:07:c3:d7:3a:f9:38: e4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:80:52:95:0E:39:3F:DE:FD:90:A4:E3:26:1B:74:21:71:FE:78:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl X509v3 Authority Key Identifier: keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer sbgp-ipAddrBlock: critical IPv6: 2602:f972:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:41:75:ec:ab:91:dd:04:9a:6f:6d:1d:57:21:b8:48:8f:89: cb:43:06:8b:26:29:0f:4a:15:92:ca:65:3d:d3:ff:7f:e9:7a: 0d:e8:c5:a0:02:c8:6e:f0:70:ed:a7:b5:c8:42:2a:84:8d:d3: 44:94:b2:67:07:c9:d3:cb:cb:84:13:d1:5e:de:59:5f:22:29: e6:f8:4f:50:26:69:06:3d:bc:00:60:dd:c7:c8:37:d9:87:d5: 46:dc:a1:28:0d:99:28:b9:2f:1b:26:0e:1a:6b:43:94:1e:43: 6f:f4:81:bc:0e:25:cb:00:ad:9d:2c:3a:f6:1b:06:2a:99:dc: 85:95:99:c5:48:a1:38:e6:d7:99:bd:87:5b:e7:31:83:22:63: 84:79:ce:7b:96:3e:24:43:47:35:e4:2a:fc:34:d9:59:67:9d: 0d:89:fb:76:bb:95:d2:ce:23:90:48:7b:22:6d:37:da:88:a4: 09:0e:6f:44:50:cd:a1:3e:8e:a2:aa:43:92:ab:04:4e:45:d3: 79:ab:77:e6:29:e0:7b:89:38:ae:3b:ee:ab:88:e3:96:fa:f0: 94:8d:ab:fd:8c:12:ba:45:d2:03:df:48:21:dd:5a:94:79:96: 3d:fb:9c:38:2f:c7:75:40:f2:97:99:c6:fb:ca:54:63:cd:1b: d0:9e:74:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtGFv2+WG9vFnzCqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmYzQzNzAtNTBhMC00ZGE2LTliMTktZWVhM2ExOTg4 Njg4MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk NTI2M2UxYjktNjg2Mi00MmFkLWI3M2ItOTM0Njk0YjVjYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsb8QHAP2bF1KoMKjY6JB+01yDOQG4fXdTb1 Lc2Xx4KHcCZi155g8PiTRKNWrDMXtg6LAIg57EodQ4N1HAYQBWVW+iYsyAXJSALl +wvKNTDUHfVtKu/X4c/V00wXOTJaLV+UCxrv9+XmdJXxtnKzTBRyoGi+SCyD3nbV pjB0oRYCKPNqhpvYCFrItDsxjbDmGGrloSjN9b+pdXbIvWY1zsmQczKHGHEc6BxI n5L74NN/yL6y448hxAZVAX2eX1F+P4dGk6zStuCCehxgg2cW4Fync578p2CaNYF5 H2XnpkRn7E7VQh937GQtV4evxzvNCbrGTVE55cgHw9c6+TjkAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHqAUpUOOT/e/ZCk4yYbdCFx/ngqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Y2Zj NDM3MC01MGEwLTRkYTYtOWIxOS1lZWEzYTE5ODg2ODgvNTdhMWNkNWYtMmRhMS0z OWRkLWI5ZWItNmJkNGYxMDQxNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGNmYzQzNzAtNTBhMC00ZGE2LTli MTktZWVhM2ExOTg4Njg4LzhjZmM0MzcwLTUwYTAtNGRhNi05YjE5LWVlYTNhMTk4 ODY4OC5jcmwwHwYDVR0jBBgwFoAU0wDD/F4XeXXk80J9t9Naj5SRmzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84Y2ZjNDM3MC01MGEwLTRkYTYtOWIxOS1lZWEz YTE5ODg2ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5cgAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACFBdeyrkd0Emm9tHVchuEiPictDBosmKQ9KFZLKZT3T/3/peg3o xaACyG7wcO2ntchCKoSN00SUsmcHydPLy4QT0V7eWV8iKeb4T1AmaQY9vABg3cfI N9mH1UbcoSgNmSi5LxsmDhprQ5QeQ2/0gbwOJcsArZ0sOvYbBiqZ3IWVmcVIoTjm 15m9h1vnMYMiY4R5znuWPiRDRzXkKvw02VlnnQ2J+3a7ldLOI5BIeyJtN9qIpAkO b0RQzaE+jqKqQ5KrBE5F03mrd+Yp4HuJOK477quI45b68JSNq/2MErpF0gPfSCHd WpR5lj37nDgvx3VA8peZxvvKVGPNG9CedBo= -----END CERTIFICATE-----Generated at Mon Oct 20 05:24:03 2025 by rpki-client