$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/653ac14b-6f52-36b8-9423-535372503377.roa File: 653ac14b-6f52-36b8-9423-535372503377.roa (raw, json) Hash identifier: sMQv0GMTd/ICXkayReMrii12f3j57oBz9Wg7kDiv/Zg= Subject key identifier: F5:0A:16:DE:6F:E7:A3:6F:93:D8:8B:2C:0B:11:11:86:89:DD:F2:A9 Certificate issuer: /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Certificate serial: 010D0C9F4328584B7FB9D2989112031A243BAF80 Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/653ac14b-6f52-36b8-9423-535372503377.roa Signing time: Sun 12 Oct 2025 16:29:46 +0000 ROA not before: Sun 12 Oct 2025 16:29:46 +0000 ROA not after: Sat 10 Jan 2026 17:29:46 +0000 asID: 32002 IP address blocks: 2602:f964:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:b9:d2:98:91:12:03:1a:24:3b:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Validity Not Before: Oct 12 16:29:46 2025 GMT Not After : Jan 10 17:29:46 2026 GMT Subject: CN=0ba7dee9-651c-4fb1-940a-d0dc3869ff52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:51:bc:f7:d7:27:c2:a7:06:06:d5:9e:4c:3e: 9c:f5:49:10:2b:77:1a:66:51:7d:57:04:1e:31:8e: f8:34:94:f8:30:49:a3:b1:fa:2c:cc:0f:ef:8e:0e: 19:f0:e3:a0:27:38:cb:24:df:f4:d4:b0:8d:b8:fb: bf:5f:0a:12:da:35:eb:d4:16:69:c9:15:6f:81:68: e9:b9:54:35:af:cc:c8:ec:fa:06:0e:ef:4c:da:9d: d6:85:7c:c2:94:d8:64:78:de:e6:aa:42:11:f7:94: c4:31:1b:60:cf:af:a2:42:8d:6f:dc:ad:c2:af:23: 84:37:1e:b4:00:91:ad:c8:f1:63:6f:d3:d3:c4:a2: 71:cb:d7:16:fc:88:c4:8a:b7:27:50:71:b0:90:36: d4:3e:c4:b8:88:1e:e6:76:65:42:46:13:c9:a9:59: 85:04:71:57:82:65:f9:81:47:9b:ba:d2:2d:74:ed: 59:28:9a:53:be:e6:8d:47:10:74:ee:04:9a:e4:2f: 5d:d2:4a:fc:04:99:2f:7f:4c:e1:dc:8a:a3:e1:91: fa:ff:19:47:27:d1:41:47:6b:88:cf:f8:89:7f:bf: 88:95:c6:e9:66:ae:47:53:c9:6e:cd:3c:02:81:62: 90:0b:c0:1b:ac:0d:be:a1:3f:c0:a0:14:6b:77:b7: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0A:16:DE:6F:E7:A3:6F:93:D8:8B:2C:0B:11:11:86:89:DD:F2:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/653ac14b-6f52-36b8-9423-535372503377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl X509v3 Authority Key Identifier: keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f964:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6b:ff:46:50:b6:11:c9:7a:0a:ea:4a:60:4a:db:94:30:3c: 69:67:78:33:59:9a:aa:12:ee:af:71:8c:04:d9:5a:da:98:6b: e9:a6:26:cf:b5:a4:96:aa:0f:5a:20:2a:fd:23:5e:64:94:4f: 40:d1:72:bc:e3:a8:81:70:fb:e8:42:3a:6d:bb:97:78:93:ba: f5:75:3f:06:80:a0:e4:0a:a7:78:7f:55:f6:0d:47:e3:81:88: 22:68:f7:4c:f5:1d:c3:47:41:13:10:aa:46:e0:65:1b:70:0d: 1c:5d:75:e9:6c:40:4c:1a:1e:a9:ab:70:99:c8:fa:25:26:8a: ec:94:fe:f5:e0:99:02:e5:68:34:8e:59:86:cb:cb:d6:a3:61: 68:a0:1a:eb:d9:7f:12:90:a7:36:1a:9d:33:95:eb:1c:c0:e7: e9:c4:1b:c5:8a:d1:a6:7a:04:88:4b:62:ba:11:ca:75:00:70: 5b:35:37:33:05:6e:16:48:00:fd:b1:07:6a:dc:2b:58:68:ab: b3:1f:10:a1:80:fe:de:ad:09:13:a4:83:e4:d7:24:6c:66:3d: eb:86:5e:a3:ce:04:1b:7d:e9:cd:fd:03:21:59:64:d2:88:f1: b6:fe:3d:54:97:99:7e:87:69:a4:f8:7b:17:13:f5:0b:99:39: d0:68:7a:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/udKYkRIDGiQ7r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiODRlMmItYWZiZS00YjM1LWIwMDUtZTBkZmNhMmUy M2Q4MB4XDTI1MTAxMjE2Mjk0NloXDTI2MDExMDE3Mjk0NlowLzEtMCsGA1UEAxMk MGJhN2RlZTktNjUxYy00ZmIxLTk0MGEtZDBkYzM4NjlmZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVG899cnwqcGBtWeTD6c9UkQK3caZlF9VwQe MY74NJT4MEmjsfoszA/vjg4Z8OOgJzjLJN/01LCNuPu/XwoS2jXr1BZpyRVvgWjp uVQ1r8zI7PoGDu9M2p3WhXzClNhkeN7mqkIR95TEMRtgz6+iQo1v3K3CryOENx60 AJGtyPFjb9PTxKJxy9cW/IjEircnUHGwkDbUPsS4iB7mdmVCRhPJqVmFBHFXgmX5 gUebutItdO1ZKJpTvuaNRxB07gSa5C9d0kr8BJkvf0zh3Iqj4ZH6/xlHJ9FBR2uI z/iJf7+IlcbpZq5HU8luzTwCgWKQC8AbrA2+oT/AoBRrd7d7YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPUKFt5v56Nvk9iLLAsREYaJ3fKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOGI4 NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRmY2EyZTIzZDgvNjUzYWMxNGItNmY1Mi0z NmI4LTk0MjMtNTM1MzcyNTAzMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYThiODRlMmItYWZiZS00YjM1LWIw MDUtZTBkZmNhMmUyM2Q4L2E4Yjg0ZTJiLWFmYmUtNGIzNS1iMDA1LWUwZGZjYTJl MjNkOC5jcmwwHwYDVR0jBBgwFoAUJyaHnCMjdlLoJfSaxiQ6/6bmTi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hOGI4NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRm Y2EyZTIzZDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ZAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAElr/0ZQthHJegrqSmBK25QwPGlneDNZmqoS7q9xjATZWtqYa+mm Js+1pJaqD1ogKv0jXmSUT0DRcrzjqIFw++hCOm27l3iTuvV1PwaAoOQKp3h/VfYN R+OBiCJo90z1HcNHQRMQqkbgZRtwDRxddelsQEwaHqmrcJnI+iUmiuyU/vXgmQLl aDSOWYbLy9ajYWigGuvZfxKQpzYanTOV6xzA5+nEG8WK0aZ6BIhLYroRynUAcFs1 NzMFbhZIAP2xB2rcK1hoq7MfEKGA/t6tCROkg+TXJGxmPeuGXqPOBBt96c39AyFZ ZNKI8bb+PVSXmX6HaaT4excT9QuZOdBoeuc= -----END CERTIFICATE-----Generated at Tue Oct 21 05:50:57 2025 by rpki-client