$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa File: 86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa (raw, json) Hash identifier: 2PUtqAakGfJhWJfnOiU2fb9Ufg3dzvOKkV5zRiO/CHk= Subject key identifier: 30:1F:3B:0D:A3:6C:66:36:93:6C:0E:38:65:6B:FB:72:06:8C:FF:4D Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F4328584ADA9BCCDAAA5EBA9A1654A2C0 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 40569 IP address blocks: 2602:f981::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:cc:da:aa:5e:ba:9a:16:54:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=107807f1-ae37-4a62-a698-c795000493a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7d:12:cd:94:fe:35:5c:19:80:95:a9:47:0b: 17:43:98:17:32:d4:4d:8c:e9:23:47:f6:7b:9f:a8: 03:ce:51:28:6a:c7:21:fb:c1:0a:d9:8e:ab:88:c4: 0e:26:b6:54:5e:6d:f7:64:54:ab:3d:d7:e7:46:bb: cd:4e:6a:c6:94:49:94:0c:f9:83:cc:b2:03:5c:66: 33:8f:5b:0c:0a:92:fa:c7:8f:8e:2b:02:df:d8:26: bf:25:3d:28:ac:b6:96:65:c9:04:fc:3e:12:a2:52: db:0d:fa:a5:fa:c1:59:34:af:7f:b3:d4:0d:76:4c: 66:10:e4:c9:68:62:b8:e6:b0:c7:36:c9:1d:a4:70: 64:9d:ed:b8:5f:46:35:5b:b4:24:99:fa:ce:09:23: b5:c7:05:90:e3:e3:d4:f3:bd:62:d6:46:0d:ab:f8: 4e:8e:c1:ef:2e:18:5e:93:9e:01:c6:71:05:31:2c: 85:76:67:12:5f:58:9b:38:58:85:ab:d5:0f:d7:95: 85:68:de:43:70:ae:e6:1b:46:25:f0:ea:14:4e:24: 70:f7:d5:4b:5a:88:3a:ec:6e:a5:a7:fa:5d:a8:f2: fe:41:48:4b:ee:ae:b6:e7:4c:55:f7:2c:c4:4c:0c: d3:3c:1d:03:79:62:6c:5c:f8:6b:f4:49:23:84:ec: 5c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1F:3B:0D:A3:6C:66:36:93:6C:0E:38:65:6B:FB:72:06:8C:FF:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv6: 2602:f981::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:24:0d:32:46:25:ba:d7:46:06:bc:fc:7b:dc:90:9d:02:2f: 7f:1e:39:e6:a3:fd:de:72:79:06:d3:4f:65:86:f1:89:b8:87: 04:a2:cc:37:2e:29:97:7e:0d:75:5c:2f:94:65:db:c5:8d:35: 8c:b4:1f:e0:ef:c9:df:ac:74:be:dd:e1:58:0c:5f:ca:0c:03: fc:3b:8b:40:00:b2:f8:34:1f:fb:9d:57:ec:1c:93:20:49:4b: 84:3e:24:a4:14:97:02:ee:21:92:d8:8e:9e:d0:87:ac:92:31: 85:44:04:75:c9:26:90:d1:0b:c2:5c:b2:b8:03:37:1e:b8:cf: dc:1f:c0:4b:f6:ea:82:b4:47:b1:43:39:54:9f:75:68:16:7e: 68:a0:66:f3:a5:35:26:cd:58:ea:c8:43:e2:c6:69:5a:3d:f0: 36:85:5a:3b:2a:62:8b:33:de:7a:c3:4a:1f:3d:6b:37:88:51: 49:35:fe:21:70:cc:96:2c:99:06:4f:15:aa:16:10:7c:5f:81: 91:e4:17:81:46:9b:61:87:95:28:54:5c:45:59:b6:32:f8:df: 8a:11:41:65:d8:0f:2d:b4:cb:9c:c9:c1:c8:60:9b:c1:ac:38: 6d:64:06:d7:8b:c9:38:07:5e:52:3e:2c:38:2b:27:56:8d:68: f5:4f:56:21 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEram8zaql66mhZUosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MTA3ODA3ZjEtYWUzNy00YTYyLWE2OTgtYzc5NTAwMDQ5M2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn0SzZT+NVwZgJWpRwsXQ5gXMtRNjOkjR/Z7 n6gDzlEoasch+8EK2Y6riMQOJrZUXm33ZFSrPdfnRrvNTmrGlEmUDPmDzLIDXGYz j1sMCpL6x4+OKwLf2Ca/JT0orLaWZckE/D4SolLbDfql+sFZNK9/s9QNdkxmEOTJ aGK45rDHNskdpHBkne24X0Y1W7QkmfrOCSO1xwWQ4+PU871i1kYNq/hOjsHvLhhe k54BxnEFMSyFdmcSX1ibOFiFq9UP15WFaN5DcK7mG0Yl8OoUTiRw99VLWog67G6l p/pdqPL+QUhL7q6250xV9yzETAzTPB0DeWJsXPhr9EkjhOxc1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDAfOw2jbGY2k2wOOGVr+3IGjP9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvODZjZmQ1NmEtOGVmMC0z ZjEzLWJmNTgtZmMzZDUxOWM0NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5gQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHiQNMkYlutdGBrz8e9yQnQIvfx455qP93nJ5BtNPZYbxibiHBKLM Ny4pl34NdVwvlGXbxY01jLQf4O/J36x0vt3hWAxfygwD/DuLQACy+DQf+51X7ByT IElLhD4kpBSXAu4hktiOntCHrJIxhUQEdckmkNELwlyyuAM3HrjP3B/AS/bqgrRH sUM5VJ91aBZ+aKBm86U1Js1Y6shD4sZpWj3wNoVaOypiizPeesNKHz1rN4hRSTX+ IXDMliyZBk8VqhYQfF+BkeQXgUabYYeVKFRcRVm2MvjfihFBZdgPLbTLnMnByGCb waw4bWQG14vJOAdeUj4sOCsnVo1o9U9WIQ== -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:00 2025 by rpki-client