$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/87d71f1f-6031-3c07-a5be-87011997fac7.roa File: 87d71f1f-6031-3c07-a5be-87011997fac7.roa (raw, json) Hash identifier: 2iN58G3AZvVlOrxEKyf5r6DukcCF7lIPW8iPw4fx9YA= Subject key identifier: 35:5B:8A:4F:E8:7E:85:70:3C:11:D0:50:40:8D:AC:0F:80:42:47:1A Certificate issuer: /CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Certificate serial: 010D0C9F4328584B41E7179DACCAB93A482E3A00 Authority key identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/87d71f1f-6031-3c07-a5be-87011997fac7.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 17050 IP address blocks: 2602:817:9000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:17:9d:ac:ca:b9:3a:48:2e:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=c346aba5-bbc5-4af3-90af-81c62b179c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:18:84:5d:31:8a:64:04:65:0b:0b:90:42: c8:74:eb:c0:78:99:13:da:a1:00:61:7e:9a:9d:1a: 96:60:0c:1d:6a:ac:dc:65:fc:44:2c:e6:db:d2:e8: 27:c6:54:92:9b:da:fd:6c:e1:1d:7f:d6:b8:8d:23: 17:28:20:98:9c:70:1d:f0:3b:db:99:4e:6d:33:88: c2:e5:7d:ed:21:5c:39:df:58:bc:52:79:4b:17:d6: 6b:33:68:bb:9a:5c:5e:48:7f:0f:e6:7f:17:14:61: 68:15:63:20:b4:a3:06:a7:d4:3e:35:3a:38:88:a4: 87:48:6a:4e:5d:f1:4e:d4:3f:31:6a:92:40:7f:87: ee:62:37:c0:34:e6:ee:b0:d1:aa:c1:5c:e2:23:92: a6:c2:de:a2:28:91:62:6b:d0:60:1b:c2:5e:fb:86: c0:29:a9:de:fd:5a:05:37:3f:1c:ab:d4:f2:13:22: 67:13:05:25:55:d5:da:94:9d:ca:a4:f3:3c:c8:09: 7e:61:55:86:08:2c:cd:d2:5c:79:ed:51:c1:4b:fd: d8:a9:ea:ae:33:36:a9:fe:10:9d:df:12:72:a2:02: 3c:45:84:b7:8a:0e:c0:fd:c6:9e:bd:96:f9:61:16: 3d:22:10:9d:3a:c7:0c:b9:2a:f1:64:66:ee:6e:1f: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5B:8A:4F:E8:7E:85:70:3C:11:D0:50:40:8D:AC:0F:80:42:47:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/87d71f1f-6031-3c07-a5be-87011997fac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl X509v3 Authority Key Identifier: keyid:28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:7b:2d:b1:79:37:b0:19:4a:66:81:b1:48:82:e3:16:f5:7a: 27:e1:2d:68:94:8e:07:85:da:ee:e3:13:54:ef:f9:69:38:3f: c9:bb:5a:72:76:13:0c:32:32:b9:4e:10:bf:e9:6a:61:b4:20: 4e:bf:cf:56:f4:21:7c:d3:c3:47:91:e1:12:40:1c:e5:cf:86: a2:53:ae:4e:0c:45:76:08:c5:f2:8a:68:a7:cd:56:bd:cd:ff: 18:a4:83:25:d6:c7:7c:3f:3d:e1:b3:b8:07:a7:ad:ed:3c:55: d1:15:53:42:18:71:1e:37:73:47:06:65:0e:92:8b:95:b7:3c: a7:50:8a:3a:99:71:a3:9e:bd:52:bc:96:29:75:dd:f3:8f:83: b6:81:48:e1:03:e2:17:e9:6c:5d:7c:2c:55:94:2e:6c:16:72: b3:19:da:bf:24:66:fc:63:01:32:ca:51:dc:2b:cc:8a:8c:0c: de:96:11:4b:53:d0:53:24:82:2f:b1:09:9c:a7:d5:62:04:76: 33:a2:bd:a3:05:87:be:28:03:41:12:9f:31:d8:50:05:b2:10: 04:ab:cb:1c:65:37:64:08:65:f5:57:ce:4d:d5:d1:f1:53:59: 1f:36:ef:0a:16:6e:0c:b1:e9:b4:fa:29:19:46:2c:5f:85:5b: f0:02:28:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtB5xedrMq5OkguOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIwYzRjMzgtYWJjMy00ZmFjLThhNzYtNjFhOTU2MGEy M2EzMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YzM0NmFiYTUtYmJjNS00YWYzLTkwYWYtODFjNjJiMTc5YzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4cYhF0ximQEZQsLkELIdOvAeJkT2qEAYX6a nRqWYAwdaqzcZfxELObb0ugnxlSSm9r9bOEdf9a4jSMXKCCYnHAd8DvbmU5tM4jC 5X3tIVw531i8UnlLF9ZrM2i7mlxeSH8P5n8XFGFoFWMgtKMGp9Q+NTo4iKSHSGpO XfFO1D8xapJAf4fuYjfANObusNGqwVziI5Kmwt6iKJFia9BgG8Je+4bAKane/VoF Nz8cq9TyEyJnEwUlVdXalJ3KpPM8yAl+YVWGCCzN0lx57VHBS/3YqequMzap/hCd 3xJyogI8RYS3ig7A/caevZb5YRY9IhCdOscMuSrxZGbubh+IpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDVbik/ofoVwPBHQUECNrA+AQkcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjBj NGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5NTYwYTIzYTMvODdkNzFmMWYtNjAzMS0z YzA3LWE1YmUtODcwMTE5OTdmYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDIwYzRjMzgtYWJjMy00ZmFjLThh NzYtNjFhOTU2MGEyM2EzL2QyMGM0YzM4LWFiYzMtNGZhYy04YTc2LTYxYTk1NjBh MjNhMy5jcmwwHwYDVR0jBBgwFoAUKAlAYyoyOC69jGbVGtQMXr5xFGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjBjNGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5 NTYwYTIzYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIF5AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHV7LbF5N7AZSmaBsUiC4xb1eifhLWiUjgeF2u7jE1Tv+Wk4P8m7 WnJ2EwwyMrlOEL/pamG0IE6/z1b0IXzTw0eR4RJAHOXPhqJTrk4MRXYIxfKKaKfN Vr3N/xikgyXWx3w/PeGzuAenre08VdEVU0IYcR43c0cGZQ6Si5W3PKdQijqZcaOe vVK8lil13fOPg7aBSOED4hfpbF18LFWULmwWcrMZ2r8kZvxjATLKUdwrzIqMDN6W EUtT0FMkgi+xCZyn1WIEdjOivaMFh74oA0ESnzHYUAWyEASryxxlN2QIZfVXzk3V 0fFTWR827woWbgyx6bT6KRlGLF+FW/ACKLw= -----END CERTIFICATE-----Generated at Tue Oct 21 17:59:02 2025 by rpki-client