$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa File: 43aa77de-9b48-39e6-802d-8a9a94c7551e.roa (raw, json) Hash identifier: pSOjrWYOh3U8aw6QmVQRtfWyCxcxoMwpC9kHWtXIN8s= Subject key identifier: 7D:9D:9B:DE:98:E8:C0:24:3C:80:F1:21:BC:3F:89:34:D9:0B:3F:86 Certificate issuer: /CN=1a319486-03d5-4fb1-997e-228350330847 Certificate serial: 010D0C9F4328584B3556F0A49F8289B0709D9900 Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 2602:815:3003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f0:a4:9f:82:89:b0:70:9d:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a319486-03d5-4fb1-997e-228350330847 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=8d1130a2-82ce-4a61-953a-39935b4f35fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:8f:b3:e3:2e:b3:57:4e:e5:2d:08:8e:5c: c3:a1:c5:05:5f:ba:9d:e4:af:ca:a2:86:c9:3b:30: 34:cf:77:55:43:22:f3:05:3a:c9:ab:b9:6f:54:f1: 5c:a5:b1:90:11:b7:4d:d1:9f:85:42:21:7d:b7:38: 50:19:e9:62:d9:fe:1d:e8:6b:d0:a7:78:17:b0:32: 58:b8:89:f4:a9:c9:b8:9c:e5:a7:04:b9:c1:11:2f: c8:5c:4d:61:b1:84:fd:50:74:eb:f9:4b:65:e4:96: 6a:26:40:41:d2:fa:2d:67:e1:08:c2:02:30:16:2a: 6a:44:d3:f5:0e:09:f9:da:7e:cc:8a:89:f1:3d:8e: c5:4e:ef:2d:89:91:84:c4:38:9a:f8:06:8f:20:cf: 0a:c8:1f:8b:19:63:13:63:e7:4e:4d:15:d7:a3:fd: 07:a2:3b:86:e7:ae:8e:2d:03:c0:be:02:8e:17:98: 17:bd:e1:1f:24:81:cb:c8:83:27:6c:66:e9:c5:a3: d1:70:fc:73:c2:e0:1e:3d:50:fe:35:f3:8f:3d:af: 95:a0:10:3c:b3:98:a2:9a:b2:78:84:be:1e:32:d9: 8f:92:54:a3:99:73:20:d3:fc:e8:8e:95:20:d2:33: f0:59:41:94:8e:7c:fb:82:6c:6e:7b:18:20:36:68: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9D:9B:DE:98:E8:C0:24:3C:80:F1:21:BC:3F:89:34:D9:0B:3F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl X509v3 Authority Key Identifier: keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer sbgp-ipAddrBlock: critical IPv6: 2602:815:3003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d9:f0:f6:32:fe:f5:77:c1:d5:c9:d6:31:16:ee:01:1b:16: 90:e7:d5:9a:13:6e:90:be:82:e2:eb:16:2b:dd:51:39:e9:30: fd:95:40:2f:08:64:9a:2f:fe:f9:64:06:5e:eb:7e:7b:2a:36: 00:a4:c3:fd:3b:bf:71:f1:46:ad:50:3f:76:a0:2c:e7:f6:d3: bc:bd:0b:ec:f9:04:3b:64:a1:50:f6:ed:7a:bb:91:55:f6:dd: e1:6a:19:01:d9:af:5c:be:fe:fa:9e:70:9e:3d:f1:65:d7:bb: 44:ab:07:c3:83:dc:de:1b:18:8f:bb:b6:d4:ad:7f:43:2f:aa: 3e:05:92:8d:33:17:36:fb:7d:9c:9b:13:39:11:66:0b:ec:59: d7:7e:6b:77:ba:f6:03:da:f2:4e:f3:f5:84:4c:e8:b8:3b:ef: 75:8f:20:2a:3f:99:02:30:f3:34:2c:00:ce:fc:d0:48:e5:e5: 98:c4:cd:fd:b6:5d:c0:2a:4a:57:b4:3a:d5:24:3c:9e:db:52: a8:20:6e:c7:3a:f5:67:7e:08:9d:c9:cb:1c:39:59:b4:0d:9c: 8e:f3:21:85:e6:3d:97:9f:00:ae:87:33:2b:85:ff:be:ca:6f: a7:29:74:b7:76:5c:59:f1:1e:27:40:44:48:03:dc:23:28:b7: d9:50:f4:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs1VvCkn4KJsHCdmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEzMTk0ODYtMDNkNS00ZmIxLTk5N2UtMjI4MzUwMzMw ODQ3MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OGQxMTMwYTItODJjZS00YTYxLTk1M2EtMzk5MzViNGYzNWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp42Ps+Mus1dO5S0IjlzDocUFX7qd5K/KoobJ OzA0z3dVQyLzBTrJq7lvVPFcpbGQEbdN0Z+FQiF9tzhQGeli2f4d6GvQp3gXsDJY uIn0qcm4nOWnBLnBES/IXE1hsYT9UHTr+Utl5JZqJkBB0votZ+EIwgIwFipqRNP1 Dgn52n7MionxPY7FTu8tiZGExDia+AaPIM8KyB+LGWMTY+dOTRXXo/0HojuG566O LQPAvgKOF5gXveEfJIHLyIMnbGbpxaPRcPxzwuAePVD+NfOPPa+VoBA8s5iimrJ4 hL4eMtmPklSjmXMg0/zojpUg0jPwWUGUjnz7gmxuexggNmjzdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH2dm96Y6MAkPIDxIbw/iTTZCz+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMx OTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgzNTAzMzA4NDcvNDNhYTc3ZGUtOWI0OC0z OWU2LTgwMmQtOGE5YTk0Yzc1NTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWEzMTk0ODYtMDNkNS00ZmIxLTk5 N2UtMjI4MzUwMzMwODQ3LzFhMzE5NDg2LTAzZDUtNGZiMS05OTdlLTIyODM1MDMz MDg0Ny5jcmwwHwYDVR0jBBgwFoAUojoUY2Szy8/8gGpP64Xxl3Adxp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMxOTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgz NTAzMzA4NDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFTAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD7Z8PYy/vV3wdXJ1jEW7gEbFpDn1ZoTbpC+guLrFivdUTnpMP2V QC8IZJov/vlkBl7rfnsqNgCkw/07v3HxRq1QP3agLOf207y9C+z5BDtkoVD27Xq7 kVX23eFqGQHZr1y+/vqecJ498WXXu0SrB8OD3N4bGI+7ttStf0Mvqj4Fko0zFzb7 fZybEzkRZgvsWdd+a3e69gPa8k7z9YRM6Lg773WPICo/mQIw8zQsAM780Ejl5ZjE zf22XcAqSle0OtUkPJ7bUqggbsc69Wd+CJ3Jyxw5WbQNnI7zIYXmPZefAK6HMyuF /77Kb6cpdLd2XFnxHidAREgD3CMot9lQ9Bk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:31 2025 by rpki-client