$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f91c0a63-030d-37c7-a148-7c9cce96e5b2.roa File: f91c0a63-030d-37c7-a148-7c9cce96e5b2.roa (raw, json) Hash identifier: yHMD8DtRuGnjqWc+lPpPySeB92IggtiWZwyhcoW56XU= Subject key identifier: 95:A4:90:AC:1F:62:3F:19:24:0D:8C:FE:3F:03:94:61:E9:BA:5D:EE Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Certificate serial: 010D0C9F4328584ADD667B0DCA37A963E608A980 Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f91c0a63-030d-37c7-a148-7c9cce96e5b2.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 64289 IP address blocks: 2602:2ea:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7b:0d:ca:37:a9:63:e6:08:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=78b2da70-0be4-4e71-aed5-a610a32a0639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:02:01:72:27:c4:68:39:05:30:59:74:70: ff:70:67:42:c0:e3:2c:ef:7e:3a:67:a5:0e:e9:ef: 76:38:2d:82:6a:77:68:58:41:e2:b0:35:67:b3:84: ba:9e:39:be:2a:d5:2e:45:39:8a:37:93:b9:43:45: e5:aa:96:99:e3:cc:46:7c:03:96:95:49:58:86:24: a6:75:0f:88:94:54:71:ef:4e:80:17:22:1b:e3:c5: ec:1e:6c:ab:9c:ce:3c:b7:1a:da:cc:8f:ed:cf:2d: 01:9e:e9:a0:bc:25:3e:b3:bc:47:3c:eb:4d:79:92: 59:7c:6a:cb:b0:fa:d6:3e:4f:4f:ec:c5:f0:2d:74: 52:fb:0d:16:25:85:92:78:14:00:1e:da:c8:6b:78: fa:f1:aa:83:8a:28:01:d0:df:e5:6e:20:ee:eb:00: e3:d1:98:fb:6f:2a:65:96:89:93:a3:b6:33:b5:0d: 42:fc:34:58:01:36:78:a5:a9:49:7f:a8:fd:5e:04: a2:5e:61:d2:c5:44:af:d9:76:f0:92:27:0e:71:b9: 17:8f:5c:a8:77:b1:96:3f:61:eb:f8:db:a2:59:80: 79:bc:cc:13:cd:03:fc:0c:9e:01:55:7d:e0:c8:32: 50:05:71:b1:09:a9:54:b3:1d:7e:66:45:6f:a9:a8: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A4:90:AC:1F:62:3F:19:24:0D:8C:FE:3F:03:94:61:E9:BA:5D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f91c0a63-030d-37c7-a148-7c9cce96e5b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl X509v3 Authority Key Identifier: keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer sbgp-ipAddrBlock: critical IPv6: 2602:2ea:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:64:65:8c:fc:5d:b2:30:ef:62:d5:79:97:85:5f:c8:71:7f: f6:5b:46:c2:d8:ec:fb:c7:c5:4f:e1:17:b4:79:2e:ca:42:c5: 9a:21:ad:de:43:b1:73:3e:6f:31:c5:7b:fd:53:c9:1f:ac:13: 64:d7:f0:bf:79:79:a0:b8:fa:e9:fd:43:b6:d8:d9:80:e6:c7: a2:a6:42:08:78:01:21:be:0a:65:23:96:40:69:7d:70:5b:68: ef:99:cb:db:c6:42:89:12:3e:09:08:bc:d3:2b:fa:b8:e3:6d: 26:08:c4:0e:e9:5f:ab:bc:4d:1b:ab:e6:32:e8:be:0e:b7:4d: 85:0b:00:79:b1:24:44:aa:65:6c:13:2a:05:49:a4:01:09:27: 2f:21:7e:87:e0:cf:45:56:97:cf:4f:4d:4e:93:56:79:19:38: 56:af:dd:4a:52:69:15:bf:03:f4:2b:ec:37:cd:de:50:74:36: 31:20:e3:ea:03:1e:a1:88:d4:5e:14:73:8e:1d:fa:b4:9d:4a: c9:a3:88:f9:42:0d:73:54:64:1e:3e:e8:43:1c:0b:ca:4c:08: ab:11:c8:6d:b6:50:75:42:1a:85:c0:d6:e2:c4:80:f4:2b:f5: f9:33:8e:ff:f9:d5:e0:80:0f:70:c6:7b:07:3e:cc:4b:0a:f4: 67:4c:97:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErdZnsNyjepY+YIqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk MDgwMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NzhiMmRhNzAtMGJlNC00ZTcxLWFlZDUtYTYxMGEzMmEwNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4UCAXInxGg5BTBZdHD/cGdCwOMs7346Z6UO 6e92OC2CandoWEHisDVns4S6njm+KtUuRTmKN5O5Q0XlqpaZ48xGfAOWlUlYhiSm dQ+IlFRx706AFyIb48XsHmyrnM48txrazI/tzy0BnumgvCU+s7xHPOtNeZJZfGrL sPrWPk9P7MXwLXRS+w0WJYWSeBQAHtrIa3j68aqDiigB0N/lbiDu6wDj0Zj7bypl lomTo7YztQ1C/DRYATZ4palJf6j9XgSiXmHSxUSv2XbwkicOcbkXj1yod7GWP2Hr +NuiWYB5vMwTzQP8DJ4BVX3gyDJQBXGxCalUsx1+ZkVvqagchQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJWkkKwfYj8ZJA2M/j8DlGHpul3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvZjkxYzBhNjMtMDMwZC0z N2M3LWExNDgtN2M5Y2NlOTZlNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy MDlmMmQwODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC6gAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHlkZYz8XbIw72LVeZeFX8hxf/ZbRsLY7PvHxU/hF7R5LspCxZoh rd5DsXM+bzHFe/1TyR+sE2TX8L95eaC4+un9Q7bY2YDmx6KmQgh4ASG+CmUjlkBp fXBbaO+Zy9vGQokSPgkIvNMr+rjjbSYIxA7pX6u8TRur5jLovg63TYULAHmxJESq ZWwTKgVJpAEJJy8hfofgz0VWl89PTU6TVnkZOFav3UpSaRW/A/Qr7DfN3lB0NjEg 4+oDHqGI1F4Uc44d+rSdSsmjiPlCDXNUZB4+6EMcC8pMCKsRyG22UHVCGoXA1uLE gPQr9fkzjv/51eCAD3DGewc+zEsK9GdMl0E= -----END CERTIFICATE-----Generated at Sat Aug 23 22:52:04 2025 by rpki-client