$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3365ed12-aaa6-34be-82d4-33f987b22502.roa File: 3365ed12-aaa6-34be-82d4-33f987b22502.roa (raw, json) Hash identifier: pV2IswTThF9OTCC2lzbmscL6L2ofFmuCeXb7qdQtN8k= Subject key identifier: F8:3F:95:14:62:3F:44:29:D6:AC:81:E5:82:B2:11:3A:74:4C:61:80 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584B5C6CB30BE0C52188861C2E60 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3365ed12-aaa6-34be-82d4-33f987b22502.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 214809 IP address blocks: 2602:f71e:ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b3:0b:e0:c5:21:88:86:1c:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=c6b2a764-f6aa-4289-8a0b-e68cb5fccead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:e3:8b:62:38:52:0b:47:a3:bd:fd:62:2c: bb:77:9a:0b:37:37:8e:27:96:e3:9b:a5:3d:43:1d: 03:e3:1f:1a:09:55:ed:52:dc:10:5f:fe:19:82:b3: 60:2c:d3:1d:40:4b:d9:2f:55:d1:4b:49:2c:06:8a: e0:e4:f4:4c:b5:cd:46:90:96:24:53:52:02:58:62: 2b:a1:86:76:09:fb:80:20:f3:8c:d2:c6:78:1e:f3: 91:6f:12:de:cf:94:cb:93:67:d0:bb:65:c3:85:b2: ce:91:56:bd:3e:c1:15:40:fb:42:9a:0d:1a:38:ae: f2:d5:a0:f5:d8:fc:08:b2:51:5b:5b:59:a8:83:fa: ba:32:17:1c:4a:1b:95:e0:60:db:90:b3:d3:b6:cd: 9d:6b:86:e8:54:e6:67:1c:cb:e9:e5:a7:24:04:b6: b7:0b:a5:ba:7b:33:eb:9a:c8:97:87:a9:d9:e8:cb: 62:4e:e2:6d:03:5c:66:4b:06:3b:03:c6:dd:7d:0c: 45:81:54:3b:ab:0d:41:c8:1e:f8:e8:7f:c5:d7:2e: 0a:13:61:45:b5:30:c5:b8:6f:7c:0b:98:fd:0c:e2: 3a:13:29:bc:cf:b3:b8:c0:e2:47:63:16:9d:9a:26: 88:0e:51:20:2f:30:1c:a7:5c:d4:7b:f6:d9:25:bf: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3F:95:14:62:3F:44:29:D6:AC:81:E5:82:B2:11:3A:74:4C:61:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3365ed12-aaa6-34be-82d4-33f987b22502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e:ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:80:3c:d2:9e:54:4a:bd:47:22:b4:05:c3:aa:e3:01:f9:e0: f9:65:99:9f:11:0d:6e:2f:a6:0d:b2:b9:05:c8:11:1c:d9:2c: 79:d5:7f:07:e6:b1:7e:63:43:d9:55:3a:21:16:1f:b0:4a:23: 9e:93:c1:bc:59:d6:5a:56:5f:38:23:f5:cc:7e:03:38:2f:c2: c5:29:2e:ab:7e:15:d9:54:04:38:2b:22:1d:a7:7e:6d:ad:b7: 98:fe:ae:4b:05:42:13:ea:fa:f0:78:fa:48:72:32:08:e1:a9: 47:62:d2:d5:6a:29:c6:2b:98:81:e7:98:83:4f:7a:e3:fb:6d: 85:91:14:c2:8c:42:36:31:8d:34:40:06:4f:4a:a3:99:57:3f: 66:0f:f1:4f:e0:22:97:31:a8:6f:96:66:87:3b:44:e7:f9:d8: 0b:d2:25:96:b9:ca:77:5a:b9:5d:26:b7:7d:86:43:8b:60:f9: a9:08:5b:64:8a:1d:7e:8d:a5:79:52:cf:c3:ea:e4:2f:57:9c: ed:54:e7:54:89:fd:47:f3:00:02:3e:e9:a8:5b:c3:8b:52:22: f3:7b:f7:b8:6a:09:02:d8:15:a1:fd:11:ba:31:a3:66:51:f2: 4a:57:fe:92:06:c9:7c:45:bc:58:7e:d2:a0:b8:b9:8f:ad:5b: 15:58:23:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtcbLML4MUhiIYcLmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YzZiMmE3NjQtZjZhYS00Mjg5LThhMGItZTY4Y2I1ZmNjZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrzji2I4UgtHo739Yiy7d5oLNzeOJ5bjm6U9 Qx0D4x8aCVXtUtwQX/4ZgrNgLNMdQEvZL1XRS0ksBorg5PRMtc1GkJYkU1ICWGIr oYZ2CfuAIPOM0sZ4HvORbxLez5TLk2fQu2XDhbLOkVa9PsEVQPtCmg0aOK7y1aD1 2PwIslFbW1mog/q6MhccShuV4GDbkLPTts2da4boVOZnHMvp5ackBLa3C6W6ezPr msiXh6nZ6MtiTuJtA1xmSwY7A8bdfQxFgVQ7qw1ByB746H/F1y4KE2FFtTDFuG98 C5j9DOI6Eym8z7O4wOJHYxadmiaIDlEgLzAcp1zUe/bZJb+VoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPg/lRRiP0Qp1qyB5YKyETp0TGGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvMzM2NWVkMTItYWFhNi0z NGJlLTgyZDQtMzNmOTg3YjIyNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3HgD/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMGAPNKeVEq9RyK0BcOq4wH54PllmZ8RDW4vpg2yuQXIERzZLHnV fwfmsX5jQ9lVOiEWH7BKI56TwbxZ1lpWXzgj9cx+AzgvwsUpLqt+FdlUBDgrIh2n fm2tt5j+rksFQhPq+vB4+khyMgjhqUdi0tVqKcYrmIHnmINPeuP7bYWRFMKMQjYx jTRABk9Ko5lXP2YP8U/gIpcxqG+WZoc7ROf52AvSJZa5yndauV0mt32GQ4tg+akI W2SKHX6NpXlSz8Pq5C9XnO1U51SJ/UfzAAI+6ahbw4tSIvN797hqCQLYFaH9Ebox o2ZR8kpX/pIGyXxFvFh+0qC4uY+tWxVYIyo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:29:42 2025 by rpki-client