$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa File: ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa (raw, json) Hash identifier: e3NAyzYUTwPop06soEQ9lWHTEUzo/kzh/kYFn3I2620= Subject key identifier: 71:43:49:09:CC:FA:BC:C9:5F:8C:C1:29:EF:54:F9:5E:F3:9B:12:69 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584AEF8BCD94F775DADA0FF1C780 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 400556 IP address blocks: 2602:f71e:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:cd:94:f7:75:da:da:0f:f1:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=2389eb10-4c7c-48d8-9514-a68291124a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:d4:2b:13:74:c2:e1:f2:f5:6a:28:f4:6f: 20:c0:df:11:54:9f:d9:a6:ab:25:e6:69:8b:8d:5d: 92:d2:4a:27:df:ee:ae:cf:a8:d1:b2:f8:42:fb:15: fe:f0:05:a5:db:cf:20:ec:b1:f0:23:ce:ee:bc:f1: 50:6c:5d:94:8c:7f:d5:b5:23:db:90:ac:f3:bc:be: aa:e9:f3:e6:7c:ff:15:c7:18:98:48:44:c6:cd:ca: 30:bf:a8:93:1f:69:78:35:4e:aa:04:6b:6f:09:59: e3:62:6a:47:c1:61:3b:5a:67:6a:0c:be:6f:47:d1: e4:d2:fa:6d:44:5c:2e:0b:c3:11:52:98:f8:36:63: a4:bf:85:9a:27:b7:97:f2:7e:2d:62:5b:55:1d:c9: 87:47:46:94:d7:1d:22:86:bf:a7:cc:d3:cc:7f:d6: 21:7d:a9:40:d7:2f:b9:9e:aa:16:ec:cd:0c:2a:6f: 8c:2a:c6:87:a6:24:56:1f:8d:0b:8f:27:07:15:a1: ae:dd:e0:96:f8:7f:ea:87:33:fe:9b:71:95:99:28: c2:87:cb:a2:9d:5f:55:25:80:21:9a:26:a2:9b:38: d2:7b:c3:24:0f:98:c6:49:eb:0a:ea:59:99:fe:ed: 3f:15:d5:1f:b4:06:7c:a1:b4:89:29:3a:17:63:c3: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:43:49:09:CC:FA:BC:C9:5F:8C:C1:29:EF:54:F9:5E:F3:9B:12:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:47:7b:4b:d0:79:e4:9d:32:cd:74:02:1e:83:cb:10:44:e0: 9a:00:dd:03:79:63:f4:83:34:db:7e:b7:3b:d0:4c:fc:29:3a: 52:2a:88:85:33:00:8d:32:2a:9e:1d:3b:80:27:25:aa:7b:b5: b5:9c:a2:6d:2e:54:c3:8b:7c:4d:c5:e9:c9:0a:57:a1:4f:34: 17:42:5a:db:0a:53:d7:d0:26:3c:ed:87:02:ea:c9:3c:a5:7d: cd:c6:11:93:20:d9:c7:0d:13:4c:b0:a4:6b:37:3d:c7:21:73: 52:9c:b6:75:ca:a4:3b:eb:b7:1b:9b:ae:3b:79:6d:98:41:a9: 8f:e4:3e:71:f8:40:f5:21:a1:7c:1c:67:ab:83:ce:35:bc:8c: 76:44:92:7c:2f:8a:dd:89:91:a2:b3:9c:5a:f6:d9:75:bc:70: bb:55:99:b8:ad:9d:4c:ab:ad:89:82:17:14:6e:33:9b:18:a0: 34:19:e3:3e:b5:de:b4:37:37:c8:0d:5e:34:e3:b0:18:78:37: 7b:68:a1:5c:a1:a8:54:44:02:ca:4f:75:c9:5e:88:d4:76:3b: 91:d9:0b:16:76:4b:43:ab:37:27:d0:89:6d:f3:6e:f8:f9:c6: 81:66:bd:83:62:19:46:d2:57:1b:5f:f6:72:64:f3:15:37:51: fd:07:22:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErvi82U93Xa2g/xx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk MjM4OWViMTAtNGM3Yy00OGQ4LTk1MTQtYTY4MjkxMTI0YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU7UKxN0wuHy9Woo9G8gwN8RVJ/Zpqsl5mmL jV2S0kon3+6uz6jRsvhC+xX+8AWl288g7LHwI87uvPFQbF2UjH/VtSPbkKzzvL6q 6fPmfP8VxxiYSETGzcowv6iTH2l4NU6qBGtvCVnjYmpHwWE7WmdqDL5vR9Hk0vpt RFwuC8MRUpj4NmOkv4WaJ7eX8n4tYltVHcmHR0aU1x0ihr+nzNPMf9YhfalA1y+5 nqoW7M0MKm+MKsaHpiRWH40LjycHFaGu3eCW+H/qhzP+m3GVmSjCh8uinV9VJYAh miaimzjSe8MkD5jGSesK6lmZ/u0/FdUftAZ8obSJKToXY8O3MQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHFDSQnM+rzJX4zBKe9U+V7zmxJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvYWMyYmMzYmYtYWRmOC0z MmRlLWFlNGQtMGU1ZWRkZmEwZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3HgBx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAOVHe0vQeeSdMs10Ah6DyxBE4JoA3QN5Y/SDNNt+tzvQTPwpOlIq iIUzAI0yKp4dO4AnJap7tbWcom0uVMOLfE3F6ckKV6FPNBdCWtsKU9fQJjzthwLq yTylfc3GEZMg2ccNE0ywpGs3Pcchc1KctnXKpDvrtxubrjt5bZhBqY/kPnH4QPUh oXwcZ6uDzjW8jHZEknwvit2JkaKznFr22XW8cLtVmbitnUyrrYmCFxRuM5sYoDQZ 4z613rQ3N8gNXjTjsBh4N3tooVyhqFREAspPdcleiNR2O5HZCxZ2S0OrNyfQiW3z bvj5xoFmvYNiGUbSVxtf9nJk8xU3Uf0HIl8= -----END CERTIFICATE-----Generated at Sun Aug 24 00:24:17 2025 by rpki-client