$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/736ca11f-e5e6-33a5-b07c-017004610721.roa File: 736ca11f-e5e6-33a5-b07c-017004610721.roa (raw, json) Hash identifier: FuRkDQWeZrHOVzPtvoXg7Hf+QfzaogPR60vJU8iQkmU= Subject key identifier: 68:19:9A:87:57:BC:6D:1E:D5:EA:0C:E1:9E:D7:BE:7E:B8:15:81:2F Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584B47A2448AFD3120B5789CCB00 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/736ca11f-e5e6-33a5-b07c-017004610721.roa Signing time: Mon 22 Sep 2025 14:16:05 +0000 ROA not before: Mon 22 Sep 2025 14:16:05 +0000 ROA not after: Sun 21 Dec 2025 15:16:05 +0000 asID: 38047 IP address blocks: 2602:f83b:cd68::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:a2:44:8a:fd:31:20:b5:78:9c:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Sep 22 14:16:05 2025 GMT Not After : Dec 21 15:16:05 2025 GMT Subject: CN=785d68f9-61d9-44e0-b225-7ee25054b8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:24:b1:ba:07:70:71:42:53:01:3c:af:55: c6:e0:bb:bf:f6:9e:ff:1d:87:1e:35:08:60:90:1d: a5:ff:41:17:d1:6c:d7:3e:f2:04:35:b1:84:8a:b0: 06:9d:06:84:df:d6:da:71:f8:0a:a6:25:0c:3b:cf: 48:61:98:53:da:6c:9f:af:9b:f8:e6:96:3b:c3:a3: a2:34:8d:fb:a2:5b:82:d1:2d:70:f9:ec:b8:f8:1a: 69:5f:de:37:36:a5:29:e1:e8:18:60:bb:c7:ad:22: b3:48:c9:c5:e8:d1:ae:1e:4a:df:59:b6:eb:b8:68: c9:c4:4d:77:b0:75:4f:4c:c1:9f:4b:a3:62:39:e5: 64:cc:bb:7a:de:50:bd:8a:af:f3:53:94:47:5a:05: c6:89:d0:15:38:7e:85:cb:da:0c:68:57:a9:eb:29: c2:42:df:bc:f9:65:5d:29:b0:b0:4f:92:5d:98:c1: 8e:79:98:2d:99:c5:80:bb:ee:f2:06:e7:92:84:05: f3:17:cd:9e:d4:e5:00:9b:57:3e:c7:76:61:3f:35: 9f:44:ee:a5:f4:a1:60:e4:0e:f6:cd:4e:d2:fb:1d: c9:ab:a5:9c:a8:4e:e3:df:04:bb:aa:71:39:1f:ac: a0:25:a0:cc:38:08:20:e3:e1:2d:6b:a4:54:7e:96: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:19:9A:87:57:BC:6D:1E:D5:EA:0C:E1:9E:D7:BE:7E:B8:15:81:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/736ca11f-e5e6-33a5-b07c-017004610721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv6: 2602:f83b:cd68::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:06:81:e2:ac:61:68:3f:51:2f:62:b5:8a:26:bf:3e:4b:8a: 0c:7b:68:61:da:03:28:63:79:3b:2f:26:f6:17:31:f3:4b:be: 2b:d1:85:e7:2a:3d:5f:b7:eb:5b:6d:bd:0f:99:2a:74:96:16: 70:4a:02:88:92:89:7d:45:9d:0d:68:1f:bb:00:55:eb:cf:e9: 0e:86:f0:d3:f9:7b:56:9c:86:05:d0:bc:82:b4:01:f1:b0:e4: b5:a9:91:0c:22:66:12:08:c3:de:4b:b3:d3:ed:0b:1f:f6:90: db:59:21:7e:bc:53:88:ca:18:50:37:30:53:2b:06:25:de:31: 1d:23:1c:f8:81:ea:50:9d:a6:82:00:22:4d:89:64:e2:84:c0: 1c:b5:3c:1d:4e:ee:8b:4c:81:f5:1c:80:a6:f9:0d:00:68:42: 73:83:32:6e:e1:f8:e7:a4:ef:16:f9:bc:ef:92:01:50:f5:d3: e1:65:c0:9c:a7:25:08:18:b9:9e:84:4f:91:13:6c:a5:f3:8d: 25:eb:db:de:61:ec:96:34:61:13:70:27:87:52:13:27:ad:dd: f0:4b:89:c4:f7:f1:3f:ab:e4:74:12:b7:1b:0a:23:c4:33:fa: dd:bc:25:67:b0:c2:8f:34:61:33:1c:2d:c3:2c:36:f1:2d:a7: 2a:e2:54:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHokSK/TEgtXicywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MDkyMjE0MTYwNVoXDTI1MTIyMTE1MTYwNVowLzEtMCsGA1UEAxMk Nzg1ZDY4ZjktNjFkOS00NGUwLWIyMjUtN2VlMjUwNTRiOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPMksboHcHFCUwE8r1XG4Lu/9p7/HYceNQhg kB2l/0EX0WzXPvIENbGEirAGnQaE39bacfgKpiUMO89IYZhT2myfr5v45pY7w6Oi NI37oluC0S1w+ey4+BppX943NqUp4egYYLvHrSKzSMnF6NGuHkrfWbbruGjJxE13 sHVPTMGfS6NiOeVkzLt63lC9iq/zU5RHWgXGidAVOH6Fy9oMaFep6ynCQt+8+WVd KbCwT5JdmMGOeZgtmcWAu+7yBueShAXzF82e1OUAm1c+x3ZhPzWfRO6l9KFg5A72 zU7S+x3Jq6WcqE7j3wS7qnE5H6ygJaDMOAgg4+Eta6RUfpZrywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGgZmodXvG0e1eoM4Z7Xvn64FYEvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvNzM2Y2ExMWYtZTVlNi0z M2E1LWIwN2MtMDE3MDA0NjEwNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4O81o MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEgGgeKsYWg/US9itYomvz5Ligx7aGHaAyhjeTsvJvYXMfNLvivR hecqPV+361ttvQ+ZKnSWFnBKAoiSiX1FnQ1oH7sAVevP6Q6G8NP5e1achgXQvIK0 AfGw5LWpkQwiZhIIw95Ls9PtCx/2kNtZIX68U4jKGFA3MFMrBiXeMR0jHPiB6lCd poIAIk2JZOKEwBy1PB1O7otMgfUcgKb5DQBoQnODMm7h+Oek7xb5vO+SAVD10+Fl wJynJQgYuZ6ET5ETbKXzjSXr295h7JY0YRNwJ4dSEyet3fBLicT38T+r5HQStxsK I8Qz+t28JWewwo80YTMcLcMsNvEtpyriVNI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:14:49 2025 by rpki-client