$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa File: 99072b6c-3150-3cc4-8cca-40f9b7524062.roa (raw, json) Hash identifier: 03U2PRCZEzvgg0539U2zEUGcCskWvZW9m6GTXHb4oDg= Subject key identifier: 77:B3:68:2B:62:8B:F0:D2:AB:FF:39:D4:7E:E1:95:F1:52:92:16:EA Certificate issuer: /CN=cc9bfce1-5e74-4c92-954d-8728969d8835 Certificate serial: 010D0C9F4328584B38218EBADD1E4835EBF2BD00 Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 51999 IP address blocks: 2602:fbe9::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:8e:ba:dd:1e:48:35:eb:f2:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=5a29f0bf-4538-4142-88fb-c05e2a94379a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:7b:30:1b:45:6c:29:13:95:c3:74:6d:34: de:c5:a6:2b:4a:5a:14:98:45:a2:77:9b:51:4f:93: 36:f3:0c:43:32:27:99:db:1c:35:1c:2c:bc:8a:3a: 5b:f7:8e:70:28:92:73:aa:47:ae:01:97:e9:8e:35: f9:8a:03:b2:6e:2d:5a:92:8f:11:7d:51:92:29:eb: 20:67:39:51:b4:44:67:9e:50:43:62:48:8d:e7:fd: a9:76:b8:bc:dd:c6:92:f9:1e:3a:d4:52:de:b8:3e: 3a:33:7e:41:be:48:1d:b4:c6:7c:69:5b:45:92:1e: c3:ce:2c:c9:37:74:0e:37:a0:99:bc:66:7b:de:ae: 42:35:1e:3d:60:36:10:44:cf:40:08:1d:82:31:f2: bd:1f:24:ad:d5:43:c5:36:9f:31:83:cb:35:d1:01: 44:70:43:3c:dd:b0:7b:d2:a2:59:18:88:03:c8:04: 18:bd:b9:ab:01:bd:b7:df:7a:1e:04:20:cc:6e:a1: 43:0b:fd:43:0c:c9:9f:35:c1:0a:51:f2:b4:cc:cf: 94:a9:b6:d4:16:22:d6:81:09:0c:de:83:c3:3e:23: 72:c7:52:0d:0d:51:fb:a2:4e:5e:1e:27:95:86:69: a2:44:89:2f:a2:84:22:00:36:26:d4:11:85:39:c1: 1b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B3:68:2B:62:8B:F0:D2:AB:FF:39:D4:7E:E1:95:F1:52:92:16:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl X509v3 Authority Key Identifier: keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbe9::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b8:64:68:85:42:56:2d:d4:0f:6d:00:bd:9c:da:2f:77:33: 4e:63:7a:a6:e9:c1:31:c0:27:c2:11:23:00:f7:52:cd:09:98: f4:8e:e3:0d:35:c1:14:86:7d:71:e3:82:4c:5a:08:2b:34:bc: 50:34:19:ad:c6:04:64:0d:82:f0:b0:00:3e:d4:c9:b4:ff:42: cf:6a:90:69:4b:7e:29:38:b1:46:fa:a7:18:25:51:96:93:17: aa:c9:ce:eb:4d:7f:ed:a1:50:c0:9f:f6:de:f0:93:4b:75:23: bf:1b:d7:16:88:ca:63:29:e1:04:c7:ef:ed:27:b2:01:91:80: 97:59:a0:e6:c9:e2:59:54:ff:a2:83:8f:01:f9:9f:6a:90:49: d2:43:98:51:23:7a:69:65:c0:06:c8:5e:5b:4e:a1:2c:28:7b: 62:9d:0d:61:c7:85:b3:6e:7c:6c:e9:f6:2e:43:5b:49:ef:a9: d4:f6:2e:18:55:34:c2:3f:77:ce:e8:64:85:9c:4d:ec:8c:34: 55:7b:1f:81:b5:8a:14:27:de:e3:4e:0c:36:89:db:23:06:cf: 1b:7e:b6:72:96:af:09:34:a7:a1:5b:3e:f2:72:a6:20:a2:3f: 4c:6f:97:88:db:db:a1:c1:ea:fe:4b:c6:ca:b2:02:72:4d:d2: 32:8b:9d:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs4IY663R5INevyvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5YmZjZTEtNWU3NC00YzkyLTk1NGQtODcyODk2OWQ4 ODM1MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk NWEyOWYwYmYtNDUzOC00MTQyLTg4ZmItYzA1ZTJhOTQzNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfN7MBtFbCkTlcN0bTTexaYrSloUmEWid5tR T5M28wxDMieZ2xw1HCy8ijpb945wKJJzqkeuAZfpjjX5igOybi1ako8RfVGSKesg ZzlRtERnnlBDYkiN5/2pdri83caS+R461FLeuD46M35BvkgdtMZ8aVtFkh7DzizJ N3QON6CZvGZ73q5CNR49YDYQRM9ACB2CMfK9HySt1UPFNp8xg8s10QFEcEM83bB7 0qJZGIgDyAQYvbmrAb2333oeBCDMbqFDC/1DDMmfNcEKUfK0zM+UqbbUFiLWgQkM 3oPDPiNyx1INDVH7ok5eHieVhmmiRIkvooQiADYm1BGFOcEbRwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHezaCtii/DSq/851H7hlfFSkhbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYzli ZmNlMS01ZTc0LTRjOTItOTU0ZC04NzI4OTY5ZDg4MzUvOTkwNzJiNmMtMzE1MC0z Y2M0LThjY2EtNDBmOWI3NTI0MDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2M5YmZjZTEtNWU3NC00YzkyLTk1 NGQtODcyODk2OWQ4ODM1L2NjOWJmY2UxLTVlNzQtNGM5Mi05NTRkLTg3Mjg5Njlk ODgzNS5jcmwwHwYDVR0jBBgwFoAUWSOVY38ODRqcqJwYgOE4O8qtc+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYzliZmNlMS01ZTc0LTRjOTItOTU0ZC04NzI4 OTY5ZDg4MzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL76QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALLhkaIVCVi3UD20AvZzaL3czTmN6punBMcAnwhEjAPdSzQmY9I7j DTXBFIZ9ceOCTFoIKzS8UDQZrcYEZA2C8LAAPtTJtP9Cz2qQaUt+KTixRvqnGCVR lpMXqsnO601/7aFQwJ/23vCTS3UjvxvXFojKYynhBMfv7SeyAZGAl1mg5sniWVT/ ooOPAfmfapBJ0kOYUSN6aWXABsheW06hLCh7Yp0NYceFs258bOn2LkNbSe+p1PYu GFU0wj93zuhkhZxN7Iw0VXsfgbWKFCfe404MNonbIwbPG362cpavCTSnoVs+8nKm IKI/TG+XiNvbocHq/kvGyrICck3SMoudFA== -----END CERTIFICATE-----Generated at Mon Oct 20 05:33:49 2025 by rpki-client