$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fa7a3d4c-134e-396d-a7c6-30e98a4b6c4a.roa File: fa7a3d4c-134e-396d-a7c6-30e98a4b6c4a.roa (raw, json) Hash identifier: XVi3PSslO56dd0/4C/2vFwOkwlp5PzuTvK9UmgJJT2w= Subject key identifier: AD:96:1C:B9:3F:EA:3C:45:D4:92:B1:EB:60:89:D7:60:E3:C3:AD:08 Certificate issuer: /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae Certificate serial: 010D0C9F4328584AD30B8C76D4BCC284FA33A480 Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fa7a3d4c-134e-396d-a7c6-30e98a4b6c4a.roa Signing time: Mon 11 Aug 2025 19:59:36 +0000 ROA not before: Mon 11 Aug 2025 19:59:36 +0000 ROA not after: Sun 09 Nov 2025 20:59:36 +0000 asID: 212071 IP address blocks: 2602:f9bd:f03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:0b:8c:76:d4:bc:c2:84:fa:33:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae Validity Not Before: Aug 11 19:59:36 2025 GMT Not After : Nov 9 20:59:36 2025 GMT Subject: CN=ef780e41-566f-45d2-a427-b9b821d34f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:1a:a9:3b:fd:71:a6:d1:f8:46:09:45:ba: 11:84:76:f2:38:89:a1:a9:fc:a3:e3:4e:72:bb:27: 71:1d:ec:f4:ca:c1:3e:f4:55:26:fd:60:a9:57:c1: 6f:8f:81:1b:9c:4b:9c:18:8f:0d:f6:ed:32:cb:33: 0e:1e:88:20:be:5f:c5:4a:95:b9:22:d6:bb:14:0b: 3e:89:9e:aa:f5:76:48:bc:74:45:9d:7f:ce:fb:ad: ec:19:3c:c9:5e:7a:bf:72:f6:3f:30:41:18:96:b8: f4:6e:42:db:fc:20:92:ed:28:9b:5b:63:37:2c:65: ac:f2:63:64:f0:93:19:61:0a:bf:71:0d:4c:df:60: 95:e8:50:4f:56:06:29:86:f7:59:35:23:3c:92:b5: 20:39:3c:ba:2a:82:72:18:1d:70:90:84:c6:57:3b: d6:d1:5f:48:34:37:b3:aa:6a:22:b1:32:ff:7e:02: c8:b9:a7:3d:36:a3:cd:05:46:e0:f4:fc:f8:48:72: 03:94:07:03:2c:ff:28:df:e2:d5:9d:bd:10:f3:d7: ea:44:cf:f7:96:01:7e:1e:8a:f1:77:88:fb:da:6f: 78:59:72:b8:d0:c1:63:14:d2:e8:d8:03:00:be:9d: 9d:b2:be:75:f5:fd:18:ea:88:c4:7b:b9:ab:b5:14: 24:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:96:1C:B9:3F:EA:3C:45:D4:92:B1:EB:60:89:D7:60:E3:C3:AD:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fa7a3d4c-134e-396d-a7c6-30e98a4b6c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl X509v3 Authority Key Identifier: keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9bd:f03::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f9:e8:b8:93:49:12:c5:b6:c5:f2:20:01:0e:d6:fb:28:2c: da:cf:c1:09:ee:90:e5:c8:e4:9d:3f:e0:f0:5e:83:6f:e5:7f: 9d:87:8b:c3:87:5c:f2:09:0a:3e:21:95:70:86:f9:e6:ab:5e: df:ee:c2:01:aa:cb:64:aa:19:44:5b:5b:98:e4:24:3e:09:0e: 98:73:2c:00:d0:7b:93:13:10:af:70:ec:f4:28:c5:78:fd:78: 80:ee:3b:16:22:38:bb:e2:87:de:4a:1e:36:e3:c5:86:20:04: e3:b0:8f:72:c4:a3:9a:48:87:8a:b9:b0:83:31:bd:b2:00:53: f7:2d:b3:99:2f:47:01:43:ab:47:cd:18:59:e8:67:66:67:b7: 9b:59:01:ca:7f:0b:71:fe:37:8e:b5:f4:a1:1e:97:4c:af:71: 9f:88:12:8b:6e:4f:da:4b:78:a9:e7:42:44:1f:e2:0f:89:df: 25:54:7a:cf:45:1b:3f:fd:82:cc:d4:af:a8:52:60:03:1f:28: d9:5c:3c:c6:d6:bb:52:4f:cb:a7:75:65:9a:87:69:c1:d6:3b: 84:0f:5a:49:3c:8c:1c:43:b3:6d:26:7b:2a:6f:13:4a:76:83: b6:57:62:cb:ce:ba:10:6d:81:82:c8:65:a9:7b:42:5b:b7:6a: 30:11:27:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErTC4x21LzChPozpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWViNjgxYWMtY2U4My00NTg4LWJiZWQtMjg3N2JmNWE0 M2FlMB4XDTI1MDgxMTE5NTkzNloXDTI1MTEwOTIwNTkzNlowLzEtMCsGA1UEAxMk ZWY3ODBlNDEtNTY2Zi00NWQyLWE0MjctYjliODIxZDM0Zjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrcaqTv9cabR+EYJRboRhHbyOImhqfyj405y uydxHez0ysE+9FUm/WCpV8Fvj4EbnEucGI8N9u0yyzMOHoggvl/FSpW5Ita7FAs+ iZ6q9XZIvHRFnX/O+63sGTzJXnq/cvY/MEEYlrj0bkLb/CCS7SibW2M3LGWs8mNk 8JMZYQq/cQ1M32CV6FBPVgYphvdZNSM8krUgOTy6KoJyGB1wkITGVzvW0V9INDez qmoisTL/fgLIuac9NqPNBUbg9Pz4SHIDlAcDLP8o3+LVnb0Q89fqRM/3lgF+Horx d4j72m94WXK40MFjFNLo2AMAvp2dsr519f0Y6ojEe7mrtRQkVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK2WHLk/6jxF1JKx62CJ12Djw60IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2 ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3YmY1YTQzYWUvZmE3YTNkNGMtMTM0ZS0z OTZkLWE3YzYtMzBlOThhNGI2YzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWViNjgxYWMtY2U4My00NTg4LWJi ZWQtMjg3N2JmNWE0M2FlL2FlYjY4MWFjLWNlODMtNDU4OC1iYmVkLTI4NzdiZjVh NDNhZS5jcmwwHwYDVR0jBBgwFoAU6UnX34qG5dZ/rJgDrsJvSwjdC0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3 YmY1YTQzYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5vQ8D MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA756LiTSRLFtsXyIAEO1vsoLNrPwQnukOXI5J0/4PBeg2/lf52H i8OHXPIJCj4hlXCG+earXt/uwgGqy2SqGURbW5jkJD4JDphzLADQe5MTEK9w7PQo xXj9eIDuOxYiOLvih95KHjbjxYYgBOOwj3LEo5pIh4q5sIMxvbIAU/cts5kvRwFD q0fNGFnoZ2Znt5tZAcp/C3H+N4619KEel0yvcZ+IEotuT9pLeKnnQkQf4g+J3yVU es9FGz/9gszUr6hSYAMfKNlcPMbWu1JPy6d1ZZqHacHWO4QPWkk8jBxDs20meypv E0p2g7ZXYsvOuhBtgYLIZal7Qlu3ajARJ5k= -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:59 2025 by rpki-client