$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa File: ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa (raw, json) Hash identifier: TTpwf3YmFMvOQJ4WqrgH0e+zgOy6YGyQ8Tb+yhfWXFY= Subject key identifier: 61:EB:69:6D:E2:24:C1:04:9D:56:27:F7:42:C9:56:43:FD:A0:F6:26 Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Certificate serial: 010D0C9F4328584B1AD1964C5AD1048AC2FF9800 Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 47069 IP address blocks: 2602:f9df:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:96:4c:5a:d1:04:8a:c2:ff:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=ae246eaa-c9eb-4c76-ba4e-57ec136cf24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ef:62:cf:a4:ee:ad:5e:0c:f7:1e:f0:36:3e: 31:db:e7:66:6d:2d:72:03:80:09:88:45:b9:79:b0: cb:c0:7a:d1:b3:3b:a5:57:77:a1:8d:ba:a1:94:26: 34:83:20:14:28:1f:72:16:50:f9:db:60:6f:96:b6: 01:f0:74:2e:b7:27:25:f7:ba:84:72:0c:e7:54:f0: 97:24:65:92:a5:7e:6b:1c:8c:8a:1d:87:c9:30:aa: bb:80:e8:b1:f6:8e:b3:7d:22:ea:71:81:0a:01:ad: 4f:78:8f:6e:ed:1d:00:6c:42:30:59:72:ed:6b:21: a4:50:03:39:ec:63:a2:01:41:11:f4:2f:35:7f:3a: eb:37:13:b2:2e:8d:0e:ec:9f:90:c0:ef:ba:cd:71: f6:fe:70:34:a5:89:aa:49:f8:63:fa:cc:e1:52:81: 62:ce:ae:ef:5f:0f:fc:60:3b:66:10:4e:b0:6c:5a: 5a:36:0b:5f:ac:9b:7d:fd:25:de:ae:68:71:6d:85: 51:5e:0c:67:2b:96:9a:db:55:23:39:6d:9d:df:6a: 80:56:5f:18:23:e5:84:ba:5b:55:f9:ce:ca:04:be: 95:3e:f9:fc:14:b3:41:77:23:32:f2:4e:23:ba:8e: 30:14:7d:69:38:78:04:18:8f:8c:41:dd:34:3b:fa: c2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EB:69:6D:E2:24:C1:04:9D:56:27:F7:42:C9:56:43:FD:A0:F6:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl X509v3 Authority Key Identifier: keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9df:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:43:ab:70:32:2e:a1:41:4f:67:a5:25:84:e3:86:05:c7:cb: fb:f8:63:59:ce:22:36:b5:b6:49:64:75:7f:42:74:0d:34:6f: 61:ae:e7:ec:41:66:9e:07:41:b5:5a:0a:44:a1:43:59:53:9c: dc:52:3e:b9:4d:c1:3f:39:a6:ec:b1:16:d3:9e:0b:b7:41:95: 2c:8b:77:04:50:f2:fc:d8:f6:57:ff:bb:ef:cf:34:9c:c4:86: 4a:b1:32:44:cb:ad:21:4a:58:f9:6f:c7:ae:86:49:35:1e:ed: 31:e7:f1:f7:01:d9:39:cd:cf:92:85:f6:b1:e3:d6:cb:71:ae: 0b:b0:84:a8:b8:66:f8:fb:0b:68:4c:27:37:85:29:d3:69:85: 66:24:49:2a:c9:6e:fd:62:49:b1:37:8a:c5:80:8f:49:ff:b5: a6:1b:6f:86:9f:af:84:58:ab:69:fa:82:67:3d:47:e9:d3:0f: 60:19:35:17:b6:d8:f3:6f:98:0e:40:34:f6:46:08:09:b9:0d: 08:03:19:38:e9:74:e3:0f:3a:04:1f:f4:67:12:cf:38:2f:3e: b4:05:4b:ae:01:fb:d1:c5:4a:a3:f8:3b:55:89:be:15:07:fd: 67:dd:45:44:83:b1:a7:9c:bb:d0:b9:ab:98:b5:eb:11:22:af: 90:60:80:74 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsa0ZZMWtEEisL/mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4 ZWJlMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YWUyNDZlYWEtYzllYi00Yzc2LWJhNGUtNTdlYzEzNmNmMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+9iz6TurV4M9x7wNj4x2+dmbS1yA4AJiEW5 ebDLwHrRszulV3ehjbqhlCY0gyAUKB9yFlD522BvlrYB8HQutycl97qEcgznVPCX JGWSpX5rHIyKHYfJMKq7gOix9o6zfSLqcYEKAa1PeI9u7R0AbEIwWXLtayGkUAM5 7GOiAUER9C81fzrrNxOyLo0O7J+QwO+6zXH2/nA0pYmqSfhj+szhUoFizq7vXw/8 YDtmEE6wbFpaNgtfrJt9/SXermhxbYVRXgxnK5aa21UjOW2d32qAVl8YI+WEultV +c7KBL6VPvn8FLNBdyMy8k4juo4wFH1pOHgEGI+MQd00O/rCEwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGHraW3iJMEEnVYn90LJVkP9oPYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvYWMzNzk3ZDctODI1OS0z YWQ1LThiMTEtMDFiOTljZDAyNWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4 OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh ZWQ5ODhlYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL53wIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAP0OrcDIuoUFPZ6UlhOOGBcfL+/hjWc4iNrW2SWR1f0J0DTRvYa7n 7EFmngdBtVoKRKFDWVOc3FI+uU3BPzmm7LEW054Lt0GVLIt3BFDy/Nj2V/+77880 nMSGSrEyRMutIUpY+W/HroZJNR7tMefx9wHZOc3PkoX2sePWy3GuC7CEqLhm+PsL aEwnN4Up02mFZiRJKslu/WJJsTeKxYCPSf+1phtvhp+vhFirafqCZz1H6dMPYBk1 F7bY82+YDkA09kYICbkNCAMZOOl04w86BB/0ZxLPOC8+tAVLrgH70cVKo/g7VYm+ FQf9Z91FRIOxp5y70LmrmLXrESKvkGCAdA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:55:24 2025 by rpki-client