$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/919825eb-22e0-3e4f-b598-ed097a5f212a.roa File: 919825eb-22e0-3e4f-b598-ed097a5f212a.roa (raw, json) Hash identifier: g+OKOrSRrQ/opgoA8P3gTJreUSTdN3LZUXWW5tC5oaM= Subject key identifier: 53:FE:D3:5C:A6:3C:DF:B9:B9:A7:E7:AD:21:BA:98:92:8F:F2:8F:A1 Certificate issuer: /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Certificate serial: 010D0C9F4328584B25FC4746D92ACDBBF54C0280 Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/919825eb-22e0-3e4f-b598-ed097a5f212a.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 3819 IP address blocks: 2602:f69a:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:47:46:d9:2a:cd:bb:f5:4c:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=2eecb540-5d5c-4a50-bdfe-1f600c9e6b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:22:bf:95:dc:44:2b:e3:e0:3d:2b:60:1f: 69:2e:9d:88:28:87:e7:c2:08:4c:2f:81:08:c4:a1: e5:a9:17:f7:b1:87:f0:02:e3:31:2e:76:6d:10:67: a0:af:55:ce:fe:8b:09:07:76:82:ea:ac:eb:e3:4c: 56:cb:7b:5f:a1:57:a7:79:ec:6f:7d:59:8b:53:04: c4:fa:38:47:d0:46:80:7f:68:e4:e8:e4:6b:c2:8f: 2f:e6:fc:5c:ed:9a:7a:a0:15:3a:00:da:bd:4a:59: b2:3e:e0:a7:fa:2b:cd:58:fe:45:c6:f0:a1:44:07: 74:60:01:d3:2a:f2:52:5c:13:75:e9:3d:4e:21:78: ef:47:dd:84:cd:fc:f1:04:f6:c6:e2:75:69:d6:63: 34:10:75:12:41:ec:0c:01:00:c4:29:7e:11:d2:95: 0c:da:9b:0f:54:8f:25:9c:90:ae:15:75:7f:6b:af: cc:5c:e0:fa:f2:75:6b:df:7f:c2:20:1d:28:4f:e7: dd:15:4c:6e:a9:86:e2:82:d6:5d:64:65:c0:64:d5: 63:13:2e:7d:1b:f3:a3:f4:be:17:1a:af:7a:75:92: dc:e2:84:c1:a7:96:3e:ba:15:4a:d5:09:e2:02:40: 11:96:4f:4d:1f:ce:d2:04:5c:cb:90:82:ec:b7:36: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FE:D3:5C:A6:3C:DF:B9:B9:A7:E7:AD:21:BA:98:92:8F:F2:8F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/919825eb-22e0-3e4f-b598-ed097a5f212a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl X509v3 Authority Key Identifier: keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer sbgp-ipAddrBlock: critical IPv6: 2602:f69a:9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a2:28:55:77:fb:0d:a8:7b:d9:85:fd:5e:f5:5e:de:99:44: 49:32:91:ad:0e:c7:bf:33:ce:a9:2b:d4:89:6f:dc:d2:b7:e7: 43:04:94:4e:ec:eb:ad:5b:54:51:af:ff:cb:a0:bd:a1:7c:6b: 4d:75:ee:8a:a2:1f:0e:80:4e:47:33:db:0e:ff:47:59:1b:a7: 59:13:9a:30:0d:5e:8e:6a:c0:d3:e3:f0:58:f8:bb:e8:88:67: 89:95:4b:62:0c:46:78:e9:9f:30:13:76:28:5d:59:24:21:4a: f8:77:4f:27:ba:aa:5d:80:64:85:bf:75:56:8f:be:10:da:a0: 4b:c4:00:08:b1:47:a1:68:db:52:64:6e:bf:ed:04:82:a4:77: 83:fb:9c:70:aa:1a:c0:67:8c:39:58:a1:c9:60:13:96:9f:dc: 86:9c:78:22:94:0c:b4:df:91:39:99:74:21:df:00:50:11:15: 2e:72:93:b5:b0:f0:7d:4d:db:87:86:dd:80:56:55:37:cd:22: cc:cd:7c:75:20:e0:2b:26:c0:22:1e:17:c2:75:dc:f0:d0:9c: 71:10:fb:19:cf:5c:d7:97:d6:94:a0:71:53:76:92:7a:26:54: c9:3a:10:ea:f1:44:94:b2:07:aa:57:39:60:0b:f8:18:5c:0c: 38:c9:a5:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsl/EdG2SrNu/VMAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YmE3Y2EtMDRkYy00OWEyLWFlNzktNGU2ZjZiMzRl NDg4MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MmVlY2I1NDAtNWQ1Yy00YTUwLWJkZmUtMWY2MDBjOWU2Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF4iv5XcRCvj4D0rYB9pLp2IKIfnwghML4EI xKHlqRf3sYfwAuMxLnZtEGegr1XO/osJB3aC6qzr40xWy3tfoVeneexvfVmLUwTE +jhH0EaAf2jk6ORrwo8v5vxc7Zp6oBU6ANq9SlmyPuCn+ivNWP5FxvChRAd0YAHT KvJSXBN16T1OIXjvR92EzfzxBPbG4nVp1mM0EHUSQewMAQDEKX4R0pUM2psPVI8l nJCuFXV/a6/MXOD68nVr33/CIB0oT+fdFUxuqYbigtZdZGXAZNVjEy59G/Oj9L4X Gq96dZLc4oTBp5Y+uhVK1QniAkARlk9NH87SBFzLkILstzYpAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFP+01ymPN+5uafnrSG6mJKP8o+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzli YTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZmNmIzNGU0ODgvOTE5ODI1ZWItMjJlMC0z ZTRmLWI1OTgtZWQwOTdhNWYyMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWM5YmE3Y2EtMDRkYy00OWEyLWFl NzktNGU2ZjZiMzRlNDg4L2FjOWJhN2NhLTA0ZGMtNDlhMi1hZTc5LTRlNmY2YjM0 ZTQ4OC5jcmwwHwYDVR0jBBgwFoAUdwqi3iU4yVnSsvQGasfVER2E/iQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzliYTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZm NmIzNGU0ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2mgAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGSiKFV3+w2oe9mF/V71Xt6ZREkyka0Ox78zzqkr1Ilv3NK350ME lE7s661bVFGv/8ugvaF8a0117oqiHw6ATkcz2w7/R1kbp1kTmjANXo5qwNPj8Fj4 u+iIZ4mVS2IMRnjpnzATdihdWSQhSvh3Tye6ql2AZIW/dVaPvhDaoEvEAAixR6Fo 21Jkbr/tBIKkd4P7nHCqGsBnjDlYoclgE5af3IaceCKUDLTfkTmZdCHfAFARFS5y k7Ww8H1N24eG3YBWVTfNIszNfHUg4CsmwCIeF8J13PDQnHEQ+xnPXNeX1pSgcVN2 knomVMk6EOrxRJSyB6pXOWAL+BhcDDjJpQM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:46:59 2025 by rpki-client