$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/bfefd033-46a6-3be3-95e8-359a21c308d2.roa File: bfefd033-46a6-3be3-95e8-359a21c308d2.roa (raw, json) Hash identifier: IOSbO/eEWRQlAT80Eu7qw1TjNvrhH6sSAvENjREscuY= Subject key identifier: B8:D3:D4:68:82:50:C0:05:9D:B0:1F:B5:42:47:5F:36:BE:47:CA:AF Certificate issuer: /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Certificate serial: 010D0C9F4328584B25FC458D9E8FF158521B2400 Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/bfefd033-46a6-3be3-95e8-359a21c308d2.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 3819 IP address blocks: 2602:f69a:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:45:8d:9e:8f:f1:58:52:1b:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=f36e9bea-0d02-4617-8734-76dd3d47e72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:af:4a:60:78:6e:d1:2f:81:a8:c6:0e:e6:a8: 04:4e:93:13:bb:01:88:15:73:7c:66:b3:04:28:a4: 42:69:3a:12:1b:88:ab:15:d0:66:14:43:95:ad:ec: 1e:08:75:36:34:96:e8:6f:46:a6:18:c6:91:4b:36: e2:30:81:0c:f7:9e:e7:3a:e1:8a:51:ad:08:bb:3c: 9d:bd:ed:c1:c7:7f:0f:de:9f:1f:f7:16:e3:24:44: 3f:1b:94:d1:a7:b8:ce:7f:3a:28:f9:80:a4:b9:ab: 1f:dc:56:a6:c0:c3:37:17:df:fe:1a:d3:f9:2c:ff: 9f:c1:21:01:37:d1:ba:fc:8d:c0:c8:59:89:5b:6d: 33:f7:38:f1:61:6a:8b:12:d2:5d:cb:7c:f3:99:b8: a0:47:d7:81:da:fd:7e:3f:18:88:3d:23:04:a7:f8: 78:f9:d3:ad:5a:bc:31:c7:07:ba:ef:f3:ef:27:48: fa:35:39:80:78:b2:7f:36:b6:b2:1c:a9:d0:d0:47: 00:52:d0:a0:b6:65:28:0a:24:db:88:13:15:d7:1f: 79:42:27:aa:e6:cb:94:2b:b8:3d:99:fb:cb:4b:0f: 78:e0:c5:85:06:7c:ee:af:29:cc:d2:71:cd:b7:61: 59:46:3a:b6:b1:83:07:97:ba:f5:86:42:f7:34:34: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D3:D4:68:82:50:C0:05:9D:B0:1F:B5:42:47:5F:36:BE:47:CA:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/bfefd033-46a6-3be3-95e8-359a21c308d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl X509v3 Authority Key Identifier: keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer sbgp-ipAddrBlock: critical IPv6: 2602:f69a:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0a:91:df:f3:01:8f:c0:7e:5e:94:24:fc:10:37:42:d9:fa: 7c:39:ba:64:06:dc:85:f0:f2:06:c7:e7:f9:b0:57:73:74:dc: 24:ee:a6:34:49:61:8d:18:de:d2:2b:6e:9e:2d:40:8a:2d:28: b2:60:90:8a:8c:64:3f:31:3a:cf:56:7c:9d:d0:bc:fc:a9:e9: 9f:c8:9e:b7:6d:30:d9:59:b8:3b:b9:5f:c2:ff:4c:8b:03:fb: fd:38:2b:ad:6c:4b:d0:2b:b6:dc:df:02:ec:33:2a:5a:f5:a6: 7b:f1:e0:1c:ee:78:35:b5:58:88:0d:6e:fd:a3:4b:dd:c1:90: 6f:89:8e:5e:29:a7:e8:c6:f3:ea:e6:8d:d2:1b:f0:00:0d:df: b2:9c:91:a7:86:02:de:b1:71:1b:b0:82:83:21:b0:2c:13:2b: 0c:f7:85:b4:c2:4b:a7:7b:a1:55:d2:7c:ce:3b:fc:d4:54:72: 30:b6:06:d0:bb:de:1a:ea:d9:74:0f:41:30:07:ce:93:e0:84: 7d:33:36:03:5d:ff:f4:f5:cb:c1:59:69:21:9c:6a:4f:35:cb: 1f:c0:5f:42:5c:7b:82:27:0b:b3:09:e4:00:f2:57:f8:e2:22: 21:78:7a:5c:f5:b8:5f:3b:0c:ad:28:f0:9a:e6:91:c8:b5:7e: 76:91:48:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsl/EWNno/xWFIbJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YmE3Y2EtMDRkYy00OWEyLWFlNzktNGU2ZjZiMzRl NDg4MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZjM2ZTliZWEtMGQwMi00NjE3LTg3MzQtNzZkZDNkNDdlNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK9KYHhu0S+BqMYO5qgETpMTuwGIFXN8ZrME KKRCaToSG4irFdBmFEOVreweCHU2NJbob0amGMaRSzbiMIEM957nOuGKUa0Iuzyd ve3Bx38P3p8f9xbjJEQ/G5TRp7jOfzoo+YCkuasf3FamwMM3F9/+GtP5LP+fwSEB N9G6/I3AyFmJW20z9zjxYWqLEtJdy3zzmbigR9eB2v1+PxiIPSMEp/h4+dOtWrwx xwe67/PvJ0j6NTmAeLJ/NrayHKnQ0EcAUtCgtmUoCiTbiBMV1x95Qieq5suUK7g9 mfvLSw944MWFBnzurynM0nHNt2FZRjq2sYMHl7r1hkL3NDS8/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLjT1GiCUMAFnbAftUJHXza+R8qvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzli YTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZmNmIzNGU0ODgvYmZlZmQwMzMtNDZhNi0z YmUzLTk1ZTgtMzU5YTIxYzMwOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWM5YmE3Y2EtMDRkYy00OWEyLWFl NzktNGU2ZjZiMzRlNDg4L2FjOWJhN2NhLTA0ZGMtNDlhMi1hZTc5LTRlNmY2YjM0 ZTQ4OC5jcmwwHwYDVR0jBBgwFoAUdwqi3iU4yVnSsvQGasfVER2E/iQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzliYTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZm NmIzNGU0ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2mgAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIYKkd/zAY/Afl6UJPwQN0LZ+nw5umQG3IXw8gbH5/mwV3N03CTu pjRJYY0Y3tIrbp4tQIotKLJgkIqMZD8xOs9WfJ3QvPyp6Z/InrdtMNlZuDu5X8L/ TIsD+/04K61sS9ArttzfAuwzKlr1pnvx4BzueDW1WIgNbv2jS93BkG+Jjl4pp+jG 8+rmjdIb8AAN37KckaeGAt6xcRuwgoMhsCwTKwz3hbTCS6d7oVXSfM47/NRUcjC2 BtC73hrq2XQPQTAHzpPghH0zNgNd//T1y8FZaSGcak81yx/AX0Jce4InC7MJ5ADy V/jiIiF4elz1uF87DK0o8Jrmkci1fnaRSNw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:02:36 2025 by rpki-client