$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa File: ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa (raw, json) Hash identifier: +Yu/9tPLW7diAz0IKcoF2F8dk53ez4+e8W2HcH9knFw= Subject key identifier: 46:A2:47:05:99:B9:3A:9F:E8:7E:80:37:9C:98:0D:D4:F8:58:8A:C7 Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584AF0F13E53A5C1C955365D3A00 Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 398951 IP address blocks: 2602:f978::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3e:53:a5:c1:c9:55:36:5d:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=4fd12054-b2ed-4a6d-9455-a166504f25b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:32:e3:ce:2d:f3:8d:b7:91:ba:94:73:b6: a9:75:8b:2d:ef:2a:46:ea:8a:04:d5:27:d8:bf:8b: 45:ff:81:7d:14:08:ce:91:5b:f9:53:81:8c:c2:24: 8d:06:57:20:35:68:25:85:ca:b8:5d:2c:db:ae:17: 95:87:a3:61:a2:70:9e:49:a8:e0:f9:db:38:8f:47: 63:fd:0e:21:3e:2e:b4:36:24:66:a1:fc:75:4f:a4: 78:93:70:8e:f0:90:75:94:cc:0f:1f:55:96:22:89: bd:dc:0c:ad:8e:08:ff:83:70:b8:66:5b:11:c4:bd: 5f:30:cb:b2:d1:c3:4b:16:62:d8:b2:89:66:04:39: 5e:43:38:e9:d8:3f:ae:e9:52:9a:a3:c4:12:4d:ea: 48:75:14:88:f2:e4:d2:da:65:82:72:51:28:89:df: 1c:63:c8:7f:f8:8f:3c:6e:b0:c5:5e:02:b7:52:95: 61:22:56:93:4c:7e:b8:d1:b0:ad:72:5e:e8:43:a5: ae:33:cc:b2:07:15:34:26:cc:44:2a:5a:72:dc:67: de:04:e9:04:06:dd:92:b5:be:20:3b:5e:6c:b2:05: e8:61:63:79:4b:74:75:e1:41:de:b8:22:39:5e:d0: b1:14:a4:79:e6:13:33:59:6e:2a:3b:b8:3e:4b:63: 62:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A2:47:05:99:B9:3A:9F:E8:7E:80:37:9C:98:0D:D4:F8:58:8A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f978::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ae:f2:c6:fd:28:1d:5c:d9:4a:d9:5d:b2:ea:49:d4:2e:c8: 0b:c8:87:73:cf:3b:8a:f6:24:9f:34:f6:77:22:dc:f5:6d:80: e5:c2:e2:87:83:cd:37:dc:af:44:e7:bc:97:26:a3:15:78:5a: 2b:9d:5d:11:22:44:57:0d:15:78:8f:31:18:84:2b:75:0a:10: d9:2b:52:6b:26:f4:e3:4d:59:db:ad:8f:93:d5:a6:da:07:17: 22:57:84:78:71:05:64:92:b6:3a:68:e4:c3:20:12:f8:06:bc: e6:51:7b:0c:66:07:51:dc:56:18:fc:58:18:d7:c1:50:f1:14: 73:20:ca:f9:d0:90:f5:8c:34:d5:23:8a:92:93:0f:a1:ba:1c: 04:3d:55:b1:0b:65:b2:40:5f:22:70:67:43:fe:5d:e0:fa:ec: 43:7b:3a:94:48:be:59:57:16:32:4f:93:b2:20:f6:e9:a6:a7: 7f:8e:d3:b7:a5:76:f2:f3:05:2f:ba:7b:7a:12:22:76:fe:67: df:27:eb:23:f9:08:77:82:48:78:8a:98:03:9c:26:41:dd:c9: 36:68:7a:5b:c3:a8:58:71:52:58:27:a3:9b:a1:15:72:34:81: 50:05:bf:d1:6a:02:f3:99:78:2f:49:19:67:b4:f1:c8:7e:0a: 46:bf:00:dc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErw8T5TpcHJVTZdOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NGZkMTIwNTQtYjJlZC00YTZkLTk0NTUtYTE2NjUwNGYyNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLoy484t8423kbqUc7apdYst7ypG6ooE1SfY v4tF/4F9FAjOkVv5U4GMwiSNBlcgNWglhcq4XSzbrheVh6NhonCeSajg+ds4j0dj /Q4hPi60NiRmofx1T6R4k3CO8JB1lMwPH1WWIom93Aytjgj/g3C4ZlsRxL1fMMuy 0cNLFmLYsolmBDleQzjp2D+u6VKao8QSTepIdRSI8uTS2mWCclEoid8cY8h/+I88 brDFXgK3UpVhIlaTTH640bCtcl7oQ6WuM8yyBxU0JsxEKlpy3GfeBOkEBt2Stb4g O15ssgXoYWN5S3R14UHeuCI5XtCxFKR55hMzWW4qO7g+S2NioQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEaiRwWZuTqf6H6AN5yYDdT4WIrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvY2NmNzBmY2MtNDBjZC0z NTRiLTk1ZDAtNWZmODBmOWU1ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5eAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAua7yxv0oHVzZStldsupJ1C7IC8iHc887ivYknzT2dyLc9W2A5cLi h4PNN9yvROe8lyajFXhaK51dESJEVw0VeI8xGIQrdQoQ2StSayb0401Z262Pk9Wm 2gcXIleEeHEFZJK2OmjkwyAS+Aa85lF7DGYHUdxWGPxYGNfBUPEUcyDK+dCQ9Yw0 1SOKkpMPobocBD1VsQtlskBfInBnQ/5d4PrsQ3s6lEi+WVcWMk+TsiD26aanf47T t6V28vMFL7p7ehIidv5n3yfrI/kId4JIeIqYA5wmQd3JNmh6W8OoWHFSWCejm6EV cjSBUAW/0WoC85l4L0kZZ7TxyH4KRr8A3A== -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:48 2025 by rpki-client