$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/c46eb027-6304-3f0f-be24-a1921834d57a.roa File: c46eb027-6304-3f0f-be24-a1921834d57a.roa (raw, json) Hash identifier: dOFUL/Sz7GWIe8PN27z+kjYsD0z1FRg/+PCwE2Tn8Jw= Subject key identifier: 49:49:80:8A:CC:12:7D:FE:A0:B7:E1:8A:CC:17:CC:07:15:7B:74:D4 Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157 Certificate serial: 010D0C9F4328584B99D7A68C4FD4E514579A9260 Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/c46eb027-6304-3f0f-be24-a1921834d57a.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 400919 IP address blocks: 2602:817:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a6:8c:4f:d4:e5:14:57:9a:92:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=17c347c9-74cc-4947-91bc-e75c33c667c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9e:d6:fd:4a:3f:5c:22:0e:0b:c2:52:0e:11: 96:63:6f:b8:9c:5c:31:93:45:af:b2:68:99:9a:03: ca:bc:77:a4:8e:b2:24:00:e6:28:98:c6:81:6e:e9: 8b:46:a7:1b:c5:07:b3:93:2e:4d:0b:67:2b:3c:d2: 57:1e:14:f3:c9:e0:91:41:29:98:16:c7:1a:91:d1: a6:bb:21:2c:e8:8a:3d:5d:40:98:af:0e:44:e4:e7: fa:f7:88:15:e0:ab:80:e7:08:00:be:24:15:39:37: 4f:e6:58:bc:12:80:5f:f4:e7:1b:f1:5a:8d:3f:55: d7:a2:c1:2f:14:f9:c2:a3:dd:52:f6:2a:a3:6b:8b: dd:e4:c4:12:16:ab:57:5a:97:f7:9d:44:27:11:d5: 23:c0:2c:83:fc:30:84:4f:b8:f5:12:88:6c:13:be: fa:60:47:ce:18:6f:81:13:62:8e:0d:e6:20:90:12: 36:5a:c5:5a:93:44:2d:b1:aa:8b:1c:75:57:94:63: 66:5e:85:95:95:c4:da:69:2f:4a:97:ab:bb:c6:73: ae:27:ac:fb:2d:6a:99:a7:68:59:ca:16:50:b9:d5: 66:4b:13:d7:8d:1e:eb:cf:ae:70:7b:0b:12:f0:17: 03:0d:c5:ac:9f:b6:71:39:2f:69:90:c8:6b:01:c8: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:49:80:8A:CC:12:7D:FE:A0:B7:E1:8A:CC:17:CC:07:15:7B:74:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/c46eb027-6304-3f0f-be24-a1921834d57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl X509v3 Authority Key Identifier: keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:26:3e:f3:57:98:2c:05:54:e8:39:ad:ec:41:89:ed:61:ce: 42:28:03:1e:31:b9:b5:ae:fd:f6:33:dd:93:2c:60:2b:e8:c3: 02:01:97:a8:d7:51:8a:2e:b0:28:90:f6:cf:08:6a:b7:7a:b6: 7d:b1:ce:2b:85:63:c5:37:92:18:86:65:55:b6:70:96:22:5d: 25:3f:b5:8b:25:2d:96:fd:0e:14:64:bc:3b:a0:30:1f:65:76: b9:1b:52:a0:e1:bc:7a:e3:4d:33:25:41:a3:aa:44:f7:b8:2f: db:e9:23:07:e6:fd:96:ae:53:25:1f:5c:cf:c2:15:dd:a3:f7: b0:cb:91:21:c1:18:05:85:eb:c9:b7:1d:19:58:11:9e:0a:42: ed:4a:bb:9b:d1:34:9c:c9:73:f6:77:ec:e3:96:51:08:87:22: 26:03:46:18:66:34:5a:f4:9f:56:8c:84:3c:a6:b7:6d:03:1c: 76:7f:3d:ef:58:91:9c:be:1d:a5:55:15:69:e4:2e:02:7e:d6: b6:74:5b:a2:cc:91:91:3e:f8:a8:32:13:19:dd:7c:24:bb:54: 0e:88:4d:e2:3d:46:2c:00:ce:53:db:b4:3b:d3:1b:7f:26:1b: 70:aa:5c:a5:c8:40:28:39:3b:7c:55:bd:e5:63:b9:81:65:12: 36:01:ea:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ16aMT9TlFFeakmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3NjdmYjMtMDkxMS00MzVhLWEzYTQtMTg5YjgyNjIy MTU3MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTdjMzQ3YzktNzRjYy00OTQ3LTkxYmMtZTc1YzMzYzY2N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh57W/Uo/XCIOC8JSDhGWY2+4nFwxk0WvsmiZ mgPKvHekjrIkAOYomMaBbumLRqcbxQezky5NC2crPNJXHhTzyeCRQSmYFscakdGm uyEs6Io9XUCYrw5E5Of694gV4KuA5wgAviQVOTdP5li8EoBf9Ocb8VqNP1XXosEv FPnCo91S9iqja4vd5MQSFqtXWpf3nUQnEdUjwCyD/DCET7j1EohsE776YEfOGG+B E2KODeYgkBI2WsVak0QtsaqLHHVXlGNmXoWVlcTaaS9Kl6u7xnOuJ6z7LWqZp2hZ yhZQudVmSxPXjR7rz65wewsS8BcDDcWsn7ZxOS9pkMhrAcg0RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFElJgIrMEn3+oLfhiswXzAcVe3TUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYTc2 N2ZiMy0wOTExLTQzNWEtYTNhNC0xODliODI2MjIxNTcvYzQ2ZWIwMjctNjMwNC0z ZjBmLWJlMjQtYTE5MjE4MzRkNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWE3NjdmYjMtMDkxMS00MzVhLWEz YTQtMTg5YjgyNjIyMTU3LzFhNzY3ZmIzLTA5MTEtNDM1YS1hM2E0LTE4OWI4MjYy MjE1Ny5jcmwwHwYDVR0jBBgwFoAUMZd8fKTs1HliGSxrDAQkrzTVdKEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xYTc2N2ZiMy0wOTExLTQzNWEtYTNhNC0xODli ODI2MjIxNTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFyAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKomPvNXmCwFVOg5rexBie1hzkIoAx4xubWu/fYz3ZMsYCvowwIB l6jXUYousCiQ9s8Iard6tn2xziuFY8U3khiGZVW2cJYiXSU/tYslLZb9DhRkvDug MB9ldrkbUqDhvHrjTTMlQaOqRPe4L9vpIwfm/ZauUyUfXM/CFd2j97DLkSHBGAWF 68m3HRlYEZ4KQu1Ku5vRNJzJc/Z37OOWUQiHIiYDRhhmNFr0n1aMhDymt20DHHZ/ Pe9YkZy+HaVVFWnkLgJ+1rZ0W6LMkZE++KgyExndfCS7VA6ITeI9RiwAzlPbtDvT G38mG3CqXKXIQCg5O3xVveVjuYFlEjYB6go= -----END CERTIFICATE-----Generated at Wed Nov 5 07:12:35 2025 by rpki-client