$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/21ed223f-8609-37c0-afbe-eeed3f862822.roa File: 21ed223f-8609-37c0-afbe-eeed3f862822.roa (raw, json) Hash identifier: Fl1yqsj80iuOSSlE170tQaTedseUo09C9KLNneT+KD4= Subject key identifier: 31:88:B9:1B:1F:6C:E5:57:94:A6:7C:1C:45:22:BA:50:FC:35:9A:9F Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Certificate serial: 010D0C9F4328584B13D6BF0836BBDC352A8BDE80 Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/21ed223f-8609-37c0-afbe-eeed3f862822.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 2602:fa28:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:bf:08:36:bb:dc:35:2a:8b:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=f667dbd8-0340-4793-8a25-6ade718495b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:36:2b:09:b1:68:d0:cc:f5:9d:b8:d4:c0: fb:48:e3:e0:bb:99:c3:02:5c:8c:b7:af:79:30:f6: a6:3b:a6:61:8d:ef:3e:9a:0a:85:ee:76:40:12:dd: 2f:12:0b:db:37:09:ff:f5:05:0d:92:e0:87:be:c5: 76:13:a8:d9:2d:7a:03:b1:28:a8:2c:ca:36:57:5a: 01:f6:b2:1b:67:18:f6:0f:3b:0a:45:dd:99:c4:94: 0c:bd:70:8f:bf:12:65:ab:85:61:ad:11:ee:70:0b: 9d:9a:04:05:0b:fb:32:cf:35:b5:61:3f:00:ee:a3: 81:b8:a2:d3:77:95:4e:38:fb:20:cf:47:c9:df:fc: ff:e9:9f:9c:92:4a:a5:d3:27:20:15:e1:9f:ee:d2: d8:63:8e:d6:f8:8c:1b:ce:17:a0:d7:b7:36:1f:d7: af:41:e3:0f:a2:66:b8:ba:d7:38:a5:05:f9:56:21: 36:75:c1:ba:e1:46:c6:b3:ed:5a:bc:c3:ad:a6:00: 96:4b:78:d2:11:d2:05:53:1a:42:9e:42:a0:47:a0: 48:8b:b4:f9:5a:ca:8a:86:63:d0:cc:1b:44:9d:0c: 0f:73:07:e9:ad:55:4b:fa:88:4b:db:d7:c3:46:e1: b2:14:b3:bd:49:d9:85:eb:d6:ce:13:3c:0e:ee:65: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:88:B9:1B:1F:6C:E5:57:94:A6:7C:1C:45:22:BA:50:FC:35:9A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/21ed223f-8609-37c0-afbe-eeed3f862822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl X509v3 Authority Key Identifier: keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa28:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a2:18:ed:79:59:cb:12:cd:9d:db:d3:29:c1:ae:67:b4:d2: 0f:84:98:d6:76:6b:a9:b7:7f:4d:b4:7b:27:ae:d0:3d:2d:87: 7a:c1:a8:ac:df:59:9b:bc:4f:b2:0e:2a:bf:7e:0c:e2:b7:37: 4c:9d:0f:41:8b:1c:1a:76:47:2e:9c:51:23:14:79:1f:e4:39: 23:5a:92:1c:81:64:ae:3a:89:53:4b:91:68:52:7d:1c:ab:14: 71:27:e9:fa:b7:c6:19:35:9d:14:9f:28:f8:e0:ab:0b:07:a8: 92:78:ed:07:5d:a9:c4:36:d4:f8:b6:cf:75:95:25:54:4a:e1: c7:c4:0d:38:3b:18:09:2d:81:8e:61:ba:f4:ab:90:bc:80:3a: 4a:29:d9:46:5a:fe:a8:c0:65:49:7a:aa:3b:85:1d:6d:af:a6: b6:d2:c2:d5:4e:94:fb:20:7e:9e:ca:c7:1b:5d:7a:1a:6f:0f: a4:44:1a:aa:f8:1f:6c:62:b4:3a:9f:2a:4a:38:d9:64:75:0b: 90:c9:61:4c:1c:92:1e:c8:5e:ec:a8:98:73:3c:69:1e:b8:db: 58:a6:d5:e6:22:3d:dc:1c:07:d4:89:db:1e:43:ab:2c:3b:e4: f3:4a:45:ad:94:cc:40:12:e6:13:07:5d:ac:de:c3:c0:84:37: 1a:46:b7:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsT1r8INrvcNSqL3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk OTFkMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZjY2N2RiZDgtMDM0MC00NzkzLThhMjUtNmFkZTcxODQ5NWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrk2KwmxaNDM9Z241MD7SOPgu5nDAlyMt695 MPamO6Zhje8+mgqF7nZAEt0vEgvbNwn/9QUNkuCHvsV2E6jZLXoDsSioLMo2V1oB 9rIbZxj2DzsKRd2ZxJQMvXCPvxJlq4VhrRHucAudmgQFC/syzzW1YT8A7qOBuKLT d5VOOPsgz0fJ3/z/6Z+ckkql0ycgFeGf7tLYY47W+Iwbzheg17c2H9evQeMPoma4 utc4pQX5ViE2dcG64UbGs+1avMOtpgCWS3jSEdIFUxpCnkKgR6BIi7T5WsqKhmPQ zBtEnQwPcwfprVVL+ohL29fDRuGyFLO9SdmF69bOEzwO7mXzbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGIuRsfbOVXlKZ8HEUiulD8NZqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvMjFlZDIyM2YtODYwOS0z N2MwLWFmYmUtZWVlZDNmODYyODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm NWI3MWQ5MWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6KAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqiGO15WcsSzZ3b0ynBrme00g+EmNZ2a6m3f020eyeu0D0th3rB qKzfWZu8T7IOKr9+DOK3N0ydD0GLHBp2Ry6cUSMUeR/kOSNakhyBZK46iVNLkWhS fRyrFHEn6fq3xhk1nRSfKPjgqwsHqJJ47QddqcQ21Pi2z3WVJVRK4cfEDTg7GAkt gY5huvSrkLyAOkop2UZa/qjAZUl6qjuFHW2vprbSwtVOlPsgfp7KxxtdehpvD6RE Gqr4H2xitDqfKko42WR1C5DJYUwckh7IXuyomHM8aR6421im1eYiPdwcB9SJ2x5D qyw75PNKRa2UzEAS5hMHXazew8CENxpGt/g= -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:22 2025 by rpki-client