$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/3a6b5fb7-088e-3e70-b6bd-f4dc808c9b54.roa File: 3a6b5fb7-088e-3e70-b6bd-f4dc808c9b54.roa (raw, json) Hash identifier: /POWgupVpNbGxjnC2u1K3Hos9J2rLuR/KdCp4EutoVA= Subject key identifier: C2:94:5D:38:03:07:B5:3C:4A:57:DD:FA:D9:B2:F6:95:F4:1D:0D:2F Certificate issuer: /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Certificate serial: 010D0C9F4328584B9CA22FB1C00B6E25A61E1940 Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/3a6b5fb7-088e-3e70-b6bd-f4dc808c9b54.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 2602:f777:800::/38 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2f:b1:c0:0b:6e:25:a6:1e:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=3ac5382e-744a-4f3f-a919-8855be0aa1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:35:61:52:c9:9f:b5:dd:59:67:56:0f:bd: 08:8e:09:f6:ec:4b:0a:2e:3a:48:9e:ba:11:cf:71: 8d:3e:48:53:ba:88:a9:1d:41:f3:ec:7e:cd:f0:f7: 54:78:81:4a:f6:57:39:46:3c:a4:fc:8b:63:27:1b: af:2c:36:c3:0b:a6:ff:a8:90:aa:50:b7:01:6c:b9: 6d:c4:29:2a:9d:da:0e:f3:be:19:84:df:65:e0:66: 78:80:bf:31:08:a1:5d:82:64:dc:a1:f5:e1:ba:f9: 96:51:77:34:65:9c:31:0e:ad:3a:c0:42:da:2b:26: d1:6a:47:7b:6a:2d:15:d8:c7:56:3a:4f:eb:a8:8b: 2f:f1:0e:91:31:79:66:eb:30:19:ba:0c:87:bc:aa: f6:62:ea:ef:81:32:8a:0f:d0:a7:c5:a4:ce:83:4b: dd:eb:ec:d0:db:81:03:7b:0e:4a:7f:83:54:19:70: 61:71:bc:dc:c1:62:e8:1a:d5:d0:1c:40:49:1e:84: 97:42:38:f4:c4:ba:ff:35:ea:74:83:c6:99:31:02: 55:5a:97:76:1e:b2:84:89:3b:ce:f7:bf:b6:22:17: 47:0f:c5:4b:a1:08:6e:17:69:47:41:c0:ff:b4:ff: 60:ed:65:1a:f7:c7:d5:02:ed:64:10:88:43:9a:82: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:94:5D:38:03:07:B5:3C:4A:57:DD:FA:D9:B2:F6:95:F4:1D:0D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/3a6b5fb7-088e-3e70-b6bd-f4dc808c9b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl X509v3 Authority Key Identifier: keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f777:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d0:43:45:fa:03:39:08:9f:f8:98:5c:b0:a0:1d:55:db:1a: ec:df:50:52:5d:09:ae:e1:93:e1:37:26:da:26:f2:5e:32:53: 49:a4:38:17:7f:ef:8d:de:2e:0c:33:de:f2:4a:5c:75:cb:af: 6c:32:94:7d:8b:00:82:6d:35:00:8f:c2:35:fb:d4:ef:05:fb: 42:87:cf:e7:42:59:70:82:65:52:a5:98:0a:2c:b4:39:ef:69: 89:7b:28:4a:10:0b:1e:fa:f5:bc:55:ca:8c:de:64:35:ec:81: e2:46:f0:09:69:9c:e8:06:a7:d6:52:a6:ac:33:9a:60:1b:83: 3b:30:71:5c:b0:0a:b7:c0:a0:ec:f3:57:77:7b:37:18:51:c1: 50:ff:5e:4e:42:ef:78:64:64:08:c3:bc:a9:3c:5c:51:17:e7: 45:82:71:df:87:c2:93:08:2e:41:5a:4c:a3:84:97:f3:d4:58: 3d:5a:f9:bb:92:16:a1:ae:13:4f:75:2f:81:e3:33:ae:c2:10: b5:dc:78:33:3b:3f:f1:78:45:14:b2:59:99:85:8f:f9:e5:be: b9:f1:8f:27:fb:7c:93:4e:f4:ef:c1:a5:42:fc:18:8b:0c:ac: 97:c5:a2:63:98:00:b4:27:c4:fe:d6:4d:33:e9:d3:3d:08:f8: 23:91:31:95 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEucoi+xwAtuJaYeGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy YWI4MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk M2FjNTM4MmUtNzQ0YS00ZjNmLWE5MTktODg1NWJlMGFhMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ01YVLJn7XdWWdWD70Ijgn27EsKLjpInroR z3GNPkhTuoipHUHz7H7N8PdUeIFK9lc5Rjyk/ItjJxuvLDbDC6b/qJCqULcBbLlt xCkqndoO874ZhN9l4GZ4gL8xCKFdgmTcofXhuvmWUXc0ZZwxDq06wELaKybRakd7 ai0V2MdWOk/rqIsv8Q6RMXlm6zAZugyHvKr2YurvgTKKD9CnxaTOg0vd6+zQ24ED ew5Kf4NUGXBhcbzcwWLoGtXQHEBJHoSXQjj0xLr/Nep0g8aZMQJVWpd2HrKEiTvO 97+2IhdHD8VLoQhuF2lHQcD/tP9g7WUa98fVAu1kEIhDmoIXbwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMKUXTgDB7U8Slfd+tmy9pX0HQ0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvM2E2YjVmYjctMDg4ZS0z ZTcwLWI2YmQtZjRkYzgwOGM5YjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3 NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4 MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi MDA0ODJhYjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL3dwgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApNBDRfoDOQif+JhcsKAdVdsa7N9QUl0JruGT4Tcm2ibyXjJTSaQ4 F3/vjd4uDDPe8kpcdcuvbDKUfYsAgm01AI/CNfvU7wX7QofP50JZcIJlUqWYCiy0 Oe9piXsoShALHvr1vFXKjN5kNeyB4kbwCWmc6Aan1lKmrDOaYBuDOzBxXLAKt8Cg 7PNXd3s3GFHBUP9eTkLveGRkCMO8qTxcURfnRYJx34fCkwguQVpMo4SX89RYPVr5 u5IWoa4TT3UvgeMzrsIQtdx4Mzs/8XhFFLJZmYWP+eW+ufGPJ/t8k07078GlQvwY iwysl8WiY5gAtCfE/tZNM+nTPQj4I5ExlQ== -----END CERTIFICATE-----Generated at Tue Nov 4 22:44:09 2025 by rpki-client