$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ff59cc46-8a44-37ea-9287-cbf8f24e6b83.roa File: ff59cc46-8a44-37ea-9287-cbf8f24e6b83.roa (raw, json) Hash identifier: YhrNpvcbxxmVxm5to3QB2/M/+TfEM/39toE31zZAaC4= Subject key identifier: 8A:1B:77:A7:63:26:0D:18:98:B3:20:87:D4:67:57:05:AE:74:76:B3 Certificate issuer: /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Certificate serial: 010D0C9F4328584B9CA22FCCD9C836E0A2AC7000 Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ff59cc46-8a44-37ea-9287-cbf8f24e6b83.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 2602:f777:c00::/38 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2f:cc:d9:c8:36:e0:a2:ac:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=06594889-de6d-4db0-bbfd-e5900689acbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:8d:65:14:38:a0:70:be:a2:fb:03:b0:7a: 04:86:ab:52:b6:7c:e2:47:96:70:24:fc:ab:e1:5a: e7:07:ae:e7:57:da:38:61:c4:29:80:63:c7:c8:54: e0:3e:67:81:a8:f1:2f:4a:15:2e:fa:f3:5e:c2:03: 8a:7e:4c:91:cb:08:70:f7:34:5f:eb:f0:06:71:f7: 0d:68:92:49:ec:86:d4:7b:85:5a:03:21:4d:18:cc: 1f:a7:6f:a9:31:58:4f:d8:b9:63:f1:a3:d8:d5:2f: 7d:0d:24:65:65:18:c1:8c:e4:f8:90:0e:76:ef:45: 4b:4e:cc:89:6a:27:ff:d0:be:b7:9b:5a:7a:6e:41: 25:e6:3d:75:a4:0a:ea:00:12:6e:a0:3e:d9:81:86: 77:b9:79:67:23:5c:7c:49:3f:e8:f7:77:49:a9:0a: e8:56:11:42:c6:d1:77:a6:f7:bf:af:d6:78:a3:0e: 7a:f9:05:20:5d:ff:01:60:59:39:e2:f0:14:65:df: 98:7a:48:77:aa:be:76:66:25:ed:9c:1b:79:88:64: ed:23:e5:08:e9:b9:c4:17:d5:0e:3d:e5:14:6b:94: 18:46:7c:22:16:44:71:92:90:98:34:97:e6:fd:ef: d1:22:be:3b:2f:65:58:43:c2:5a:83:c3:28:05:0b: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1B:77:A7:63:26:0D:18:98:B3:20:87:D4:67:57:05:AE:74:76:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ff59cc46-8a44-37ea-9287-cbf8f24e6b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl X509v3 Authority Key Identifier: keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f777:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:af:2d:fa:42:b7:d0:67:cf:b1:ff:ad:31:38:a4:13:23:e2: 1f:f8:5d:47:84:93:9d:c1:13:78:18:05:92:93:1e:6b:05:ba: df:1f:6e:b8:6f:47:5d:fb:e9:c1:ce:cf:80:08:33:bb:1d:5f: a2:a8:d1:93:69:1d:32:a1:69:6d:be:02:07:a7:9f:70:ad:c8: 1a:42:61:70:7c:b9:e3:e8:01:0a:03:64:89:6b:71:f3:d7:57: 28:6e:6c:d9:e6:c2:e0:4c:da:8c:2f:a6:42:43:24:5f:f6:e2: c7:ff:f8:65:9b:c4:8e:12:11:91:4a:bf:14:77:23:cf:d1:07: 76:3c:df:88:26:ff:f0:e3:74:65:cd:3a:b6:c5:2c:86:89:c3: dc:06:69:0f:77:75:3c:0b:67:5c:a8:4b:a4:74:67:27:63:5a: ae:8f:e1:81:68:ac:02:e0:67:aa:80:91:39:a5:8b:97:44:73: 51:17:f3:b4:e7:79:85:9f:52:21:ef:44:bd:14:d7:0e:42:47: 5d:0d:f6:25:be:66:61:50:81:0f:2c:c6:c5:ee:88:e8:85:cc: 22:54:79:de:e9:5d:76:11:44:cd:5a:c2:79:4a:68:10:0b:3f: a0:00:ce:f8:09:34:40:13:81:89:03:9d:0e:c5:46:e7:fc:e6: 14:98:48:58 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEucoi/M2cg24KKscAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy YWI4MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MDY1OTQ4ODktZGU2ZC00ZGIwLWJiZmQtZTU5MDA2ODlhY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVSNZRQ4oHC+ovsDsHoEhqtStnziR5ZwJPyr 4VrnB67nV9o4YcQpgGPHyFTgPmeBqPEvShUu+vNewgOKfkyRywhw9zRf6/AGcfcN aJJJ7IbUe4VaAyFNGMwfp2+pMVhP2Llj8aPY1S99DSRlZRjBjOT4kA5270VLTsyJ aif/0L63m1p6bkEl5j11pArqABJuoD7ZgYZ3uXlnI1x8ST/o93dJqQroVhFCxtF3 pve/r9Z4ow56+QUgXf8BYFk54vAUZd+Yekh3qr52ZiXtnBt5iGTtI+UI6bnEF9UO PeUUa5QYRnwiFkRxkpCYNJfm/e/RIr47L2VYQ8Jag8MoBQtvdQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIobd6djJg0YmLMgh9RnVwWudHazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvZmY1OWNjNDYtOGE0NC0z N2VhLTkyODctY2JmOGYyNGU2YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3 NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4 MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi MDA0ODJhYjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL3dwww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEa8t+kK30GfPsf+tMTikEyPiH/hdR4STncETeBgFkpMeawW63x9u uG9HXfvpwc7PgAgzux1foqjRk2kdMqFpbb4CB6efcK3IGkJhcHy54+gBCgNkiWtx 89dXKG5s2ebC4EzajC+mQkMkX/bix//4ZZvEjhIRkUq/FHcjz9EHdjzfiCb/8ON0 Zc06tsUshonD3AZpD3d1PAtnXKhLpHRnJ2Naro/hgWisAuBnqoCROaWLl0RzURfz tOd5hZ9SIe9EvRTXDkJHXQ32Jb5mYVCBDyzGxe6I6IXMIlR53ulddhFEzVrCeUpo EAs/oADO+Ak0QBOBiQOdDsVG5/zmFJhIWA== -----END CERTIFICATE-----Generated at Wed Nov 5 00:48:33 2025 by rpki-client