$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7c33a304-1a62-32e5-90c8-e6647ca6d200.roa File: 7c33a304-1a62-32e5-90c8-e6647ca6d200.roa (raw, json) Hash identifier: UD9LqhDuWzB0hM07cWiNtATmxtsoRWwsJksNW/7TbIM= Subject key identifier: 44:C8:0E:35:93:78:9B:29:F0:5B:D0:08:93:F5:15:78:91:52:8D:C3 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584B7DECA398385F80F62ABB9E0C Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7c33a304-1a62-32e5-90c8-e6647ca6d200.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 21738 IP address blocks: 2602:2b7:40::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a3:98:38:5f:80:f6:2a:bb:9e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=cf20e02a-e1b0-4487-9555-abe4318eba23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:51:6d:6f:7e:13:d7:f8:b3:ce:3a:6d:f6: f4:7d:dc:69:b9:15:ba:1b:58:ce:35:71:ba:69:43: f5:fe:80:55:2c:04:eb:cf:4b:34:44:c5:46:cb:9d: 5a:9b:9c:77:14:39:5c:a4:36:ee:1e:1c:31:3f:1c: e6:0c:52:b0:7f:f4:30:ec:91:b9:40:5c:fd:09:34: 2a:9a:f4:24:1a:64:e2:99:7d:02:3a:96:fa:13:a7: 66:74:97:d0:f1:32:e2:75:34:40:16:1c:9d:d7:d0: ab:00:b2:c4:84:33:c9:d1:ff:79:54:ef:bd:c3:57: 92:5a:df:8e:b7:30:21:42:0e:09:b8:54:27:45:27: 74:18:6a:24:ac:e4:18:63:ce:b4:ea:93:d0:02:eb: 57:69:5f:f2:6a:55:57:f5:08:f9:bf:6d:33:52:69: ab:1e:5f:5f:c0:6f:37:5b:94:3c:dd:3f:aa:45:82: db:8c:40:54:e9:c7:61:8e:ba:a4:d4:ec:9a:c5:9b: 4b:ad:9d:71:ca:32:1e:0c:99:29:3a:3b:14:26:0b: 7c:eb:8c:ed:cb:07:1a:ba:0e:e8:82:fb:c0:f3:a5: 4a:7b:47:8e:1a:2f:89:68:bb:49:4c:b1:4f:67:b0: 8e:2d:91:04:59:ed:14:2c:41:08:af:b0:74:24:03: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C8:0E:35:93:78:9B:29:F0:5B:D0:08:93:F5:15:78:91:52:8D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7c33a304-1a62-32e5-90c8-e6647ca6d200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:83:43:c6:25:dc:1b:b7:34:de:ed:79:f0:84:3f:86:77:a5: 87:34:79:8f:85:00:d0:66:6d:22:b7:8f:29:93:84:13:37:e3: bf:25:8b:a3:36:0e:4d:52:5a:f8:18:f0:79:5a:71:cb:36:21: c2:a2:c3:1b:4b:da:a4:33:d5:32:5c:66:79:24:83:33:82:17: 70:e8:dd:0c:df:91:27:38:8f:1a:50:4a:03:a8:25:ba:16:c7: 91:f2:a1:d8:29:19:eb:d2:47:91:a1:1f:84:35:13:d6:08:71: 72:de:67:f2:db:34:67:a9:8f:84:86:20:ee:f7:7c:0a:5b:8c: 6d:37:58:4b:fe:26:8b:ee:9f:ab:ce:a3:1d:55:f3:ab:33:e1: c0:bc:a9:46:57:9b:32:47:75:4b:56:0e:47:fb:83:a8:cf:01: 01:21:56:3a:7b:b8:d1:11:34:b8:d2:31:3f:d9:39:3e:2a:61: dc:09:71:98:43:ba:24:a9:df:41:5f:89:2d:1e:d5:2e:87:58: de:05:91:0a:a1:02:ca:ea:f8:78:11:93:9a:c2:51:07:f9:ed: 14:0c:a6:84:10:96:4e:3d:9e:ba:51:de:46:a5:a3:70:5e:31: 1d:c9:9c:4d:1c:17:41:d6:81:0f:f4:b0:52:61:c7:20:af:d6: eb:6c:dc:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt97KOYOF+A9iq7ngwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk Y2YyMGUwMmEtZTFiMC00NDg3LTk1NTUtYWJlNDMxOGViYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimBRbW9+E9f4s846bfb0fdxpuRW6G1jONXG6 aUP1/oBVLATrz0s0RMVGy51am5x3FDlcpDbuHhwxPxzmDFKwf/Qw7JG5QFz9CTQq mvQkGmTimX0COpb6E6dmdJfQ8TLidTRAFhyd19CrALLEhDPJ0f95VO+9w1eSWt+O tzAhQg4JuFQnRSd0GGokrOQYY8606pPQAutXaV/yalVX9Qj5v20zUmmrHl9fwG83 W5Q83T+qRYLbjEBU6cdhjrqk1OyaxZtLrZ1xyjIeDJkpOjsUJgt864ztywcaug7o gvvA86VKe0eOGi+JaLtJTLFPZ7COLZEEWe0ULEEIr7B0JAP61QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFETIDjWTeJsp8FvQCJP1FXiRUo3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvN2MzM2EzMDQtMWE2Mi0z MmU1LTkwYzgtZTY2NDdjYTZkMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB2DQ8Yl3Bu3NN7tefCEP4Z3pYc0eY+FANBmbSK3jymThBM3478l i6M2Dk1SWvgY8Hlaccs2IcKiwxtL2qQz1TJcZnkkgzOCF3Do3QzfkSc4jxpQSgOo JboWx5HyodgpGevSR5GhH4Q1E9YIcXLeZ/LbNGepj4SGIO73fApbjG03WEv+Jovu n6vOox1V86sz4cC8qUZXmzJHdUtWDkf7g6jPAQEhVjp7uNERNLjSMT/ZOT4qYdwJ cZhDuiSp30FfiS0e1S6HWN4FkQqhAsrq+HgRk5rCUQf57RQMpoQQlk49nrpR3kal o3BeMR3JnE0cF0HWgQ/0sFJhxyCv1uts3NU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:00 2025 by rpki-client