$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa File: c733dc09-d02d-3a61-84c0-81f6e8142032.roa (raw, json) Hash identifier: jhrFC3RQYHX2edTF84nmRiUZ8RP7Gx4H1DCzQmTFLFg= Subject key identifier: 6D:E3:FC:F7:D1:C4:00:CA:6E:92:7E:0A:64:C4:46:45:58:FB:E7:D7 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F4328584B047C08B077D96429AE2F2900 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2602:277:3ee::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:08:b0:77:d9:64:29:ae:2f:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=a5bf2051-2c56-4af6-9f5f-f733abb250de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4c:9f:9b:6f:a6:89:38:37:ed:86:4c:cc:cb: 02:df:cb:22:61:d8:f0:e8:53:2e:39:6a:c0:f7:02: 16:8e:3a:59:58:33:c6:96:a4:21:c3:c0:fd:c3:04: fd:b0:5b:4c:5e:f9:6c:0a:d7:46:75:21:89:ec:3d: 78:93:68:cd:a0:38:96:ca:59:61:b6:1a:9c:03:ee: 59:76:82:79:d6:b0:27:ff:c2:3a:b5:1e:03:1c:d5: 86:c3:6e:07:9b:9d:35:e7:71:a3:96:79:9c:f2:10: e5:e0:8a:bb:41:93:30:48:d8:a7:a2:01:ea:fd:d6: ba:52:6a:3c:3d:b9:34:0e:1f:83:e3:8e:d7:c0:c4: b5:1c:4b:21:be:db:b5:81:78:03:5a:51:d2:b8:b9: bf:75:1a:14:43:ee:b6:f2:4f:d9:bc:f4:db:70:df: ca:fe:79:02:8d:df:df:e7:ec:4c:9b:be:ed:df:7b: 88:20:60:64:76:7b:5c:63:ad:68:bd:5f:10:ed:8a: 97:9e:10:ef:3d:fc:b0:7a:b8:9f:44:7d:03:3a:eb: 77:7d:02:02:3a:39:f8:2b:4f:d9:dd:ae:29:e8:e6: 6b:79:f0:34:3b:73:24:e4:76:51:96:28:3b:c0:30: ae:40:7d:a5:31:14:4a:e8:42:c1:9d:35:62:5f:ff: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E3:FC:F7:D1:C4:00:CA:6E:92:7E:0A:64:C4:46:45:58:FB:E7:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:3ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ce:61:5d:7c:11:60:30:e3:50:1e:78:6c:f7:24:8b:56:43: cc:ba:d7:f3:4d:d5:7a:9c:e8:8a:2c:64:99:a1:6d:bd:4d:4d: 96:4a:41:94:ea:28:d2:5a:ab:51:2e:18:af:1e:ff:05:3b:59: ee:0d:91:6e:5c:bb:dc:4b:3b:4b:8c:84:27:cc:79:8c:e4:95: 55:26:e3:08:4c:f0:90:52:c2:99:22:21:c5:43:0e:72:78:b8: cd:ba:27:c8:57:be:7d:05:ea:68:1b:ac:cb:ae:09:98:61:ea: 0b:13:eb:89:bd:f3:c3:e9:7b:e2:d0:67:72:3e:ed:c2:27:b3: 11:07:e7:33:70:0b:58:a1:3d:5b:a0:5c:02:b7:35:51:66:d8: 78:82:3c:ea:60:1f:eb:a6:ae:51:bb:29:16:69:f3:27:78:08: 8d:39:63:d9:29:91:f7:0b:f0:e7:77:9d:a1:97:c3:b8:9e:87: 57:50:9f:cd:06:38:fa:cd:c9:43:22:e4:25:4b:1d:78:83:1b: 2a:31:8e:62:fc:12:d8:70:e0:34:73:c1:70:1f:3d:5b:3d:1e: 91:41:bc:fc:b5:fc:b4:23:89:95:b0:73:2a:7b:4f:a8:c1:92: 3c:f5:0a:9f:5c:69:5b:57:21:7b:91:15:be:f9:aa:79:cc:9f: be:ce:8f:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsEfAiwd9lkKa4vKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YTViZjIwNTEtMmM1Ni00YWY2LTlmNWYtZjczM2FiYjI1MGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUyfm2+miTg37YZMzMsC38siYdjw6FMuOWrA 9wIWjjpZWDPGlqQhw8D9wwT9sFtMXvlsCtdGdSGJ7D14k2jNoDiWyllhthqcA+5Z doJ51rAn/8I6tR4DHNWGw24Hm50153Gjlnmc8hDl4Iq7QZMwSNinogHq/da6Umo8 Pbk0Dh+D447XwMS1HEshvtu1gXgDWlHSuLm/dRoUQ+628k/ZvPTbcN/K/nkCjd/f 5+xMm77t33uIIGBkdntcY61ovV8Q7YqXnhDvPfywerifRH0DOut3fQICOjn4K0/Z 3a4p6OZrefA0O3Mk5HZRlig7wDCuQH2lMRRK6ELBnTViX/8rZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG3j/PfRxADKbpJ+CmTERkVY++fXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvYzczM2RjMDktZDAyZC0z YTYxLTg0YzAtODFmNmU4MTQyMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdwPu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI7OYV18EWAw41AeeGz3JItWQ8y61/NN1Xqc6IosZJmhbb1NTZZK QZTqKNJaq1EuGK8e/wU7We4NkW5cu9xLO0uMhCfMeYzklVUm4whM8JBSwpkiIcVD DnJ4uM26J8hXvn0F6mgbrMuuCZhh6gsT64m988Ppe+LQZ3I+7cInsxEH5zNwC1ih PVugXAK3NVFm2HiCPOpgH+umrlG7KRZp8yd4CI05Y9kpkfcL8Od3naGXw7ieh1dQ n80GOPrNyUMi5CVLHXiDGyoxjmL8Ethw4DRzwXAfPVs9HpFBvPy1/LQjiZWwcyp7 T6jBkjz1Cp9caVtXIXuRFb75qnnMn77Oj8g= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:09 2025 by rpki-client