$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/8ce2e4f7-3b90-3951-bb5d-6cd5aa758b6a.roa File: 8ce2e4f7-3b90-3951-bb5d-6cd5aa758b6a.roa (raw, json) Hash identifier: ZHtuZ26Zcjbrc2M2u+VSDClCyzlzM+/QHvMf7oEZkrc= Subject key identifier: 89:74:E8:89:A4:B1:00:0D:A1:D5:5C:5A:CE:E0:E2:7E:60:C4:9A:45 Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb Certificate serial: 010D0C9F4328584B355705DD00452B2250502100 Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/8ce2e4f7-3b90-3951-bb5d-6cd5aa758b6a.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 401243 IP address blocks: 2602:2b5:20::/48 maxlen: 48 2602:2b5:21::/48 maxlen: 48 2602:2b5:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:05:dd:00:45:2b:22:50:50:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=550178d6-71da-4b1f-99aa-8bdde3252c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:57:af:ac:e4:8b:50:80:7b:c1:e6:63:2e: 8f:e0:19:27:09:37:36:aa:7e:6e:bc:f6:75:65:5e: f6:97:92:48:d9:35:8e:f9:a1:0d:50:c7:05:9d:4c: 5a:86:25:4d:75:15:fa:2a:bb:38:ed:0b:6b:9b:cb: 2c:d1:c9:38:d3:cf:59:9e:99:fb:dc:35:0f:6c:75: 69:7e:38:1a:e8:01:e8:b4:a7:97:cf:48:46:b9:3f: 4c:75:36:d4:bc:bf:7f:ad:7f:6a:e3:b7:fa:e4:7c: 8b:8f:95:17:9f:21:f1:ba:0f:3a:dd:b1:78:3e:ec: 20:95:fd:51:79:a5:3f:33:a5:88:0a:a6:12:68:b4: 53:a6:b9:97:72:7f:d7:ff:ca:79:1b:2f:e0:50:1a: 8f:e1:b2:4c:fb:1a:22:6e:a8:33:5f:3a:2e:dd:c2: 93:8e:ec:0e:17:45:e8:2e:f2:e1:23:32:32:7d:d6: 10:e5:f7:52:48:df:c2:8b:9d:3f:f1:6e:b1:cb:c6: 5f:8e:a5:a0:e8:6b:b5:08:70:e6:6d:3d:86:6c:34: 67:15:ae:57:f9:c1:c6:77:e9:14:22:c3:2b:57:2c: 15:3b:73:5c:25:6f:62:72:ad:33:2e:9e:6e:6b:45: 48:67:1d:5a:72:09:55:78:72:86:ef:7c:a8:e4:d0: 6d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:74:E8:89:A4:B1:00:0D:A1:D5:5C:5A:CE:E0:E2:7E:60:C4:9A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/8ce2e4f7-3b90-3951-bb5d-6cd5aa758b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl X509v3 Authority Key Identifier: keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b5:20::-2602:2b5:22:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8c:74:cb:5f:c7:90:bc:63:3b:85:d2:5b:fb:cc:10:1a:99: 80:73:42:97:f1:26:a6:75:ba:55:92:e5:1e:c3:89:9c:02:b0: 9c:3b:ab:74:0d:c4:b8:77:29:7f:d1:f5:aa:55:d0:30:c9:ac: fd:4e:bc:3d:cb:98:75:aa:28:d0:ff:5e:12:bc:59:0d:07:c3: e3:3a:7d:4f:71:12:c2:2d:5c:63:41:54:0b:85:0e:6f:1b:ff: 67:37:55:54:e1:4a:d1:52:a6:c4:3d:f5:5b:37:6b:85:6f:8e: 25:7f:f6:25:03:a6:52:b7:54:4e:05:29:68:ee:10:42:37:b2: d1:38:49:be:e8:59:f2:b9:80:98:46:76:70:38:d1:a4:31:f0: 3c:64:c2:45:83:bf:1e:b6:c9:10:89:86:84:e5:af:fc:31:c8: c9:39:b4:ce:6f:cb:0a:6e:08:8b:5a:06:d6:d3:c7:6d:78:32: 1b:69:e2:fc:d1:df:91:89:a2:0d:d1:7c:1a:0b:77:48:2d:71: 3a:c2:53:3d:53:bf:50:52:bf:16:7b:84:fd:71:7d:df:79:d6: e1:bb:ef:f4:43:4f:76:63:16:41:fb:59:5c:2c:1c:0d:be:f9: 16:98:1f:ff:51:33:88:23:6a:8e:92:24:d5:2a:63:ac:71:71: bb:ef:51:93 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEs1VwXdAEUrIlBQIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2 OGZiMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NTUwMTc4ZDYtNzFkYS00YjFmLTk5YWEtOGJkZGUzMjUyYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G1Xr6zki1CAe8HmYy6P4BknCTc2qn5uvPZ1 ZV72l5JI2TWO+aENUMcFnUxahiVNdRX6Krs47Qtrm8ss0ck4089Znpn73DUPbHVp fjga6AHotKeXz0hGuT9MdTbUvL9/rX9q47f65HyLj5UXnyHxug863bF4Puwglf1R eaU/M6WICqYSaLRTprmXcn/X/8p5Gy/gUBqP4bJM+xoibqgzXzou3cKTjuwOF0Xo LvLhIzIyfdYQ5fdSSN/Ci50/8W6xy8ZfjqWg6Gu1CHDmbT2GbDRnFa5X+cHGd+kU IsMrVywVO3NcJW9icq0zLp5ua0VIZx1acglVeHKG73yo5NBtdwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFIl06ImksQANodVcWs7g4n5gxJpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvOGNlMmU0ZjctM2I5MC0z OTUxLWJiNWQtNmNkNWFhNzU4YjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5 NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5 M2MzOTY4ZmIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwUmAgK1 ACADBwAmAgK1ACIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEACIx0y1/HkLxjO4XSW/vMEBqZgHNCl/EmpnW6 VZLlHsOJnAKwnDurdA3EuHcpf9H1qlXQMMms/U68PcuYdaoo0P9eErxZDQfD4zp9 T3ESwi1cY0FUC4UObxv/ZzdVVOFK0VKmxD31WzdrhW+OJX/2JQOmUrdUTgUpaO4Q Qjey0ThJvuhZ8rmAmEZ2cDjRpDHwPGTCRYO/HrbJEImGhOWv/DHIyTm0zm/LCm4I i1oG1tPHbXgyG2ni/NHfkYmiDdF8Ggt3SC1xOsJTPVO/UFK/FnuE/XF933nW4bvv 9ENPdmMWQftZXCwcDb75Fpgf/1EziCNqjpIk1SpjrHFxu+9Rkw== -----END CERTIFICATE-----Generated at Wed Nov 5 20:48:50 2025 by rpki-client