$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa File: 3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa (raw, json) Hash identifier: nPQBvbvc/RAPUgf4V9syU03QwKubTcga7GuTYl3zo8A= Subject key identifier: 8E:76:AB:CC:52:5B:4A:FD:95:C2:BD:3E:ED:23:B8:8C:15:21:FF:40 Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F4328584B80B7636C6089E1E65D894B80 Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 394346 IP address blocks: 2602:ff25::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:63:6c:60:89:e1:e6:5d:89:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=59c2a553-50f5-4d38-a297-5a79df9ef98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:70:3b:28:10:34:c4:6f:08:2d:cb:b2:98:f7: 66:78:f0:45:22:6a:45:98:61:d3:b8:ba:94:6d:82: bf:e4:d9:e7:e5:db:9c:d3:a6:f3:a8:ac:8b:30:9e: 5c:55:80:68:fa:12:57:95:30:33:cb:f2:5f:4e:fe: 0f:a0:7f:a4:02:ac:6c:d5:21:a6:fe:fd:65:00:11: fa:cd:4c:49:ae:7e:22:83:b4:c2:e8:74:76:12:d9: b9:b7:9f:48:f1:57:dc:91:c9:e7:61:95:ee:b3:13: 1d:67:9d:ac:a2:c4:6d:31:dd:22:39:56:39:c1:df: 00:1e:35:8d:e9:2c:78:fa:b0:b9:9d:74:b7:e5:fd: 1b:7a:6c:e9:de:47:89:0f:52:c2:84:6a:b3:e0:2f: a7:ed:d6:aa:0c:fd:b4:2d:38:8c:d5:a6:6f:59:e1: 23:b3:cc:4d:4d:ac:c0:a4:29:ae:f3:7a:83:40:87: e8:d4:b5:72:4a:b9:72:e6:07:79:07:a5:82:25:88: 30:1c:ae:43:79:8f:33:9e:0a:bf:1c:74:46:52:f0: e2:55:f3:d7:3b:4d:f7:a5:c0:80:d0:a8:42:b4:31: c8:63:20:5b:4a:2c:5a:a4:15:4b:0c:3e:fa:92:c1: dc:2f:4e:e1:8b:4c:40:9a:14:25:7a:fe:94:9b:64: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:76:AB:CC:52:5B:4A:FD:95:C2:BD:3E:ED:23:B8:8C:15:21:FF:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff25::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0b:fd:27:05:32:b7:a5:37:55:6f:ff:15:d3:b5:2c:2c:09: 68:f9:55:89:c6:94:56:13:a2:6f:8c:1a:c8:fd:6e:18:75:60: 07:26:27:70:ae:65:89:b3:4a:dd:e2:a4:85:e2:4e:7d:50:76: d7:60:dd:8b:bd:29:99:73:17:f1:89:cc:54:32:75:d1:6c:f9: 34:3e:b3:c8:b2:5b:bc:18:c5:b6:20:1f:53:e3:7c:22:ea:ea: 38:02:de:d3:70:e1:db:e2:9f:f6:46:08:d1:f0:97:21:c8:dd: 97:40:c1:0f:73:7c:c1:81:9a:38:3d:ad:4c:29:08:e0:04:0a: f4:f5:1f:24:2d:89:d6:1c:d3:ed:4b:2e:12:c8:48:7a:b8:0b: 3e:e8:20:63:bb:fe:2d:08:5c:0a:49:9c:c8:47:c3:cf:3c:30: 00:ca:8a:9c:cd:e6:a3:12:81:d3:f5:ab:6f:04:9a:ed:5f:63: cd:0b:de:04:cf:84:17:f0:3b:f9:c5:b7:99:a1:2a:01:1c:3b: 74:eb:42:03:53:d8:db:7b:2e:6e:34:7f:1f:73:e8:af:ad:19: 0b:bd:fb:d9:a3:5b:25:02:1c:e2:bd:4f:2f:90:35:1c:1a:11: e4:02:6a:93:d0:e1:6a:85:95:0f:dc:22:ba:f8:42:fe:38:c2: 01:92:09:56 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuAt2NsYInh5l2JS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NTljMmE1NTMtNTBmNS00ZDM4LWEyOTctNWE3OWRmOWVmOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnA7KBA0xG8ILcuymPdmePBFImpFmGHTuLqU bYK/5Nnn5duc06bzqKyLMJ5cVYBo+hJXlTAzy/JfTv4PoH+kAqxs1SGm/v1lABH6 zUxJrn4ig7TC6HR2Etm5t59I8VfckcnnYZXusxMdZ52sosRtMd0iOVY5wd8AHjWN 6Sx4+rC5nXS35f0bemzp3keJD1LChGqz4C+n7daqDP20LTiM1aZvWeEjs8xNTazA pCmu83qDQIfo1LVySrly5gd5B6WCJYgwHK5DeY8zngq/HHRGUvDiVfPXO033pcCA 0KhCtDHIYyBbSixapBVLDD76ksHcL07hi0xAmhQlev6Um2SYzwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI52q8xSW0r9lcK9Pu0juIwVIf9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvM2RkYWI0MWMtYmZlYi0z MGU2LWIwZDgtZWZlZTk2OTBlMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgL/JQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUQv9JwUyt6U3VW//FdO1LCwJaPlVicaUVhOib4wayP1uGHVgByYn cK5libNK3eKkheJOfVB212Ddi70pmXMX8YnMVDJ10Wz5ND6zyLJbvBjFtiAfU+N8 IurqOALe03Dh2+Kf9kYI0fCXIcjdl0DBD3N8wYGaOD2tTCkI4AQK9PUfJC2J1hzT 7UsuEshIergLPuggY7v+LQhcCkmcyEfDzzwwAMqKnM3moxKB0/WrbwSa7V9jzQve BM+EF/A7+cW3maEqARw7dOtCA1PY23subjR/H3Por60ZC7372aNbJQIc4r1PL5A1 HBoR5AJqk9DhaoWVD9wiuvhC/jjCAZIJVg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:13 2025 by rpki-client