$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa File: f8fe083d-baed-30a1-8518-ee28ce1ef020.roa (raw, json) Hash identifier: yeR9K4hQf9FNVnnFBvovyLeYDzByF3xbOlD5fG++uPQ= Subject key identifier: AF:7D:99:BB:F1:40:B9:03:B4:67:E8:72:2B:1B:19:E8:54:7A:D2:6C Certificate issuer: /CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3 Certificate serial: 010D0C9F4328584B4E771304FC104A8E474DB280 Authority key identifier: 38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 394256 IP address blocks: 2602:f95a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:13:04:fc:10:4a:8e:47:4d:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=facff840-ab56-4522-b7e1-eb146c136996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:c8:12:db:91:36:59:62:ab:c6:6f:4e:99: 47:07:79:09:c2:e2:17:35:5a:93:62:0c:c7:12:47: 0d:0b:27:79:45:31:75:7a:5d:48:d4:65:43:e8:c1: 9b:0a:22:88:ba:3f:63:39:12:b1:75:a2:5b:62:7f: fe:f4:d8:d0:fc:56:60:a4:49:56:8f:12:8e:03:30: 58:ce:dc:c8:6b:04:6e:33:e3:0c:28:dc:7a:d9:26: c9:e3:c3:17:00:1c:7c:61:7f:f6:1e:e9:9f:69:68: 24:18:f3:f2:1a:a9:d0:db:93:0f:dd:8b:a8:2a:56: 2f:32:45:3a:d8:2d:d3:51:c0:43:45:f4:11:8e:93: 6f:4b:a0:02:f6:34:af:5a:5b:fe:ff:71:4c:38:1e: 38:ef:58:a4:0d:6c:17:a5:88:43:79:bb:21:dd:24: 07:85:f8:5b:4f:21:b1:48:04:53:1b:3a:e9:02:77: c2:1f:7f:9c:53:a1:3d:ed:09:55:97:bd:4c:cf:7a: f4:77:96:64:c7:d4:35:9b:2b:35:d5:1e:21:e9:ec: 2d:bd:a6:4a:5e:ca:03:d8:5b:da:32:6c:c0:56:8f: e1:67:40:c1:f3:05:d0:71:b4:ee:d3:b0:65:6f:61: b5:22:f2:db:5f:09:84:44:c6:d0:68:48:68:0b:d5: ad:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7D:99:BB:F1:40:B9:03:B4:67:E8:72:2B:1B:19:E8:54:7A:D2:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl X509v3 Authority Key Identifier: keyid:38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a2:bf:3a:76:85:a2:7f:b4:0f:69:ba:6d:bf:4f:ab:d4:62: 7b:bd:21:50:b4:5e:80:4a:77:3a:8f:d1:96:d5:e0:53:52:4d: a0:fd:b9:5a:4e:24:d2:15:d4:ce:8a:72:00:c9:4d:00:c0:8b: 85:e8:96:21:25:a9:92:8c:d5:29:b9:c0:1a:35:ab:88:ee:7b: da:63:c8:cf:e8:41:99:a9:5b:df:8a:9a:19:ef:82:a1:74:0b: 98:55:42:9e:33:f3:2f:42:42:1f:96:92:5d:a6:ca:83:81:0f: 1d:1e:b0:62:3f:d2:71:47:e5:6b:6f:0d:65:21:29:46:d0:f5: 9a:28:b1:ea:4d:4a:8a:10:95:d7:91:87:e3:29:42:86:4e:95: 9b:d6:4a:fb:6d:eb:8e:53:5e:38:ff:aa:17:d9:fc:54:a8:44: 0e:7c:7b:bd:71:7d:79:c5:16:fd:29:bf:7b:09:56:4b:94:29: 6d:7d:2b:c4:63:52:70:43:d4:a7:f5:d5:93:3d:9c:81:0c:3c: 88:52:34:55:1f:35:f5:c8:df:b7:78:23:1c:d9:14:6c:fa:be: a0:f9:35:1f:48:4f:c1:b5:30:02:79:fe:8c:40:63:54:34:dc: 13:d7:44:6f:50:2f:e1:33:c2:3a:24:3b:ba:cc:b4:f7:5a:f4: a8:79:66:1c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtOdxME/BBKjkdNsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRmNmRlNzQtOWFlZC00NzRkLWFlZDItYmE4YWIxM2E3 Y2YzMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmFjZmY4NDAtYWI1Ni00NTIyLWI3ZTEtZWIxNDZjMTM2OTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlojIEtuRNlliq8ZvTplHB3kJwuIXNVqTYgzH EkcNCyd5RTF1el1I1GVD6MGbCiKIuj9jORKxdaJbYn/+9NjQ/FZgpElWjxKOAzBY ztzIawRuM+MMKNx62SbJ48MXABx8YX/2HumfaWgkGPPyGqnQ25MP3YuoKlYvMkU6 2C3TUcBDRfQRjpNvS6AC9jSvWlv+/3FMOB4471ikDWwXpYhDebsh3SQHhfhbTyGx SARTGzrpAnfCH3+cU6E97QlVl71Mz3r0d5Zkx9Q1mys11R4h6ewtvaZKXsoD2Fva MmzAVo/hZ0DB8wXQcbTu07Blb2G1IvLbXwmERMbQaEhoC9WtbQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK99mbvxQLkDtGfocisbGehUetJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGY2 ZGU3NC05YWVkLTQ3NGQtYWVkMi1iYThhYjEzYTdjZjMvZjhmZTA4M2QtYmFlZC0z MGExLTg1MTgtZWUyOGNlMWVmMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRmNmRlNzQtOWFlZC00NzRkLWFl ZDItYmE4YWIxM2E3Y2YzLzJkZjZkZTc0LTlhZWQtNDc0ZC1hZWQyLWJhOGFiMTNh N2NmMy5jcmwwHwYDVR0jBBgwFoAUOHbPTq59AhW/BLdReMMbLZv9vOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZGY2ZGU3NC05YWVkLTQ3NGQtYWVkMi1iYThh YjEzYTdjZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5WgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKqK/OnaFon+0D2m6bb9Pq9Rie70hULRegEp3Oo/RltXgU1JNoP25 Wk4k0hXUzopyAMlNAMCLheiWISWpkozVKbnAGjWriO572mPIz+hBmalb34qaGe+C oXQLmFVCnjPzL0JCH5aSXabKg4EPHR6wYj/ScUfla28NZSEpRtD1miix6k1KihCV 15GH4ylChk6Vm9ZK+23rjlNeOP+qF9n8VKhEDnx7vXF9ecUW/Sm/ewlWS5QpbX0r xGNScEPUp/XVkz2cgQw8iFI0VR819cjft3gjHNkUbPq+oPk1H0hPwbUwAnn+jEBj VDTcE9dEb1Av4TPCOiQ7usy091r0qHlmHA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:15 2025 by rpki-client