$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/30adbbb7-2dbe-3512-856e-1a6e96dde702.roa File: 30adbbb7-2dbe-3512-856e-1a6e96dde702.roa (raw, json) Hash identifier: GVA8BKhujwnppziCjVEzbO5Ri1zfntGBOqITUtFqg/k= Subject key identifier: DB:11:55:78:A5:61:C3:76:C6:CB:4C:15:53:7E:23:AF:1E:6C:1B:A3 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584B82D1628A3AA86064FE357510 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/30adbbb7-2dbe-3512-856e-1a6e96dde702.roa Signing time: Mon 13 Oct 2025 19:04:40 +0000 ROA not before: Mon 13 Oct 2025 19:04:40 +0000 ROA not after: Sun 11 Jan 2026 20:04:40 +0000 asID: 11017 IP address blocks: 2602:f98b:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:d1:62:8a:3a:a8:60:64:fe:35:75:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Oct 13 19:04:40 2025 GMT Not After : Jan 11 20:04:40 2026 GMT Subject: CN=4f2b4e7c-8bdb-4de7-afc9-2379c170c507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:7e:54:71:99:8a:f8:4c:bd:05:54:1f:67: c0:25:c1:ff:3f:d0:b2:f8:07:ec:6e:55:f0:ab:94: 2e:86:cc:7b:c8:7d:77:3f:ed:e6:a1:b2:73:9a:25: fe:3d:2d:91:32:41:fc:98:0b:aa:3c:37:1b:6d:ca: d4:c5:ec:9b:48:3f:92:ed:45:e2:d8:1e:dd:24:e7: a9:67:72:9f:9f:8a:00:cd:83:84:26:eb:01:70:5c: a1:32:dd:34:bc:40:cd:55:40:3c:23:2f:fb:15:a4: 76:4f:71:8d:00:f1:3a:0e:2a:43:c0:40:3a:8e:fb: e7:fd:5b:29:8f:b1:53:c1:85:71:8b:68:5c:0b:42: e2:4e:e5:75:eb:14:fa:28:60:6e:f6:f4:df:5b:2b: 0f:ad:4c:f4:7c:ad:0d:7f:82:34:eb:33:25:71:0e: 91:73:c2:65:69:e7:e3:9c:4e:aa:ab:04:07:22:ec: 7f:4c:a4:81:f7:d4:23:ed:e9:7c:e7:3f:d9:0d:cd: 87:90:5b:f3:17:b6:1d:18:1b:26:15:3a:a9:b9:99: 4b:3d:4e:30:62:c7:b1:d4:b4:a6:2e:eb:55:29:01: 4b:0e:51:82:e9:e0:24:0f:f4:91:d8:4a:36:65:e1: 1a:39:70:f0:39:77:8b:4f:79:08:ef:56:60:78:42: c9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:11:55:78:A5:61:C3:76:C6:CB:4C:15:53:7E:23:AF:1E:6C:1B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/30adbbb7-2dbe-3512-856e-1a6e96dde702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6a:d4:b4:51:79:57:7f:20:cb:11:9e:9f:1c:df:a4:b3:60: d1:4a:89:56:c9:ad:17:ae:fa:6d:2e:bf:77:22:fd:6a:6d:b2: 91:c5:85:4a:f2:fd:b5:3c:62:66:dd:05:fd:e9:5b:97:72:8c: ee:33:9c:29:ca:bf:86:50:f0:19:bd:d5:0d:3e:30:4e:e7:a7: 0e:68:43:5c:07:cb:e4:e9:fd:cc:d3:eb:27:8b:0a:c3:fb:69: 6d:3b:be:1d:f2:29:34:4c:d9:0e:f1:b6:0b:be:01:bc:30:bf: 26:15:9e:c7:93:84:ce:43:a6:f7:7f:d5:05:b6:2b:3c:74:5a: 60:09:e6:b1:90:20:01:56:93:c5:9c:ec:42:42:55:8a:d4:11: 8d:4a:c2:c1:d2:c8:4c:45:ae:e8:6f:43:51:94:c1:9c:b4:f0: 41:56:3a:21:f8:4e:81:de:0c:ec:46:4d:92:63:d2:c9:98:0c: 2a:0d:63:73:0a:7d:61:bf:05:51:84:e4:af:03:76:6b:0d:7a: b1:4f:cc:8f:f3:7e:90:06:a5:85:6b:82:da:a7:8e:40:04:81: 64:7c:e2:50:07:ce:51:77:53:62:34:71:db:d6:36:06:81:b2: 34:39:7d:4d:00:00:a8:3d:53:3f:fa:08:9e:89:6d:a4:f7:8a: 33:3f:a7:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuC0WKKOqhgZP41dRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MTAxMzE5MDQ0MFoXDTI2MDExMTIwMDQ0MFowLzEtMCsGA1UEAxMk NGYyYjRlN2MtOGJkYi00ZGU3LWFmYzktMjM3OWMxNzBjNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+V+VHGZivhMvQVUH2fAJcH/P9Cy+AfsblXw q5Quhsx7yH13P+3mobJzmiX+PS2RMkH8mAuqPDcbbcrUxeybSD+S7UXi2B7dJOep Z3Kfn4oAzYOEJusBcFyhMt00vEDNVUA8Iy/7FaR2T3GNAPE6DipDwEA6jvvn/Vsp j7FTwYVxi2hcC0LiTuV16xT6KGBu9vTfWysPrUz0fK0Nf4I06zMlcQ6Rc8Jlaefj nE6qqwQHIux/TKSB99Qj7el85z/ZDc2HkFvzF7YdGBsmFTqpuZlLPU4wYsex1LSm LutVKQFLDlGC6eAkD/SR2Eo2ZeEaOXDwOXeLT3kI71ZgeELJcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNsRVXilYcN2xstMFVN+I68ebBujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvMzBhZGJiYjctMmRiZS0z NTEyLTg1NmUtMWE2ZTk2ZGRlNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5iwAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHlq1LRReVd/IMsRnp8c36SzYNFKiVbJrReu+m0uv3ci/WptspHF hUry/bU8YmbdBf3pW5dyjO4znCnKv4ZQ8Bm91Q0+ME7npw5oQ1wHy+Tp/czT6yeL CsP7aW07vh3yKTRM2Q7xtgu+AbwwvyYVnseThM5Dpvd/1QW2Kzx0WmAJ5rGQIAFW k8Wc7EJCVYrUEY1KwsHSyExFruhvQ1GUwZy08EFWOiH4ToHeDOxGTZJj0smYDCoN Y3MKfWG/BVGE5K8DdmsNerFPzI/zfpAGpYVrgtqnjkAEgWR84lAHzlF3U2I0cdvW NgaBsjQ5fU0AAKg9Uz/6CJ6JbaT3ijM/pwo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:10 2025 by rpki-client