$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/07f32588-d6b4-3250-8be3-5e0ce175231a.roa File: 07f32588-d6b4-3250-8be3-5e0ce175231a.roa (raw, json) Hash identifier: zNeCh23zNGjPNywpZrerd7jwy4gzyZZ/7OOe1w5/cvM= Subject key identifier: CD:56:B1:11:6C:20:D5:55:83:06:83:E8:22:E3:4F:4C:EE:70:E6:46 Certificate issuer: /CN=f6a6838a-15aa-48f4-960c-d9d0071829af Certificate serial: 010D0C9F4328584B5571E2631FAA4CD61F5AE780 Authority key identifier: 21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/07f32588-d6b4-3250-8be3-5e0ce175231a.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2602:f95d::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e2:63:1f:aa:4c:d6:1f:5a:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a6838a-15aa-48f4-960c-d9d0071829af Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=04c16ed1-0b57-4434-b0f1-76b62105b9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:05:c9:3c:ca:72:d7:f8:12:04:79:b1:b9:13: 23:2e:bd:10:31:86:32:b4:12:1d:7d:fe:16:2b:fb: cc:44:38:a0:23:33:45:8f:e7:e0:6d:d1:7e:9b:8a: cc:38:0e:16:73:c3:fe:7d:3a:03:1f:a7:37:cd:a7: 0c:fe:a5:2a:49:46:f0:f6:02:a5:6e:2e:9b:e0:4f: 2e:5b:39:8c:89:24:40:42:10:5a:e5:ba:9a:55:1d: ec:24:ae:2f:b4:91:a0:aa:eb:05:84:4b:c6:fc:70: 7f:dd:af:c4:02:43:85:8e:9d:40:cd:be:b6:1e:c3: a8:8a:d1:3c:53:be:72:e4:67:c5:bd:ef:69:c1:e6: a0:78:2c:d4:d2:f9:1c:3c:7a:90:91:5b:e0:a0:10: 07:44:1c:05:03:24:c4:a6:aa:ae:8e:f4:06:43:49: 32:e4:e5:d2:0f:bc:ef:20:ed:0c:4e:e6:08:d0:53: 82:ee:13:4c:fc:af:86:dc:67:93:87:2c:17:53:cb: 02:1c:41:19:78:34:9f:df:b5:f7:1a:e3:da:c2:9a: 51:15:c8:ce:da:d3:21:1a:76:cf:43:96:76:78:15: e7:61:e1:d6:88:e6:83:52:2d:21:4a:6c:bb:29:1c: bb:ea:55:5e:cb:17:c8:8d:fd:c6:4a:96:b2:e5:40: 8d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:56:B1:11:6C:20:D5:55:83:06:83:E8:22:E3:4F:4C:EE:70:E6:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/07f32588-d6b4-3250-8be3-5e0ce175231a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.crl X509v3 Authority Key Identifier: keyid:21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95d::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:34:b0:f9:74:a2:01:c1:df:9c:a2:7b:bc:d5:d1:8b:1a:c2: 13:e4:43:5c:e5:a3:a2:03:b5:c5:67:6a:25:f4:78:66:c4:dc: 33:25:c3:e7:f4:df:96:a0:98:b1:10:53:4b:1c:75:c0:ab:8f: 0b:5e:10:c3:c7:40:97:ce:1f:f3:cd:87:5b:45:77:26:2d:0c: db:e1:02:63:47:78:6d:ca:ae:4b:15:3b:82:ef:c3:b3:85:a4: c5:4d:4b:65:e9:a8:a0:45:89:49:50:ce:1a:fa:13:a9:cd:89: 7c:1c:cf:a0:e4:1a:94:49:fb:69:05:91:24:6f:38:cd:99:67: 68:80:aa:72:05:32:fc:12:eb:da:82:d3:ca:ab:d1:35:0c:28: 32:a4:d0:db:de:17:9d:b8:2b:e5:2a:2b:2b:f7:d5:80:10:c9: a5:72:f5:0e:68:85:11:07:04:94:12:ad:3c:d8:ec:2e:50:41: aa:94:b5:2b:9d:00:b3:fe:9a:54:3d:d3:53:37:8f:48:e1:28: 66:73:b6:56:43:84:f6:d0:8f:03:b5:96:20:50:0a:62:4c:1d: e8:8f:01:1f:d3:db:a7:b8:44:ec:3f:21:27:1e:c5:3b:09:7e: 39:2d:bc:0d:da:4f:59:ac:3e:a8:93:44:e9:30:d2:49:31:61: 08:df:a7:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtVceJjH6pM1h9a54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhNjgzOGEtMTVhYS00OGY0LTk2MGMtZDlkMDA3MTgy OWFmMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MDRjMTZlZDEtMGI1Ny00NDM0LWIwZjEtNzZiNjIxMDViOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAXJPMpy1/gSBHmxuRMjLr0QMYYytBIdff4W K/vMRDigIzNFj+fgbdF+m4rMOA4Wc8P+fToDH6c3zacM/qUqSUbw9gKlbi6b4E8u WzmMiSRAQhBa5bqaVR3sJK4vtJGgqusFhEvG/HB/3a/EAkOFjp1Azb62HsOoitE8 U75y5GfFve9pweageCzU0vkcPHqQkVvgoBAHRBwFAyTEpqqujvQGQ0ky5OXSD7zv IO0MTuYI0FOC7hNM/K+G3GeThywXU8sCHEEZeDSf37X3GuPawppRFcjO2tMhGnbP Q5Z2eBXnYeHWiOaDUi0hSmy7KRy76lVeyxfIjf3GSpay5UCNgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM1WsRFsINVVgwaD6CLjT0zucOZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mNmE2 ODM4YS0xNWFhLTQ4ZjQtOTYwYy1kOWQwMDcxODI5YWYvMDdmMzI1ODgtZDZiNC0z MjUwLThiZTMtNWUwY2UxNzUyMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjZhNjgzOGEtMTVhYS00OGY0LTk2 MGMtZDlkMDA3MTgyOWFmL2Y2YTY4MzhhLTE1YWEtNDhmNC05NjBjLWQ5ZDAwNzE4 MjlhZi5jcmwwHwYDVR0jBBgwFoAUIeAbXSgo1O64sne4Cd2gSm26C3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mNmE2ODM4YS0xNWFhLTQ4ZjQtOTYwYy1kOWQw MDcxODI5YWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgL5XQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH00sPl0ogHB35yie7zV0YsawhPkQ1zlo6IDtcVnaiX0eGbE3DMl w+f035agmLEQU0scdcCrjwteEMPHQJfOH/PNh1tFdyYtDNvhAmNHeG3KrksVO4Lv w7OFpMVNS2XpqKBFiUlQzhr6E6nNiXwcz6DkGpRJ+2kFkSRvOM2ZZ2iAqnIFMvwS 69qC08qr0TUMKDKk0NveF524K+UqKyv31YAQyaVy9Q5ohREHBJQSrTzY7C5QQaqU tSudALP+mlQ901M3j0jhKGZztlZDhPbQjwO1liBQCmJMHeiPAR/T26e4ROw/ISce xTsJfjktvA3aT1msPqiTROkw0kkxYQjfp1s= -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:22 2025 by rpki-client