$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa File: 9682d34a-d558-35ce-b94a-c06ff912b18e.roa (raw, json) Hash identifier: e5C/TjfejmPnprUvwWVPc1fvH7BuxFEmp5dkaTWlqYU= Subject key identifier: C0:49:D2:C8:22:45:BE:70:E4:D0:08:94:97:7A:70:D6:66:14:6A:04 Certificate issuer: /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Certificate serial: 010D0C9F4328584B4FDC7982CFAB3B80E7F3F880 Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 46149 IP address blocks: 2602:fc25::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:79:82:cf:ab:3b:80:e7:f3:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=ef98f117-2d06-457a-bfec-06745f402a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:93:bc:48:37:5f:0a:83:cd:a1:ea:f1:ab: c8:65:da:69:1d:87:76:b8:69:81:82:cf:70:a0:af: 4b:b7:f9:12:ea:73:73:0e:0e:82:42:6f:95:79:34: a0:ec:d2:af:7b:f8:50:d7:a5:59:4c:08:d1:73:5f: d3:c4:95:0e:8c:96:d5:02:ca:c3:6e:4a:3e:d0:04: 6f:59:8c:b6:64:10:41:90:4f:7e:45:4b:24:7f:af: b2:9d:48:33:2a:0e:ca:82:c8:66:a3:6f:7a:80:68: e2:92:44:da:8d:67:01:c6:c7:c3:45:af:61:72:07: 43:a5:92:96:4f:cf:45:91:f2:e7:e7:a8:83:93:9b: 36:a2:f4:82:92:3b:1b:88:23:38:47:e3:64:e7:1b: 91:e4:08:1c:f6:98:e4:1a:49:3e:77:e1:41:2e:23: af:17:c1:77:e5:aa:01:08:5c:0d:7a:18:f9:87:33: 32:b6:5d:e0:f1:8b:56:a0:94:0d:d2:53:b4:71:35: 31:21:63:4d:1c:44:6b:b6:0c:1b:ad:36:b7:81:67: a2:0b:ca:df:03:3b:b2:85:16:25:98:9d:1d:be:9e: 98:ce:7a:32:74:a4:27:68:48:15:c9:ce:68:d5:95: c7:1d:c5:05:02:fe:38:76:e0:ee:4f:23:a0:6f:e9: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:49:D2:C8:22:45:BE:70:E4:D0:08:94:97:7A:70:D6:66:14:6A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl X509v3 Authority Key Identifier: keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc25::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:93:d6:ad:94:02:cb:5a:77:c3:97:34:b0:f2:4b:18:c4:df: 46:3f:0f:cb:10:44:d9:b9:5f:d6:ed:cf:8f:1c:52:69:27:63: 77:ee:47:1e:19:f4:08:3b:06:bc:eb:d7:cc:37:39:f4:91:51: 38:a1:c9:10:ba:5a:ee:9f:44:5b:7c:d4:41:ae:73:d9:59:c9: 11:d0:58:77:91:40:5e:75:c8:0d:ca:9c:27:52:4a:c1:0d:62: 5a:58:f9:d3:ed:5c:09:10:d2:f8:e2:fa:77:7b:04:07:49:85: 58:61:33:50:44:75:c5:ee:a4:aa:56:e5:3b:ad:fc:01:50:11: b1:fb:1c:4d:27:64:8c:b0:f4:79:7f:03:86:e3:fc:71:32:37: 67:d2:0f:4b:e4:ed:7d:73:e7:d9:3d:a4:18:bf:0d:ab:8b:19: be:2d:55:ab:ff:87:db:dd:0c:62:1e:e5:81:cd:85:db:56:bc: a5:6f:81:b2:b4:91:24:d9:c9:f0:73:41:2a:d5:38:89:e3:be: 63:69:2a:5f:a2:85:ca:18:c2:e2:d5:09:25:2b:b1:ad:c1:26: 17:73:31:06:ca:db:9a:4f:78:1f:9d:3c:98:11:69:71:cc:37: 8c:0a:6b:3e:55:b3:37:36:92:c1:ef:7c:02:bc:fb:38:b1:b3: fe:ff:9c:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtP3HmCz6s7gOfz+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RlMzlkM2UtMzgzNy00MzQxLWE4YmQtODZjNzRjMDZh NmU0MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZWY5OGYxMTctMmQwNi00NTdhLWJmZWMtMDY3NDVmNDAyYTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh6TvEg3XwqDzaHq8avIZdppHYd2uGmBgs9w oK9Lt/kS6nNzDg6CQm+VeTSg7NKve/hQ16VZTAjRc1/TxJUOjJbVAsrDbko+0ARv WYy2ZBBBkE9+RUskf6+ynUgzKg7Kgshmo296gGjikkTajWcBxsfDRa9hcgdDpZKW T89FkfLn56iDk5s2ovSCkjsbiCM4R+Nk5xuR5Agc9pjkGkk+d+FBLiOvF8F35aoB CFwNehj5hzMytl3g8YtWoJQN0lO0cTUxIWNNHERrtgwbrTa3gWeiC8rfAzuyhRYl mJ0dvp6YznoydKQnaEgVyc5o1ZXHHcUFAv44duDuTyOgb+mXmQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMBJ0sgiRb5w5NAIlJd6cNZmFGoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUz OWQzZS0zODM3LTQzNDEtYThiZC04NmM3NGMwNmE2ZTQvOTY4MmQzNGEtZDU1OC0z NWNlLWI5NGEtYzA2ZmY5MTJiMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RlMzlkM2UtMzgzNy00MzQxLWE4 YmQtODZjNzRjMDZhNmU0L2NkZTM5ZDNlLTM4MzctNDM0MS1hOGJkLTg2Yzc0YzA2 YTZlNC5jcmwwHwYDVR0jBBgwFoAUvuGpWNaK7St+8q41TTvs7MIvWykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUzOWQzZS0zODM3LTQzNDEtYThiZC04NmM3 NGMwNmE2ZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8JQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXJPWrZQCy1p3w5c0sPJLGMTfRj8PyxBE2blf1u3PjxxSaSdjd+5H Hhn0CDsGvOvXzDc59JFROKHJELpa7p9EW3zUQa5z2VnJEdBYd5FAXnXIDcqcJ1JK wQ1iWlj50+1cCRDS+OL6d3sEB0mFWGEzUER1xe6kqlblO638AVARsfscTSdkjLD0 eX8DhuP8cTI3Z9IPS+TtfXPn2T2kGL8Nq4sZvi1Vq/+H290MYh7lgc2F21a8pW+B srSRJNnJ8HNBKtU4ieO+Y2kqX6KFyhjC4tUJJSuxrcEmF3MxBsrbmk94H508mBFp ccw3jAprPlWzNzaSwe98Arz7OLGz/v+ccg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:41 2025 by rpki-client