$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa File: 352e0bf1-c858-31db-a4b1-a0641760c140.roa (raw, json) Hash identifier: iO1kmSIkZXtvSk7xdRzNwhs+0L6vjURFhUPq4A/XeoQ= Subject key identifier: 52:43:95:98:22:A3:6F:1E:D2:DB:A2:88:57:59:71:03:86:B3:6F:C3 Certificate issuer: /CN=206290f3-53e1-4d17-8678-29dace17c006 Certificate serial: 010D0C9F4328584B66320236A865E9970B93F700 Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 33179 IP address blocks: 2602:fa21::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:02:36:a8:65:e9:97:0b:93:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=0abaf97b-9d25-43f1-a379-c16d9682d04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:60:11:6c:2c:4e:02:e8:c4:d2:00:59:c6:9b: b4:12:fd:9e:1e:7c:96:4c:0a:70:4b:e1:6e:99:b2: 89:4a:46:b3:d7:37:42:42:9e:27:0d:5e:f1:ea:72: be:7f:6d:73:60:82:8a:ad:9f:bd:c2:8b:f1:4c:89: f9:03:6f:6c:73:4b:46:4d:91:47:8d:f8:af:b4:a6: 9e:ea:9d:4c:83:7b:16:db:29:50:d8:4f:a8:cf:83: 21:af:e8:a9:d8:b3:23:f1:62:19:62:8c:00:ea:d8: d2:69:88:e7:81:3e:de:16:24:27:0c:21:19:d5:29: 8b:87:cf:12:49:cd:7e:bb:35:87:e9:70:e1:5a:2b: 79:cb:5c:fb:ff:ed:28:f9:31:d7:50:32:93:07:28: 37:24:c3:ed:67:01:fe:74:5e:ab:6d:d9:f0:c1:a4: 96:fe:8c:0f:e2:f5:cf:8e:be:01:96:a8:f1:e5:02: 9e:af:cd:0a:bf:73:6c:13:96:c8:b9:13:98:6b:5d: 5d:21:15:46:f1:f3:3c:99:7b:29:fd:74:24:39:c8: 82:3b:0d:a3:b6:b4:94:c0:d8:fd:54:8e:d3:9c:6e: a8:c6:9e:e3:8b:bd:cd:ce:06:26:94:70:43:5a:ba: af:a1:e9:cd:bf:58:49:01:43:4f:a3:84:c1:ba:82: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:95:98:22:A3:6F:1E:D2:DB:A2:88:57:59:71:03:86:B3:6F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl X509v3 Authority Key Identifier: keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa21::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:14:f7:4a:ff:ce:02:78:04:fb:0a:4d:b9:1b:7d:65:59:c1: 8c:d7:0e:33:52:a5:5e:a2:47:89:2c:dd:2d:30:21:d9:8f:1e: d6:ce:1f:54:9a:07:2c:89:78:e4:09:e2:ad:d6:03:b2:4b:5b: 49:21:5f:93:ca:ce:48:0c:d7:81:56:4a:f9:6c:b9:1e:36:11: 9b:ac:a0:f5:c0:db:d4:6f:48:9a:d0:6e:35:0d:39:72:4b:00: b1:71:e5:9f:34:70:de:9d:c0:1e:fe:d2:56:a3:75:b8:e1:f9: 57:fa:95:42:62:09:8d:be:0d:bf:55:42:c9:80:62:c7:50:27: b7:e0:17:21:e8:46:bd:a9:32:74:fd:fb:b0:cf:aa:f1:3c:e0: a8:a6:a2:f4:e2:12:b8:fb:3a:d1:0a:e3:9c:bb:c8:02:99:7b: 82:2a:1d:ec:ac:ad:e7:d1:be:bd:b4:b1:c5:0b:2f:55:f8:64: 6e:37:ab:c5:f9:d9:8b:01:a9:02:c7:4d:47:f9:3c:8e:62:39: f3:27:d8:20:40:54:ba:3a:d0:81:7d:71:97:ae:64:6d:65:85: 6b:83:ad:68:38:f3:e3:3b:28:11:ed:7e:06:1c:aa:22:b0:6d: 8c:db:2a:a4:18:9f:2e:51:5b:77:3d:b3:a3:92:eb:aa:60:b7: 59:5d:ff:8c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtmMgI2qGXplwuT9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA2MjkwZjMtNTNlMS00ZDE3LTg2NzgtMjlkYWNlMTdj MDA2MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MGFiYWY5N2ItOWQyNS00M2YxLWEzNzktYzE2ZDk2ODJkMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWARbCxOAujE0gBZxpu0Ev2eHnyWTApwS+Fu mbKJSkaz1zdCQp4nDV7x6nK+f21zYIKKrZ+9wovxTIn5A29sc0tGTZFHjfivtKae 6p1Mg3sW2ylQ2E+oz4Mhr+ip2LMj8WIZYowA6tjSaYjngT7eFiQnDCEZ1SmLh88S Sc1+uzWH6XDhWit5y1z7/+0o+THXUDKTByg3JMPtZwH+dF6rbdnwwaSW/owP4vXP jr4Blqjx5QKer80Kv3NsE5bIuROYa11dIRVG8fM8mXsp/XQkOciCOw2jtrSUwNj9 VI7TnG6oxp7ji73NzgYmlHBDWrqvoenNv1hJAUNPo4TBuoJ0JQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFJDlZgio28e0tuiiFdZcQOGs2/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYy OTBmMy01M2UxLTRkMTctODY3OC0yOWRhY2UxN2MwMDYvMzUyZTBiZjEtYzg1OC0z MWRiLWE0YjEtYTA2NDE3NjBjMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjA2MjkwZjMtNTNlMS00ZDE3LTg2 NzgtMjlkYWNlMTdjMDA2LzIwNjI5MGYzLTUzZTEtNGQxNy04Njc4LTI5ZGFjZTE3 YzAwNi5jcmwwHwYDVR0jBBgwFoAUsHV107looknvuXfhkkalRpfsG/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYyOTBmMy01M2UxLTRkMTctODY3OC0yOWRh Y2UxN2MwMDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6IQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcRT3Sv/OAngE+wpNuRt9ZVnBjNcOM1KlXqJHiSzdLTAh2Y8e1s4f VJoHLIl45AnirdYDsktbSSFfk8rOSAzXgVZK+Wy5HjYRm6yg9cDb1G9ImtBuNQ05 cksAsXHlnzRw3p3AHv7SVqN1uOH5V/qVQmIJjb4Nv1VCyYBix1Ant+AXIehGvaky dP37sM+q8TzgqKai9OISuPs60QrjnLvIApl7giod7Kyt59G+vbSxxQsvVfhkbjer xfnZiwGpAsdNR/k8jmI58yfYIEBUujrQgX1xl65kbWWFa4OtaDjz4zsoEe1+Bhyq IrBtjNsqpBifLlFbdz2zo5LrqmC3WV3/jA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:59:47 2025 by rpki-client