$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa File: aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa (raw, json) Hash identifier: SfSFQxYmiIHfRSmvNzLOkL7In0D4SzCY5djfalzcK68= Subject key identifier: 9D:07:1D:20:70:42:53:9D:2A:91:8D:C9:99:57:2C:D7:E8:60:27:73 Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Certificate serial: 010D0C9F4328584B821CD3E9F8FF2355DDE554C0 Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 61112 IP address blocks: 2602:fa4f:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d3:e9:f8:ff:23:55:dd:e5:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=5cfba2a9-c167-4048-8c27-24000fe5ba2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:58:bf:f6:f5:44:19:f4:90:25:81:e0:5a: 96:81:19:cc:6f:be:d0:2f:cb:cf:64:34:ef:fc:7a: 93:c0:e6:f0:7c:47:4e:c9:09:fd:7a:98:0d:4b:a1: 00:95:d4:92:4f:30:3b:0b:74:b8:4e:0f:e1:a5:33: 7b:d7:e3:1c:5d:27:c2:4f:5a:ab:14:53:cb:b1:23: 95:44:4c:3a:66:0f:ab:23:46:0e:09:6d:b8:dc:0a: 2e:71:5d:d3:dc:32:29:99:32:a4:0b:2e:16:fb:69: e9:f1:0e:9d:ac:75:e5:e1:88:e6:6c:c6:1d:42:b8: 80:0d:88:25:54:45:49:e5:26:c5:de:40:3e:9a:2c: 21:f0:78:8d:91:00:3a:df:a1:2b:9d:2a:06:6e:8b: f6:de:8d:34:60:f1:26:bd:ab:83:fb:7e:6a:e4:73: e6:7d:eb:a1:48:69:07:96:f8:27:78:c5:09:81:24: b7:05:62:19:ce:cf:2f:83:5a:12:21:88:a5:70:bb: 8a:90:18:9a:a5:be:be:0e:fb:14:1a:4f:fb:04:95: 9e:88:e5:0e:f9:e6:6f:19:fb:55:e0:f8:78:87:0d: 00:56:b4:bf:13:a0:49:33:db:2f:4d:25:d3:21:0a: 2d:28:13:34:f8:b4:87:6a:b4:c9:29:1d:16:a7:a9: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:07:1D:20:70:42:53:9D:2A:91:8D:C9:99:57:2C:D7:E8:60:27:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl X509v3 Authority Key Identifier: keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa4f:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:2b:29:93:6a:17:ba:6c:d7:07:84:19:3d:ff:48:52:39:11: ce:ee:43:ac:01:0f:ce:5e:9c:5b:5f:91:54:ec:68:ca:d3:25: f9:50:11:3a:4c:65:58:3a:43:6f:a2:e1:e7:f5:e5:70:b7:b1: e6:e4:93:1f:34:45:17:00:f6:82:20:30:15:f3:b6:0f:1d:b3: 94:dd:b5:b6:98:25:fd:93:4f:06:71:f3:25:7a:ae:0d:e3:74: b9:b2:ea:8f:0a:14:cb:d0:60:ce:21:27:ca:c6:4d:ea:41:55: df:dd:16:17:23:a5:d9:15:3f:28:52:53:bd:20:69:56:b0:d5: 7d:c5:71:db:04:da:3f:35:a8:cf:df:d6:ea:d7:81:5d:8c:cf: 5d:4e:26:45:a9:1a:c5:46:09:14:fc:0a:fb:1a:56:db:0b:2b: 9e:3a:9a:a2:56:61:6d:69:c3:31:64:3a:db:82:62:1d:26:e2: 94:2c:ad:be:33:59:4b:ce:cb:d4:53:38:4c:06:16:51:59:d3: 35:4a:d1:df:bd:ce:f9:0c:44:68:05:43:de:be:b1:c8:98:41: 6d:eb:9a:bc:b6:cf:d2:25:e7:5f:ba:19:eb:f5:f9:c5:b7:15: 9c:db:1c:af:e0:66:2b:14:c4:c1:62:e7:33:b0:2f:87:5d:85: 02:e3:ea:89 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuCHNPp+P8jVd3lVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2 YmY3MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NWNmYmEyYTktYzE2Ny00MDQ4LThjMjctMjQwMDBmZTViYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5xYv/b1RBn0kCWB4FqWgRnMb77QL8vPZDTv /HqTwObwfEdOyQn9epgNS6EAldSSTzA7C3S4Tg/hpTN71+McXSfCT1qrFFPLsSOV REw6Zg+rI0YOCW243AoucV3T3DIpmTKkCy4W+2np8Q6drHXl4YjmbMYdQriADYgl VEVJ5SbF3kA+miwh8HiNkQA636ErnSoGbov23o00YPEmvauD+35q5HPmfeuhSGkH lvgneMUJgSS3BWIZzs8vg1oSIYilcLuKkBiapb6+DvsUGk/7BJWeiOUO+eZvGftV 4Ph4hw0AVrS/E6BJM9svTSXTIQotKBM0+LSHarTJKR0Wp6nNqwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ0HHSBwQlOdKpGNyZlXLNfoYCdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4 ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvYWZmNTliZGMtZjA2OC0z ZWNiLWEyMzUtM2VkNDc0MDlhOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1 ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2 NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4 ZTU2NjZiZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6TwIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJispk2oXumzXB4QZPf9IUjkRzu5DrAEPzl6cW1+RVOxoytMl+VAR OkxlWDpDb6Lh5/XlcLex5uSTHzRFFwD2giAwFfO2Dx2zlN21tpgl/ZNPBnHzJXqu DeN0ubLqjwoUy9BgziEnysZN6kFV390WFyOl2RU/KFJTvSBpVrDVfcVx2wTaPzWo z9/W6teBXYzPXU4mRakaxUYJFPwK+xpW2wsrnjqaolZhbWnDMWQ624JiHSbilCyt vjNZS87L1FM4TAYWUVnTNUrR373O+QxEaAVD3r6xyJhBbeuavLbP0iXnX7oZ6/X5 xbcVnNscr+BmKxTEwWLnM7Avh12FAuPqiQ== -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:44 2025 by rpki-client