$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/11c8c619-516a-3b58-aebf-93589cfa4504.roa File: 11c8c619-516a-3b58-aebf-93589cfa4504.roa (raw, json) Hash identifier: dV+LJ+WoyyhtFkyk/g7cqjAcrC6MXBzNGtw/fwY/Jug= Subject key identifier: 6B:D8:AB:5D:92:B4:96:A1:D7:C9:2D:E5:31:31:3A:FE:E0:66:63:83 Certificate issuer: /CN=0e425ca6-d583-4845-b329-c74ded17c483 Certificate serial: 010D0C9F4328584B5141BFD35E0A9BB0358A38C0 Authority key identifier: AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/11c8c619-516a-3b58-aebf-93589cfa4504.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 20200 IP address blocks: 2602:f7b5:ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:bf:d3:5e:0a:9b:b0:35:8a:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e425ca6-d583-4845-b329-c74ded17c483 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=452a843e-9ae2-406b-a7a0-c3890b400f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:64:66:3b:bb:90:45:0c:86:84:ca:65:fd:a5: 22:8e:9f:8e:68:30:8e:ec:bd:79:ab:e8:1c:2d:48: 5e:a1:6d:5d:a8:67:cb:32:28:33:3a:09:e0:2e:9f: 66:52:e6:1e:39:ba:4d:36:dd:8b:b5:ef:3a:b7:c5: 02:c7:07:c7:96:04:5b:9e:fa:9c:6e:bb:e9:45:6b: 31:06:12:b4:e4:56:9b:96:84:7a:89:6e:76:c1:07: 00:80:99:88:1c:17:22:4e:cc:c1:a0:86:83:67:5a: 7c:42:9d:7e:bd:88:34:1a:b5:c8:f3:ef:b0:fa:96: 6d:a6:3d:22:f0:8a:df:9f:34:f3:5e:2f:c7:49:e6: 2f:fe:bc:36:ba:c6:be:00:d6:b6:33:b4:e7:3a:41: 87:44:66:8a:2a:c1:88:c1:83:21:9e:56:2a:44:36: 0b:5b:56:16:db:48:e1:6d:06:8a:45:b2:84:94:1e: 4d:1a:05:8b:86:74:bb:6f:db:e6:0d:ba:2a:4e:1b: 15:24:1c:58:ba:07:ef:d6:c4:c2:42:21:88:42:e6: 57:bf:03:98:6c:5a:be:db:fd:e1:d0:a9:9d:fa:1a: 8e:ed:45:64:e6:91:d0:64:2f:04:ea:9a:d7:0f:d2: a3:b8:17:c8:81:49:08:a3:16:7c:f7:39:8e:dd:15: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D8:AB:5D:92:B4:96:A1:D7:C9:2D:E5:31:31:3A:FE:E0:66:63:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/11c8c619-516a-3b58-aebf-93589cfa4504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl X509v3 Authority Key Identifier: keyid:AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7b5:ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:1d:12:b3:91:82:a6:40:28:57:3b:31:af:94:cb:dd:17:78: 99:61:98:72:b0:47:6e:bd:51:fa:e9:30:7c:7f:ac:e0:a0:0b: 74:12:26:02:91:a9:dd:26:12:57:dc:3c:ad:1c:ff:1b:96:e3: c3:07:b3:51:10:c9:f6:ce:6a:34:08:dc:39:c4:38:63:8d:7f: 3a:33:5e:21:c1:15:29:6b:25:5a:97:15:73:54:d4:85:ab:54: 92:25:0b:e0:b7:56:b2:3c:ff:02:3a:7d:80:ba:dc:d9:28:20: 68:04:8f:93:c1:0c:d6:12:8a:47:59:ee:6b:20:d7:e8:cd:20: 7f:de:da:af:96:b8:cd:f8:3f:9e:f1:86:e2:b5:9c:2d:62:a2: f5:08:d0:cc:7d:9a:7e:8a:31:8d:c0:71:ad:5a:3b:8d:58:c2: d7:06:7a:98:55:fb:5d:f3:74:2d:b7:7a:73:60:ad:70:8c:72: ce:f7:bf:00:12:67:88:ca:6f:2c:1a:c5:ec:7a:ac:bd:54:28: 5f:dc:5c:8a:e4:50:cc:18:0e:44:78:c6:b4:a9:40:63:a1:e0: 99:81:71:2f:94:52:6f:de:58:9c:8d:ec:de:1e:6d:50:d1:2a: 5c:bd:5c:4c:91:6c:98:fb:7b:e0:e4:01:b8:fe:ad:81:b8:ca: 40:db:be:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtRQb/TXgqbsDWKOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0MjVjYTYtZDU4My00ODQ1LWIzMjktYzc0ZGVkMTdj NDgzMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NDUyYTg0M2UtOWFlMi00MDZiLWE3YTAtYzM4OTBiNDAwZjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmRmO7uQRQyGhMpl/aUijp+OaDCO7L15q+gc LUheoW1dqGfLMigzOgngLp9mUuYeObpNNt2Lte86t8UCxwfHlgRbnvqcbrvpRWsx BhK05FabloR6iW52wQcAgJmIHBciTszBoIaDZ1p8Qp1+vYg0GrXI8++w+pZtpj0i 8IrfnzTzXi/HSeYv/rw2usa+ANa2M7TnOkGHRGaKKsGIwYMhnlYqRDYLW1YW20jh bQaKRbKElB5NGgWLhnS7b9vmDboqThsVJBxYugfv1sTCQiGIQuZXvwOYbFq+2/3h 0Kmd+hqO7UVk5pHQZC8E6prXD9KjuBfIgUkIoxZ89zmO3RUwFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGvYq12StJah18kt5TExOv7gZmODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZTQy NWNhNi1kNTgzLTQ4NDUtYjMyOS1jNzRkZWQxN2M0ODMvMTFjOGM2MTktNTE2YS0z YjU4LWFlYmYtOTM1ODljZmE0NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGU0MjVjYTYtZDU4My00ODQ1LWIz MjktYzc0ZGVkMTdjNDgzLzBlNDI1Y2E2LWQ1ODMtNDg0NS1iMzI5LWM3NGRlZDE3 YzQ4My5jcmwwHwYDVR0jBBgwFoAUqrP7ga5ZlVGHBQocTRtwPJLcwQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZTQyNWNhNi1kNTgzLTQ4NDUtYjMyOS1jNzRk ZWQxN2M0ODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3tQD/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUdErORgqZAKFc7Ma+Uy90XeJlhmHKwR269UfrpMHx/rOCgC3QS JgKRqd0mElfcPK0c/xuW48MHs1EQyfbOajQI3DnEOGONfzozXiHBFSlrJVqXFXNU 1IWrVJIlC+C3VrI8/wI6fYC63NkoIGgEj5PBDNYSikdZ7msg1+jNIH/e2q+WuM34 P57xhuK1nC1iovUI0Mx9mn6KMY3Aca1aO41YwtcGephV+13zdC23enNgrXCMcs73 vwASZ4jKbywaxex6rL1UKF/cXIrkUMwYDkR4xrSpQGOh4JmBcS+UUm/eWJyN7N4e bVDRKly9XEyRbJj7e+DkAbj+rYG4ykDbvnE= -----END CERTIFICATE-----Generated at Tue Oct 21 07:09:51 2025 by rpki-client