$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa File: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (raw, json) Hash identifier: +j7Xx9qEGvZ9EVsMuN5y0DzHEGkA8eQaS1gHgL+7Pbo= Subject key identifier: F8:CF:D5:DE:33:CE:7E:D9:81:94:2C:3F:F4:1D:CA:EB:98:4A:F5:5A Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584B27617E2E07FA9DDF4A8E2DB0 Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 401431 IP address blocks: 2602:f7c5::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:7e:2e:07:fa:9d:df:4a:8e:2d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=ae08a9d1-44ce-4388-b777-b2eef145c28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:56:25:ba:2f:6d:0b:cc:f1:32:78:1e:bf:75: e2:81:be:07:44:5b:87:0d:44:f5:1a:b7:04:ec:5f: aa:df:13:ae:91:bc:40:d5:dd:5c:36:ab:0f:92:7b: a7:c5:36:bd:7a:32:f5:c1:bb:d3:83:0c:26:a2:32: 06:a0:ff:fe:7c:24:96:8f:8c:9c:23:ce:4e:d6:5a: 68:35:22:be:31:07:3b:ba:c1:ed:e9:56:f1:63:48: e4:df:96:6a:aa:8b:05:8c:c3:75:3c:70:28:30:4d: 30:03:b6:28:b9:f0:39:79:5a:b0:d4:97:69:f1:bf: a9:25:0f:37:44:0a:bb:30:29:94:b5:db:93:2b:af: bb:67:a2:0a:5c:8c:26:88:21:94:d7:ce:fb:e4:15: 59:ec:93:bd:54:7c:ff:ba:8f:70:2b:03:27:3e:d6: ec:10:6e:a7:78:fb:c1:ad:55:07:66:fd:f0:c1:1e: 80:da:57:a5:0b:3f:7a:95:28:de:7b:ed:f2:a1:0a: bc:30:d8:f4:ee:28:3b:43:23:18:0f:d6:a7:3b:39: c5:c7:85:7d:3f:1e:46:81:01:29:09:9b:e1:7e:cb: e3:cd:8e:87:d9:25:d1:9e:9c:5d:f5:20:3d:12:11: 8f:fd:3e:aa:80:0b:8a:cb:83:c4:8a:63:56:2f:4c: 05:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CF:D5:DE:33:CE:7E:D9:81:94:2C:3F:F4:1D:CA:EB:98:4A:F5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7c5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:fa:05:71:c1:13:cc:4e:54:31:b6:82:d8:d3:65:13:fc:ce: d6:d9:41:d2:91:6a:c0:45:92:95:ae:91:71:6f:8e:6b:79:f6: 84:9e:67:6f:b4:bb:d2:73:b5:66:91:5b:83:5f:37:2f:dc:f2: e2:20:80:ec:58:09:20:ad:fd:ff:9b:f5:78:86:c8:fe:92:33: 5e:2b:7c:62:ec:b2:c0:28:06:94:bd:7c:f7:b9:34:6c:8b:dc: 51:91:54:e4:fe:37:2c:f0:41:5e:06:63:a0:80:94:d9:d8:81: 11:60:22:84:42:17:17:12:04:c2:96:ec:a1:7e:00:18:06:96: 0e:ca:3d:e8:54:39:ed:73:22:6d:fb:25:37:81:4b:a5:be:7e: 1f:9b:ca:32:7e:36:5d:08:cc:02:de:3b:83:a1:16:14:9a:e1: 1b:c9:d1:d3:60:8e:6f:dc:a6:2a:5c:36:23:d7:f7:7f:ca:31: c8:fe:10:2c:03:19:9e:53:f7:97:af:19:b8:9e:86:0d:d0:15: 30:a5:5d:42:e4:54:ae:89:28:41:91:87:c9:58:7b:e0:54:43: 64:6e:7e:78:52:04:c5:8c:fd:30:cb:2e:eb:b2:a4:18:6c:9f: c8:07:8c:a4:13:9b:17:86:5a:bc:ca:9d:b2:af:40:20:10:7a: 6b:d3:d2:63 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsnYX4uB/qd30qOLbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk YWUwOGE5ZDEtNDRjZS00Mzg4LWI3NzctYjJlZWYxNDVjMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFYlui9tC8zxMngev3Xigb4HRFuHDUT1GrcE 7F+q3xOukbxA1d1cNqsPknunxTa9ejL1wbvTgwwmojIGoP/+fCSWj4ycI85O1lpo NSK+MQc7usHt6VbxY0jk35ZqqosFjMN1PHAoME0wA7YoufA5eVqw1Jdp8b+pJQ83 RAq7MCmUtduTK6+7Z6IKXIwmiCGU18775BVZ7JO9VHz/uo9wKwMnPtbsEG6nePvB rVUHZv3wwR6A2lelCz96lSjee+3yoQq8MNj07ig7QyMYD9anOznFx4V9Px5GgQEp CZvhfsvjzY6H2SXRnpxd9SA9EhGP/T6qgAuKy4PEimNWL0wFKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPjP1d4zzn7ZgZQsP/QdyuuYSvVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvODQyZTQzZTEtOTY4Ny0z NDgyLWFhNGMtZTIwYjkwMjBhNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3xQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEArPoFccETzE5UMbaC2NNlE/zO1tlB0pFqwEWSla6RcW+Oa3n2hJ5n b7S70nO1ZpFbg183L9zy4iCA7FgJIK39/5v1eIbI/pIzXit8YuyywCgGlL1897k0 bIvcUZFU5P43LPBBXgZjoICU2diBEWAihEIXFxIEwpbsoX4AGAaWDso96FQ57XMi bfslN4FLpb5+H5vKMn42XQjMAt47g6EWFJrhG8nR02COb9ymKlw2I9f3f8oxyP4Q LAMZnlP3l68ZuJ6GDdAVMKVdQuRUrokoQZGHyVh74FRDZG5+eFIExYz9MMsu67Kk GGyfyAeMpBObF4ZavMqdsq9AIBB6a9PSYw== -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:44 2025 by rpki-client