$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa File: 3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa (raw, json) Hash identifier: uzTwj9/jsIJ1g7z9UWRIGMIF4PXIcUW/qjbTD9bb2dE= Subject key identifier: 91:36:DD:3B:77:A1:97:29:89:AB:36:0F:A2:A7:3A:60:81:3E:1A:28 Certificate issuer: /CN=c04d5752-0429-45a3-a347-607b7dc70707 Certificate serial: 010D0C9F4328584B758C965AE42A3F3C99AE0200 Authority key identifier: 9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 32668 IP address blocks: 2602:f86a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:96:5a:e4:2a:3f:3c:99:ae:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04d5752-0429-45a3-a347-607b7dc70707 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=1f551adf-0ffe-4e5b-b28b-1e676a0b79d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:0e:04:c5:e7:20:81:47:ab:b4:21:8a:50: df:77:3a:5c:fc:bd:b2:3f:02:3f:85:cf:b2:83:6b: 24:be:df:db:0a:bf:3d:d3:74:eb:16:6d:fb:46:7f: 7a:5f:2e:ff:65:8b:fb:8a:86:3a:c2:55:aa:ac:20: ac:ae:08:5f:5c:a1:7f:e5:d2:b9:f8:af:48:32:08: 74:d0:d3:cc:33:8b:c7:bd:b2:b5:5a:d7:03:4a:94: 45:ba:ee:e9:3f:02:c2:83:79:ef:1d:d6:4e:d5:75: 9e:64:fd:53:81:d1:c4:e6:c8:dd:78:a1:92:81:ff: aa:7c:f2:09:f6:d9:f8:48:79:dc:34:80:55:b4:36: c8:11:e8:1c:52:3d:8e:26:c3:eb:ec:13:64:f5:33: 1d:56:05:b5:53:eb:aa:87:88:9a:77:00:45:f6:e1: 1a:87:cd:4c:06:3c:50:db:ab:e5:83:01:08:c8:cc: d0:c0:2a:ac:58:15:47:cc:f5:34:88:d8:aa:ea:75: f4:fd:a3:2a:54:fc:73:da:59:80:95:e9:8c:12:f6: 4c:69:d4:59:a2:9e:05:d6:14:29:09:c5:96:61:89: 70:5e:6a:8a:d9:36:ad:78:17:2c:9c:2c:de:a2:ad: e2:44:3c:17:4f:dc:aa:54:95:8d:ab:d1:52:79:29: 6b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:36:DD:3B:77:A1:97:29:89:AB:36:0F:A2:A7:3A:60:81:3E:1A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl X509v3 Authority Key Identifier: keyid:9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer sbgp-ipAddrBlock: critical IPv6: 2602:f86a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:01:78:f5:f1:28:76:ff:0c:9f:b3:de:d4:0e:5f:7f:70:d9: 48:f6:95:ad:0b:54:6b:7d:3d:f9:7b:ed:2c:81:ca:06:38:90: 6b:78:6c:84:b6:a6:08:1c:07:c5:8a:42:09:6d:16:56:21:58: 0e:87:c4:9b:85:0a:d0:b0:54:be:d7:78:79:a0:3f:88:49:25: 45:26:32:54:58:cd:5d:15:18:7e:c5:07:02:32:f3:ba:a5:66: ca:86:1d:ab:b7:36:60:e5:9d:f4:d4:51:c2:f1:31:d4:5f:bf: d9:bd:1a:c9:fb:8f:02:24:67:e5:12:9d:12:5b:eb:1b:d8:73: 34:e7:64:0d:42:71:3c:b9:6e:91:55:01:ff:74:a5:50:24:3c: ee:8c:0f:f8:b1:16:b8:2e:d7:88:d6:1b:27:3d:3b:bf:d6:b9: 65:0d:96:a4:b9:79:f8:cc:40:dd:a4:49:9e:16:52:c1:29:e9: 57:48:6a:6d:da:44:ff:86:ea:e6:bf:2d:fe:dd:81:ed:7b:94: b0:b4:1a:37:74:79:1c:c7:0c:8d:54:ef:13:a0:35:e7:e4:fd: eb:2f:71:e8:39:d1:61:03:80:0a:07:15:56:82:25:cc:81:56: a2:ce:2d:4e:08:ff:7a:4d:b6:03:18:d6:53:b4:01:17:2b:e2: 8f:20:5e:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt1jJZa5Co/PJmuAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA0ZDU3NTItMDQyOS00NWEzLWEzNDctNjA3YjdkYzcw NzA3MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk MWY1NTFhZGYtMGZmZS00ZTViLWIyOGItMWU2NzZhMGI3OWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxoOBMXnIIFHq7QhilDfdzpc/L2yPwI/hc+y g2skvt/bCr8903TrFm37Rn96Xy7/ZYv7ioY6wlWqrCCsrghfXKF/5dK5+K9IMgh0 0NPMM4vHvbK1WtcDSpRFuu7pPwLCg3nvHdZO1XWeZP1TgdHE5sjdeKGSgf+qfPIJ 9tn4SHncNIBVtDbIEegcUj2OJsPr7BNk9TMdVgW1U+uqh4iadwBF9uEah81MBjxQ 26vlgwEIyMzQwCqsWBVHzPU0iNiq6nX0/aMqVPxz2lmAlemMEvZMadRZop4F1hQp CcWWYYlwXmqK2TateBcsnCzeoq3iRDwXT9yqVJWNq9FSeSlrKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJE23Tt3oZcpias2D6KnOmCBPhooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMDRk NTc1Mi0wNDI5LTQ1YTMtYTM0Ny02MDdiN2RjNzA3MDcvM2RmZTUxNGUtZmRjOC0z YTNlLThhODAtNWRiM2U1ZTZjY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzA0ZDU3NTItMDQyOS00NWEzLWEz NDctNjA3YjdkYzcwNzA3L2MwNGQ1NzUyLTA0MjktNDVhMy1hMzQ3LTYwN2I3ZGM3 MDcwNy5jcmwwHwYDVR0jBBgwFoAUmr/CVGbfc/TN/iRP/aoQnhN7Cw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMDRkNTc1Mi0wNDI5LTQ1YTMtYTM0Ny02MDdi N2RjNzA3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4agAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACEBePXxKHb/DJ+z3tQOX39w2Uj2la0LVGt9Pfl77SyBygY4kGt4 bIS2pggcB8WKQgltFlYhWA6HxJuFCtCwVL7XeHmgP4hJJUUmMlRYzV0VGH7FBwIy 87qlZsqGHau3NmDlnfTUUcLxMdRfv9m9Gsn7jwIkZ+USnRJb6xvYczTnZA1CcTy5 bpFVAf90pVAkPO6MD/ixFrgu14jWGyc9O7/WuWUNlqS5efjMQN2kSZ4WUsEp6VdI am3aRP+G6ua/Lf7dge17lLC0Gjd0eRzHDI1U7xOgNefk/esvceg50WEDgAoHFVaC JcyBVqLOLU4I/3pNtgMY1lO0ARcr4o8gXvo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:51 2025 by rpki-client