$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa File: deb4a797-c84c-366e-afb9-971de9e46797.roa (raw, json) Hash identifier: 88Stq3g9eriKWC0Dd9xg7u1pB3tg7ftAcZ6N5YTXLJs= Subject key identifier: AD:E5:24:3A:8F:57:2E:E1:8B:A6:A2:F7:04:6A:D7:2C:6F:67:61:2B Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584B7F520D5FF595E88014D7AD80 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 38047 IP address blocks: 2602:f83b:2::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0d:5f:f5:95:e8:80:14:d7:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ac9a0083-9867-4c46-9898-290fb059d29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:66:fb:fb:db:d6:c7:2b:07:44:b6:c8:1b:64: a5:9d:e2:02:30:e1:92:d2:57:91:cf:98:f3:5b:e8: d4:13:f5:83:27:24:b0:3b:0f:a9:a4:d0:b6:a7:c2: 60:35:42:ac:c9:53:9e:40:1c:fe:3b:a5:9c:9b:10: d1:d5:05:71:da:50:db:50:bf:18:2a:ae:79:26:ad: 31:59:8e:51:a2:6f:71:dd:f1:f9:6d:f2:0e:82:cc: 54:1c:d5:ea:2f:0d:0b:4b:15:43:0c:d4:54:9c:5b: 74:7b:cd:b3:8b:d3:8a:2e:97:1d:59:88:f3:b2:85: 70:8b:db:29:49:0f:b1:16:49:41:76:b3:e0:1d:e7: 1c:67:ec:80:ff:23:f6:fe:81:29:f0:f5:04:a2:d8: 1f:52:13:9c:f1:5b:80:da:98:ca:06:62:42:d4:92: 7e:ca:10:d8:b2:f4:f6:62:fb:16:27:7e:da:55:77: 0a:46:d5:96:14:87:6b:ce:5d:8a:ef:bd:a3:11:2e: 7e:eb:81:69:a6:ba:d8:c2:4e:7c:cc:84:41:a7:12: ce:bc:c3:f4:41:11:34:2e:6a:6c:6f:d5:db:32:ed: 43:8d:7b:21:9f:04:e5:43:b5:ff:0e:c6:6a:9c:f0: 21:4a:2e:1d:f7:95:c3:a8:34:43:4a:16:f9:97:ab: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E5:24:3A:8F:57:2E:E1:8B:A6:A2:F7:04:6A:D7:2C:6F:67:61:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv6: 2602:f83b:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7d:47:ae:f0:59:da:ca:8a:73:68:9b:d8:3b:32:e2:f6:20: 7b:bf:ec:d1:24:1f:a2:4e:84:9c:db:e6:16:fd:ac:7c:61:39: e9:ca:66:c1:04:9c:88:a0:61:a7:5b:fc:f4:d5:29:63:44:52: 32:b7:d5:d7:04:cb:42:f9:27:ee:6e:4b:94:68:d1:3d:27:42: 36:75:3e:71:0a:86:8c:97:d3:e2:fd:12:1a:99:2c:34:2e:7a: 71:c0:ce:2a:6d:59:26:ce:f4:b0:44:0d:da:3b:da:24:a0:1b: 50:5b:87:64:12:a9:9a:8c:6f:15:a0:f5:ec:bc:d0:c4:f8:7e: 76:37:06:58:24:78:df:16:5b:b6:eb:22:83:26:09:69:df:8c: 06:75:85:25:4c:0d:5e:13:a4:4f:7d:4d:13:71:22:3a:cb:66: 42:bd:66:c8:c9:31:28:d8:24:86:42:94:3d:fd:75:ab:03:a1: 45:71:09:87:83:32:7d:12:1d:7f:fc:da:d9:eb:02:10:cc:b4: db:f7:db:94:17:d7:a2:a6:5d:df:bb:dd:1e:2c:cd:f3:6d:19: ce:b3:57:35:46:7e:ef:e6:9f:3a:31:bc:7e:cb:72:65:ff:2c: 04:23:e4:3a:6e:e8:e5:89:12:0f:2d:62:60:bf:48:0e:4b:cc: f2:4b:7e:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Ug1f9ZXogBTXrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YWM5YTAwODMtOTg2Ny00YzQ2LTk4OTgtMjkwZmIwNTlkMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGb7+9vWxysHRLbIG2SlneICMOGS0leRz5jz W+jUE/WDJySwOw+ppNC2p8JgNUKsyVOeQBz+O6WcmxDR1QVx2lDbUL8YKq55Jq0x WY5Rom9x3fH5bfIOgsxUHNXqLw0LSxVDDNRUnFt0e82zi9OKLpcdWYjzsoVwi9sp SQ+xFklBdrPgHeccZ+yA/yP2/oEp8PUEotgfUhOc8VuA2pjKBmJC1JJ+yhDYsvT2 YvsWJ37aVXcKRtWWFIdrzl2K772jES5+64FpprrYwk58zIRBpxLOvMP0QRE0Lmps b9XbMu1DjXshnwTlQ7X/DsZqnPAhSi4d95XDqDRDShb5l6t5YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK3lJDqPVy7hi6ai9wRq1yxvZ2ErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvZGViNGE3OTctYzg0Yy0z NjZlLWFmYjktOTcxZGU5ZTQ2Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4OwAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG99R67wWdrKinNom9g7MuL2IHu/7NEkH6JOhJzb5hb9rHxhOenK ZsEEnIigYadb/PTVKWNEUjK31dcEy0L5J+5uS5Ro0T0nQjZ1PnEKhoyX0+L9EhqZ LDQuenHAziptWSbO9LBEDdo72iSgG1Bbh2QSqZqMbxWg9ey80MT4fnY3BlgkeN8W W7brIoMmCWnfjAZ1hSVMDV4TpE99TRNxIjrLZkK9ZsjJMSjYJIZClD39dasDoUVx CYeDMn0SHX/82tnrAhDMtNv325QX16KmXd+73R4szfNtGc6zVzVGfu/mnzoxvH7L cmX/LAQj5Dpu6OWJEg8tYmC/SA5LzPJLfjs= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:35 2025 by rpki-client