$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/f114d524-68df-36c3-a139-26075d407e47.roa File: f114d524-68df-36c3-a139-26075d407e47.roa (raw, json) Hash identifier: 0brZVRW+uBG/ztMKRd5UPHt27wspYZBL+CI1okHqQK0= Subject key identifier: 9F:B5:CD:27:09:4B:66:A8:64:52:F0:0D:12:20:DD:68:36:34:65:AA Certificate issuer: /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Certificate serial: 010D0C9F4328584B4A4730E793F5612FCE69F300 Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/f114d524-68df-36c3-a139-26075d407e47.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 401466 IP address blocks: 2602:f874::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:30:e7:93:f5:61:2f:ce:69:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=f1973d28-58f8-4fd2-8963-8c3848d47a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:77:c8:e0:c9:15:3f:a4:fe:44:3e:92:91: 16:77:8c:68:2c:52:f4:6b:88:1e:fa:81:dc:43:27: 3e:50:8a:58:d7:60:cc:9c:c6:54:c7:d9:da:dd:4a: 02:15:33:46:5b:57:04:04:65:6b:79:4f:3c:11:b7: 5c:80:34:b8:96:99:84:03:53:47:fe:9b:25:ea:2c: 5a:26:af:b2:cd:50:c2:eb:53:53:d5:90:26:21:77: 48:ab:ca:78:7b:6b:fd:e1:dd:23:ee:a5:5c:b3:61: e8:29:a0:a0:f4:16:29:01:ca:b4:5c:a1:b7:c6:4a: 96:ac:a9:94:32:06:19:64:ce:c3:a8:97:44:0f:1c: 37:0a:27:62:1e:64:06:4b:94:ac:a1:9d:d1:18:5c: e8:5c:f2:3c:2c:ca:1a:97:d8:64:27:8a:1f:40:96: dd:7b:88:e8:70:a4:5f:09:dd:f4:75:f3:53:ca:a9: ee:56:98:ee:9e:98:7c:42:32:6a:5d:bf:9b:4a:95: 9d:0a:48:00:b4:c3:ce:51:9e:da:7a:9d:89:da:48: 1b:18:71:85:51:ae:04:59:0d:bb:7d:a1:91:f1:12: 6b:1f:80:96:c4:fa:d3:9c:31:06:27:88:51:34:66: 70:cb:6f:5c:e9:ab:47:76:85:a2:64:8e:fa:39:f8: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B5:CD:27:09:4B:66:A8:64:52:F0:0D:12:20:DD:68:36:34:65:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/f114d524-68df-36c3-a139-26075d407e47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl X509v3 Authority Key Identifier: keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer sbgp-ipAddrBlock: critical IPv6: 2602:f874::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2f:6a:27:fe:62:7d:4d:5d:a4:c5:b2:bf:32:9d:33:fa:1d: cb:75:a5:8f:5e:8f:7b:0e:a9:71:47:51:5b:46:08:9f:17:02: 1f:6b:c9:a6:90:61:4a:cb:bf:46:c2:a8:9a:04:f8:24:f9:4c: 35:7a:d8:fb:a7:81:be:6d:42:6c:56:e5:f2:8c:14:ac:bc:9c: a1:3e:b4:37:56:89:1c:36:ca:db:ed:e4:dd:f9:8f:bb:12:df: 8b:6b:8f:d6:f2:1c:de:59:67:55:75:2d:a4:35:6d:19:5a:e4: b3:3d:d2:e8:ae:a4:e5:a7:fa:99:77:72:7a:a1:6e:da:74:98: 9a:f7:f1:ca:7b:49:cd:96:73:aa:e9:95:b9:55:60:e2:12:1b: 4e:d4:bb:30:50:37:e5:62:1e:fb:e1:ae:d2:be:9f:89:0e:7a: ac:28:0c:2c:f7:f4:d8:7f:b6:b9:83:07:3b:6b:22:28:4f:7e: 3c:3c:cf:ee:c6:12:f4:f6:bd:c8:4f:78:2d:9a:a6:32:60:42: 82:b2:a5:39:75:33:9a:a4:31:62:36:ad:64:a6:52:1a:5b:11: 7b:66:57:f1:3a:2a:6d:9d:6d:d2:1a:59:19:4e:e0:ab:f2:ac: 7a:03:38:c7:b7:58:3a:77:7c:30:f4:27:4c:59:d3:5d:5f:9e: a9:fd:23:80 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtKRzDnk/VhL85p8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZmI3ZTAtMDBhNi00NTM3LTk4ZGQtODdhNWFjYmQx MjI1MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZjE5NzNkMjgtNThmOC00ZmQyLTg5NjMtOGMzODQ4ZDQ3YTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc93yODJFT+k/kQ+kpEWd4xoLFL0a4ge+oHc Qyc+UIpY12DMnMZUx9na3UoCFTNGW1cEBGVreU88EbdcgDS4lpmEA1NH/psl6ixa Jq+yzVDC61NT1ZAmIXdIq8p4e2v94d0j7qVcs2HoKaCg9BYpAcq0XKG3xkqWrKmU MgYZZM7DqJdEDxw3CidiHmQGS5SsoZ3RGFzoXPI8LMoal9hkJ4ofQJbde4jocKRf Cd30dfNTyqnuVpjunph8QjJqXb+bSpWdCkgAtMPOUZ7aep2J2kgbGHGFUa4EWQ27 faGR8RJrH4CWxPrTnDEGJ4hRNGZwy29c6atHdoWiZI76Ofj1twIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ+1zScJS2aoZFLwDRIg3Wg2NGWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdm YjdlMC0wMGE2LTQ1MzctOThkZC04N2E1YWNiZDEyMjUvZjExNGQ1MjQtNjhkZi0z NmMzLWExMzktMjYwNzVkNDA3ZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3ZmI3ZTAtMDBhNi00NTM3LTk4 ZGQtODdhNWFjYmQxMjI1L2Q1N2ZiN2UwLTAwYTYtNDUzNy05OGRkLTg3YTVhY2Jk MTIyNS5jcmwwHwYDVR0jBBgwFoAUEp4euQeWpb0XZcnkKBFzj02ykcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdmYjdlMC0wMGE2LTQ1MzctOThkZC04N2E1 YWNiZDEyMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4dAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiS9qJ/5ifU1dpMWyvzKdM/ody3Wlj16Pew6pcUdRW0YInxcCH2vJ ppBhSsu/RsKomgT4JPlMNXrY+6eBvm1CbFbl8owUrLycoT60N1aJHDbK2+3k3fmP uxLfi2uP1vIc3llnVXUtpDVtGVrksz3S6K6k5af6mXdyeqFu2nSYmvfxyntJzZZz qumVuVVg4hIbTtS7MFA35WIe++Gu0r6fiQ56rCgMLPf02H+2uYMHO2siKE9+PDzP 7sYS9Pa9yE94LZqmMmBCgrKlOXUzmqQxYjatZKZSGlsRe2ZX8ToqbZ1t0hpZGU7g q/KsegM4x7dYOnd8MPQnTFnTXV+eqf0jgA== -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:59 2025 by rpki-client