$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/2047e01e-48c7-3f64-ae28-f93ae4a4729c.roa File: 2047e01e-48c7-3f64-ae28-f93ae4a4729c.roa (raw, json) Hash identifier: VjzQVS5gr1pFCteXVT8nBW4w6nIARvCCPVuIzMahvsY= Subject key identifier: CD:CB:25:CF:77:64:9A:F2:CF:56:2A:26:45:D4:A0:3C:30:48:8A:34 Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F4328584B768F401F9D2C223011265A80 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/2047e01e-48c7-3f64-ae28-f93ae4a4729c.roa Signing time: Thu 09 Oct 2025 09:41:43 +0000 ROA not before: Thu 09 Oct 2025 09:41:43 +0000 ROA not after: Wed 07 Jan 2026 10:41:43 +0000 asID: 208754 IP address blocks: 2602:f92a:a470::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:8f:40:1f:9d:2c:22:30:11:26:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Oct 9 09:41:43 2025 GMT Not After : Jan 7 10:41:43 2026 GMT Subject: CN=b7e215ce-e7b3-46f4-a3fc-70f563827958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:9c:e8:f1:48:3a:37:63:61:f2:9a:15:eb: 48:df:de:36:f7:e8:3e:ab:64:09:f3:06:38:c2:4d: 89:b6:35:be:70:7f:47:0a:0f:ca:84:51:67:75:7f: de:a2:5b:af:da:bf:a1:ff:fe:13:08:2f:cd:a1:20: aa:87:40:e4:be:8b:1b:8f:c5:58:d8:cc:46:f5:19: b0:05:ff:0e:c0:ef:68:d9:32:bd:4e:1d:a7:36:67: a3:31:8f:58:15:e3:3d:6a:ec:c5:79:ff:3e:48:93: 8b:5a:3c:bd:cd:1f:11:46:a4:10:53:2f:43:fa:42: 78:38:51:18:07:62:69:15:a8:56:25:82:32:a7:ec: 7b:f4:9a:2a:5e:f4:6b:98:30:53:c8:4f:1f:c5:05: 55:06:32:f0:9b:20:f0:b4:10:45:d7:64:11:ce:12: e3:5a:8b:ea:f7:b8:a0:ca:a2:90:bf:19:c5:45:ad: bc:04:ec:06:9e:07:4c:bc:b9:7f:fc:88:b6:70:c6: fb:ae:55:49:4c:99:8b:ff:13:55:68:5d:30:7b:c4: a8:c2:62:9a:39:e0:43:cf:fe:d0:03:e0:57:66:3f: 73:5b:ff:e2:15:9a:6a:ca:34:b9:64:54:fc:9d:41: a2:61:b9:9f:1a:5a:d4:ea:aa:c0:0c:60:bf:c7:ac: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CB:25:CF:77:64:9A:F2:CF:56:2A:26:45:D4:A0:3C:30:48:8A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/2047e01e-48c7-3f64-ae28-f93ae4a4729c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a470::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a0:b4:99:22:41:5e:ff:03:d0:0d:9c:c3:a6:2a:a5:a8:db: 3d:f3:24:b6:41:23:fd:09:db:46:e4:3b:0a:cf:7f:de:37:2a: d3:58:b4:d9:ed:ec:d5:11:c3:06:1f:7d:ad:74:02:08:20:aa: 46:50:e5:f8:86:0d:80:ab:79:ea:fe:5d:27:ee:27:17:b3:86: 72:d7:ac:c8:08:69:a2:02:a1:bb:6d:aa:be:04:65:97:1a:c1: 15:ad:f5:e0:7e:35:18:cb:54:9b:12:f0:b4:cd:aa:a9:d9:28: c7:f0:88:bf:e0:8d:13:1a:19:03:99:4a:c1:7a:36:90:3f:5a: 24:24:15:b3:9a:f9:7d:93:aa:ed:4a:98:b7:67:bf:6b:22:39: e9:35:4c:d9:03:30:ec:18:4e:94:79:61:26:f9:22:41:e8:ef: 86:d8:1b:5d:a4:7c:2a:bb:77:4f:bf:c6:44:f9:77:79:93:2d: 70:9d:aa:9f:eb:ca:bb:e6:4a:33:60:10:05:e0:6f:20:8b:23: 92:23:39:5c:62:32:39:24:00:51:e2:42:f0:1b:91:cf:13:e5: bd:bd:2e:12:28:08:72:9e:08:0b:7f:ec:6e:c9:16:f3:23:fb: a1:9c:45:6d:1d:dc:3d:45:95:ef:04:c7:19:be:22:99:92:1f: ff:6e:21:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt2j0AfnSwiMBEmWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MTAwOTA5NDE0M1oXDTI2MDEwNzEwNDE0M1owLzEtMCsGA1UEAxMk YjdlMjE1Y2UtZTdiMy00NmY0LWEzZmMtNzBmNTYzODI3OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPqc6PFIOjdjYfKaFetI39429+g+q2QJ8wY4 wk2JtjW+cH9HCg/KhFFndX/eoluv2r+h//4TCC/NoSCqh0Dkvosbj8VY2MxG9Rmw Bf8OwO9o2TK9Th2nNmejMY9YFeM9auzFef8+SJOLWjy9zR8RRqQQUy9D+kJ4OFEY B2JpFahWJYIyp+x79JoqXvRrmDBTyE8fxQVVBjLwmyDwtBBF12QRzhLjWovq97ig yqKQvxnFRa28BOwGngdMvLl//Ii2cMb7rlVJTJmL/xNVaF0we8SowmKaOeBDz/7Q A+BXZj9zW//iFZpqyjS5ZFT8nUGiYbmfGlrU6qrADGC/x6x/oQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM3LJc93ZJryz1YqJkXUoDwwSIo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvMjA0N2UwMWUtNDhjNy0z ZjY0LWFlMjgtZjkzYWU0YTQ3MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5KqRw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmgtJkiQV7/A9ANnMOmKqWo2z3zJLZBI/0J20bkOwrPf943KtNY tNnt7NURwwYffa10AgggqkZQ5fiGDYCreer+XSfuJxezhnLXrMgIaaICobttqr4E ZZcawRWt9eB+NRjLVJsS8LTNqqnZKMfwiL/gjRMaGQOZSsF6NpA/WiQkFbOa+X2T qu1KmLdnv2siOek1TNkDMOwYTpR5YSb5IkHo74bYG12kfCq7d0+/xkT5d3mTLXCd qp/ryrvmSjNgEAXgbyCLI5IjOVxiMjkkAFHiQvAbkc8T5b29LhIoCHKeCAt/7G7J FvMj+6GcRW0d3D1Fle8Exxm+IpmSH/9uIV0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:16:11 2025 by rpki-client