$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df1e91bc-c0d9-3ca6-b1af-5a76ee1a8931.roa File: df1e91bc-c0d9-3ca6-b1af-5a76ee1a8931.roa (raw, json) Hash identifier: e9WRutGkpmC/UVRjZkkZLrkL4XYhcp+DRYYF9k38IgA= Subject key identifier: 1B:15:EE:84:67:3B:14:91:DD:EB:E0:7B:EC:15:4F:08:80:FB:F3:8B Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F4328584B76A569C649809D4196B2A080 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df1e91bc-c0d9-3ca6-b1af-5a76ee1a8931.roa Signing time: Thu 09 Oct 2025 10:26:22 +0000 ROA not before: Thu 09 Oct 2025 10:26:22 +0000 ROA not after: Wed 07 Jan 2026 11:26:22 +0000 asID: 211729 IP address blocks: 2602:f92a:a471::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:a5:69:c6:49:80:9d:41:96:b2:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Oct 9 10:26:22 2025 GMT Not After : Jan 7 11:26:22 2026 GMT Subject: CN=cfa99aad-2bf0-49d0-8fb9-a097f3d9b3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:18:08:aa:52:11:a8:fa:5a:21:02:14:d4: 22:6b:09:50:a7:72:e0:5a:13:22:93:dc:63:a5:b3: 12:fa:23:5c:8c:99:1d:44:1d:81:e1:3d:d1:88:38: 80:04:d7:5d:8d:1d:3d:cb:bd:1c:94:86:b8:30:90: 58:b6:77:42:48:2e:9a:94:e2:86:ce:43:c2:59:77: 8e:db:b0:58:76:a0:03:0e:db:6a:58:60:02:6f:7e: 73:27:f9:75:29:a2:c3:49:98:ff:66:49:22:8b:98: b8:1f:16:93:4a:f5:14:22:f6:f2:04:2b:49:78:37: fb:1d:49:6a:4f:fd:2c:ba:d8:d8:87:77:bb:65:f1: 9a:63:8d:8c:77:8b:d3:41:8d:45:a0:00:10:1f:d6: c1:f1:5e:3a:55:b1:20:25:a0:36:10:4d:ab:7d:e4: ea:70:36:4e:a9:b5:61:eb:0e:1e:c9:3b:29:35:27: ce:50:f6:7d:65:3d:7b:7c:d6:8b:7e:a1:d7:a1:75: 92:9e:27:bc:70:9a:2f:51:f2:ba:05:8c:af:a6:8d: 65:fe:8b:47:54:ed:b8:61:51:d0:03:d4:4c:51:12: c9:03:bb:c8:b7:68:c6:36:00:8f:fd:c1:90:63:ae: 15:87:ea:03:fa:30:a4:ac:35:28:2e:2f:b6:f5:4e: b1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:EE:84:67:3B:14:91:DD:EB:E0:7B:EC:15:4F:08:80:FB:F3:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df1e91bc-c0d9-3ca6-b1af-5a76ee1a8931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a471::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:34:2e:48:5a:1a:08:0e:c3:25:d0:7a:82:4a:f8:6a:f3:05: 89:e7:9c:48:6c:1f:9b:6c:7c:72:91:17:a0:89:2a:aa:8a:ed: ed:4a:10:27:ae:f7:9e:cb:5b:5d:84:d4:25:a0:cc:2d:01:a4: 48:28:8a:61:75:c0:cb:87:28:a3:e1:a1:6b:b4:e3:9b:f8:4f: 35:ef:26:10:a8:cc:95:06:c2:ec:43:59:41:76:2a:82:9e:36: 46:38:18:83:ed:86:b3:dd:2d:9f:46:d9:3d:20:80:e2:29:20: fc:94:54:da:c4:2a:d8:9f:04:3b:73:5b:37:7e:98:9c:f7:f7: 76:56:85:2a:e3:9b:2e:24:d9:03:b8:44:81:b9:f8:09:dc:b7: 0f:81:50:fd:b1:29:aa:1b:d2:ba:dd:4d:23:f2:c3:ca:fb:32: 30:9e:17:08:50:80:66:66:49:ff:d1:95:eb:78:ff:c9:8f:0c: ca:fc:08:aa:d0:d6:65:22:77:a8:26:51:e3:34:a7:9b:8a:ec: 35:56:22:b2:71:ad:f3:3a:cc:2b:ed:47:c9:89:97:64:72:32: fa:69:38:2a:61:b8:f1:c3:f7:82:1d:ee:bf:1a:c8:e4:14:a6: 9d:31:5f:72:df:3e:7c:10:86:6d:bf:3c:ec:11:32:f7:a9:ee: ab:bf:6a:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt2pWnGSYCdQZayoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MTAwOTEwMjYyMloXDTI2MDEwNzExMjYyMlowLzEtMCsGA1UEAxMk Y2ZhOTlhYWQtMmJmMC00OWQwLThmYjktYTA5N2YzZDliM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0cYCKpSEaj6WiECFNQiawlQp3LgWhMik9xj pbMS+iNcjJkdRB2B4T3RiDiABNddjR09y70clIa4MJBYtndCSC6alOKGzkPCWXeO 27BYdqADDttqWGACb35zJ/l1KaLDSZj/Zkkii5i4HxaTSvUUIvbyBCtJeDf7HUlq T/0sutjYh3e7ZfGaY42Md4vTQY1FoAAQH9bB8V46VbEgJaA2EE2rfeTqcDZOqbVh 6w4eyTspNSfOUPZ9ZT17fNaLfqHXoXWSnie8cJovUfK6BYyvpo1l/otHVO24YVHQ A9RMURLJA7vIt2jGNgCP/cGQY64Vh+oD+jCkrDUoLi+29U6xmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBsV7oRnOxSR3evge+wVTwiA+/OLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvZGYxZTkxYmMtYzBkOS0z Y2E2LWIxYWYtNWE3NmVlMWE4OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5KqRx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABM0LkhaGggOwyXQeoJK+GrzBYnnnEhsH5tsfHKRF6CJKqqK7e1K ECeu957LW12E1CWgzC0BpEgoimF1wMuHKKPhoWu045v4TzXvJhCozJUGwuxDWUF2 KoKeNkY4GIPthrPdLZ9G2T0ggOIpIPyUVNrEKtifBDtzWzd+mJz393ZWhSrjmy4k 2QO4RIG5+Anctw+BUP2xKaob0rrdTSPyw8r7MjCeFwhQgGZmSf/Rlet4/8mPDMr8 CKrQ1mUid6gmUeM0p5uK7DVWIrJxrfM6zCvtR8mJl2RyMvppOCphuPHD94Id7r8a yOQUpp0xX3LfPnwQhm2/POwRMvep7qu/aoQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:49:27 2025 by rpki-client