$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa File: aa7f7366-ce96-3420-b01e-2598209b268b.roa (raw, json) Hash identifier: Kv2p0lbY5qfo/kwSFOFNR2Z41OWM39MR7q3w+v3lFL0= Subject key identifier: 70:07:5E:D4:5B:E3:64:DB:D7:32:F6:B6:82:64:AA:70:5C:37:83:71 Certificate issuer: /CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Certificate serial: 010D0C9F4328584B85B980689F3C59E58AAD4F80 Authority key identifier: 4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa Signing time: Tue 14 Oct 2025 20:03:58 +0000 ROA not before: Tue 14 Oct 2025 20:03:58 +0000 ROA not after: Mon 12 Jan 2026 21:03:58 +0000 asID: 401449 IP address blocks: 2602:f7c3::/40 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:b9:80:68:9f:3c:59:e5:8a:ad:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Validity Not Before: Oct 14 20:03:58 2025 GMT Not After : Jan 12 21:03:58 2026 GMT Subject: CN=8664173f-4f22-4e6f-91d8-f8effdcb498b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f5:f5:ea:59:ec:71:92:b2:bf:b5:18:31:8d: 35:e9:a0:93:b4:76:0f:ff:9a:77:ba:31:d1:c3:ff: ce:76:b6:9d:31:e7:ae:a9:75:97:7b:aa:db:5c:5c: 26:64:1d:b7:f4:60:12:0d:94:f3:76:33:f0:12:ed: c7:62:ce:09:ca:31:74:a0:3d:c3:17:a6:55:87:02: a7:4c:13:d8:61:fe:31:8e:e6:e7:6a:07:a5:95:a3: 90:cf:10:b0:1a:79:0d:58:8f:cb:c1:46:50:46:57: c8:44:d8:9d:e9:8b:37:42:6a:a2:19:b7:4e:c9:56: 58:56:c9:10:c4:2b:23:33:fe:28:ce:cb:49:cd:d2: 18:1d:2c:4c:4c:37:c1:a3:49:5f:59:bd:c0:08:e6: 0c:84:f6:3c:0d:b8:22:65:b0:6a:ea:48:af:00:02: b8:25:f3:bc:62:28:94:b5:99:ef:9a:7e:76:84:76: 83:ca:3b:41:16:43:db:32:0e:a1:37:6a:e5:fb:57: 1c:2b:c1:77:ae:b7:78:70:f4:3c:75:38:ce:d9:f2: 1e:5b:0f:42:c4:ad:38:1f:db:10:c0:bd:bf:a1:f9: 21:c3:f2:c2:7b:ef:99:5b:cb:a8:58:29:d9:a7:08: e3:2f:64:54:50:82:36:10:7c:2b:e8:ef:7f:99:38: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:07:5E:D4:5B:E3:64:DB:D7:32:F6:B6:82:64:AA:70:5C:37:83:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl X509v3 Authority Key Identifier: keyid:4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7c3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:69:59:4f:2e:0d:e1:34:4e:2e:65:ad:b6:84:7c:9f:0f:ae: bb:6e:03:e8:5e:8d:12:89:f9:6c:ff:02:fe:1f:4c:17:f7:b8: 07:6e:26:49:be:5e:85:8a:12:af:cd:8c:46:86:41:90:51:15: 74:5e:a0:e5:77:66:99:f0:48:65:12:06:96:f3:c5:e6:fe:71: fe:43:16:16:02:aa:68:9f:b9:26:e9:46:f4:ed:43:46:9a:72: cb:60:8b:87:17:8b:ca:4b:99:02:be:89:a6:41:26:d2:61:a5: 1d:20:37:df:c4:93:fc:ad:b9:7e:74:8f:6b:f9:ca:ef:1c:da: 75:55:d0:44:82:75:2b:b8:3f:65:84:a8:6d:57:17:0d:b7:bb: d6:dc:2d:41:51:82:a7:e3:be:a0:e9:6c:91:96:a1:d7:3c:b8: 1a:7a:5d:12:20:de:5e:4d:b6:21:8f:1f:96:f8:da:85:38:06: 24:f9:8d:48:53:ad:90:c8:bc:5e:f9:b3:2a:fe:dc:23:55:a3: 09:15:b5:a2:e5:b1:a5:c7:76:f6:07:a2:65:a5:51:f2:91:b4: 2e:95:cb:91:3d:b4:7e:a0:e0:9d:9b:53:a8:cd:de:f4:a4:62: cd:8f:06:09:02:4e:07:1f:df:12:97:b0:7e:63:31:31:df:45: 2a:5f:f3:fe -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuFuYBonzxZ5YqtT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQyZTE1OWItN2Y5ZC00ZmRlLTgzZWItZmYyODUyYjEy N2Y3MB4XDTI1MTAxNDIwMDM1OFoXDTI2MDExMjIxMDM1OFowLzEtMCsGA1UEAxMk ODY2NDE3M2YtNGYyMi00ZTZmLTkxZDgtZjhlZmZkY2I0OThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvX16lnscZKyv7UYMY016aCTtHYP/5p3ujHR w//OdradMeeuqXWXe6rbXFwmZB239GASDZTzdjPwEu3HYs4JyjF0oD3DF6ZVhwKn TBPYYf4xjubnagellaOQzxCwGnkNWI/LwUZQRlfIRNid6Ys3QmqiGbdOyVZYVskQ xCsjM/4ozstJzdIYHSxMTDfBo0lfWb3ACOYMhPY8DbgiZbBq6kivAAK4JfO8YiiU tZnvmn52hHaDyjtBFkPbMg6hN2rl+1ccK8F3rrd4cPQ8dTjO2fIeWw9CxK04H9sQ wL2/ofkhw/LCe++ZW8uoWCnZpwjjL2RUUII2EHwr6O9/mTi3gQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHAHXtRb42Tb1zL2toJkqnBcN4NxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJl MTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4NTJiMTI3ZjcvYWE3ZjczNjYtY2U5Ni0z NDIwLWIwMWUtMjU5ODIwOWIyNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQyZTE1OWItN2Y5ZC00ZmRlLTgz ZWItZmYyODUyYjEyN2Y3LzZkMmUxNTliLTdmOWQtNGZkZS04M2ViLWZmMjg1MmIx MjdmNy5jcmwwHwYDVR0jBBgwFoAUSoJ116d8QMuq7r2GFAFTrKHHXcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJlMTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4 NTJiMTI3ZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3wwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAtWlZTy4N4TROLmWttoR8nw+uu24D6F6NEon5bP8C/h9MF/e4B24m Sb5ehYoSr82MRoZBkFEVdF6g5XdmmfBIZRIGlvPF5v5x/kMWFgKqaJ+5JulG9O1D Rppyy2CLhxeLykuZAr6JpkEm0mGlHSA338ST/K25fnSPa/nK7xzadVXQRIJ1K7g/ ZYSobVcXDbe71twtQVGCp+O+oOlskZah1zy4GnpdEiDeXk22IY8flvjahTgGJPmN SFOtkMi8XvmzKv7cI1WjCRW1ouWxpcd29geiZaVR8pG0LpXLkT20fqDgnZtTqM3e 9KRizY8GCQJOBx/fEpewfmMxMd9FKl/z/g== -----END CERTIFICATE-----Generated at Mon Oct 20 18:41:52 2025 by rpki-client