$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c7d8c8f-395e-4286-a285-01cad604e55c/04e93bee-25a0-3d90-8ed9-25e96b5fc0e8.roa File: 04e93bee-25a0-3d90-8ed9-25e96b5fc0e8.roa (raw, json) Hash identifier: sA1b2r7gRNlAyFJ8De1Gz15OJ+UEV6hPGjHDYS0WbN8= Subject key identifier: 02:26:AB:7E:AD:4D:F0:40:6A:21:DF:B7:76:04:26:3D:70:D5:67:79 Certificate issuer: /CN=8c7d8c8f-395e-4286-a285-01cad604e55c Certificate serial: 010D0C9F4328584B854020D8525E669F6744F7B8 Authority key identifier: 41:C6:D2:B9:26:28:07:FB:38:3C:90:EA:C3:B2:66:16:74:12:9F:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c7d8c8f-395e-4286-a285-01cad604e55c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c7d8c8f-395e-4286-a285-01cad604e55c/04e93bee-25a0-3d90-8ed9-25e96b5fc0e8.roa Signing time: Tue 14 Oct 2025 15:59:25 +0000 ROA not before: Tue 14 Oct 2025 15:59:25 +0000 ROA not after: Mon 12 Jan 2026 16:59:25 +0000 asID: 266 IP address blocks: 2602:f51b::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c7d8c8f-395e-4286-a285-01cad604e55c/8c7d8c8f-395e-4286-a285-01cad604e55c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c7d8c8f-395e-4286-a285-01cad604e55c/8c7d8c8f-395e-4286-a285-01cad604e55c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c7d8c8f-395e-4286-a285-01cad604e55c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:40:20:d8:52:5e:66:9f:67:44:f7:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7d8c8f-395e-4286-a285-01cad604e55c Validity Not Before: Oct 14 15:59:25 2025 GMT Not After : Jan 12 16:59:25 2026 GMT Subject: CN=decde3c6-d63d-4ac4-bc34-bce188093350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bf:56:02:ab:f0:1a:be:6d:e4:e8:9a:6a:57: ac:59:7b:15:8a:7d:3d:d8:6a:c3:41:b5:82:73:d9: 89:8b:ac:6b:ed:0e:f0:92:a0:31:0f:00:a6:55:0a: 54:53:c4:5a:9e:18:a1:f2:b1:6a:30:34:29:6a:73: 95:05:2d:a1:5c:44:05:6a:c3:a3:44:9a:c4:3d:d3: 98:a9:99:dd:96:58:e3:de:1e:95:2d:1a:27:af:1c: 3b:e0:91:56:94:34:03:fb:95:ff:ed:e6:8d:ca:72: af:05:84:dc:5b:16:0d:5d:3a:3d:9c:3d:36:ed:10: 53:c5:cd:13:38:41:72:aa:53:af:4d:13:f2:fa:f0: 47:30:33:4e:af:00:a2:b7:c8:08:38:b1:7c:62:6f: 50:cd:56:d8:ba:dc:61:aa:6e:eb:02:22:8a:aa:81: fa:69:87:83:ab:79:66:28:33:10:47:fb:77:de:52: e6:67:dc:c6:38:56:89:3a:3e:f1:3b:63:ce:70:c2: 87:10:0d:d4:01:8a:c3:74:39:0a:97:e0:3e:51:69: 29:b4:9a:15:e7:11:f9:62:d3:f0:1f:96:90:47:36: 86:e3:cc:90:ce:e1:ff:f9:c2:3c:76:7f:22:fe:4f: c6:aa:1c:72:95:69:90:9b:01:88:52:8c:12:8b:75: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:26:AB:7E:AD:4D:F0:40:6A:21:DF:B7:76:04:26:3D:70:D5:67:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c7d8c8f-395e-4286-a285-01cad604e55c/04e93bee-25a0-3d90-8ed9-25e96b5fc0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c7d8c8f-395e-4286-a285-01cad604e55c/8c7d8c8f-395e-4286-a285-01cad604e55c.crl X509v3 Authority Key Identifier: keyid:41:C6:D2:B9:26:28:07:FB:38:3C:90:EA:C3:B2:66:16:74:12:9F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c7d8c8f-395e-4286-a285-01cad604e55c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f51b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:81:75:0a:cc:38:43:a3:4d:4e:35:ad:32:3a:c9:01:05:7f: 8e:25:e7:1f:25:87:1a:41:d5:d8:36:2c:ed:9f:74:ae:fe:8d: d9:14:a2:85:40:5a:7d:d8:40:30:59:6d:27:20:bf:89:40:e4: ed:8c:1c:72:34:7d:c5:e2:77:2c:a0:b3:87:3c:49:21:bc:94: 7d:4d:ae:66:fb:ab:20:0a:4c:39:c5:2f:f3:4e:b2:89:d3:44: cc:5c:35:68:26:9b:d6:a7:ce:78:32:80:5b:5c:1b:1f:18:0d: 95:d7:0e:23:d7:1c:32:50:2b:0d:f6:a5:73:81:22:72:f3:fa: 8a:8f:2a:ad:4c:26:06:aa:cc:5a:cb:6c:ae:c5:64:af:52:15: 41:c3:b6:64:6e:de:69:db:af:d7:45:bc:24:74:4e:78:89:18: e6:b9:fd:07:2d:f5:e6:73:f7:ea:26:73:fb:af:c7:25:ce:32: dd:dc:87:0a:a2:b6:8d:a0:f4:b3:a2:5e:61:60:dc:31:79:43: cf:ff:46:05:e3:06:04:19:e7:a1:8e:d6:1a:a5:d0:bc:27:05: fb:a6:94:70:2d:5a:7c:28:6e:26:80:2d:f5:c5:49:5d:ff:d5: cf:c3:65:0f:30:d1:8b:59:af:5a:ab:12:89:70:69:8e:46:cf: 88:e5:f5:ce -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuFQCDYUl5mn2dE97gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZDhjOGYtMzk1ZS00Mjg2LWEyODUtMDFjYWQ2MDRl NTVjMB4XDTI1MTAxNDE1NTkyNVoXDTI2MDExMjE2NTkyNVowLzEtMCsGA1UEAxMk ZGVjZGUzYzYtZDYzZC00YWM0LWJjMzQtYmNlMTg4MDkzMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj79WAqvwGr5t5OiaalesWXsVin092GrDQbWC c9mJi6xr7Q7wkqAxDwCmVQpUU8Ranhih8rFqMDQpanOVBS2hXEQFasOjRJrEPdOY qZndlljj3h6VLRonrxw74JFWlDQD+5X/7eaNynKvBYTcWxYNXTo9nD027RBTxc0T OEFyqlOvTRPy+vBHMDNOrwCit8gIOLF8Ym9QzVbYutxhqm7rAiKKqoH6aYeDq3lm KDMQR/t33lLmZ9zGOFaJOj7xO2POcMKHEA3UAYrDdDkKl+A+UWkptJoV5xH5YtPw H5aQRzaG48yQzuH/+cI8dn8i/k/GqhxylWmQmwGIUowSi3XSvQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAImq36tTfBAaiHft3YEJj1w1Wd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84Yzdk OGM4Zi0zOTVlLTQyODYtYTI4NS0wMWNhZDYwNGU1NWMvMDRlOTNiZWUtMjVhMC0z ZDkwLThlZDktMjVlOTZiNWZjMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGM3ZDhjOGYtMzk1ZS00Mjg2LWEy ODUtMDFjYWQ2MDRlNTVjLzhjN2Q4YzhmLTM5NWUtNDI4Ni1hMjg1LTAxY2FkNjA0 ZTU1Yy5jcmwwHwYDVR0jBBgwFoAUQcbSuSYoB/s4PJDqw7JmFnQSnzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YzdkOGM4Zi0zOTVlLTQyODYtYTI4NS0wMWNh ZDYwNGU1NWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1GwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZ4F1Csw4Q6NNTjWtMjrJAQV/jiXnHyWHGkHV2DYs7Z90rv6N2RSi hUBafdhAMFltJyC/iUDk7YwccjR9xeJ3LKCzhzxJIbyUfU2uZvurIApMOcUv806y idNEzFw1aCab1qfOeDKAW1wbHxgNldcOI9ccMlArDfalc4EicvP6io8qrUwmBqrM WstsrsVkr1IVQcO2ZG7eaduv10W8JHROeIkY5rn9By315nP36iZz+6/HJc4y3dyH CqK2jaD0s6JeYWDcMXlDz/9GBeMGBBnnoY7WGqXQvCcF+6aUcC1afChuJoAt9cVJ Xf/Vz8NlDzDRi1mvWqsSiXBpjkbPiOX1zg== -----END CERTIFICATE-----Generated at Tue Oct 21 10:20:08 2025 by rpki-client