$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/73824cdc-dbd7-33bf-8577-6d4bca88ffa2.roa File: 73824cdc-dbd7-33bf-8577-6d4bca88ffa2.roa (raw, json) Hash identifier: KxIVbeNm9vwnyi/dXtk+GH3i4iolNJv3VY2KzIRAs8w= Subject key identifier: 26:F5:F3:EC:06:07:76:41:AC:A6:D7:94:DB:8F:AE:4B:6D:E1:BD:C2 Certificate issuer: /CN=f9694678-237c-4d99-9589-b106509825b7 Certificate serial: 010D0C9F4328584B85040047DA167DD8A1CB2160 Authority key identifier: 8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/73824cdc-dbd7-33bf-8577-6d4bca88ffa2.roa Signing time: Tue 14 Oct 2025 13:58:16 +0000 ROA not before: Tue 14 Oct 2025 13:58:16 +0000 ROA not after: Mon 12 Jan 2026 14:58:16 +0000 asID: 5511 IP address blocks: 2602:f692:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:04:00:47:da:16:7d:d8:a1:cb:21:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9694678-237c-4d99-9589-b106509825b7 Validity Not Before: Oct 14 13:58:16 2025 GMT Not After : Jan 12 14:58:16 2026 GMT Subject: CN=b68f38d0-93de-4531-96a6-90f10a5d53b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:cd:4e:37:bd:37:5b:1d:9e:5f:3a:66:2d: 67:30:f8:f7:fb:ba:8a:e3:85:22:6d:a0:37:c4:c4: c8:79:a8:c9:72:3f:72:1b:55:9e:00:07:43:46:96: d2:d8:5d:a9:73:49:60:0c:77:cb:5b:91:7e:9a:ad: 8c:c9:0f:fe:5a:6c:17:bd:af:de:dc:29:05:b6:b9: 35:a5:80:94:44:cd:c2:5a:05:de:5a:83:ae:0c:ff: ca:68:2b:b6:29:13:99:4a:82:3f:dd:a9:b6:a1:f8: a8:1b:dc:82:90:fa:fe:e7:1a:03:e7:0a:1a:2c:ec: 66:17:f1:3e:72:f0:61:fc:f9:b4:71:0c:b5:92:4c: b6:51:6b:85:88:e3:17:4e:96:c8:6b:c2:6b:ce:0f: e0:71:4e:5f:33:6c:b9:33:99:d1:57:55:d0:80:ce: e3:d3:9c:f1:30:f2:3e:28:e0:35:43:51:ef:38:cf: 52:9f:63:7d:92:2d:bf:fb:a1:8b:ca:47:6d:83:52: dd:ea:bb:61:ab:4c:99:21:77:ec:0c:5f:3d:98:72: e4:94:a1:a8:86:18:c8:ba:87:17:52:6a:c3:a7:de: 2a:63:b5:df:1f:52:d0:57:10:b1:76:5e:a4:41:5b: 4f:13:6d:7d:c9:7c:e6:58:22:30:0e:ed:9b:40:49: d2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F5:F3:EC:06:07:76:41:AC:A6:D7:94:DB:8F:AE:4B:6D:E1:BD:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/73824cdc-dbd7-33bf-8577-6d4bca88ffa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.crl X509v3 Authority Key Identifier: keyid:8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer sbgp-ipAddrBlock: critical IPv6: 2602:f692:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:7c:db:38:4e:bf:75:f0:5e:05:92:e7:2c:f2:88:0a:a2:24: 13:15:16:c4:d2:a1:da:14:26:c6:75:72:4e:41:64:d0:98:07: 9a:17:72:21:e5:cf:e7:e0:bd:8f:05:bb:19:b9:c7:72:04:06: 99:0f:cc:a7:b3:34:55:45:07:8e:52:d4:49:44:fe:7b:03:1a: 4d:32:06:60:26:99:d8:35:e4:49:65:e1:b3:bc:d0:93:31:f0: 57:8a:e0:fe:d6:6c:89:e9:38:f0:0c:a3:4c:97:06:86:e9:34: 70:72:62:3c:6e:a5:54:5a:b9:5a:76:a0:b5:e5:16:85:c6:22: ef:0d:bb:ca:73:af:6c:67:3e:c1:cb:68:1a:c8:65:a7:74:47: 22:15:34:74:50:a2:37:35:af:b6:58:d8:6a:bd:dd:26:e4:80: 7e:6e:d7:22:30:ae:d5:9d:d8:46:ee:d9:b4:8b:82:40:cc:5b: 7b:34:90:15:ef:83:2c:2d:d6:9e:14:b8:f7:29:9e:a6:96:5c: 17:17:84:34:c8:ed:0b:2c:5f:71:8e:69:90:0c:98:ac:83:9e: 72:77:a9:7d:65:3d:b4:0f:71:a8:6d:ec:60:cd:2b:d5:db:40: 7b:2c:bf:74:b0:23:09:b0:48:61:ef:a1:12:8b:43:d9:7b:98: 9c:77:9a:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuFBABH2hZ92KHLIWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2OTQ2NzgtMjM3Yy00ZDk5LTk1ODktYjEwNjUwOTgy NWI3MB4XDTI1MTAxNDEzNTgxNloXDTI2MDExMjE0NTgxNlowLzEtMCsGA1UEAxMk YjY4ZjM4ZDAtOTNkZS00NTMxLTk2YTYtOTBmMTBhNWQ1M2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IjNTje9N1sdnl86Zi1nMPj3+7qK44UibaA3 xMTIeajJcj9yG1WeAAdDRpbS2F2pc0lgDHfLW5F+mq2MyQ/+WmwXva/e3CkFtrk1 pYCURM3CWgXeWoOuDP/KaCu2KROZSoI/3am2ofioG9yCkPr+5xoD5woaLOxmF/E+ cvBh/Pm0cQy1kky2UWuFiOMXTpbIa8Jrzg/gcU5fM2y5M5nRV1XQgM7j05zxMPI+ KOA1Q1HvOM9Sn2N9ki2/+6GLykdtg1Ld6rthq0yZIXfsDF89mHLklKGohhjIuocX UmrDp94qY7XfH1LQVxCxdl6kQVtPE219yXzmWCIwDu2bQEnScwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCb18+wGB3ZBrKbXlNuPrktt4b3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTY5 NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2NTA5ODI1YjcvNzM4MjRjZGMtZGJkNy0z M2JmLTg1NzctNmQ0YmNhODhmZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2OTQ2NzgtMjM3Yy00ZDk5LTk1 ODktYjEwNjUwOTgyNWI3L2Y5Njk0Njc4LTIzN2MtNGQ5OS05NTg5LWIxMDY1MDk4 MjViNy5jcmwwHwYDVR0jBBgwFoAUi8+I2icRrY03bYYNC8RvLIuTdIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTY5NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2 NTA5ODI1YjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2kgAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALl82zhOv3XwXgWS5yzyiAqiJBMVFsTSodoUJsZ1ck5BZNCYB5oX ciHlz+fgvY8Fuxm5x3IEBpkPzKezNFVFB45S1ElE/nsDGk0yBmAmmdg15Ell4bO8 0JMx8FeK4P7WbInpOPAMo0yXBobpNHByYjxupVRauVp2oLXlFoXGIu8Nu8pzr2xn PsHLaBrIZad0RyIVNHRQojc1r7ZY2Gq93SbkgH5u1yIwrtWd2Ebu2bSLgkDMW3s0 kBXvgywt1p4UuPcpnqaWXBcXhDTI7QssX3GOaZAMmKyDnnJ3qX1lPbQPcaht7GDN K9XbQHssv3SwIwmwSGHvoRKLQ9l7mJx3mic= -----END CERTIFICATE-----Generated at Sun Oct 19 20:55:03 2025 by rpki-client