$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/13e4a4d4-b713-33fa-a0d4-50e299b7d179.roa File: 13e4a4d4-b713-33fa-a0d4-50e299b7d179.roa (raw, json) Hash identifier: dXFDMScqb9i92PKpGCGCalMZi9/t4oeoKss3tJMARqg= Subject key identifier: 29:13:0A:0C:70:26:03:91:C1:55:EB:F7:59:79:BC:43:5A:78:D6:AC Certificate issuer: /CN=5541e022-414f-45f5-9426-a7643db1ec8d Certificate serial: 010D0C9F4328584B821CCEAAA3D04A3450DBDA40 Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/13e4a4d4-b713-33fa-a0d4-50e299b7d179.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 149020 IP address blocks: 2602:fa08:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:ce:aa:a3:d0:4a:34:50:db:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=421f6cfc-2592-43f4-bea9-602cecb90c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0b:a6:6e:f1:3f:dd:88:f2:f2:04:aa:a1:b9: d4:5f:a1:c4:c8:1a:50:e5:ab:68:ae:11:27:58:41: 99:51:82:4f:94:91:6d:8b:47:9e:6b:2e:f3:94:b1: bf:4f:c3:36:09:fb:77:dc:48:63:60:fe:7a:7c:2a: 0e:a9:2d:85:eb:21:b1:8f:b5:2f:28:00:0f:9d:50: 2a:72:10:1d:dd:a4:44:87:c4:b6:72:bf:9c:be:62: 47:46:f8:2b:59:aa:fe:35:95:b8:73:14:5c:d7:33: 6a:66:d8:9e:78:89:c2:38:1b:c4:b9:06:68:f0:06: 40:14:94:72:91:75:56:3b:b6:44:2f:31:5c:ef:b1: 62:55:7d:30:51:d2:d9:83:25:50:39:cd:de:dc:28: a1:62:83:cc:84:35:ee:65:96:a3:9f:46:f5:c2:d4: b7:e7:d6:1b:c4:a5:d3:31:5d:e8:df:1c:51:a2:81: 1b:34:00:39:89:52:1d:82:3d:2c:2e:fc:42:ad:c9: 77:cd:eb:b4:92:d4:f0:d5:b3:c7:9b:56:7f:06:c1: c5:72:b6:b7:f6:8f:d6:1e:72:99:5e:ca:6d:b3:90: d3:51:ba:37:87:4e:28:0d:59:06:ce:33:a4:94:5e: 8b:61:61:ee:a2:9c:eb:1e:1c:4f:89:0b:cd:e4:34: 93:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:13:0A:0C:70:26:03:91:C1:55:EB:F7:59:79:BC:43:5A:78:D6:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/13e4a4d4-b713-33fa-a0d4-50e299b7d179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl X509v3 Authority Key Identifier: keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa08:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:26:07:ae:9d:12:1f:4c:e8:d3:c6:2f:3f:24:8b:e9:6d:ff: d8:1a:ba:d9:31:be:52:da:22:7e:45:03:b5:4d:a7:cd:02:1b: 4d:e5:18:8a:b2:97:e4:ee:36:fe:d3:21:8e:1f:48:f7:29:c7: e5:6a:2b:42:d0:8e:ae:df:b3:49:1e:77:75:fb:5d:12:66:ef: 8d:66:01:69:1a:6f:7a:d2:fe:51:e3:87:f2:1d:83:fb:45:ab: ca:17:0f:da:04:87:a4:f8:61:3f:f2:53:a0:21:0b:e1:90:c0: 5c:a7:90:28:0e:d6:69:82:38:0c:88:d0:d1:c3:0b:e7:0a:b8: 72:7f:3a:8f:c8:f6:8e:3e:87:a2:0b:01:d0:76:d1:14:ef:46: b5:9c:7f:c7:dd:29:89:02:22:68:76:5b:4f:f5:96:a5:be:85: cc:df:67:6d:c3:08:01:29:8b:1b:b7:8a:99:3b:c2:15:fa:79: c2:90:cb:bc:36:dd:91:da:5a:c3:bf:18:54:09:10:43:01:70: 7b:80:eb:d3:df:b9:90:98:c0:b6:02:7a:9e:e3:28:84:15:84: 0d:24:b0:65:9f:c8:4a:a5:52:51:1f:86:cb:c8:7a:46:64:43: c8:04:d6:bd:5d:a6:bd:b7:47:7a:84:02:28:58:99:0e:e9:43: fb:1c:90:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHM6qo9BKNFDb2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU0MWUwMjItNDE0Zi00NWY1LTk0MjYtYTc2NDNkYjFl YzhkMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NDIxZjZjZmMtMjU5Mi00M2Y0LWJlYTktNjAyY2VjYjkwYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQumbvE/3Yjy8gSqobnUX6HEyBpQ5atorhEn WEGZUYJPlJFti0eeay7zlLG/T8M2Cft33EhjYP56fCoOqS2F6yGxj7UvKAAPnVAq chAd3aREh8S2cr+cvmJHRvgrWar+NZW4cxRc1zNqZtieeInCOBvEuQZo8AZAFJRy kXVWO7ZELzFc77FiVX0wUdLZgyVQOc3e3CihYoPMhDXuZZajn0b1wtS359YbxKXT MV3o3xxRooEbNAA5iVIdgj0sLvxCrcl3zeu0ktTw1bPHm1Z/BsHFcra39o/WHnKZ Xspts5DTUbo3h04oDVkGzjOklF6LYWHuopzrHhxPiQvN5DST6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCkTCgxwJgORwVXr91l5vENaeNasMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81NTQx ZTAyMi00MTRmLTQ1ZjUtOTQyNi1hNzY0M2RiMWVjOGQvMTNlNGE0ZDQtYjcxMy0z M2ZhLWEwZDQtNTBlMjk5YjdkMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTU0MWUwMjItNDE0Zi00NWY1LTk0 MjYtYTc2NDNkYjFlYzhkLzU1NDFlMDIyLTQxNGYtNDVmNS05NDI2LWE3NjQzZGIx ZWM4ZC5jcmwwHwYDVR0jBBgwFoAU9XJmm/or1eRYLh/qGspnJJZrP6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81NTQxZTAyMi00MTRmLTQ1ZjUtOTQyNi1hNzY0 M2RiMWVjOGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6CAAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ0mB66dEh9M6NPGLz8ki+lt/9gautkxvlLaIn5FA7VNp80CG03l GIqyl+TuNv7TIY4fSPcpx+VqK0LQjq7fs0ked3X7XRJm741mAWkab3rS/lHjh/Id g/tFq8oXD9oEh6T4YT/yU6AhC+GQwFynkCgO1mmCOAyI0NHDC+cKuHJ/Oo/I9o4+ h6ILAdB20RTvRrWcf8fdKYkCImh2W0/1lqW+hczfZ23DCAEpixu3ipk7whX6ecKQ y7w23ZHaWsO/GFQJEEMBcHuA69PfuZCYwLYCep7jKIQVhA0ksGWfyEqlUlEfhsvI ekZkQ8gE1r1dpr23R3qEAihYmQ7pQ/sckCA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:29:24 2025 by rpki-client