$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa File: 8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa (raw, json) Hash identifier: RAqb4hauLAaiIWe4+ImQlZ/zf4+W6nvBDJgPe2FDoKY= Subject key identifier: AC:47:9A:BD:F6:E9:3F:FD:BD:B7:4B:B7:15:C2:5E:B1:00:5B:6D:09 Certificate issuer: /CN=68de9da0-8f7e-4231-9340-c37abafc3714 Certificate serial: 010D0C9F4328584B80B76B5A8D393CC76C702900 Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 1030 IP address blocks: 2602:f9cb::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:6b:5a:8d:39:3c:c7:6c:70:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=624d95c3-ca4b-45d0-88d8-32ca19a20928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:50:1e:4c:78:c9:6d:66:33:60:6b:cf:e3:3b: 1f:3b:62:3d:5b:1d:bf:49:eb:50:69:4b:45:ec:85: 85:86:59:32:57:3d:39:60:21:8f:eb:ba:7e:d4:6b: 42:26:98:25:16:40:36:bf:86:52:3c:6f:ee:08:78: 3e:01:9c:b7:10:4b:1a:14:b2:96:3a:e7:40:89:67: 7f:3a:87:4d:f4:e5:ad:91:f0:e3:4b:33:ec:42:e9: 52:f7:c9:e4:a6:ee:93:91:98:3c:bd:f8:cc:df:3a: 46:08:e3:37:a8:cb:91:43:f7:4c:6a:56:90:6a:46: 95:2b:ff:47:22:fb:30:2e:59:8d:a3:83:9d:e3:24: 4c:04:90:5c:1f:d7:0b:bd:71:5c:78:55:cb:ba:91: 40:34:6d:dd:be:84:11:0a:11:2b:20:3f:66:da:d0: e2:fd:2c:6d:2b:42:89:ad:76:d8:21:ae:b2:ac:da: 56:73:d7:6a:3a:f0:9b:92:8e:c9:10:b4:13:ff:3e: 28:5f:07:0c:67:11:05:50:ae:d5:4b:d9:15:c2:12: 84:e2:87:f5:ee:15:22:24:99:42:cb:1f:cf:32:c3: df:d9:80:6b:88:4b:c5:ba:71:6a:5e:1d:ed:64:98: 56:0e:9d:98:7e:15:50:b2:82:de:8e:0e:41:b1:a0: b1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:47:9A:BD:F6:E9:3F:FD:BD:B7:4B:B7:15:C2:5E:B1:00:5B:6D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl X509v3 Authority Key Identifier: keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9cb::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:4f:0a:90:f1:9d:ff:bd:64:92:05:76:a7:63:16:85:92:43: b8:63:48:e6:25:7d:8e:70:3d:e7:9f:2d:49:03:b4:ee:62:75: 6e:33:2d:4d:e9:aa:ac:15:30:98:54:51:2a:0f:f3:4f:96:5d: a6:5d:af:00:ae:c0:15:84:e6:5b:b3:5c:29:2f:2a:57:e5:a6: 1a:a7:94:6a:b8:4b:27:32:08:75:a7:7c:0b:64:cf:60:ea:84: 86:21:c1:13:4e:52:b1:3b:3e:51:8e:f3:b4:8a:7e:35:b9:9e: e3:1f:5b:9c:e4:a6:ab:28:d9:5c:84:95:39:38:87:dc:e7:cd: c4:5d:15:16:8e:5a:e3:47:ea:93:92:dd:ee:54:06:39:c8:a4: 92:d4:ee:cd:e7:c1:e2:64:81:92:9b:30:e6:aa:15:a2:4b:6b: 2d:81:15:ae:50:ee:0c:60:8b:b7:d9:de:e1:d0:49:fa:a9:4b: 61:4f:f0:dd:fd:df:9f:57:33:58:86:cb:d3:ac:18:a5:ec:3a: 82:27:7c:a6:e3:43:4e:a9:20:40:4d:17:f2:ae:6d:2e:ad:9c: be:fe:f5:96:20:b6:a6:69:65:4f:dc:2f:c7:83:a7:93:26:b7: 25:81:30:b4:64:7b:7e:8a:ef:5b:93:a5:60:d5:3d:ea:d9:51: f6:c2:c7:9e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuAt2tajTk8x2xwKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhkZTlkYTAtOGY3ZS00MjMxLTkzNDAtYzM3YWJhZmMz NzE0MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NjI0ZDk1YzMtY2E0Yi00NWQwLTg4ZDgtMzJjYTE5YTIwOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFAeTHjJbWYzYGvP4zsfO2I9Wx2/SetQaUtF 7IWFhlkyVz05YCGP67p+1GtCJpglFkA2v4ZSPG/uCHg+AZy3EEsaFLKWOudAiWd/ OodN9OWtkfDjSzPsQulS98nkpu6TkZg8vfjM3zpGCOM3qMuRQ/dMalaQakaVK/9H IvswLlmNo4Od4yRMBJBcH9cLvXFceFXLupFANG3dvoQRChErID9m2tDi/SxtK0KJ rXbYIa6yrNpWc9dqOvCbko7JELQT/z4oXwcMZxEFUK7VS9kVwhKE4of17hUiJJlC yx/PMsPf2YBriEvFunFqXh3tZJhWDp2YfhVQsoLejg5BsaCxowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKxHmr326T/9vbdLtxXCXrEAW20JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRl OWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdhYmFmYzM3MTQvOGEwZWEzOTQtZmMyOC0z Yzk0LWE1OWUtYzhiNzEwMmU2Zjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhkZTlkYTAtOGY3ZS00MjMxLTkz NDAtYzM3YWJhZmMzNzE0LzY4ZGU5ZGEwLThmN2UtNDIzMS05MzQwLWMzN2FiYWZj MzcxNC5jcmwwHwYDVR0jBBgwFoAU3HTcGzn5AYyZQEAOWxJ8czrP4Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRlOWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdh YmFmYzM3MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5ywAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkE8KkPGd/71kkgV2p2MWhZJDuGNI5iV9jnA9558tSQO07mJ1bjMt TemqrBUwmFRRKg/zT5Zdpl2vAK7AFYTmW7NcKS8qV+WmGqeUarhLJzIIdad8C2TP YOqEhiHBE05SsTs+UY7ztIp+Nbme4x9bnOSmqyjZXISVOTiH3OfNxF0VFo5a40fq k5Ld7lQGOcikktTuzefB4mSBkpsw5qoVoktrLYEVrlDuDGCLt9ne4dBJ+qlLYU/w 3f3fn1czWIbL06wYpew6gid8puNDTqkgQE0X8q5tLq2cvv71liC2pmllT9wvx4On kya3JYEwtGR7forvW5OlYNU96tlR9sLHng== -----END CERTIFICATE-----Generated at Mon Oct 20 15:08:22 2025 by rpki-client