$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa File: 57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa (raw, json) Hash identifier: Zn13Erdo4faMNHu+1kGbuyD+kQwdey6O5tYPfRclWHc= Subject key identifier: A6:60:2B:DC:D8:A0:FD:00:18:45:4F:3B:9C:90:B0:98:48:24:57:6F Certificate issuer: /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd Certificate serial: 010D0C9F4328584B80B76F5EE1B9C4F90D686020 Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 1030 IP address blocks: 2602:f9d5::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:6f:5e:e1:b9:c4:f9:0d:68:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=45aae9e9-1d73-4c69-b01f-5c37a13d06bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:5c:28:82:4d:be:cd:84:13:3f:36:44:7f: 22:cd:d1:a5:17:a5:1f:91:ba:3f:3d:67:56:52:59: 21:ab:58:b6:23:6c:1c:dd:43:02:a5:c1:d4:3e:37: c1:62:61:96:12:32:38:47:3c:b7:7d:0a:dc:d1:46: a8:a6:13:c0:33:7f:8a:3d:ca:4f:c0:c7:9d:f2:ec: f3:d4:43:ae:98:0f:67:13:6b:99:e4:13:ce:5b:1d: cc:a9:71:e9:79:69:9f:75:b3:5f:80:9a:48:90:69: 2b:c6:81:c7:0f:98:45:97:57:0e:ea:cf:50:13:c7: 9b:41:e2:0b:43:9a:5d:9c:5e:85:20:c2:ce:6c:bb: f5:28:42:45:0f:aa:be:9e:41:5b:3c:12:fd:e9:98: 9e:2a:0c:69:d2:50:db:fa:79:cc:3e:12:04:4c:07: d7:db:f8:f8:73:6a:51:39:f0:b0:51:c0:49:bb:a7: 51:db:a6:86:16:58:92:b2:7e:3a:69:3f:f0:06:bd: 54:b6:a7:2e:53:74:2c:d4:12:3f:e1:3e:5c:48:24: 7f:9e:3b:f9:9b:a0:1a:78:4f:6b:e5:c3:3e:4d:4e: 03:04:a9:7a:21:28:b8:a5:32:8d:59:a7:a7:14:8b: 5e:72:b6:79:48:ff:ac:60:65:3a:af:22:63:d7:26: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:60:2B:DC:D8:A0:FD:00:18:45:4F:3B:9C:90:B0:98:48:24:57:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl X509v3 Authority Key Identifier: keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9d5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fe:56:3b:97:90:b8:08:c8:57:7f:53:32:e4:bc:c7:4b:e9: 91:cc:02:64:fc:0b:03:79:9f:07:82:49:11:92:04:5a:f4:b7: 21:d3:dd:99:fa:fc:ac:52:7f:eb:1c:14:45:7e:04:b7:a0:01: 68:7a:4e:72:3a:13:d2:91:88:e0:93:38:59:39:a9:de:8f:b8: a9:6f:85:6a:a7:52:41:ca:cf:88:66:5f:c3:6c:16:91:5d:a5: 44:19:25:48:a6:ad:d4:7b:11:0c:25:6d:1a:59:f5:a5:89:db: c6:f5:24:f7:cb:e6:40:29:11:52:53:59:43:ae:b0:92:12:27: a1:d7:8f:15:46:05:aa:6b:10:b0:07:01:ca:75:af:33:f1:1c: 32:6f:f5:28:71:60:ef:75:79:2d:05:59:b4:98:7d:ed:21:ed: d2:ce:dc:bf:e0:c8:b6:20:95:1a:03:03:70:24:5e:2d:cb:e1: 92:3b:dd:63:68:65:9f:2b:03:47:4a:c8:c6:7a:94:d6:91:5f: 96:f9:f5:93:22:d5:ab:5f:9c:59:21:2a:88:50:96:ed:93:7c: d4:28:ca:19:c8:b5:a4:1a:26:be:33:83:8a:c2:51:f5:d1:2a: 77:e8:01:b0:13:2b:46:76:73:4c:92:ac:7a:d2:79:dd:85:b0: 31:8c:b8:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuAt29e4bnE+Q1oYCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIyMjNmN2YtZjI4Yi00ZGY0LWI2ZGEtY2FiNDg1NThj MmNkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NDVhYWU5ZTktMWQ3My00YzY5LWIwMWYtNWMzN2ExM2QwNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYBcKIJNvs2EEz82RH8izdGlF6Ufkbo/PWdW Ulkhq1i2I2wc3UMCpcHUPjfBYmGWEjI4Rzy3fQrc0UaophPAM3+KPcpPwMed8uzz 1EOumA9nE2uZ5BPOWx3MqXHpeWmfdbNfgJpIkGkrxoHHD5hFl1cO6s9QE8ebQeIL Q5pdnF6FIMLObLv1KEJFD6q+nkFbPBL96ZieKgxp0lDb+nnMPhIETAfX2/j4c2pR OfCwUcBJu6dR26aGFliSsn46aT/wBr1UtqcuU3Qs1BI/4T5cSCR/njv5m6AaeE9r 5cM+TU4DBKl6ISi4pTKNWaenFItecrZ5SP+sYGU6ryJj1yYLVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKZgK9zYoP0AGEVPO5yQsJhIJFdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIy M2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0ODU1OGMyY2QvNTdjNWY0ZjUtYzcyOC0z YTNlLWFkMzYtYjc3Yjg4YWIzNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIyMjNmN2YtZjI4Yi00ZGY0LWI2 ZGEtY2FiNDg1NThjMmNkL2JiMjIzZjdmLWYyOGItNGRmNC1iNmRhLWNhYjQ4NTU4 YzJjZC5jcmwwHwYDVR0jBBgwFoAUHLQAnkcraCaH/sJecmJGH10i5HQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIyM2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0 ODU1OGMyY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL51QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAR/5WO5eQuAjIV39TMuS8x0vpkcwCZPwLA3mfB4JJEZIEWvS3IdPd mfr8rFJ/6xwURX4Et6ABaHpOcjoT0pGI4JM4WTmp3o+4qW+FaqdSQcrPiGZfw2wW kV2lRBklSKat1HsRDCVtGln1pYnbxvUk98vmQCkRUlNZQ66wkhInodePFUYFqmsQ sAcBynWvM/EcMm/1KHFg73V5LQVZtJh97SHt0s7cv+DItiCVGgMDcCReLcvhkjvd Y2hlnysDR0rIxnqU1pFflvn1kyLVq1+cWSEqiFCW7ZN81CjKGci1pBomvjODisJR 9dEqd+gBsBMrRnZzTJKsetJ53YWwMYy4fA== -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:55 2025 by rpki-client