$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa File: 88d218ab-9c22-353d-a21d-a0cf2af8daff.roa (raw, json) Hash identifier: W434lMzmea8w8ullAeqWPrRP4NxKCRzWR1EUfEAIfDs= Subject key identifier: 85:DC:C7:E8:02:15:54:25:30:57:9A:33:3A:F0:5E:67:84:A2:55:58 Certificate issuer: /CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3 Certificate serial: 010D0C9F4328584B80B76B7F6373241DB8BD3A80 Authority key identifier: 93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 1030 IP address blocks: 2602:f9cd::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:6b:7f:63:73:24:1d:b8:bd:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=88716aab-f501-49ab-b88e-24f86e02477b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:4d:a8:d7:3c:1e:5e:01:3b:70:df:01:eb: 90:49:03:04:c3:5a:ec:29:19:30:1a:ad:2d:da:e1: c0:e5:47:d8:47:07:26:70:ff:e2:d5:fe:c9:9e:52: b7:a7:8c:2c:f2:24:db:13:98:ad:df:05:75:c5:80: 99:e8:8c:71:0e:b5:53:2d:a0:d5:56:fb:4a:9b:f6: 37:6b:82:91:07:6a:d5:f4:9d:c0:33:dd:80:69:19: 83:5d:99:3d:6e:12:a8:4b:78:ac:e4:81:1d:49:b0: 0e:1c:05:b2:cc:09:e8:4e:5c:56:70:d5:e2:74:a1: 74:fe:5a:6b:a3:94:c2:9f:49:e5:4f:58:37:42:b6: aa:a1:85:e9:be:a3:3f:80:6b:62:aa:d0:7f:8a:ca: 19:86:28:51:cb:89:9f:3c:c3:3d:b0:7f:3b:4e:18: 02:eb:4c:20:33:75:4d:1e:5a:8d:60:61:57:da:fe: 6f:73:8e:10:30:4c:81:bd:a5:f0:8a:a9:b6:f5:c7: e5:68:83:68:09:53:b6:40:54:cb:24:39:89:99:10: ff:e3:82:8f:bc:f4:44:72:06:3e:5b:c7:61:45:fe: 8b:1b:14:50:ff:ff:d0:0d:f2:1b:2f:2f:ac:7e:83: f5:37:b9:0a:b7:78:7c:a6:a8:be:c0:8c:e4:7a:01: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DC:C7:E8:02:15:54:25:30:57:9A:33:3A:F0:5E:67:84:A2:55:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl X509v3 Authority Key Identifier: keyid:93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9cd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:41:8e:c3:af:a0:54:6b:9c:93:2c:d0:40:9e:b6:b4:7e:aa: e0:cf:9c:d9:85:24:3d:ec:8a:77:80:13:3c:83:35:3e:dd:31: 7b:56:46:a2:fc:7b:f3:ae:37:7a:92:ef:f6:d5:5a:64:5e:fb: 4f:1f:6d:d9:89:f3:35:8d:58:17:55:b4:e3:96:54:03:d9:2e: e4:dc:63:85:d9:fc:71:38:a8:90:c7:73:a8:10:1d:d2:a8:ba: 69:d6:bc:35:17:60:6a:a8:26:1b:dc:47:81:bd:3e:cc:1a:36: 91:dd:29:95:29:2b:23:91:05:42:a3:2c:51:81:1f:b4:ad:1a: e7:99:89:c0:cf:95:c9:ba:61:91:78:ad:5d:67:2d:0b:67:4a: c6:f4:dd:ec:0a:be:af:b9:f0:cb:02:9a:8b:10:a9:a7:cf:30: f4:a1:a1:d3:69:2e:0f:2f:32:46:16:25:a0:e8:d0:31:39:f8: 50:f0:a8:5b:cb:3d:80:ff:5d:c5:e5:55:c3:e7:bc:da:8e:9d: b6:9c:13:ac:3d:65:87:ae:be:f8:89:bc:aa:19:89:04:03:b6: 30:f2:cb:c8:ee:ae:e7:6a:4c:17:b4:70:1f:f3:c1:2d:2b:8e: 50:07:ce:10:15:23:5d:94:20:41:39:a4:c7:a6:82:f7:10:ae: 52:cd:ea:ad -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuAt2t/Y3MkHbi9OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDViZDM1NzgtM2MwOC00NGQxLTk5ZTItODA4N2ZjNDhm ZmIzMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ODg3MTZhYWItZjUwMS00OWFiLWI4OGUtMjRmODZlMDI0NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuJNqNc8Hl4BO3DfAeuQSQMEw1rsKRkwGq0t 2uHA5UfYRwcmcP/i1f7JnlK3p4ws8iTbE5it3wV1xYCZ6IxxDrVTLaDVVvtKm/Y3 a4KRB2rV9J3AM92AaRmDXZk9bhKoS3is5IEdSbAOHAWyzAnoTlxWcNXidKF0/lpr o5TCn0nlT1g3QraqoYXpvqM/gGtiqtB/isoZhihRy4mfPMM9sH87ThgC60wgM3VN HlqNYGFX2v5vc44QMEyBvaXwiqm29cflaINoCVO2QFTLJDmJmRD/44KPvPREcgY+ W8dhRf6LGxRQ///QDfIbLy+sfoP1N7kKt3h8pqi+wIzkegEHZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIXcx+gCFVQlMFeaMzrwXmeEolVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWJk MzU3OC0zYzA4LTQ0ZDEtOTllMi04MDg3ZmM0OGZmYjMvODhkMjE4YWItOWMyMi0z NTNkLWEyMWQtYTBjZjJhZjhkYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDViZDM1NzgtM2MwOC00NGQxLTk5 ZTItODA4N2ZjNDhmZmIzL2Q1YmQzNTc4LTNjMDgtNDRkMS05OWUyLTgwODdmYzQ4 ZmZiMy5jcmwwHwYDVR0jBBgwFoAUk0YLtXT2oJxx8LF9nO1+zQXaB+owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWJkMzU3OC0zYzA4LTQ0ZDEtOTllMi04MDg3 ZmM0OGZmYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5zQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFEGOw6+gVGuckyzQQJ62tH6q4M+c2YUkPeyKd4ATPIM1Pt0xe1ZG ovx78643epLv9tVaZF77Tx9t2YnzNY1YF1W045ZUA9ku5Nxjhdn8cTiokMdzqBAd 0qi6ada8NRdgaqgmG9xHgb0+zBo2kd0plSkrI5EFQqMsUYEftK0a55mJwM+Vybph kXitXWctC2dKxvTd7Aq+r7nwywKaixCpp88w9KGh02kuDy8yRhYloOjQMTn4UPCo W8s9gP9dxeVVw+e82o6dtpwTrD1lh66++Im8qhmJBAO2MPLLyO6u52pMF7RwH/PB LSuOUAfOEBUjXZQgQTmkx6aC9xCuUs3qrQ== -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:19 2025 by rpki-client