$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/85834eb1-405f-3a20-9a7c-853a9cf304c1.roa File: 85834eb1-405f-3a20-9a7c-853a9cf304c1.roa (raw, json) Hash identifier: Gh/fP8IEnnoKExmUpCs8l9TRM+T90+vBtvnRZnyoJt4= Subject key identifier: 69:08:97:BC:A6:D3:B6:25:2F:BF:27:06:79:86:B9:5A:CC:83:F5:57 Certificate issuer: /CN=e3bd1f87-8818-4b01-a7e8-514858edd50e Certificate serial: 010D0C9F4328584B715CAFBACC0DF45A25CA5400 Authority key identifier: 2D:95:2F:80:9F:58:C0:47:70:47:3E:79:F1:B9:A8:93:FB:D1:B4:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/85834eb1-405f-3a20-9a7c-853a9cf304c1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 2602:817::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:af:ba:cc:0d:f4:5a:25:ca:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd1f87-8818-4b01-a7e8-514858edd50e Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=01d8f535-f97c-4429-8201-8d8af32f6881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b5:59:17:ef:cd:e4:26:ae:b0:0e:96:34:e4: 3f:73:d8:0d:c0:8d:ba:f4:59:ee:e3:fd:d9:89:65: fa:6d:ed:94:7f:50:03:58:12:6f:d6:27:30:03:0c: aa:ef:cb:49:bb:bf:06:cf:0a:19:13:5e:7a:a1:33: f3:40:71:8a:c3:89:ee:2a:72:ee:e3:ab:a7:f9:58: 4b:9b:4d:82:9c:9c:e0:4d:b5:5f:e7:60:79:f6:ec: 69:51:b5:11:1b:46:dd:6f:48:65:42:a3:90:a4:ec: b2:80:93:1e:83:73:47:28:d4:90:38:3a:7e:dc:e7: 35:b0:2b:9e:fa:54:73:42:58:4c:06:92:82:a6:03: 60:20:53:e3:14:1b:52:41:6e:5e:44:55:e2:d4:7e: d7:5f:d7:17:ac:73:14:fc:ac:ee:cd:08:ec:55:eb: 0d:56:9b:41:bd:3d:56:79:2c:39:b4:56:59:5e:06: 01:b6:7c:89:59:da:42:be:d6:e4:3b:a6:ef:d4:b8: 2a:84:b1:21:49:26:b5:3c:3d:f4:f2:c5:cb:8a:b6: 94:04:06:56:15:92:f7:14:7d:af:5c:c3:1b:ae:41: 6c:9f:7e:7a:c6:2b:ff:f0:ab:04:db:94:0d:db:92: 9d:c9:27:b1:0d:1e:af:b9:f5:3a:43:94:a5:73:01: db:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:08:97:BC:A6:D3:B6:25:2F:BF:27:06:79:86:B9:5A:CC:83:F5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/85834eb1-405f-3a20-9a7c-853a9cf304c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.crl X509v3 Authority Key Identifier: keyid:2D:95:2F:80:9F:58:C0:47:70:47:3E:79:F1:B9:A8:93:FB:D1:B4:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer sbgp-ipAddrBlock: critical IPv6: 2602:817::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:94:66:7a:12:88:9e:77:d4:88:e8:30:47:11:f2:d1:90:4f: ef:4f:e0:63:6e:a8:d8:63:78:19:d1:ca:87:74:08:a2:36:c5: 22:eb:2e:21:6f:9a:8e:96:22:37:43:bd:c5:5e:16:26:fa:f5: 7b:0b:d4:72:81:47:10:89:c5:5e:67:dc:b9:9b:12:b3:b7:ef: 87:4a:ad:54:94:fe:c9:b7:79:b4:0e:e2:46:ad:40:e8:40:f3: 98:69:56:eb:c6:0d:a0:ae:ea:be:f7:56:87:87:d9:ab:32:19: 44:50:00:4f:9a:ee:09:e8:b6:29:db:d9:2d:b2:2b:9f:20:a6: f5:c0:e4:f3:d1:75:ba:d0:33:90:cc:d3:c4:3c:3a:33:86:11: f6:87:42:eb:75:c1:a0:17:bf:0c:09:d3:6c:bd:17:e6:20:e0: 93:1b:2f:3d:d4:1d:f9:7c:3a:10:fb:9e:e8:8b:c1:0f:e4:4e: 4c:05:18:0e:a4:24:6f:0c:42:e8:0d:e8:66:58:32:4d:7d:65: d1:c3:4f:65:c0:d7:e4:b9:9c:5a:6c:2a:53:12:19:6a:c9:4b: d3:4c:ac:bc:03:6e:43:37:cc:5f:f9:61:61:09:2b:ef:74:f6: 19:92:31:a4:a8:f0:c9:99:d0:28:0b:60:06:25:f3:e6:4e:37: 42:58:9d:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXK+6zA30WiXKVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDFmODctODgxOC00YjAxLWE3ZTgtNTE0ODU4ZWRk NTBlMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDFkOGY1MzUtZjk3Yy00NDI5LTgyMDEtOGQ4YWYzMmY2ODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrVZF+/N5CausA6WNOQ/c9gNwI269Fnu4/3Z iWX6be2Uf1ADWBJv1icwAwyq78tJu78GzwoZE156oTPzQHGKw4nuKnLu46un+VhL m02CnJzgTbVf52B59uxpUbURG0bdb0hlQqOQpOyygJMeg3NHKNSQODp+3Oc1sCue +lRzQlhMBpKCpgNgIFPjFBtSQW5eRFXi1H7XX9cXrHMU/KzuzQjsVesNVptBvT1W eSw5tFZZXgYBtnyJWdpCvtbkO6bv1LgqhLEhSSa1PD308sXLiraUBAZWFZL3FH2v XMMbrkFsn356xiv/8KsE25QN25KdySexDR6vufU6Q5SlcwHboQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGkIl7ym07YlL78nBnmGuVrMg/VXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lM2Jk MWY4Ny04ODE4LTRiMDEtYTdlOC01MTQ4NThlZGQ1MGUvODU4MzRlYjEtNDA1Zi0z YTIwLTlhN2MtODUzYTljZjMwNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTNiZDFmODctODgxOC00YjAxLWE3 ZTgtNTE0ODU4ZWRkNTBlL2UzYmQxZjg3LTg4MTgtNGIwMS1hN2U4LTUxNDg1OGVk ZDUwZS5jcmwwHwYDVR0jBBgwFoAULZUvgJ9YwEdwRz558bmok/vRtMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lM2JkMWY4Ny04ODE4LTRiMDEtYTdlOC01MTQ4 NThlZGQ1MGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgIIFwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD2UZnoSiJ531IjoMEcR8tGQT+9P4GNuqNhjeBnRyod0CKI2xSLr LiFvmo6WIjdDvcVeFib69XsL1HKBRxCJxV5n3LmbErO374dKrVSU/sm3ebQO4kat QOhA85hpVuvGDaCu6r73VoeH2asyGURQAE+a7gnotinb2S2yK58gpvXA5PPRdbrQ M5DM08Q8OjOGEfaHQut1waAXvwwJ02y9F+Yg4JMbLz3UHfl8OhD7nuiLwQ/kTkwF GA6kJG8MQugN6GZYMk19ZdHDT2XA1+S5nFpsKlMSGWrJS9NMrLwDbkM3zF/5YWEJ K+909hmSMaSo8MmZ0CgLYAYl8+ZON0JYnYI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:43 2025 by rpki-client