$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa File: 43d013ec-a6c3-3388-8d14-0791322dd8c0.roa (raw, json) Hash identifier: N7UNuaSl3IYm72/ZBaj7n9tk8crXY+D+uSh8byt+Twc= Subject key identifier: D5:F8:11:72:3D:82:A5:70:43:B5:C2:5D:91:86:74:03:0A:1E:7E:F6 Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F4328584B5141BA7D47FA459DF8136100 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 399889 IP address blocks: 2602:fc54::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ba:7d:47:fa:45:9d:f8:13:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=a2f34d3e-138e-4b61-914f-70e083d036bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:40:3f:92:12:4e:32:54:cc:a8:f0:e9:2b:b9: d3:d5:47:6e:f3:ef:47:c3:a2:a9:36:12:12:4f:d0: e4:c4:fe:7a:c3:93:fa:7d:f3:64:31:0b:3d:21:b9: aa:f5:5c:b9:4d:e5:db:ec:18:73:8b:e7:d5:df:52: b1:8f:50:f7:de:1c:6b:c4:e9:3f:2c:cb:c1:d9:29: 3a:f4:95:2e:ee:44:ba:0e:23:42:ab:5e:64:8e:1a: 38:91:67:e1:34:dd:28:93:06:cd:fc:11:63:98:56: 05:a2:df:1a:64:af:54:ef:7d:62:5e:df:5b:ca:f6: 1f:30:2d:4d:e2:89:07:5c:ee:ba:dc:bb:35:b0:be: 9f:69:27:65:7e:95:4d:a6:31:1f:92:2f:75:42:ed: e7:48:9b:05:8e:c9:8b:6b:32:5d:d9:b6:ad:52:67: 32:6a:25:e8:12:73:89:06:cc:99:c1:ba:b4:cd:21: 3a:1d:36:55:9c:d1:85:87:1c:42:91:62:c8:32:86: a8:8b:68:e9:70:5b:f0:00:10:1f:d0:e9:ee:42:b7: 4f:34:2f:c6:90:ec:fe:b3:45:2a:cc:d9:5a:99:95: 9e:a4:23:1e:ca:7e:19:4b:a9:40:2a:28:3b:c1:ee: f5:36:76:77:f2:74:bc:06:d8:32:8f:25:64:cd:61: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F8:11:72:3D:82:A5:70:43:B5:C2:5D:91:86:74:03:0A:1E:7E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc54::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e3:39:f5:a4:fe:b6:bc:52:27:ca:61:ca:4f:c1:62:6c:53: 90:cf:9f:6d:97:ce:3c:0f:97:67:ca:6b:2a:21:f2:aa:51:ff: 36:85:9f:6b:fc:ed:aa:59:6c:6b:a1:e8:52:0a:54:f2:82:d7: 5c:c3:60:f8:39:19:25:05:b2:d7:84:62:41:b2:50:47:4e:8d: 23:6b:16:d9:1f:4a:43:4c:b5:c9:38:59:c0:c9:b9:e8:66:45: 7d:63:0b:b5:02:f2:8c:7d:8e:ed:33:ca:a8:bf:a3:55:c6:97: 83:bd:fb:15:cd:b5:e5:c3:79:f4:0a:54:82:0b:b7:3c:4a:85: 17:1c:96:55:54:1e:be:ee:7a:c1:3a:e6:e4:c7:e2:03:78:a7: 3f:5e:c8:7c:eb:7c:88:d7:a3:7f:12:6b:1d:2c:d0:1b:db:40: d1:f4:41:db:40:3c:b1:0f:dd:88:12:17:50:61:bc:c5:3a:e5: 7a:7c:20:ad:ad:6b:2c:29:b8:71:89:5a:d8:85:9c:a4:5e:84: c5:9c:89:b1:00:b5:32:3b:28:04:e6:53:15:6f:d5:3e:3d:78: ff:a5:92:80:e2:33:1b:a8:65:a5:38:30:d1:92:84:5a:0f:ef: 45:15:3f:44:b2:c6:ab:39:87:dd:2a:28:25:20:69:c8:a7:ca: e6:d7:5f:c8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtRQbp9R/pFnfgTYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk YTJmMzRkM2UtMTM4ZS00YjYxLTkxNGYtNzBlMDgzZDAzNmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0A/khJOMlTMqPDpK7nT1Udu8+9Hw6KpNhIS T9DkxP56w5P6ffNkMQs9Ibmq9Vy5TeXb7Bhzi+fV31Kxj1D33hxrxOk/LMvB2Sk6 9JUu7kS6DiNCq15kjho4kWfhNN0okwbN/BFjmFYFot8aZK9U731iXt9byvYfMC1N 4okHXO663Ls1sL6faSdlfpVNpjEfki91Qu3nSJsFjsmLazJd2batUmcyaiXoEnOJ BsyZwbq0zSE6HTZVnNGFhxxCkWLIMoaoi2jpcFvwABAf0OnuQrdPNC/GkOz+s0Uq zNlamZWepCMeyn4ZS6lAKig7we71NnZ38nS8BtgyjyVkzWFcgwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNX4EXI9gqVwQ7XCXZGGdAMKHn72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvNDNkMDEzZWMtYTZjMy0z Mzg4LThkMTQtMDc5MTMyMmRkOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8VAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW+M59aT+trxSJ8phyk/BYmxTkM+fbZfOPA+XZ8prKiHyqlH/NoWf a/ztqllsa6HoUgpU8oLXXMNg+DkZJQWy14RiQbJQR06NI2sW2R9KQ0y1yThZwMm5 6GZFfWMLtQLyjH2O7TPKqL+jVcaXg737Fc215cN59ApUggu3PEqFFxyWVVQevu56 wTrm5MfiA3inP17IfOt8iNejfxJrHSzQG9tA0fRB20A8sQ/diBIXUGG8xTrlenwg ra1rLCm4cYla2IWcpF6ExZyJsQC1MjsoBOZTFW/VPj14/6WSgOIzG6hlpTgw0ZKE Wg/vRRU/RLLGqzmH3SooJSBpyKfK5tdfyA== -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:13 2025 by rpki-client