$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa File: 354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa (raw, json) Hash identifier: 2GnK4mjoEohR5UJgQw4sMHxvLZxdd812yf7u5ms67yo= Subject key identifier: DD:C4:BC:07:52:27:9C:53:12:06:33:36:BE:57:60:91:E9:56:22:84 Certificate issuer: /CN=467861ee-0aa8-4688-af94-7d540e2ddc56 Certificate serial: 010D0C9F4328584B84E77AE62DB4F0BA51E3AF00 Authority key identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 400529 IP address blocks: 2602:fabf::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7a:e6:2d:b4:f0:ba:51:e3:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=467861ee-0aa8-4688-af94-7d540e2ddc56 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=88e692a1-fa86-4ec5-8ffc-3bc6306215da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:10:60:46:47:15:b7:92:bf:f2:b4:78:d3: 05:fa:4e:ff:29:6c:f1:82:2f:c1:77:87:04:2a:48: 1a:1a:1f:d8:6b:9c:98:1c:54:d1:67:eb:8c:31:a3: 12:40:64:27:f9:7d:e1:95:e1:5a:48:57:f7:85:77: 90:49:4e:05:51:eb:f7:c3:c2:77:88:95:89:06:58: 4c:da:a1:9e:26:e6:37:1a:0d:be:0e:38:1a:e4:a1: b7:86:91:83:26:55:7e:8e:40:6c:4a:ca:ff:a8:0b: 32:23:75:44:a2:61:61:36:be:cd:b7:61:45:5d:aa: 17:a0:7d:92:41:eb:e6:e9:6f:7c:a2:29:58:fe:80: d7:d7:fc:75:73:cc:38:9e:f4:c7:f1:5e:ad:46:66: b0:a5:c4:91:0d:91:90:dc:51:32:f8:cf:a6:57:f2: 76:56:a6:76:d2:ae:86:08:ea:f1:8b:a3:55:db:da: d6:a9:9d:47:2b:68:c0:14:5c:fb:14:7c:cb:bd:ce: 0c:fb:da:2c:aa:42:ee:aa:52:1c:a5:89:95:ca:90: d0:46:4f:6a:7a:97:45:4f:77:70:2a:ee:f6:32:2b: b7:98:23:52:04:ed:d9:0f:41:b9:5d:2c:b5:08:24: 96:5c:d2:9f:c4:ba:f9:27:c5:f9:ba:c2:0b:d3:12: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C4:BC:07:52:27:9C:53:12:06:33:36:BE:57:60:91:E9:56:22:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl X509v3 Authority Key Identifier: keyid:13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer sbgp-ipAddrBlock: critical IPv6: 2602:fabf::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:dc:7e:dd:f8:97:3c:28:3a:cd:f4:ea:4d:6d:98:a6:9f:02: c6:1c:79:ff:66:5a:e4:2c:87:0f:48:35:80:bb:30:5d:11:23: c4:61:d7:d0:1c:81:f4:a1:70:f4:22:6a:41:bf:9d:b5:06:41: bf:a2:d4:20:91:74:ee:90:eb:c4:d9:23:f5:ac:05:c5:b2:f5: f3:c5:d1:61:20:a3:61:43:38:98:66:2c:68:a7:fb:6f:0d:7a: 56:57:59:b4:62:a4:ea:d6:b8:9d:92:71:ff:7b:ad:20:a2:e8: b3:2a:d4:65:6f:50:22:b3:20:d2:3e:4d:75:09:9e:e0:d4:42: 29:0a:87:a4:f4:ef:3f:ad:a9:64:0a:f7:01:7a:e6:68:61:87: 49:fd:c1:77:b6:45:29:9f:c0:80:81:63:73:2c:fc:67:b6:ef: 6f:da:b1:61:6d:6b:4d:ce:2b:72:a9:e8:44:fd:8e:b0:77:5c: 8d:aa:d2:f2:25:36:83:1d:1e:94:11:ff:fc:25:2e:2b:b3:ef: 4b:57:29:41:b5:c4:9b:c5:34:cf:68:cd:c6:28:b0:02:d3:c8: 29:78:16:4d:4f:36:cd:49:e7:df:bb:66:15:dd:bd:bd:3f:82: 9d:e9:11:30:ca:b9:03:81:1d:c6:e0:b2:c5:87:f4:9c:20:9c: 42:af:03:86 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuE53rmLbTwulHjrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY3ODYxZWUtMGFhOC00Njg4LWFmOTQtN2Q1NDBlMmRk YzU2MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ODhlNjkyYTEtZmE4Ni00ZWM1LThmZmMtM2JjNjMwNjIxNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprwQYEZHFbeSv/K0eNMF+k7/KWzxgi/Bd4cE KkgaGh/Ya5yYHFTRZ+uMMaMSQGQn+X3hleFaSFf3hXeQSU4FUev3w8J3iJWJBlhM 2qGeJuY3Gg2+Djga5KG3hpGDJlV+jkBsSsr/qAsyI3VEomFhNr7Nt2FFXaoXoH2S Qevm6W98oilY/oDX1/x1c8w4nvTH8V6tRmawpcSRDZGQ3FEy+M+mV/J2VqZ20q6G COrxi6NV29rWqZ1HK2jAFFz7FHzLvc4M+9osqkLuqlIcpYmVypDQRk9qepdFT3dw Ku72Miu3mCNSBO3ZD0G5XSy1CCSWXNKfxLr5J8X5usIL0xKsuQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN3EvAdSJ5xTEgYzNr5XYJHpViKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Njc4 NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0MGUyZGRjNTYvMzU0YmY5NDYtZTNmNC0z ZDI2LWEyNjAtNDZhYjg2YTdjZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDY3ODYxZWUtMGFhOC00Njg4LWFm OTQtN2Q1NDBlMmRkYzU2LzQ2Nzg2MWVlLTBhYTgtNDY4OC1hZjk0LTdkNTQwZTJk ZGM1Ni5jcmwwHwYDVR0jBBgwFoAUEy8O6mK1t8eq7wnVPlRbTVP6/U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80Njc4NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0 MGUyZGRjNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6vwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAf9x+3fiXPCg6zfTqTW2Ypp8Cxhx5/2Za5CyHD0g1gLswXREjxGHX 0ByB9KFw9CJqQb+dtQZBv6LUIJF07pDrxNkj9awFxbL188XRYSCjYUM4mGYsaKf7 bw16VldZtGKk6ta4nZJx/3utIKLosyrUZW9QIrMg0j5NdQme4NRCKQqHpPTvP62p ZAr3AXrmaGGHSf3Bd7ZFKZ/AgIFjcyz8Z7bvb9qxYW1rTc4rcqnoRP2OsHdcjarS 8iU2gx0elBH//CUuK7PvS1cpQbXEm8U0z2jNxiiwAtPIKXgWTU82zUnn37tmFd29 vT+CnekRMMq5A4EdxuCyxYf0nCCcQq8Dhg== -----END CERTIFICATE-----Generated at Mon Oct 20 10:56:41 2025 by rpki-client