$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa File: 8e995a78-3dbd-35dc-834f-2588245e7f22.roa (raw, json) Hash identifier: A+v9WZTHC/y75By8cfFqtjFTbvvetz+Mabry1wiggMY= Subject key identifier: 9A:31:9E:A6:EA:D1:36:64:E5:6E:91:EF:84:7B:2F:59:9D:A7:23:F1 Certificate issuer: /CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c Certificate serial: 010D0C9F4328584B8EACE9CF85903DBD1C3CFC00 Authority key identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 399976 IP address blocks: 2602:814:1000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e9:cf:85:90:3d:bd:1c:3c:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=7c92745c-e0c4-40f1-bfa3-8c9a5e65fe8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:3c:80:bf:e1:9a:e1:d8:76:cd:6b:50:a1: 00:58:13:74:ba:61:a3:e1:b3:d0:77:39:57:b6:20: 93:2c:68:9a:de:67:d2:41:02:c3:58:41:41:af:b0: 96:f3:3f:3a:b3:b8:44:0f:83:dc:68:74:12:e7:95: 15:7c:15:da:be:10:2c:c9:a1:6e:15:43:bd:f8:46: 5a:3b:09:f8:6c:2b:59:1d:d7:2b:b6:23:36:f1:81: a3:40:ad:51:d0:4f:71:5a:73:9b:03:fc:f1:2e:16: 8a:a1:a2:93:ac:ba:08:8a:c4:e2:58:ee:c0:56:84: db:a8:87:df:e0:62:d3:19:c8:a7:ab:a5:b9:b4:fe: 4d:c8:02:ab:c3:37:9f:34:f3:85:6e:71:68:27:d2: 71:e7:b2:a5:16:41:7f:c2:bb:ec:f1:68:0b:22:12: 7e:4e:ba:83:78:9e:84:07:9c:a3:1a:9a:f6:33:56: 37:bc:2d:09:62:02:f3:a2:09:6d:7d:ba:bf:dd:19: 35:ab:fd:62:d0:6c:7e:0e:78:65:04:33:a1:c6:43: 4d:5a:5f:f2:4f:2e:aa:98:04:07:6d:01:c5:7b:1f: 30:12:ae:b4:eb:c1:92:07:d8:0c:f5:ef:e6:aa:95: 91:6d:f9:6b:30:14:be:90:b7:72:3e:f2:51:fd:e4: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:31:9E:A6:EA:D1:36:64:E5:6E:91:EF:84:7B:2F:59:9D:A7:23:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl X509v3 Authority Key Identifier: keyid:42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a3:72:88:84:be:b3:0a:c4:c9:c8:90:04:c8:eb:60:b7:23: cf:e4:20:35:8f:79:30:64:33:28:9d:24:2b:9d:ff:81:64:ad: b5:a7:e7:47:da:80:38:4e:03:45:b4:c6:89:e0:e3:f9:69:9c: 89:8c:de:a1:db:a9:82:dd:9e:ba:95:2f:67:7b:ef:ce:68:ab: 2c:2c:e6:9a:a5:98:7e:19:37:20:f0:e6:19:3e:fa:ab:b6:64: 84:59:50:6d:a9:fc:62:c2:eb:ae:2a:56:5b:eb:d0:eb:45:9f: 5a:86:47:85:43:16:de:7a:65:75:8e:02:ed:d9:a3:f9:24:e3: 45:66:a0:dc:ac:f2:60:66:b6:5a:d6:7a:80:e0:ab:04:d2:1c: 8c:51:e9:ea:2a:bf:fb:b4:f0:37:e6:8f:86:f4:b1:b1:61:dc: e4:81:aa:99:6f:ad:0e:2c:6d:95:8f:8b:27:8d:6b:91:d1:b3: 3c:d9:81:64:d1:78:25:3c:13:31:ea:a6:83:6a:d6:95:81:dc: 57:ee:35:54:58:bf:2f:61:57:9a:c2:1b:65:d0:50:c4:0e:9f: 24:61:cc:a4:f0:f9:b9:a9:35:35:71:a2:a5:ee:f3:5f:79:f2: d3:f3:40:4b:a5:54:e8:b2:9a:7f:5f:c7:bb:68:3e:b0:d9:7d: 4a:e9:c1:6d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuOrOnPhZA9vRw8/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxOTJmNTMtOGIwNy00YzNmLWE2YjAtZTllNDIyOTJk MzFjMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk N2M5Mjc0NWMtZTBjNC00MGYxLWJmYTMtOGM5YTVlNjVmZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBA8gL/hmuHYds1rUKEAWBN0umGj4bPQdzlX tiCTLGia3mfSQQLDWEFBr7CW8z86s7hED4PcaHQS55UVfBXavhAsyaFuFUO9+EZa Own4bCtZHdcrtiM28YGjQK1R0E9xWnObA/zxLhaKoaKTrLoIisTiWO7AVoTbqIff 4GLTGcinq6W5tP5NyAKrwzefNPOFbnFoJ9Jx57KlFkF/wrvs8WgLIhJ+TrqDeJ6E B5yjGpr2M1Y3vC0JYgLzogltfbq/3Rk1q/1i0Gx+DnhlBDOhxkNNWl/yTy6qmAQH bQHFex8wEq6068GSB9gM9e/mqpWRbflrMBS+kLdyPvJR/eQAQQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJoxnqbq0TZk5W6R74R7L1mdpyPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTE5 MmY1My04YjA3LTRjM2YtYTZiMC1lOWU0MjI5MmQzMWMvOGU5OTVhNzgtM2RiZC0z NWRjLTgzNGYtMjU4ODI0NWU3ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUxOTJmNTMtOGIwNy00YzNmLWE2 YjAtZTllNDIyOTJkMzFjLzY1MTkyZjUzLThiMDctNGMzZi1hNmIwLWU5ZTQyMjky ZDMxYy5jcmwwHwYDVR0jBBgwFoAUQl+d++OdFI0HxDUWzuUlDTj2FOIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTE5MmY1My04YjA3LTRjM2YtYTZiMC1lOWU0 MjI5MmQzMWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIIFBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaKNyiIS+swrEyciQBMjrYLcjz+QgNY95MGQzKJ0kK53/gWSttafn R9qAOE4DRbTGieDj+WmciYzeodupgt2eupUvZ3vvzmirLCzmmqWYfhk3IPDmGT76 q7ZkhFlQban8YsLrripWW+vQ60WfWoZHhUMW3npldY4C7dmj+STjRWag3KzyYGa2 WtZ6gOCrBNIcjFHp6iq/+7TwN+aPhvSxsWHc5IGqmW+tDixtlY+LJ41rkdGzPNmB ZNF4JTwTMeqmg2rWlYHcV+41VFi/L2FXmsIbZdBQxA6fJGHMpPD5uak1NXGipe7z X3ny0/NAS6VU6LKaf1/Hu2g+sNl9SunBbQ== -----END CERTIFICATE-----Generated at Tue Oct 21 02:31:21 2025 by rpki-client