$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/86f55d44-ae15-32b3-90fc-b80be13a02a8.roa File: 86f55d44-ae15-32b3-90fc-b80be13a02a8.roa (raw, json) Hash identifier: EKj862pWkZxPU8fWuYRBW/7MZZMEpDY6K65K1m5sulM= Subject key identifier: 1D:CF:6F:A7:54:E2:F0:91:3D:CB:F3:CC:BB:9F:5E:0E:22:65:A2:30 Certificate issuer: /CN=d3196482-9a63-48b1-828c-a6de96f0caff Certificate serial: 010D0C9F4328584B0746D4853AE38DE307183500 Authority key identifier: 71:AC:DB:CF:DA:22:A4:C9:36:F2:84:28:DD:3B:FD:69:E5:3E:61:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/86f55d44-ae15-32b3-90fc-b80be13a02a8.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 401639 IP address blocks: 2602:f712::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:d4:85:3a:e3:8d:e3:07:18:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3196482-9a63-48b1-828c-a6de96f0caff Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=df6b3697-265b-4cf3-80c4-a2bcff267595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:83:6b:5b:e8:13:5f:54:9f:ca:5a:ca:7c: 93:0f:0a:87:dc:64:4c:d1:dc:23:ca:83:70:d5:79: 1f:de:74:fd:5f:0a:3d:4c:c6:36:32:18:29:26:0f: ac:b0:cb:73:02:a0:74:e1:7d:38:a7:14:14:1f:f4: c7:27:86:2e:55:44:0a:22:7a:98:2d:7f:45:a9:bf: 9e:99:4c:8e:90:e1:7a:b0:6b:70:f7:3c:04:a6:d3: 1c:68:6b:6c:07:6d:2f:0b:15:67:aa:68:80:1f:68: a6:9c:17:4b:ec:2e:00:32:86:ee:ad:64:2b:06:f0: 63:1a:1c:4f:5e:55:40:6b:57:37:3d:c0:2a:cb:dc: 3f:ea:90:6d:a0:f2:a7:d4:da:b8:42:48:f4:63:c9: c0:a1:1a:78:75:38:2d:3f:07:26:49:d4:c3:41:3b: 93:8d:8b:d1:a0:0b:c6:70:4a:81:3f:51:41:8c:2a: 06:f5:b9:9d:ad:d1:2a:ac:ea:89:68:0b:72:4c:ee: 60:80:e4:65:8f:96:66:9d:05:26:04:ee:a2:ee:7c: 8e:45:8b:f8:6c:1a:5c:ea:55:7e:da:6d:b5:f7:52: 1e:5b:74:67:39:0b:f0:54:e6:ec:26:04:5e:01:72: 6e:d0:f4:1a:09:ce:df:90:97:82:22:aa:a7:d0:ab: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CF:6F:A7:54:E2:F0:91:3D:CB:F3:CC:BB:9F:5E:0E:22:65:A2:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/86f55d44-ae15-32b3-90fc-b80be13a02a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.crl X509v3 Authority Key Identifier: keyid:71:AC:DB:CF:DA:22:A4:C9:36:F2:84:28:DD:3B:FD:69:E5:3E:61:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer sbgp-ipAddrBlock: critical IPv6: 2602:f712::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9f:a0:e7:b9:23:ce:05:2b:df:05:ad:58:d8:c4:21:00:db: af:55:0a:64:ed:19:5a:91:b2:9b:e2:5b:f0:e7:66:18:6d:98: ad:3d:dd:2d:24:7a:a7:ca:93:4a:65:94:86:3f:cb:c5:d9:7a: c3:0c:58:2e:d9:1b:53:f5:46:c7:01:cf:a1:7d:ef:c9:24:a5: 5b:d6:e8:ab:6a:3e:04:65:ec:6c:d1:55:9b:5a:b1:82:7a:c5: f8:0c:74:5a:c3:a1:b6:35:f4:93:44:85:8a:e4:a3:01:f5:f2: 22:60:7d:33:8c:c4:1a:09:39:cd:8c:5a:13:fb:bd:92:23:d8: 6a:18:dd:b2:c7:b8:47:69:d6:a1:c2:c0:22:2b:77:2f:15:f7: 29:8c:c3:ce:74:fe:b8:8e:13:d7:20:52:b8:ed:b5:19:68:c0: 51:3c:ba:7a:90:22:56:ee:0e:3e:a2:ed:ee:28:d7:20:d6:b0: 97:46:20:1b:88:4a:3b:6b:34:85:22:4b:9e:c4:e1:63:5c:f0: ad:24:f3:6a:7e:a6:e9:ec:9e:d8:98:5b:94:37:fe:63:1b:36: 0b:83:17:64:e6:65:32:eb:41:97:0c:7c:72:bb:79:59:59:72: 87:e2:da:4d:d2:d5:7f:d3:67:a4:7a:9e:b0:c4:a9:a7:b3:4b: b1:5a:ac:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsHRtSFOuON4wcYNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMxOTY0ODItOWE2My00OGIxLTgyOGMtYTZkZTk2ZjBj YWZmMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZGY2YjM2OTctMjY1Yi00Y2YzLTgwYzQtYTJiY2ZmMjY3NTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiCDa1voE19Un8paynyTDwqH3GRM0dwjyoNw 1Xkf3nT9Xwo9TMY2MhgpJg+ssMtzAqB04X04pxQUH/THJ4YuVUQKInqYLX9Fqb+e mUyOkOF6sGtw9zwEptMcaGtsB20vCxVnqmiAH2imnBdL7C4AMoburWQrBvBjGhxP XlVAa1c3PcAqy9w/6pBtoPKn1Nq4Qkj0Y8nAoRp4dTgtPwcmSdTDQTuTjYvRoAvG cEqBP1FBjCoG9bmdrdEqrOqJaAtyTO5ggORlj5ZmnQUmBO6i7nyORYv4bBpc6lV+ 2m2191IeW3RnOQvwVObsJgReAXJu0PQaCc7fkJeCIqqn0KsTMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB3Pb6dU4vCRPcvzzLufXg4iZaIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMzE5 NjQ4Mi05YTYzLTQ4YjEtODI4Yy1hNmRlOTZmMGNhZmYvODZmNTVkNDQtYWUxNS0z MmIzLTkwZmMtYjgwYmUxM2EwMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDMxOTY0ODItOWE2My00OGIxLTgy OGMtYTZkZTk2ZjBjYWZmL2QzMTk2NDgyLTlhNjMtNDhiMS04MjhjLWE2ZGU5NmYw Y2FmZi5jcmwwHwYDVR0jBBgwFoAUcazbz9oipMk28oQo3Tv9aeU+YfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMzE5NjQ4Mi05YTYzLTQ4YjEtODI4Yy1hNmRl OTZmMGNhZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3EgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARJ+g57kjzgUr3wWtWNjEIQDbr1UKZO0ZWpGym+Jb8OdmGG2YrT3d LSR6p8qTSmWUhj/Lxdl6wwxYLtkbU/VGxwHPoX3vySSlW9boq2o+BGXsbNFVm1qx gnrF+Ax0WsOhtjX0k0SFiuSjAfXyImB9M4zEGgk5zYxaE/u9kiPYahjdsse4R2nW ocLAIit3LxX3KYzDznT+uI4T1yBSuO21GWjAUTy6epAiVu4OPqLt7ijXINawl0Yg G4hKO2s0hSJLnsThY1zwrSTzan6m6eye2JhblDf+Yxs2C4MXZOZlMutBlwx8crt5 WVlyh+LaTdLVf9NnpHqesMSpp7NLsVqsug== -----END CERTIFICATE-----Generated at Wed Oct 22 00:37:34 2025 by rpki-client