$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/df571e00-0021-324a-8fb9-5cf4efc237d7.roa File: df571e00-0021-324a-8fb9-5cf4efc237d7.roa (raw, json) Hash identifier: jPSSx7Xsrvgu/DkHTFEQ+rW37IiA8abiAuHKbwjA6So= Subject key identifier: 58:3D:A0:3B:74:30:33:24:3A:D6:C4:C8:CF:CC:B5:40:6B:1B:0F:D1 Certificate issuer: /CN=31cdafa2-3aa9-4253-a242-08ace2acaef2 Certificate serial: 010D0C9F4328584B1271670E753F81AE6C4F6A90 Authority key identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/df571e00-0021-324a-8fb9-5cf4efc237d7.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 2602:f702:222::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:67:0e:75:3f:81:ae:6c:4f:6a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31cdafa2-3aa9-4253-a242-08ace2acaef2 Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=e54ed03f-edf3-4a6a-b7df-0dbc95fe936b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:96:44:11:c3:5b:0c:b3:78:52:4b:4a:bc:f2: 3e:ea:f8:5b:00:0a:87:94:b7:0b:e3:ce:a4:79:35: 8b:64:06:4d:91:f3:4c:a0:db:b8:78:1f:80:1d:42: aa:db:63:49:4a:6c:56:90:64:ff:f3:89:3b:c6:da: 53:26:3d:1f:ec:72:0f:a8:53:a6:71:d9:26:c6:d1: d0:2a:eb:43:d9:19:90:56:ed:3d:00:dd:36:31:ad: a6:d6:b7:31:5e:a0:fb:ae:e3:1d:20:d8:14:f4:3d: 4f:22:a3:2c:b5:98:be:6e:a6:78:2a:23:8e:bd:41: 6a:5d:d8:9b:f1:0b:45:8c:96:ce:46:07:17:10:e6: 45:c4:d1:34:1d:30:c8:f0:eb:fc:94:f2:33:78:bf: d9:52:24:cb:0b:32:d1:4d:2f:03:a5:59:7d:41:40: 6f:39:a7:0c:ee:fe:8f:71:00:9e:5e:e1:5e:72:50: a3:45:2b:f8:46:89:2f:64:5b:e4:89:6b:e3:b5:90: fc:b1:2c:bb:f0:be:d3:01:70:3b:f4:74:9e:1a:6a: a4:fb:6e:eb:d0:12:de:76:ea:82:05:25:c3:8f:87: ff:7d:17:d3:da:b4:10:c7:63:75:77:05:05:e9:aa: 72:8b:25:2a:50:3b:c8:0c:f5:3d:39:d4:0d:43:ae: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3D:A0:3B:74:30:33:24:3A:D6:C4:C8:CF:CC:B5:40:6B:1B:0F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/df571e00-0021-324a-8fb9-5cf4efc237d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl X509v3 Authority Key Identifier: keyid:61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f702:222::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b3:69:df:b0:52:90:fb:b9:5e:e6:ee:56:02:3c:37:39:b2: 19:da:4b:23:ba:c1:ac:a6:25:bc:fe:b5:cf:24:1e:74:73:97: 38:de:e5:72:8a:c2:2a:58:b7:cb:99:d9:2e:1a:ab:c5:1d:81: 32:05:81:cd:6a:07:c6:23:72:b0:5c:60:c6:97:94:86:f0:5b: 5a:09:56:dd:11:3f:2c:fd:6d:5b:89:3a:c9:cc:1c:c8:05:cd: 1c:06:0b:73:b3:7f:b6:b4:8d:e6:13:d4:54:11:eb:f4:52:88: f2:67:8f:63:0a:0e:b2:91:ec:70:b0:04:b0:9b:22:af:af:3e: 6a:40:96:e2:17:f9:a4:ce:02:ef:1a:af:06:59:90:34:a1:33: be:11:31:84:86:e0:b7:fc:cb:04:87:3c:d9:34:a5:d4:79:b1: 7e:88:37:ae:c7:67:7b:99:ee:1a:ca:86:7e:64:80:37:e2:76: 66:85:26:c0:b9:b1:83:90:1c:10:26:62:3d:7d:70:61:3b:c1: e1:60:2e:25:8a:68:23:bc:51:fd:69:2d:a6:91:cb:a5:ce:09: 17:00:0a:5b:90:59:5b:87:8e:9e:65:4a:c9:03:a1:cc:b9:c5: d5:b6:33:03:fa:da:04:70:2b:6b:35:28:4f:09:ed:d2:74:a2: a0:99:5b:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsScWcOdT+BrmxPapAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFjZGFmYTItM2FhOS00MjUzLWEyNDItMDhhY2UyYWNh ZWYyMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk ZTU0ZWQwM2YtZWRmMy00YTZhLWI3ZGYtMGRiYzk1ZmU5MzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZZEEcNbDLN4UktKvPI+6vhbAAqHlLcL486k eTWLZAZNkfNMoNu4eB+AHUKq22NJSmxWkGT/84k7xtpTJj0f7HIPqFOmcdkmxtHQ KutD2RmQVu09AN02Ma2m1rcxXqD7ruMdINgU9D1PIqMstZi+bqZ4KiOOvUFqXdib 8QtFjJbORgcXEOZFxNE0HTDI8Ov8lPIzeL/ZUiTLCzLRTS8DpVl9QUBvOacM7v6P cQCeXuFeclCjRSv4RokvZFvkiWvjtZD8sSy78L7TAXA79HSeGmqk+27r0BLeduqC BSXDj4f/fRfT2rQQx2N1dwUF6apyiyUqUDvIDPU9OdQNQ65eDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFg9oDt0MDMkOtbEyM/MtUBrGw/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMWNk YWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFjZTJhY2FlZjIvZGY1NzFlMDAtMDAyMS0z MjRhLThmYjktNWNmNGVmYzIzN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzFjZGFmYTItM2FhOS00MjUzLWEy NDItMDhhY2UyYWNhZWYyLzMxY2RhZmEyLTNhYTktNDI1My1hMjQyLTA4YWNlMmFj YWVmMi5jcmwwHwYDVR0jBBgwFoAUYRIn1XuxZqzGfR2ohRo9l/9c+TQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMWNkYWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFj ZTJhY2FlZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3AgIi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE2zad+wUpD7uV7m7lYCPDc5shnaSyO6waymJbz+tc8kHnRzlzje 5XKKwipYt8uZ2S4aq8UdgTIFgc1qB8YjcrBcYMaXlIbwW1oJVt0RPyz9bVuJOsnM HMgFzRwGC3Ozf7a0jeYT1FQR6/RSiPJnj2MKDrKR7HCwBLCbIq+vPmpAluIX+aTO Au8arwZZkDShM74RMYSG4Lf8ywSHPNk0pdR5sX6IN67HZ3uZ7hrKhn5kgDfidmaF JsC5sYOQHBAmYj19cGE7weFgLiWKaCO8Uf1pLaaRy6XOCRcACluQWVuHjp5lSskD ocy5xdW2MwP62gRwK2s1KE8J7dJ0oqCZW94= -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:48 2025 by rpki-client