$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa File: fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa (raw, json) Hash identifier: g9HNrHm/7uyyMQWhJUSLd09BGNxqvjrtbWNHutWs+7s= Subject key identifier: B8:81:E0:6F:94:D3:8C:80:BC:2F:73:8E:3A:3E:54:DE:51:6A:CD:85 Certificate issuer: /CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Certificate serial: 010D0C9F4328584B7AC4E23E6A14F9C6AEC17060 Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa Signing time: Fri 10 Oct 2025 21:53:01 +0000 ROA not before: Fri 10 Oct 2025 21:53:01 +0000 ROA not after: Thu 08 Jan 2026 22:53:01 +0000 asID: 26431 IP address blocks: 2602:f666::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:c4:e2:3e:6a:14:f9:c6:ae:c1:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Validity Not Before: Oct 10 21:53:01 2025 GMT Not After : Jan 8 22:53:01 2026 GMT Subject: CN=0f530ce8-c729-489b-ae8f-dd7986c04b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:8b:2b:32:3d:ee:42:e4:1d:50:50:68:83: e6:5e:39:34:1d:a4:17:f3:ce:e1:a5:8f:87:b2:bf: 3a:72:3f:e8:fb:b6:88:13:64:c2:5c:a6:86:47:18: 66:4a:a3:48:e2:39:cd:a6:58:85:76:dc:62:c2:9a: b9:cb:40:14:c2:d7:98:92:34:53:9b:c3:5f:4c:df: 6c:1e:dc:b7:7d:66:1c:5d:f9:00:d8:1e:c2:91:9d: 53:af:1d:fd:3f:5f:a5:cf:94:52:90:0c:84:ce:3a: e8:f4:98:b3:2c:c8:26:a2:25:81:6d:e8:8c:ab:dd: 15:d4:1e:1c:dc:41:09:63:59:02:f2:46:21:10:c4: d5:94:0a:40:e8:a5:b0:51:56:68:61:b7:db:0b:9d: 12:55:1f:44:23:3f:95:9a:b4:2d:0c:30:06:11:79: 0e:a9:a8:00:ad:95:98:99:00:4d:9a:8c:1b:c4:50: 86:5e:2a:ba:11:81:c4:5b:fc:90:4c:3c:19:21:99: 97:a3:9b:5a:82:67:d4:ca:17:39:46:e1:ec:ec:d1: 53:e1:5f:3b:fb:a2:a3:f4:93:d8:af:83:3c:fd:06: 9d:34:4a:8f:91:47:65:8f:41:29:f7:a7:8d:fc:a0: fc:ee:4a:80:49:81:3b:19:fe:94:23:64:95:e4:16: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:81:E0:6F:94:D3:8C:80:BC:2F:73:8E:3A:3E:54:DE:51:6A:CD:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl X509v3 Authority Key Identifier: keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer sbgp-ipAddrBlock: critical IPv6: 2602:f666::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:15:7f:90:74:19:57:66:bc:7b:ab:4f:3a:27:08:19:f1:07: 79:22:a0:63:79:e6:1d:6a:60:c4:81:f6:64:9f:13:b1:f3:2f: cc:f8:6f:20:ef:26:de:e8:e1:16:57:a7:40:81:f4:ec:12:25: b8:e6:26:99:30:6b:99:51:a3:56:e6:ef:67:af:97:a6:3a:93: 2f:a1:28:e2:76:e6:d1:18:71:21:a2:c1:6f:ae:49:d0:51:2f: b9:4e:40:8f:69:55:b6:7d:49:bc:10:e2:ff:18:78:5e:d5:99: fe:56:fd:f4:bc:dd:c8:50:fd:1b:33:fd:b9:c7:40:8b:a7:44: fc:e7:f7:2b:b3:8c:be:a1:dc:d8:ce:08:28:c3:06:b8:41:7e: 41:3d:05:64:df:8e:50:56:b9:64:11:98:46:46:33:ad:65:04: 8d:8f:e2:c9:18:55:73:ff:7d:80:b6:84:43:0f:fb:12:71:32: 88:ae:e2:e2:14:76:a9:7c:93:01:8e:ab:ef:45:45:75:c6:2d: 8f:4f:90:50:67:3b:c4:b0:b4:0d:b4:81:a3:ad:6a:c3:e5:71: 9e:49:19:56:30:be:f5:cc:dc:be:3f:22:bc:21:8e:52:1a:89: 0e:4d:f7:79:af:13:f7:33:a1:95:fb:4d:bd:14:bc:e8:c1:73: dc:4c:be:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt6xOI+ahT5xq7BcGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzNDY0N2YtMzIyOS00ODBjLTliMDUtM2NmMGIwMGZh MTczMB4XDTI1MTAxMDIxNTMwMVoXDTI2MDEwODIyNTMwMVowLzEtMCsGA1UEAxMk MGY1MzBjZTgtYzcyOS00ODliLWFlOGYtZGQ3OTg2YzA0Yjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF+LKzI97kLkHVBQaIPmXjk0HaQX887hpY+H sr86cj/o+7aIE2TCXKaGRxhmSqNI4jnNpliFdtxiwpq5y0AUwteYkjRTm8NfTN9s Hty3fWYcXfkA2B7CkZ1Trx39P1+lz5RSkAyEzjro9JizLMgmoiWBbeiMq90V1B4c 3EEJY1kC8kYhEMTVlApA6KWwUVZoYbfbC50SVR9EIz+VmrQtDDAGEXkOqagArZWY mQBNmowbxFCGXiq6EYHEW/yQTDwZIZmXo5tagmfUyhc5RuHs7NFT4V87+6Kj9JPY r4M8/QadNEqPkUdlj0Ep96eN/KD87kqASYE7Gf6UI2SV5BY0XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLiB4G+U04yAvC9zjjo+VN5Ras2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0 NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2YwYjAwZmExNzMvZmQ4ODNmZmQtZDBkMS0z YmIwLWEwYTQtNmEwOGJjMzA4MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWEzNDY0N2YtMzIyOS00ODBjLTli MDUtM2NmMGIwMGZhMTczL2FhMzQ2NDdmLTMyMjktNDgwYy05YjA1LTNjZjBiMDBm YTE3My5jcmwwHwYDVR0jBBgwFoAU9mTNVuUvXLeBnCtI+xvNW5zH+qYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2Yw YjAwZmExNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL2ZgAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKoVf5B0GVdmvHurTzonCBnxB3kioGN55h1qYMSB9mSfE7HzL8z4 byDvJt7o4RZXp0CB9OwSJbjmJpkwa5lRo1bm72evl6Y6ky+hKOJ25tEYcSGiwW+u SdBRL7lOQI9pVbZ9SbwQ4v8YeF7Vmf5W/fS83chQ/Rsz/bnHQIunRPzn9yuzjL6h 3NjOCCjDBrhBfkE9BWTfjlBWuWQRmEZGM61lBI2P4skYVXP/fYC2hEMP+xJxMoiu 4uIUdql8kwGOq+9FRXXGLY9PkFBnO8SwtA20gaOtasPlcZ5JGVYwvvXM3L4/Irwh jlIaiQ5N93mvE/czoZX7Tb0UvOjBc9xMvgM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:15 2025 by rpki-client