$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa File: e497d3e9-a9d1-3199-96be-8395d6cc959b.roa (raw, json) Hash identifier: MdC4uv8nWJ20jjPHAlqEU//UcIjZR6zNTZVv/8iLCwQ= Subject key identifier: 91:F7:62:9D:1B:4B:A8:48:A2:DE:3E:79:AC:EC:81:5D:96:33:39:83 Certificate issuer: /CN=deaf388e-6941-424e-9f96-abe06598e29c Certificate serial: 010D0C9F4328584B94421E6A981A3414AF2D51C0 Authority key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 401371 IP address blocks: 2602:f652::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1e:6a:98:1a:34:14:af:2d:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deaf388e-6941-424e-9f96-abe06598e29c Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=346a9768-82bb-4f6a-afca-96a8fc965163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:2a:57:3b:a4:32:16:dd:2e:bb:41:07:4b: 69:e2:fd:ec:77:cb:29:3a:cb:59:78:2e:90:58:92: 8a:d0:38:8c:dc:7b:cf:da:3e:ac:51:3b:77:0c:51: 34:8e:71:0e:91:c2:c5:08:72:b3:5c:9f:0c:2b:26: 65:e0:93:de:69:4e:6f:c1:ae:a1:b6:54:2b:f6:10: ad:8b:aa:5a:25:cd:99:59:d4:85:0b:94:f5:35:6f: ae:e9:b3:7a:7b:4e:4f:55:b4:c5:84:57:94:d3:d9: 24:c7:ab:90:8b:15:af:1f:16:93:7d:b5:2f:e8:7a: 2d:3e:6a:14:60:66:68:2a:d3:08:45:91:dc:32:3e: 9b:2f:e2:b8:57:73:97:b5:96:3e:86:b8:e2:27:18: c6:e9:dd:af:e3:20:7a:e6:ab:d2:8c:a4:b8:b4:4c: 20:de:1c:11:ba:a3:11:4d:d5:3c:43:08:b9:8d:f5: 22:8b:18:51:3d:d7:29:ce:f4:9c:38:94:f4:15:45: 69:09:de:a4:20:f8:0c:30:c9:d7:15:17:ac:01:4a: 34:4f:ea:e3:a9:24:78:64:65:21:82:45:4a:26:a3: 0e:6f:4d:15:20:c3:76:36:f7:63:fe:bc:9b:a0:8c: 67:4f:6c:27:9b:ae:3c:1e:d3:99:73:dc:8e:a4:53: e8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F7:62:9D:1B:4B:A8:48:A2:DE:3E:79:AC:EC:81:5D:96:33:39:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl X509v3 Authority Key Identifier: keyid:D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f652::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fd:26:d9:58:2d:3f:92:98:ed:71:05:3b:fb:2f:da:6d:ca: f4:e3:f2:fe:f3:d6:6e:17:5d:d6:35:ba:a3:c4:c3:14:ff:5c: de:f1:ca:ff:30:b2:77:71:09:26:e4:da:61:bd:2d:73:f6:ac: 33:d6:be:e4:27:b4:d2:9b:61:2d:1a:f8:6b:8b:38:64:ce:e0: 1c:79:d1:0e:c3:3b:7b:10:f6:17:40:4d:e4:98:8f:f1:f6:7c: ef:09:8b:bf:b6:18:26:69:a9:a4:ea:15:84:3e:9e:e3:74:2e: 0b:40:8a:49:61:78:b3:ff:ef:3d:2d:6d:4d:28:62:d7:e1:40: 99:53:23:71:0e:08:c3:37:fa:07:3e:28:54:b5:3a:a4:79:a6: 1b:ee:21:5b:3e:d2:41:ef:b3:2c:91:23:5d:8a:38:6f:67:03: 2e:f0:17:55:2d:21:6f:25:74:94:34:2c:07:31:4e:d1:76:9b: c9:c2:82:c1:20:75:66:5d:40:5c:4c:ed:ea:d0:73:86:b7:4a: 84:9a:08:9e:06:15:ae:ad:16:78:cf:65:f7:89:c8:b5:57:32: 14:d5:53:71:a6:88:aa:24:ae:95:ec:7d:0c:05:4b:87:59:8d: e5:ef:b7:77:20:de:bf:09:d7:a6:69:30:dc:cc:2b:38:af:17: d1:83:5a:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuUQh5qmBo0FK8tUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVhZjM4OGUtNjk0MS00MjRlLTlmOTYtYWJlMDY1OThl MjljMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk MzQ2YTk3NjgtODJiYi00ZjZhLWFmY2EtOTZhOGZjOTY1MTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZIqVzukMhbdLrtBB0tp4v3sd8spOstZeC6Q WJKK0DiM3HvP2j6sUTt3DFE0jnEOkcLFCHKzXJ8MKyZl4JPeaU5vwa6htlQr9hCt i6paJc2ZWdSFC5T1NW+u6bN6e05PVbTFhFeU09kkx6uQixWvHxaTfbUv6HotPmoU YGZoKtMIRZHcMj6bL+K4V3OXtZY+hrjiJxjG6d2v4yB65qvSjKS4tEwg3hwRuqMR TdU8Qwi5jfUiixhRPdcpzvScOJT0FUVpCd6kIPgMMMnXFResAUo0T+rjqSR4ZGUh gkVKJqMOb00VIMN2Nvdj/ryboIxnT2wnm648HtOZc9yOpFPo/QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJH3Yp0bS6hIot4+eazsgV2WMzmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWFm Mzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUwNjU5OGUyOWMvZTQ5N2QzZTktYTlkMS0z MTk5LTk2YmUtODM5NWQ2Y2M5NTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVhZjM4OGUtNjk0MS00MjRlLTlm OTYtYWJlMDY1OThlMjljL2RlYWYzODhlLTY5NDEtNDI0ZS05Zjk2LWFiZTA2NTk4 ZTI5Yy5jcmwwHwYDVR0jBBgwFoAU08yKMqfd0vAFIgVggYqZufYSxWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWFmMzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUw NjU5OGUyOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2UgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABf0m2VgtP5KY7XEFO/sv2m3K9OPy/vPWbhdd1jW6o8TDFP9c3vHK /zCyd3EJJuTaYb0tc/asM9a+5Ce00pthLRr4a4s4ZM7gHHnRDsM7exD2F0BN5JiP 8fZ87wmLv7YYJmmppOoVhD6e43QuC0CKSWF4s//vPS1tTShi1+FAmVMjcQ4Iwzf6 Bz4oVLU6pHmmG+4hWz7SQe+zLJEjXYo4b2cDLvAXVS0hbyV0lDQsBzFO0XabycKC wSB1Zl1AXEzt6tBzhrdKhJoIngYVrq0WeM9l94nItVcyFNVTcaaIqiSulex9DAVL h1mN5e+3dyDevwnXpmkw3MwrOK8X0YNacg== -----END CERTIFICATE-----Generated at Tue Oct 21 07:33:58 2025 by rpki-client