$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/3e122352-e0b1-3594-935f-3d6dd5590f2e.roa File: 3e122352-e0b1-3594-935f-3d6dd5590f2e.roa (raw, json) Hash identifier: NZUBQsgCr/Cxz6Xvpbe0j5UkZisOHLgamh2IyIf12zU= Subject key identifier: 58:CF:32:CA:9D:36:F2:D3:6B:41:16:56:82:18:31:9A:A6:B7:13:52 Certificate issuer: /CN=f80afed8-630c-4446-a972-f7554ab8ece0 Certificate serial: 010D0C9F4328584B8A7CCCA4952577DD343F4380 Authority key identifier: ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/3e122352-e0b1-3594-935f-3d6dd5590f2e.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 22339 IP address blocks: 2602:f6ca::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:cc:a4:95:25:77:dd:34:3f:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80afed8-630c-4446-a972-f7554ab8ece0 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=cfda2ac1-5d76-4218-910b-6f0259ded831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:52:72:be:09:91:9f:9b:a1:4a:2e:e7:57:4d: 6f:81:ec:95:2e:2c:1a:9d:f2:ad:f7:83:2b:2d:42: ed:4b:58:35:c7:ea:a1:0d:b8:61:92:84:31:90:23: e3:e0:c2:d0:17:37:c6:f5:e7:5e:02:1a:20:d5:02: 1a:7f:af:ca:7b:0a:13:ce:cd:2a:29:71:f2:82:80: 0e:dc:c2:75:86:33:94:50:c0:ca:1d:3b:e7:81:8c: 65:b6:4c:d6:db:48:1a:d2:89:f6:a5:a7:ba:92:61: b1:82:bb:ba:33:60:0e:47:68:b1:61:71:eb:f9:7c: 6d:e0:65:1e:9c:7e:8d:cb:51:b0:2e:f8:4c:6e:9e: e1:f9:a4:b4:f6:3e:6a:68:be:9e:17:03:8f:a0:80: f0:06:ed:dd:39:5c:16:87:7c:1a:7e:51:1f:cc:70: 67:60:03:93:35:dc:5c:38:39:ab:5b:8f:9d:fc:83: ca:0e:76:84:fe:b4:70:98:78:01:13:7d:bf:88:83: 82:ea:69:17:88:66:54:16:8f:f3:35:19:49:88:05: b8:2e:97:ae:4f:1c:b1:8b:57:8f:92:b3:dd:b9:6e: 22:97:1b:13:4f:47:88:3d:74:ba:fc:8b:4a:59:bb: ea:d1:08:78:84:49:bc:84:af:74:03:ee:24:59:80: 65:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CF:32:CA:9D:36:F2:D3:6B:41:16:56:82:18:31:9A:A6:B7:13:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/3e122352-e0b1-3594-935f-3d6dd5590f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.crl X509v3 Authority Key Identifier: keyid:ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6ca::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:53:53:56:9f:30:f1:ca:11:0b:e3:d4:81:ac:fb:c8:34:e8: ee:38:32:78:28:95:98:24:d2:56:b1:25:64:e4:48:52:08:04: 53:03:f3:c3:fd:10:54:97:c0:cd:24:ec:87:78:34:fc:e0:d8: c1:ce:2d:8b:ee:a3:ef:36:7e:9a:67:90:8a:6c:f5:e8:a1:9a: f7:a1:8f:d5:ae:11:c7:0f:ee:15:66:2f:72:7d:d1:8b:4e:21: b4:bf:9b:9d:42:52:48:57:a0:0e:ea:2a:75:c4:16:2f:a3:73: 0c:cc:cb:1d:b3:4f:7d:80:0d:8d:98:08:99:e1:62:e5:d1:33: 5b:1a:55:62:03:e3:a0:1d:24:80:4a:8a:8a:8e:0c:87:03:f7: ef:96:86:78:ce:bd:02:1e:5d:62:6a:ec:19:12:c0:29:99:7f: 34:da:e9:6e:89:ab:bd:80:79:a8:97:e3:8c:81:ec:e3:2b:dd: 8d:5d:69:14:23:05:47:ce:2c:b7:56:ea:35:03:fa:51:c2:9c: de:93:3b:57:28:23:b3:12:4f:1c:8b:e8:ce:c4:a1:f0:ce:ce: 6a:e5:3a:dd:97:d5:aa:6a:63:1c:66:43:41:b7:2d:55:72:91: f0:0a:7e:a0:30:f2:31:f9:0f:1e:bb:f6:89:5f:8c:ca:a6:f7: 94:ed:46:66 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuKfMyklSV33TQ/Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjgwYWZlZDgtNjMwYy00NDQ2LWE5NzItZjc1NTRhYjhl Y2UwMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk Y2ZkYTJhYzEtNWQ3Ni00MjE4LTkxMGItNmYwMjU5ZGVkODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVJyvgmRn5uhSi7nV01vgeyVLiwanfKt94Mr LULtS1g1x+qhDbhhkoQxkCPj4MLQFzfG9edeAhog1QIaf6/KewoTzs0qKXHygoAO 3MJ1hjOUUMDKHTvngYxltkzW20ga0on2pae6kmGxgru6M2AOR2ixYXHr+Xxt4GUe nH6Ny1GwLvhMbp7h+aS09j5qaL6eFwOPoIDwBu3dOVwWh3waflEfzHBnYAOTNdxc ODmrW4+d/IPKDnaE/rRwmHgBE32/iIOC6mkXiGZUFo/zNRlJiAW4LpeuTxyxi1eP krPduW4ilxsTT0eIPXS6/ItKWbvq0Qh4hEm8hK90A+4kWYBlGQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFjPMsqdNvLTa0EWVoIYMZqmtxNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mODBh ZmVkOC02MzBjLTQ0NDYtYTk3Mi1mNzU1NGFiOGVjZTAvM2UxMjIzNTItZTBiMS0z NTk0LTkzNWYtM2Q2ZGQ1NTkwZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjgwYWZlZDgtNjMwYy00NDQ2LWE5 NzItZjc1NTRhYjhlY2UwL2Y4MGFmZWQ4LTYzMGMtNDQ0Ni1hOTcyLWY3NTU0YWI4 ZWNlMC5jcmwwHwYDVR0jBBgwFoAU7UZrNw5ek+WB+dDasXYLu4kuTycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mODBhZmVkOC02MzBjLTQ0NDYtYTk3Mi1mNzU1 NGFiOGVjZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2ygAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASlNTVp8w8coRC+PUgaz7yDTo7jgyeCiVmCTSVrElZORIUggEUwPz w/0QVJfAzSTsh3g0/ODYwc4ti+6j7zZ+mmeQimz16KGa96GP1a4Rxw/uFWYvcn3R i04htL+bnUJSSFegDuoqdcQWL6NzDMzLHbNPfYANjZgImeFi5dEzWxpVYgPjoB0k gEqKio4MhwP375aGeM69Ah5dYmrsGRLAKZl/NNrpbomrvYB5qJfjjIHs4yvdjV1p FCMFR84st1bqNQP6UcKc3pM7VygjsxJPHIvozsSh8M7OauU63ZfVqmpjHGZDQbct VXKR8Ap+oDDyMfkPHrv2iV+Myqb3lO1GZg== -----END CERTIFICATE-----Generated at Mon Oct 20 10:48:07 2025 by rpki-client