$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/35ae5d38-189b-36c7-91a9-9c5eb9065299.roa File: 35ae5d38-189b-36c7-91a9-9c5eb9065299.roa (raw, json) Hash identifier: yUv4n1t5vXVt1BXVLJLuNHPJLsAxRs0FgZwI/Ozwk6s= Subject key identifier: CC:C9:C5:6F:FA:57:9D:43:82:DA:9A:A2:B4:FE:EE:10:70:B6:DC:AF Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584B6BC74F8B494371F7E0427B00 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/35ae5d38-189b-36c7-91a9-9c5eb9065299.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 23428 IP address blocks: 2602:fb68:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4f:8b:49:43:71:f7:e0:42:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=c3752a01-7994-454c-9a7a-e4e315e461cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:9e:f1:b2:59:57:ae:03:3b:5f:b1:a6:84: 80:0c:01:85:62:21:98:d9:62:aa:4b:d2:6a:a0:e0: 5e:64:de:b2:e4:cd:5c:a7:33:0b:97:f9:f9:fd:57: 88:86:50:e3:f1:61:bb:c6:f6:2e:96:37:3d:94:9c: 58:8b:76:0a:77:81:0b:e0:10:11:c3:a9:67:6b:93: f6:25:fd:08:c7:2c:0a:39:5f:9e:3e:c8:fa:a6:27: d2:95:64:e9:5b:17:db:60:db:af:10:81:75:f6:74: a7:1f:ca:91:82:f0:71:fa:48:07:d9:b4:81:69:f4: 63:45:e3:30:c6:b3:0b:21:59:aa:d8:34:58:3f:31: 62:0a:fa:b9:8d:3c:c6:7f:45:b7:36:fc:18:67:dc: e6:45:63:bf:85:4a:77:10:ee:48:04:02:ad:dd:0c: 15:c4:6c:c9:65:23:85:c3:15:9d:3b:6b:76:aa:b8: 0c:32:1c:13:db:f7:0b:b3:59:39:28:3d:45:7a:89: fd:d6:7e:04:64:3a:ed:e3:ae:7a:f7:98:48:30:4b: 87:88:3d:02:2e:28:f2:7b:dc:9e:48:d0:1f:76:c4: 9f:83:8b:a8:7d:31:6e:58:4b:c7:58:47:16:08:d8: f2:52:40:ec:1c:d0:5e:fe:c7:13:82:c0:ed:da:7b: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C9:C5:6F:FA:57:9D:43:82:DA:9A:A2:B4:FE:EE:10:70:B6:DC:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/35ae5d38-189b-36c7-91a9-9c5eb9065299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb68:800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:42:f3:d5:15:fa:a4:23:67:fe:5b:45:16:5f:b4:c0:51:09: 16:24:1f:c9:2f:6e:eb:fe:cf:59:64:e6:04:c0:cd:ee:ec:ad: 68:df:17:3b:f3:65:6d:53:70:e9:a9:15:d2:73:7f:a8:aa:51: 98:64:96:47:62:0b:1a:71:82:3e:93:a1:a0:84:8f:d4:85:0f: 03:ae:42:99:23:0e:fe:bd:9e:1f:79:7c:cc:50:5b:16:2d:35: e2:a9:43:c8:b1:74:f2:10:a6:ce:13:1d:ba:cb:fa:79:61:cd: 03:af:b2:8a:79:03:59:c8:09:ec:40:15:62:4d:05:a5:7e:db: ff:9b:a6:c8:fe:14:62:a3:55:46:35:02:a3:92:19:36:1b:ff: a5:86:1d:c8:b8:9c:b1:1e:37:51:57:ba:5a:c8:18:61:05:00: 51:65:72:65:b6:2c:65:28:89:94:bb:dd:d3:f4:77:c5:22:3f: 89:68:27:8c:f7:cf:06:59:aa:0e:0c:a8:e2:53:a2:ee:26:fb: d6:bb:cc:23:8a:51:95:c7:ad:16:7e:8c:90:b5:18:a7:91:9a: c2:c5:5d:b7:ed:bf:74:04:79:cb:b5:12:ce:53:cf:f2:18:75: 1f:55:f9:6b:24:02:93:a9:89:b5:57:9c:e4:cf:3a:f5:28:fe: 8c:db:37:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtrx0+LSUNx9+BCewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YzM3NTJhMDEtNzk5NC00NTRjLTlhN2EtZTRlMzE1ZTQ2MWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJue8bJZV64DO1+xpoSADAGFYiGY2WKqS9Jq oOBeZN6y5M1cpzMLl/n5/VeIhlDj8WG7xvYuljc9lJxYi3YKd4EL4BARw6lna5P2 Jf0IxywKOV+ePsj6pifSlWTpWxfbYNuvEIF19nSnH8qRgvBx+kgH2bSBafRjReMw xrMLIVmq2DRYPzFiCvq5jTzGf0W3NvwYZ9zmRWO/hUp3EO5IBAKt3QwVxGzJZSOF wxWdO2t2qrgMMhwT2/cLs1k5KD1Feon91n4EZDrt465695hIMEuHiD0CLijye9ye SNAfdsSfg4uofTFuWEvHWEcWCNjyUkDsHNBe/scTgsDt2nvUnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMzJxW/6V51DgtqaorT+7hBwttyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvMzVhZTVkMzgtMTg5Yi0z NmM3LTkxYTktOWM1ZWI5MDY1Mjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7aAgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJC89UV+qQjZ/5bRRZftMBRCRYkH8kvbuv+z1lk5gTAze7srWjf FzvzZW1TcOmpFdJzf6iqUZhklkdiCxpxgj6ToaCEj9SFDwOuQpkjDv69nh95fMxQ WxYtNeKpQ8ixdPIQps4THbrL+nlhzQOvsop5A1nICexAFWJNBaV+2/+bpsj+FGKj VUY1AqOSGTYb/6WGHci4nLEeN1FXulrIGGEFAFFlcmW2LGUoiZS73dP0d8UiP4lo J4z3zwZZqg4MqOJTou4m+9a7zCOKUZXHrRZ+jJC1GKeRmsLFXbftv3QEecu1Es5T z/IYdR9V+WskApOpibVXnOTPOvUo/ozbN0E= -----END CERTIFICATE-----Generated at Mon Oct 20 22:47:10 2025 by rpki-client