$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa File: 76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa (raw, json) Hash identifier: cqRGOl72YUyuVgHPEzoHa8UqLUjFPg6ayhkPM9GuDHA= Subject key identifier: 72:F3:EE:1C:AA:AA:8B:1C:43:50:D4:F4:F1:79:0B:B9:6D:E9:6D:CA Certificate issuer: /CN=af3da563-8689-4ebd-a553-31a2f310113a Certificate serial: 010D0C9F4328584B7B220A28FBB7A0054FF02B80 Authority key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 399688 IP address blocks: 2602:fb21::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:0a:28:fb:b7:a0:05:4f:f0:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3da563-8689-4ebd-a553-31a2f310113a Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=ef32070d-4da0-4186-88f7-3ad2d89fa80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:20:ea:93:83:81:e0:fc:7a:b9:61:88:a4: f2:29:38:3b:5b:a5:97:be:a5:48:25:32:17:bf:2f: 51:6f:c6:46:a4:15:26:43:f0:ca:47:9a:34:9e:af: bf:0c:3a:18:2b:b8:43:26:cb:26:67:f1:90:07:ce: 18:52:86:5f:89:a2:d1:b2:2e:e5:67:aa:52:e7:9d: 93:12:5b:29:1d:6d:ee:24:40:36:7f:01:88:d4:09: a9:c9:a6:6d:de:a4:bc:af:16:a8:a8:38:98:34:c6: a8:22:61:38:e5:b0:db:8d:a9:bd:17:7c:2e:7a:9b: e1:48:53:9c:df:00:a3:19:92:27:20:89:1a:81:32: b2:8a:2d:dc:c7:88:1d:ff:34:69:1e:51:f2:23:fe: 94:09:65:f1:33:71:61:01:6e:b9:4b:77:d3:41:53: 14:ab:a9:57:56:a4:16:df:14:13:fd:e2:c5:a1:3b: 92:f0:a8:71:1c:62:c5:87:ed:99:6f:f0:44:66:93: 18:3d:da:31:9a:32:68:a4:01:4e:97:92:56:3e:d8: b6:70:8d:f4:38:f8:44:f8:87:07:e3:8d:fa:2c:58: 12:d3:05:c5:d7:42:b2:5f:41:87:e3:cc:cb:9f:f1: 40:94:64:05:a1:85:38:21:92:01:0f:9a:ee:d4:d1: 6e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F3:EE:1C:AA:AA:8B:1C:43:50:D4:F4:F1:79:0B:B9:6D:E9:6D:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl X509v3 Authority Key Identifier: keyid:A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb21::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4c:89:e2:3f:82:7a:94:5b:92:49:5e:eb:d0:c9:ba:00:19: e9:a3:ac:4f:f2:64:43:3c:02:95:c0:4c:7c:85:fc:f7:f5:ac: e8:73:85:39:56:73:c7:bd:47:b2:83:86:02:48:7d:02:80:ba: 04:0c:4f:e0:f6:c4:4a:46:44:d7:09:f4:63:6b:f9:63:8e:0e: c0:5f:4d:96:62:0a:4e:4e:63:77:f8:8e:d6:d1:83:18:93:c1: 88:54:d2:74:6f:10:e0:35:c1:de:5b:04:e6:1e:69:a3:e0:06: 2b:f2:d5:30:87:3c:48:5c:af:27:f5:a3:da:5a:cb:13:dd:36: 93:d2:1f:63:ab:23:69:a9:5f:49:3c:e6:60:4d:8f:81:c4:1d: 71:48:46:c5:2c:61:7e:74:a6:db:d2:c4:4b:e1:d7:2a:4f:d1: 7f:6d:54:98:28:6d:c1:d1:38:0c:cd:e3:8b:37:ad:a6:eb:31: e6:f4:d2:a1:b0:31:64:ef:da:e3:93:12:ac:16:35:15:f8:4a: 9a:75:c4:19:7e:1b:16:31:4c:66:70:b8:93:84:99:f4:33:0f: 58:dc:35:c2:99:07:ca:81:56:c9:84:7f:de:a4:b8:5a:88:2f: 62:d3:85:a8:0c:a1:50:7b:92:05:59:d9:e0:f4:da:a8:d6:30: 7f:e3:86:87 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt7Igoo+7egBU/wK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYzZGE1NjMtODY4OS00ZWJkLWE1NTMtMzFhMmYzMTAx MTNhMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZWYzMjA3MGQtNGRhMC00MTg2LTg4ZjctM2FkMmQ4OWZhODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBsg6pODgeD8erlhiKTyKTg7W6WXvqVIJTIX vy9Rb8ZGpBUmQ/DKR5o0nq+/DDoYK7hDJssmZ/GQB84YUoZfiaLRsi7lZ6pS552T ElspHW3uJEA2fwGI1AmpyaZt3qS8rxaoqDiYNMaoImE45bDbjam9F3wuepvhSFOc 3wCjGZInIIkagTKyii3cx4gd/zRpHlHyI/6UCWXxM3FhAW65S3fTQVMUq6lXVqQW 3xQT/eLFoTuS8KhxHGLFh+2Zb/BEZpMYPdoxmjJopAFOl5JWPti2cI30OPhE+IcH 4436LFgS0wXF10KyX0GH48zLn/FAlGQFoYU4IZIBD5ru1NFuywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHLz7hyqqoscQ1DU9PF5C7lt6W3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNk YTU2My04Njg5LTRlYmQtYTU1My0zMWEyZjMxMDExM2EvNzZmNjdmODQtNjY5My0z YTMzLThiZjItMmI0ZTVkNTM2YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYzZGE1NjMtODY4OS00ZWJkLWE1 NTMtMzFhMmYzMTAxMTNhL2FmM2RhNTYzLTg2ODktNGViZC1hNTUzLTMxYTJmMzEw MTEzYS5jcmwwHwYDVR0jBBgwFoAUpq/bvLa9B8T8UIC72m3cN+BpkuAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNkYTU2My04Njg5LTRlYmQtYTU1My0zMWEy ZjMxMDExM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7IQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAB0yJ4j+CepRbkkle69DJugAZ6aOsT/JkQzwClcBMfIX89/Ws6HOF OVZzx71HsoOGAkh9AoC6BAxP4PbESkZE1wn0Y2v5Y44OwF9NlmIKTk5jd/iO1tGD GJPBiFTSdG8Q4DXB3lsE5h5po+AGK/LVMIc8SFyvJ/Wj2lrLE902k9IfY6sjaalf STzmYE2PgcQdcUhGxSxhfnSm29LES+HXKk/Rf21UmChtwdE4DM3jizetpusx5vTS obAxZO/a45MSrBY1FfhKmnXEGX4bFjFMZnC4k4SZ9DMPWNw1wpkHyoFWyYR/3qS4 WogvYtOFqAyhUHuSBVnZ4PTaqNYwf+OGhw== -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:40 2025 by rpki-client