$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6aaf0b5d-0ce4-34be-91b8-468066365036.roa File: 6aaf0b5d-0ce4-34be-91b8-468066365036.roa (raw, json) Hash identifier: Ah0knKDiPy3zWWhUv2+LHLz/wgNUMLOw6mGjgGfwF+c= Subject key identifier: E5:39:7C:2B:89:30:8B:11:9E:98:A6:30:C2:5B:E9:CD:C6:DE:FA:F5 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584B110C0371F06E009861DAAF00 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6aaf0b5d-0ce4-34be-91b8-468066365036.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 46432 IP address blocks: 2602:fe59:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:03:71:f0:6e:00:98:61:da:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=3452862e-b58a-4be2-b3e1-63ead5e0dd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:73:b6:7a:ac:a3:1c:82:46:00:6b:78:37:ac: fe:f3:8a:84:1d:aa:c0:c3:9b:f0:20:7b:d6:2a:d8: ca:7b:da:5c:fb:37:6d:69:56:12:43:b7:a6:7a:10: 08:f7:94:93:ac:e2:c6:9c:02:18:1c:b4:93:3b:d0: 8c:49:78:b3:a1:80:f5:1f:5d:54:3c:ab:61:86:e9: 64:6a:2b:36:85:14:89:4b:91:19:76:93:5c:ed:74: 2a:b9:10:1c:3c:47:df:40:4a:63:9f:25:9c:7d:11: 0e:2a:e9:81:1e:dc:a9:20:da:c5:8d:d5:60:80:f5: 0b:35:d1:91:a4:fe:3e:d0:30:1e:ce:2e:12:3e:5f: e7:ce:79:08:7b:92:e9:bc:02:0f:6f:ac:71:14:3a: 66:84:21:4c:eb:ca:3d:ab:d9:03:ed:54:de:55:0e: e3:3f:e2:b5:0f:de:e4:40:b9:3e:2f:12:bf:20:5f: 10:fc:57:7a:b1:c7:76:6f:f0:d0:f3:61:2b:fd:be: 88:a8:36:b0:a7:72:9c:5e:22:ef:51:98:7e:21:b2: 42:90:47:4e:b0:b7:d0:17:3a:bd:e7:1c:0c:27:e2: dc:a9:95:a9:99:32:de:48:fe:0d:24:80:ca:ac:60: 25:bc:23:d2:11:91:ce:22:c9:ed:a5:f2:a2:b0:fd: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:39:7C:2B:89:30:8B:11:9E:98:A6:30:C2:5B:E9:CD:C6:DE:FA:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6aaf0b5d-0ce4-34be-91b8-468066365036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv6: 2602:fe59:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:99:ae:55:5e:bc:ce:d1:24:13:dd:5c:98:3f:24:72:76:43: db:6d:5c:16:49:11:93:c3:f2:91:df:d6:07:4c:2f:cf:63:c1: 78:63:dc:a2:3e:6a:e5:09:87:2b:4f:5e:2a:85:16:a5:f8:b7: 5b:77:5e:78:12:b8:85:89:71:c8:75:0c:39:33:dc:90:08:b5: ba:f2:eb:2e:22:05:b0:d3:a5:4c:88:f8:b2:f3:e3:b6:66:b1: 4d:6a:4c:2e:c6:7e:a2:3f:d4:aa:e6:65:ac:c3:c9:11:2e:dc: 05:77:bc:bb:b9:cf:f6:84:24:7b:39:56:17:a8:ef:82:ba:84: 57:0f:0d:b9:9a:3c:36:2c:c0:ae:fa:d2:3d:1f:d5:e2:7a:77: 95:2e:e3:d8:5b:01:6c:a2:1c:7f:bd:8e:6b:e8:5b:df:17:c5: fb:44:46:2f:b8:a9:8a:94:8d:f5:4d:a9:14:d5:1c:db:c5:e6: ae:5d:66:62:b5:17:93:ee:2e:a3:c6:6f:e0:c4:f7:fc:9c:29: 66:91:ad:8f:fd:ef:4d:f8:7e:f3:93:88:c9:12:09:ec:f1:a4: 31:2c:22:93:c4:44:ad:02:c4:ae:35:aa:1a:06:90:cb:15:41: 1e:45:d6:a2:ba:8c:94:49:99:5f:96:71:41:e3:47:49:84:00: cb:45:10:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsRDANx8G4AmGHarwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MzQ1Mjg2MmUtYjU4YS00YmUyLWIzZTEtNjNlYWQ1ZTBkZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHO2eqyjHIJGAGt4N6z+84qEHarAw5vwIHvW KtjKe9pc+zdtaVYSQ7emehAI95STrOLGnAIYHLSTO9CMSXizoYD1H11UPKthhulk ais2hRSJS5EZdpNc7XQquRAcPEffQEpjnyWcfREOKumBHtypINrFjdVggPULNdGR pP4+0DAezi4SPl/nznkIe5LpvAIPb6xxFDpmhCFM68o9q9kD7VTeVQ7jP+K1D97k QLk+LxK/IF8Q/Fd6scd2b/DQ82Er/b6IqDawp3KcXiLvUZh+IbJCkEdOsLfQFzq9 5xwMJ+LcqZWpmTLeSP4NJIDKrGAlvCPSEZHOIsntpfKisP2oDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOU5fCuJMIsRnpimMMJb6c3G3vr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNmFhZjBiNWQtMGNlNC0z NGJlLTkxYjgtNDY4MDY2MzY1MDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+WQAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGiZrlVevM7RJBPdXJg/JHJ2Q9ttXBZJEZPD8pHf1gdML89jwXhj 3KI+auUJhytPXiqFFqX4t1t3XngSuIWJcch1DDkz3JAItbry6y4iBbDTpUyI+LLz 47ZmsU1qTC7GfqI/1KrmZazDyREu3AV3vLu5z/aEJHs5Vheo74K6hFcPDbmaPDYs wK760j0f1eJ6d5Uu49hbAWyiHH+9jmvoW98XxftERi+4qYqUjfVNqRTVHNvF5q5d ZmK1F5PuLqPGb+DE9/ycKWaRrY/97034fvOTiMkSCezxpDEsIpPERK0CxK41qhoG kMsVQR5F1qK6jJRJmV+WcUHjR0mEAMtFEOg= -----END CERTIFICATE-----Generated at Sat Oct 11 07:34:13 2025 by rpki-client