$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a7244564-9404-3b6d-a87c-23f016c7e4c6.roa File: a7244564-9404-3b6d-a87c-23f016c7e4c6.roa (raw, json) Hash identifier: hUXYwIX6t5yj6JPBDCPcSNrgrGfwLQeuZlmM51X3OkY= Subject key identifier: 2C:AD:24:89:F6:96:6D:7B:DC:10:C0:82:11:A0:6E:5A:6F:89:CD:07 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584B110C039EEC9721C6391E2380 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a7244564-9404-3b6d-a87c-23f016c7e4c6.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 46432 IP address blocks: 2602:fe59:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:03:9e:ec:97:21:c6:39:1e:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=be93d8a4-f549-41b6-a308-030c77184a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:7a:e2:dc:6b:b8:06:84:e8:74:e5:99:56: b4:f7:9c:2e:e1:93:a1:99:0a:7e:ec:da:b1:d0:b5: c6:5a:07:36:bf:35:c7:b8:8b:51:5c:90:3a:04:c9: a0:47:4c:84:ca:42:0e:f9:c6:0b:45:42:f5:8f:e4: d9:b7:5f:0e:44:fb:cb:a4:13:58:79:43:bb:de:8e: 1e:2c:9f:54:20:0e:14:e2:62:00:86:cc:a0:36:8d: 60:03:40:fe:3b:31:ce:cd:00:7f:ea:8d:9c:ae:80: e7:5f:43:e9:82:46:e9:a2:c9:3e:cb:04:42:21:37: c7:27:28:4e:ee:5f:91:00:6f:31:99:78:da:2c:c9: 9c:87:22:40:9a:9b:c1:4d:be:ea:fb:37:31:77:f8: b7:bf:1b:a7:47:d5:bd:4c:53:d8:28:a8:19:94:0f: 8d:fe:5d:3c:9b:2a:3e:6f:13:01:85:43:50:af:5e: d0:d9:13:e1:7c:cc:81:15:a8:1c:fc:b6:9b:9c:3d: d1:9f:32:0e:5b:8d:05:0b:df:13:40:5d:a2:c3:0f: 3e:15:8d:56:33:0c:63:00:e9:a5:56:07:0d:2d:0d: 6e:60:d3:52:04:64:51:4c:c0:55:a9:a8:3d:15:02: 5b:fc:d3:e7:3d:88:8e:d0:a2:74:8b:9d:e8:7f:7f: 5d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AD:24:89:F6:96:6D:7B:DC:10:C0:82:11:A0:6E:5A:6F:89:CD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a7244564-9404-3b6d-a87c-23f016c7e4c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv6: 2602:fe59:30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8b:ab:bc:f7:5f:60:f6:cd:3c:2a:de:5b:97:12:b9:8e:8f: 36:a8:fd:f1:8b:02:e5:d2:f1:92:05:30:82:cc:62:cf:11:2e: 23:6a:37:c5:27:49:30:da:75:ff:99:74:be:8a:2c:29:40:92: 5a:a7:c5:f3:87:06:9e:36:04:dd:5f:b8:bf:46:16:ff:fe:aa: 1b:f1:ba:8c:8f:9b:7e:00:47:2e:eb:cf:b4:fc:07:e5:04:89: 04:82:0c:34:dd:80:ac:84:3b:08:ae:93:05:20:59:bb:32:ca: 22:a7:1b:86:1e:e1:e1:ac:40:bf:83:bf:c7:40:fe:6a:15:a8: 71:95:0c:f5:3a:42:c7:1c:e6:b3:42:ca:9b:7f:42:e8:2e:80: 8e:a2:03:9b:98:d9:37:e7:59:73:2c:35:66:f9:f3:a5:f8:1a: 88:e0:52:e9:0d:da:2b:ed:64:0b:47:73:07:bb:49:19:4d:cf: b5:21:36:47:c0:4c:80:b1:88:4f:67:c4:ed:66:66:b7:3a:d9: 4f:f4:fa:0a:06:f7:50:da:26:e9:28:a4:7a:5e:cb:48:ee:0f: 30:12:de:4e:4d:80:47:02:80:da:05:6c:7b:91:e7:1b:e6:c9: e2:2a:7a:6d:f7:95:72:1b:cc:84:1a:6c:ea:e1:2a:27:a3:e9: f7:0e:e7:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsRDAOe7JchxjkeI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk YmU5M2Q4YTQtZjU0OS00MWI2LWEzMDgtMDMwYzc3MTg0YTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVx64txruAaE6HTlmVa095wu4ZOhmQp+7Nqx 0LXGWgc2vzXHuItRXJA6BMmgR0yEykIO+cYLRUL1j+TZt18ORPvLpBNYeUO73o4e LJ9UIA4U4mIAhsygNo1gA0D+OzHOzQB/6o2croDnX0Ppgkbposk+ywRCITfHJyhO 7l+RAG8xmXjaLMmchyJAmpvBTb7q+zcxd/i3vxunR9W9TFPYKKgZlA+N/l08myo+ bxMBhUNQr17Q2RPhfMyBFagc/LabnD3RnzIOW40FC98TQF2iww8+FY1WMwxjAOml VgcNLQ1uYNNSBGRRTMBVqag9FQJb/NPnPYiO0KJ0i53of39dfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCytJIn2lm173BDAghGgblpvic0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTcyNDQ1NjQtOTQwNC0z YjZkLWE4N2MtMjNmMDE2YzdlNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+WQAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGKLq7z3X2D2zTwq3luXErmOjzao/fGLAuXS8ZIFMILMYs8RLiNq N8UnSTDadf+ZdL6KLClAklqnxfOHBp42BN1fuL9GFv/+qhvxuoyPm34ARy7rz7T8 B+UEiQSCDDTdgKyEOwiukwUgWbsyyiKnG4Ye4eGsQL+Dv8dA/moVqHGVDPU6Qscc 5rNCypt/QugugI6iA5uY2TfnWXMsNWb586X4GojgUukN2ivtZAtHcwe7SRlNz7Uh NkfATICxiE9nxO1mZrc62U/0+goG91DaJukopHpey0juDzAS3k5NgEcCgNoFbHuR 5xvmyeIqem33lXIbzIQabOrhKiej6fcO560= -----END CERTIFICATE-----Generated at Sat Oct 11 07:36:07 2025 by rpki-client