$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa File: c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa (raw, json) Hash identifier: q2OYmLIBds+doC+Ql8PaHBdxIY8MDeu+XJUBpHgwysE= Subject key identifier: D2:34:E6:AA:38:48:59:22:51:70:A6:06:8A:59:EF:A5:32:35:4A:EA Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584B715CB0D5420840F80194F880 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 398328 IP address blocks: 2602:fd46:137::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b0:d5:42:08:40:f8:01:94:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=51146ce4-675c-48a8-94f5-b6b76d8eeda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:2d:52:27:57:92:f4:6b:ac:6f:b1:98:5c: f2:98:a1:9a:53:e6:8a:2c:a0:50:12:0a:de:92:36: 6e:7e:da:14:24:5e:16:60:7e:2f:79:a6:95:5d:bf: 06:62:03:db:f4:93:17:1d:49:81:79:36:02:f9:47: ef:49:9b:0c:5e:ca:d0:c2:3e:76:e2:3d:02:23:c4: 35:e7:0c:3a:2d:fc:7c:6e:cf:a4:5d:8f:c1:37:8b: 91:9c:93:e9:f9:6c:b4:a1:51:e1:ca:39:ce:19:12: 32:a4:8a:43:be:ba:11:c2:d7:a2:27:56:b8:24:cb: 71:fa:3d:41:9d:9e:e5:a1:22:5d:36:e2:fc:5b:8e: e6:fc:c3:f3:94:cc:71:73:d7:cd:2a:0c:d1:00:7e: 4c:be:84:64:43:d3:d6:0a:1b:0f:de:a6:b9:9e:7a: db:a6:7a:52:df:ca:7a:97:1d:5d:44:71:25:4d:c0: d2:4b:51:30:74:10:09:e0:a9:b7:36:9a:f5:7b:70: b9:d6:0e:dd:0c:39:45:2c:3d:f8:c4:0f:3e:92:c9: 94:cc:6a:f6:50:94:aa:95:c8:a3:74:ad:9c:f0:be: a6:43:92:90:46:3b:a6:01:03:21:6b:15:c3:2e:81: ff:e4:3c:83:a0:19:00:e4:2a:5d:94:1d:34:02:cc: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:34:E6:AA:38:48:59:22:51:70:A6:06:8A:59:EF:A5:32:35:4A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd46:137::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:93:5e:1b:e4:9e:39:5d:f0:58:57:16:2d:00:7a:5b:84:41: 9d:e4:d1:fb:f1:83:64:3a:d8:46:90:65:fd:d4:f1:6c:1d:96: 82:90:49:b4:24:46:12:59:b3:38:d6:28:fb:09:f1:0d:f1:79: cb:8f:1c:48:23:6b:c8:82:92:5b:7c:36:67:fa:1e:51:44:fe: f2:89:81:fd:f5:35:7e:62:f3:fd:97:0a:a0:10:6f:59:79:d7: e8:a4:a2:99:e2:fa:06:cc:7a:d5:85:57:f7:9b:7b:9b:75:58: b2:01:1e:60:25:4a:69:69:ad:78:f8:ee:31:e5:3a:0e:cf:a3: 1b:8e:5e:28:7c:2c:5f:ba:35:d7:b2:0a:59:fe:e1:cb:da:34: 00:66:89:ed:00:d8:d7:c1:91:a3:14:df:c9:63:50:b9:af:a5: 4f:97:21:9c:15:d3:b3:2f:af:8a:15:da:2e:4d:40:93:31:f2: 0b:95:8d:6b:19:34:5f:68:d7:19:12:ce:49:10:2e:24:27:ab: be:81:5e:0f:f5:01:96:20:ba:57:c6:9f:14:e1:9e:7f:15:8b: d7:73:8f:6a:e1:d9:56:2c:3d:bc:35:51:26:17:05:5b:c5:01: 2b:5f:27:f3:f0:bc:bc:d0:04:0a:ce:00:75:a1:29:b5:61:a7: 79:4b:10:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXLDVQghA+AGU+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTExNDZjZTQtNjc1Yy00OGE4LTk0ZjUtYjZiNzZkOGVlZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ktUidXkvRrrG+xmFzymKGaU+aKLKBQEgre kjZuftoUJF4WYH4veaaVXb8GYgPb9JMXHUmBeTYC+UfvSZsMXsrQwj524j0CI8Q1 5ww6Lfx8bs+kXY/BN4uRnJPp+Wy0oVHhyjnOGRIypIpDvroRwteiJ1a4JMtx+j1B nZ7loSJdNuL8W47m/MPzlMxxc9fNKgzRAH5MvoRkQ9PWChsP3qa5nnrbpnpS38p6 lx1dRHElTcDSS1EwdBAJ4Km3Npr1e3C51g7dDDlFLD34xA8+ksmUzGr2UJSqlcij dK2c8L6mQ5KQRjumAQMhaxXDLoH/5DyDoBkA5CpdlB00AswWbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNI05qo4SFkiUXCmBopZ76UyNUrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvYzBkNjA5ZjUtMmVhOC0z NjljLTljMmItMDdjYTA4ZTVlNmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9RgE3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFmTXhvknjld8FhXFi0AeluEQZ3k0fvxg2Q62EaQZf3U8WwdloKQ SbQkRhJZszjWKPsJ8Q3xecuPHEgja8iCklt8Nmf6HlFE/vKJgf31NX5i8/2XCqAQ b1l51+ikopni+gbMetWFV/ebe5t1WLIBHmAlSmlprXj47jHlOg7PoxuOXih8LF+6 NdeyCln+4cvaNABmie0A2NfBkaMU38ljULmvpU+XIZwV07Mvr4oV2i5NQJMx8guV jWsZNF9o1xkSzkkQLiQnq76BXg/1AZYgulfGnxThnn8Vi9dzj2rh2VYsPbw1USYX BVvFAStfJ/PwvLzQBArOAHWhKbVhp3lLEGw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:34:45 2025 by rpki-client