$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa File: 3cff927a-f198-366e-8e76-9857222f0035.roa (raw, json) Hash identifier: tPcFzIgozsMLJyvIUnYVDPUi2XMFX/WVaGxkAXV5y8o= Subject key identifier: 80:94:F7:0E:69:0D:17:8C:C4:6D:1D:C9:2A:EE:08:E6:5F:22:B6:84 Certificate issuer: /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Certificate serial: 010D0C9F4328584B6632043F0B28EF9CD034A900 Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 13566 IP address blocks: 2602:fa64:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:04:3f:0b:28:ef:9c:d0:34:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=de2d3dd6-f741-4b91-85a6-91827b8eb533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:6c:e4:e9:4f:c2:22:50:60:e6:1b:c0:df: b2:63:84:c1:28:12:00:52:a1:5f:73:91:07:05:4b: 6c:28:1b:eb:84:29:e5:14:ae:7c:89:59:7e:87:cb: 2d:7f:d5:ab:c3:15:c9:3d:ad:a3:92:94:57:4c:51: d6:f1:77:69:03:04:7b:63:4b:e6:d7:64:4d:33:40: 1b:7d:b4:36:3d:7a:ec:89:db:14:cd:5b:b3:2d:04: 9c:a8:c2:2e:6c:28:d6:4b:30:d9:8a:cc:a9:40:4f: e2:8c:d5:7a:37:7f:0f:27:70:c9:fb:b6:f5:82:63: d7:e3:ba:00:6c:9d:31:80:85:8f:a6:52:4c:ac:1c: 73:e0:9a:d4:b1:54:74:9b:25:ee:7e:73:1b:4e:25: 35:98:17:f5:ca:fe:16:9a:13:d1:27:f6:06:95:59: 8d:f8:f9:a8:57:63:a3:85:34:23:7f:53:b0:13:79: 0c:fe:cf:91:b2:3a:c5:bb:cf:d5:c1:26:d6:cb:b3: 2f:58:b5:7a:95:22:60:60:f7:49:28:53:28:f5:95: 31:a2:a1:a1:39:ca:44:94:e4:86:ad:99:f7:b4:a1: ac:c5:d3:d2:d8:af:b4:41:15:24:f9:bd:4d:47:cb: 51:f7:37:85:d2:a8:38:10:7f:a7:8f:8d:5e:42:c2: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:94:F7:0E:69:0D:17:8C:C4:6D:1D:C9:2A:EE:08:E6:5F:22:B6:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl X509v3 Authority Key Identifier: keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa64:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:91:75:ce:6e:14:53:7b:86:c7:2b:9e:f2:52:b8:ca:90:0b: 11:ca:78:dc:c1:92:fb:f9:da:be:37:b2:97:51:e1:2d:38:b6: c9:d3:d1:1c:f1:c8:af:69:f5:3e:e0:98:67:ce:9d:35:1e:15: 5d:62:44:6f:f0:cc:13:d6:7b:c6:b2:ba:b8:0d:a7:63:86:04: b4:d2:ca:d7:ec:a3:c2:93:32:34:27:ff:ad:a1:bc:96:65:1f: e3:22:20:b7:77:7f:7f:24:2f:97:8a:c7:3a:81:f5:92:dc:4e: d2:b5:0e:db:1b:94:37:8f:72:cc:13:26:d4:c4:d4:c1:06:eb: 0b:8f:68:ea:57:c6:36:2d:65:3a:05:b0:b8:53:36:fb:1b:a0: e1:0f:8b:59:4f:67:b5:15:3e:18:09:54:13:ed:f2:02:8a:ee: f9:e3:c2:c3:aa:9e:53:cf:3e:0e:d9:85:7a:53:f9:0c:e1:be: a7:dc:85:dc:39:4e:5a:2c:cc:22:de:a6:d5:e2:2e:ed:9f:90: 81:26:98:92:1c:e7:83:11:68:1b:7d:50:5f:38:1f:5b:62:5d: 32:7b:2f:5e:5e:34:cc:3c:2b:99:78:7f:98:9f:d8:96:d2:13: 83:dd:26:8d:3f:eb:d5:0d:b1:03:b3:44:aa:5f:e1:e4:83:9b: f1:fe:a0:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMgQ/CyjvnNA0qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZmNDM4ZDItNDcxNy00MmMwLWJjYTUtOWIzYTJjZGQw OWVkMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZGUyZDNkZDYtZjc0MS00YjkxLTg1YTYtOTE4MjdiOGViNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlads5OlPwiJQYOYbwN+yY4TBKBIAUqFfc5EH BUtsKBvrhCnlFK58iVl+h8stf9WrwxXJPa2jkpRXTFHW8XdpAwR7Y0vm12RNM0Ab fbQ2PXrsidsUzVuzLQScqMIubCjWSzDZisypQE/ijNV6N38PJ3DJ+7b1gmPX47oA bJ0xgIWPplJMrBxz4JrUsVR0myXufnMbTiU1mBf1yv4WmhPRJ/YGlVmN+PmoV2Oj hTQjf1OwE3kM/s+RsjrFu8/VwSbWy7MvWLV6lSJgYPdJKFMo9ZUxoqGhOcpElOSG rZn3tKGsxdPS2K+0QRUk+b1NR8tR9zeF0qg4EH+nj41eQsIBqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFICU9w5pDReMxG0dySruCOZfIraEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0 MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNkZDA5ZWQvM2NmZjkyN2EtZjE5OC0z NjZlLThlNzYtOTg1NzIyMmYwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDZmNDM4ZDItNDcxNy00MmMwLWJj YTUtOWIzYTJjZGQwOWVkLzA2ZjQzOGQyLTQ3MTctNDJjMC1iY2E1LTliM2EyY2Rk MDllZC5jcmwwHwYDVR0jBBgwFoAUBq42m6IiDFcFNj+gveDl/fPwaNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNh MmNkZDA5ZWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ZAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6Rdc5uFFN7hscrnvJSuMqQCxHKeNzBkvv52r43spdR4S04tsnT 0RzxyK9p9T7gmGfOnTUeFV1iRG/wzBPWe8ayurgNp2OGBLTSytfso8KTMjQn/62h vJZlH+MiILd3f38kL5eKxzqB9ZLcTtK1DtsblDePcswTJtTE1MEG6wuPaOpXxjYt ZToFsLhTNvsboOEPi1lPZ7UVPhgJVBPt8gKK7vnjwsOqnlPPPg7ZhXpT+Qzhvqfc hdw5TloszCLeptXiLu2fkIEmmJIc54MRaBt9UF84H1tiXTJ7L15eNMw8K5l4f5if 2JbSE4PdJo0/69UNsQOzRKpf4eSDm/H+oDk= -----END CERTIFICATE-----Generated at Fri Oct 10 14:11:58 2025 by rpki-client