$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/5d08b6cd-616d-3cda-affb-3753d328830d.roa File: 5d08b6cd-616d-3cda-affb-3753d328830d.roa (raw, json) Hash identifier: MigvYUykXfmA8cRczuhB0Kkw51e3jT43pPmllcxM88M= Subject key identifier: 35:23:F8:9F:BD:0A:83:F8:36:C0:B2:34:E7:37:F3:05:15:36:F1:B5 Certificate issuer: /CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d Certificate serial: 010D0C9F4328584B27618675ACCDC4CB3C5D1D00 Authority key identifier: 80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/5d08b6cd-616d-3cda-affb-3753d328830d.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 14874 IP address blocks: 2602:f836::/40 maxlen: 124 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:86:75:ac:cd:c4:cb:3c:5d:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=dc25ad11-f7c8-41ff-8314-9b9fcd7aadac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:26:b5:ab:48:cf:a0:12:69:75:44:1a:41:71: 36:d6:40:43:0c:b8:c0:d2:7b:20:5f:43:f5:b4:3b: 7a:44:29:18:4e:f0:01:8c:28:0f:f1:32:e8:75:21: e3:92:d5:52:9e:db:17:03:6f:a0:11:33:29:0a:4e: 9f:59:fc:25:f7:d8:f7:de:8e:34:ac:45:e9:16:0d: fd:9e:7a:d0:ab:a7:38:12:53:8f:f2:36:1d:60:78: 29:e9:55:0f:ad:5d:d4:6a:8d:59:a4:1f:a7:a9:d8: b7:ba:b6:1f:f2:8c:5b:96:14:8e:22:ff:bc:f8:34: e0:df:24:bb:65:4d:bb:05:60:3d:f8:19:3c:a6:57: cf:3f:5b:6a:59:ef:68:05:bb:b0:46:00:de:34:10: 23:8d:8a:62:f5:74:9e:95:97:72:1a:de:ca:a0:70: c8:07:23:c7:5e:82:e9:fe:bb:75:8f:62:a6:ca:07: 24:d0:ba:3b:10:78:19:36:30:bd:ed:da:61:a2:3a: eb:d8:a4:80:12:32:21:93:68:8a:80:90:21:25:65: da:17:2c:e4:9b:7c:00:b2:d7:b4:9b:01:8e:52:c5: 96:ff:3f:fb:51:97:eb:5f:34:e1:af:14:09:15:79: 80:ff:2e:e8:cf:f6:c2:bb:31:39:c7:8d:dd:6d:a9: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:23:F8:9F:BD:0A:83:F8:36:C0:B2:34:E7:37:F3:05:15:36:F1:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/5d08b6cd-616d-3cda-affb-3753d328830d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl X509v3 Authority Key Identifier: keyid:80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f836::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:33:e6:61:cd:4e:3b:b0:d2:72:5f:07:e5:a0:41:b1:7e:d4: 75:d4:fc:0e:1d:f9:ba:47:39:7f:c8:58:4c:77:77:63:3a:c7: e9:25:14:41:c0:66:fb:c5:6c:4b:98:92:29:f0:24:61:b5:08: 2c:0c:1c:7e:30:b5:81:e4:3c:c1:71:8a:ee:6a:7d:7c:f0:c9: 37:15:48:30:81:25:38:70:4a:66:aa:ef:c0:b6:ff:e6:dc:ee: b1:8f:dd:47:4b:2c:04:5c:37:d5:9f:c4:b8:0b:25:2e:f0:5f: c7:73:c2:d4:dc:96:ce:c6:eb:60:ae:9c:8d:a9:b7:d6:8d:7f: 36:09:95:a8:34:10:dc:84:6e:d8:a5:f0:85:06:5a:1a:18:39: 88:bd:49:b4:2a:9d:c7:72:60:c7:03:c0:9a:8a:13:8a:f4:e1: 7b:18:d0:19:06:52:34:c5:7c:f3:d5:36:da:ce:d7:90:2c:09: 4c:5f:83:bb:cb:51:f7:68:5b:28:c2:ec:33:47:0e:52:ed:3f: 50:0e:7f:f1:9d:54:5e:51:e8:c1:4b:0f:c7:d0:8c:90:1a:d6: b8:51:1f:e1:be:4f:7b:33:0b:15:7d:91:e4:32:4c:bd:93:9c: 77:e7:eb:b2:dd:06:87:fa:45:d3:1f:d2:38:8b:0e:8e:28:29: 31:7e:0e:ce -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsnYYZ1rM3EyzxdHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk0ZmNjYTgtZmNkNy00MzVlLWE0ZDEtYmQ5MjFkOTdj NTFkMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk ZGMyNWFkMTEtZjdjOC00MWZmLTgzMTQtOWI5ZmNkN2FhZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlia1q0jPoBJpdUQaQXE21kBDDLjA0nsgX0P1 tDt6RCkYTvABjCgP8TLodSHjktVSntsXA2+gETMpCk6fWfwl99j33o40rEXpFg39 nnrQq6c4ElOP8jYdYHgp6VUPrV3Uao1ZpB+nqdi3urYf8oxblhSOIv+8+DTg3yS7 ZU27BWA9+Bk8plfPP1tqWe9oBbuwRgDeNBAjjYpi9XSelZdyGt7KoHDIByPHXoLp /rt1j2Kmygck0Lo7EHgZNjC97dphojrr2KSAEjIhk2iKgJAhJWXaFyzkm3wAste0 mwGOUsWW/z/7UZfrXzThrxQJFXmA/y7oz/bCuzE5x43dbakbMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDUj+J+9CoP4NsCyNOc38wUVNvG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OTRm Y2NhOC1mY2Q3LTQzNWUtYTRkMS1iZDkyMWQ5N2M1MWQvNWQwOGI2Y2QtNjE2ZC0z Y2RhLWFmZmItMzc1M2QzMjg4MzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjk0ZmNjYTgtZmNkNy00MzVlLWE0 ZDEtYmQ5MjFkOTdjNTFkLzY5NGZjY2E4LWZjZDctNDM1ZS1hNGQxLWJkOTIxZDk3 YzUxZC5jcmwwHwYDVR0jBBgwFoAUgBVYnoVuXIAP+jk8xrIGqdJM65owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82OTRmY2NhOC1mY2Q3LTQzNWUtYTRkMS1iZDky MWQ5N2M1MWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4NgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJjPmYc1OO7DScl8H5aBBsX7UddT8Dh35ukc5f8hYTHd3YzrH6SUU QcBm+8VsS5iSKfAkYbUILAwcfjC1geQ8wXGK7mp9fPDJNxVIMIElOHBKZqrvwLb/ 5tzusY/dR0ssBFw31Z/EuAslLvBfx3PC1NyWzsbrYK6cjam31o1/NgmVqDQQ3IRu 2KXwhQZaGhg5iL1JtCqdx3JgxwPAmooTivThexjQGQZSNMV889U22s7XkCwJTF+D u8tR92hbKMLsM0cOUu0/UA5/8Z1UXlHowUsPx9CMkBrWuFEf4b5PezMLFX2R5DJM vZOcd+frst0Gh/pF0x/SOIsOjigpMX4Ozg== -----END CERTIFICATE-----Generated at Sat Oct 11 05:59:43 2025 by rpki-client