$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/543fdf05-2561-38f9-bd60-07d28361b6a8.roa File: 543fdf05-2561-38f9-bd60-07d28361b6a8.roa (raw, json) Hash identifier: fKe0QYQvf1cFiu1mQRfXyWpCd9s0Cvb5OBdRBii7M74= Subject key identifier: F0:3E:1D:0A:1B:27:B1:A0:89:FB:37:20:E4:83:2D:B7:65:54:D5:05 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584B2A2C3F346F7859D5A05E3DC0 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/543fdf05-2561-38f9-bd60-07d28361b6a8.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 27385 IP address blocks: 2602:fdaa:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3f:34:6f:78:59:d5:a0:5e:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=12d81469-d2f7-4bc1-9760-9550a20eb075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:54:04:15:2b:01:da:65:70:23:1b:0c:7a: 86:ed:bb:40:e5:0d:d1:87:66:7f:62:8d:1e:86:16: f0:fc:cb:f5:41:07:94:40:96:ed:1f:55:03:54:ac: a2:17:a6:1d:3f:23:db:e9:66:14:b6:be:73:3c:06: 9c:29:b3:7a:4b:c1:c5:98:3b:4b:c3:2f:8a:1f:93: 03:a5:2f:07:72:50:0d:4e:46:cc:4a:bc:09:8b:3c: e4:14:85:5b:fa:5a:54:b8:ab:f9:5e:2b:4a:0b:54: 59:d3:a7:0d:c7:67:f5:3c:ac:cf:73:08:98:da:84: a0:5b:4e:22:91:50:2e:c7:1e:c6:9d:c6:b7:12:23: 15:a9:2f:ca:74:2c:a3:8e:72:08:eb:10:e9:e7:10: 71:50:a1:93:7c:b8:70:24:14:ea:21:42:d4:7e:15: 99:37:71:d7:d5:f8:e9:58:c3:4e:c3:3a:16:f4:96: 0e:80:52:14:52:6b:ad:68:4f:b3:6e:26:08:82:1f: aa:87:05:c3:de:c9:07:15:2e:cc:3f:d8:4f:b0:a7: 13:79:c5:88:7d:01:c0:56:ef:91:22:cc:2e:cb:24: c7:70:c5:37:87:e7:9a:db:ab:46:72:4a:17:d5:01: e4:5f:39:02:80:1a:51:1a:e3:9d:02:af:24:f5:92: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3E:1D:0A:1B:27:B1:A0:89:FB:37:20:E4:83:2D:B7:65:54:D5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/543fdf05-2561-38f9-bd60-07d28361b6a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:70::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6a:7f:04:8c:e0:72:b5:30:80:b1:15:30:57:6c:a5:3d:4f: 9a:a4:f0:1a:3f:f8:ac:ed:a2:97:31:e9:c0:09:35:bd:da:e9: 5c:51:25:ca:47:3d:a2:ee:a5:93:ea:6f:17:83:12:d1:76:1a: 7a:4a:35:da:2d:eb:c3:62:2a:a8:d2:0c:3c:62:26:97:5f:23: 43:54:a6:35:df:c5:0c:02:38:56:ae:af:0d:e3:69:e7:3b:62: 4a:4c:a7:74:99:32:31:b9:41:84:23:f5:99:b9:aa:09:71:17: 63:94:09:f6:68:4c:bf:e8:12:9f:7d:7b:7a:91:87:58:34:60: 73:b7:2c:ef:3f:47:59:ed:1d:18:ee:97:25:f8:60:7b:83:af: a6:90:f2:08:f3:36:45:e1:1c:83:eb:9a:10:4b:c3:93:ea:e4: 41:9c:4f:ce:cf:b0:9e:42:dd:6c:fe:b2:3f:e8:89:85:50:ed: cc:cb:98:47:62:c5:6a:34:75:ee:ea:30:35:c6:30:37:a1:a2: 16:03:00:4d:88:47:b2:79:d0:f1:d4:90:db:9f:70:b3:37:59: 4c:b4:c4:7f:df:c3:c3:64:0e:7d:3a:f1:fc:cc:7e:44:6d:53: b0:f8:3b:81:10:66:98:b7:15:31:cd:b0:e6:f6:74:9b:fb:16: 15:03:63:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsqLD80b3hZ1aBePcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MTJkODE0NjktZDJmNy00YmMxLTk3NjAtOTU1MGEyMGViMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouxUBBUrAdplcCMbDHqG7btA5Q3Rh2Z/Yo0e hhbw/Mv1QQeUQJbtH1UDVKyiF6YdPyPb6WYUtr5zPAacKbN6S8HFmDtLwy+KH5MD pS8HclANTkbMSrwJizzkFIVb+lpUuKv5XitKC1RZ06cNx2f1PKzPcwiY2oSgW04i kVAuxx7Gnca3EiMVqS/KdCyjjnII6xDp5xBxUKGTfLhwJBTqIULUfhWZN3HX1fjp WMNOwzoW9JYOgFIUUmutaE+zbiYIgh+qhwXD3skHFS7MP9hPsKcTecWIfQHAVu+R IswuyyTHcMU3h+ea26tGckoX1QHkXzkCgBpRGuOdAq8k9ZLKZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPA+HQobJ7Ggifs3IOSDLbdlVNUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvNTQzZmRmMDUtMjU2MS0z OGY5LWJkNjAtMDdkMjgzNjFiNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgBw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVqfwSM4HK1MICxFTBXbKU9T5qk8Bo/+Kztopcx6cAJNb3a6VxR JcpHPaLupZPqbxeDEtF2GnpKNdot68NiKqjSDDxiJpdfI0NUpjXfxQwCOFaurw3j aec7YkpMp3SZMjG5QYQj9Zm5qglxF2OUCfZoTL/oEp99e3qRh1g0YHO3LO8/R1nt HRjulyX4YHuDr6aQ8gjzNkXhHIPrmhBLw5Pq5EGcT87PsJ5C3Wz+sj/oiYVQ7czL mEdixWo0de7qMDXGMDehohYDAE2IR7J50PHUkNufcLM3WUy0xH/fw8NkDn068fzM fkRtU7D4O4EQZpi3FTHNsOb2dJv7FhUDY3Y= -----END CERTIFICATE-----Generated at Fri Oct 10 20:27:01 2025 by rpki-client