$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/2ad4a6f5-638c-3c13-b03d-4ce273db8b3c.roa File: 2ad4a6f5-638c-3c13-b03d-4ce273db8b3c.roa (raw, json) Hash identifier: HOioITmhVJepvKYDrY0ckMmJkR3pzJ4dazTsrejmN28= Subject key identifier: 43:C3:13:C6:B6:0C:E9:4B:B6:92:E2:1F:5A:71:18:BC:3C:E7:08:E4 Certificate issuer: /CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6 Certificate serial: 010D0C9F4328584B7719A54BEAA485A8C8978900 Authority key identifier: 9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/2ad4a6f5-638c-3c13-b03d-4ce273db8b3c.roa Signing time: Thu 09 Oct 2025 14:20:34 +0000 ROA not before: Thu 09 Oct 2025 14:20:34 +0000 ROA not after: Wed 07 Jan 2026 15:20:34 +0000 asID: 20473 IP address blocks: 2602:f70f:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:19:a5:4b:ea:a4:85:a8:c8:97:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6 Validity Not Before: Oct 9 14:20:34 2025 GMT Not After : Jan 7 15:20:34 2026 GMT Subject: CN=4112c70a-a0ed-4b2a-a434-fe25d7da44af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ea:be:83:b3:b0:30:89:d0:72:2b:a4:04:95: 84:85:7c:8c:13:62:48:22:95:a3:1a:92:02:1b:b1: 42:22:d1:4c:b1:0c:f1:c1:09:1c:d8:26:52:58:f7: f5:cd:5c:a4:31:8d:3d:25:f9:e9:c7:b4:1b:7a:8e: 9b:b9:02:f0:a9:5f:71:40:d0:aa:01:f8:9e:ce:94: dc:79:77:dc:28:73:30:d8:ee:27:39:90:dc:ac:be: 91:0a:67:d8:14:2e:2a:e0:c7:6d:3a:12:fe:06:c7: 35:2f:2b:ec:6c:75:19:ca:8c:0b:a4:84:6c:b5:ab: 54:2d:4e:63:cd:1b:85:b0:5f:64:81:d2:50:44:e1: 8d:2b:36:bf:68:97:bb:d1:84:32:f1:f9:db:56:11: c1:dd:71:55:ef:95:e3:cd:5f:1c:b9:8c:2f:be:99: f5:0a:52:3e:15:3e:25:d2:23:c8:a4:1b:d4:72:7f: a5:6a:70:17:2f:bc:49:3a:1f:50:29:e4:e9:32:45: 32:6f:32:a7:c4:1c:26:9a:67:35:40:99:a1:86:6c: 90:55:08:b1:9d:f5:de:24:d0:8e:19:f0:5a:af:01: 42:0c:42:d3:70:60:72:4d:b4:a0:3d:9a:34:ba:f6: a6:a7:2a:f7:5c:57:a6:3a:8d:3b:8a:51:97:2f:34: cd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C3:13:C6:B6:0C:E9:4B:B6:92:E2:1F:5A:71:18:BC:3C:E7:08:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/2ad4a6f5-638c-3c13-b03d-4ce273db8b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl X509v3 Authority Key Identifier: keyid:9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer sbgp-ipAddrBlock: critical IPv6: 2602:f70f:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ef:b8:b2:68:90:73:e1:1d:c3:af:6f:dd:56:c1:70:c9:79: 22:74:d2:4a:1d:85:f0:04:c6:9b:14:8b:a4:82:d5:ec:fb:cf: 87:78:c6:96:97:05:8f:69:e9:bf:5e:66:78:53:b0:80:43:d1: d5:90:41:11:a7:68:0e:27:34:28:45:a8:50:ab:9f:2b:c0:59: 9a:a6:90:4a:03:71:f7:2c:0b:0a:a2:a0:f9:a0:01:5d:4f:14: f1:dc:32:66:9d:6a:8c:ba:b0:1c:00:18:de:68:f1:d8:45:03: 1a:80:04:b2:e8:ac:0c:0c:68:e7:79:6c:69:c8:cf:9c:a3:17: 6c:db:70:26:ac:b5:9f:4d:e0:18:bb:a1:9d:3f:14:c5:6e:60: 11:0f:7e:d2:a2:95:f6:a5:b0:3b:f1:8f:fd:26:c8:1d:10:e7: c7:7c:46:bd:bc:24:53:68:fa:c3:13:a0:0b:91:80:80:68:36: f3:2f:dc:54:9c:2b:96:21:a6:2b:7b:ae:41:58:5a:cd:5e:5e: 01:29:de:42:9f:aa:f0:1f:bd:dd:86:5a:60:fb:45:d7:af:7e: 5f:98:df:7b:71:aa:19:78:0d:58:ed:72:c0:f8:a9:0b:f2:68: 22:ed:82:6d:08:48:2f:0e:04:78:f3:a1:db:34:c4:b2:6a:2e: 04:bc:0d:a3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt3GaVL6qSFqMiXiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2Mzk1NDctNjlkOS00Mjg0LWI5YjEtZWY2Y2Q2NTQy YWE2MB4XDTI1MTAwOTE0MjAzNFoXDTI2MDEwNzE1MjAzNFowLzEtMCsGA1UEAxMk NDExMmM3MGEtYTBlZC00YjJhLWE0MzQtZmUyNWQ3ZGE0NGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOq+g7OwMInQciukBJWEhXyME2JIIpWjGpIC G7FCItFMsQzxwQkc2CZSWPf1zVykMY09Jfnpx7Qbeo6buQLwqV9xQNCqAfiezpTc eXfcKHMw2O4nOZDcrL6RCmfYFC4q4MdtOhL+Bsc1LyvsbHUZyowLpIRstatULU5j zRuFsF9kgdJQROGNKza/aJe70YQy8fnbVhHB3XFV75XjzV8cuYwvvpn1ClI+FT4l 0iPIpBvUcn+lanAXL7xJOh9QKeTpMkUybzKnxBwmmmc1QJmhhmyQVQixnfXeJNCO GfBarwFCDELTcGByTbSgPZo0uvampyr3XFemOo07ilGXLzTNiwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEPDE8a2DOlLtpLiH1pxGLw85wjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTYz OTU0Ny02OWQ5LTQyODQtYjliMS1lZjZjZDY1NDJhYTYvMmFkNGE2ZjUtNjM4Yy0z YzEzLWIwM2QtNGNlMjczZGI4YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE2Mzk1NDctNjlkOS00Mjg0LWI5 YjEtZWY2Y2Q2NTQyYWE2L2JhNjM5NTQ3LTY5ZDktNDI4NC1iOWIxLWVmNmNkNjU0 MmFhNi5jcmwwHwYDVR0jBBgwFoAUnarYqyjXxlnFqljk14iVlj+1WYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTYzOTU0Ny02OWQ5LTQyODQtYjliMS1lZjZj ZDY1NDJhYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3DwEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAK++4smiQc+Edw69v3VbBcMl5InTSSh2F8ATGmxSLpILV7PvPh3jG lpcFj2npv15meFOwgEPR1ZBBEadoDic0KEWoUKufK8BZmqaQSgNx9ywLCqKg+aAB XU8U8dwyZp1qjLqwHAAY3mjx2EUDGoAEsuisDAxo53lsacjPnKMXbNtwJqy1n03g GLuhnT8UxW5gEQ9+0qKV9qWwO/GP/SbIHRDnx3xGvbwkU2j6wxOgC5GAgGg28y/c VJwrliGmK3uuQVhazV5eASneQp+q8B+93YZaYPtF169+X5jfe3GqGXgNWO1ywPip C/JoIu2CbQhILw4EePOh2zTEsmouBLwNow== -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:37 2025 by rpki-client