$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/1e6eef07-a4ae-3176-9245-ab900ddfc551.roa File: 1e6eef07-a4ae-3176-9245-ab900ddfc551.roa (raw, json) Hash identifier: d7nKVWzIORIloi9Zy6/vHsxlEOYC9LZ3BZ1WRxIdGCM= Subject key identifier: F9:14:DD:54:79:10:D1:3B:5C:3F:B8:99:86:69:BD:F7:86:1B:69:44 Certificate issuer: /CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Certificate serial: 010D0C9F4328584B5C6CB908F50C23654B3D8480 Authority key identifier: 79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/1e6eef07-a4ae-3176-9245-ab900ddfc551.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 401454 IP address blocks: 2602:f647::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b9:08:f5:0c:23:65:4b:3d:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=b5be4a2b-bccf-4555-ad0f-20e1e8bccbad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c5:7d:90:fd:09:29:c8:82:cb:c7:c3:cf:54: 4e:b5:09:be:9a:3c:5e:e4:b7:9c:43:07:a1:04:a4: 6c:1c:22:af:b6:5f:54:fc:06:c6:44:ef:66:e3:52: ff:f6:ab:75:c0:d3:88:ee:05:71:b2:6d:76:7c:20: b7:6c:df:c4:1f:29:78:bf:ec:c2:f1:4c:9b:6c:1c: 93:4a:06:7e:dd:3c:92:54:5a:1f:31:51:62:1a:de: c5:e2:49:0e:ff:c2:e4:d6:6f:ff:bc:7e:f9:fe:88: 85:f9:9a:41:09:db:b1:48:aa:6a:99:b9:d2:e0:54: b4:fd:77:67:4a:8a:48:d1:c9:c7:46:db:44:89:eb: 59:2d:00:1d:ca:ca:ec:7a:69:d3:0f:0c:dc:6b:e2: 50:d6:db:bd:30:8c:ef:5f:79:5e:02:fa:9e:5e:8c: 67:00:44:e4:1c:46:2f:8f:73:f9:18:e8:ec:b0:b7: 26:c8:b5:00:6d:3b:f6:5f:f5:22:e9:15:81:4d:cf: f5:29:83:0a:65:cf:7c:6e:43:81:b6:c8:0b:cf:d9: 85:8e:66:69:5c:d3:ed:fb:f0:03:0a:f0:9c:38:0f: 06:61:12:96:c4:b7:30:bf:db:a0:61:4b:d4:fc:3a: f3:c6:a1:b2:37:78:4b:aa:14:11:11:1c:41:74:02: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:14:DD:54:79:10:D1:3B:5C:3F:B8:99:86:69:BD:F7:86:1B:69:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/1e6eef07-a4ae-3176-9245-ab900ddfc551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl X509v3 Authority Key Identifier: keyid:79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer sbgp-ipAddrBlock: critical IPv6: 2602:f647::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b9:4f:c6:14:99:2d:2a:af:5e:03:4f:ed:8a:d7:7b:fe:9d: 11:dc:6a:81:36:a6:5e:0f:13:b8:00:18:c2:cd:f1:d4:65:21: 82:26:3b:50:a1:91:cd:56:a5:bb:ee:a3:b4:71:97:64:f6:4c: a1:d4:40:f5:3c:a5:83:9e:6a:c4:42:0f:a1:7f:55:33:3a:b9: bd:94:2e:41:ff:da:ab:f2:19:0a:36:31:72:5b:f6:5d:c5:d4: 08:e5:ac:55:ec:6c:9a:1a:03:33:b0:e0:52:b8:2c:77:38:a8: 07:fe:18:66:44:a4:9d:50:b0:48:06:60:0e:55:7e:0d:b3:05: f1:2d:37:fc:06:b1:2a:65:3a:55:e5:79:7f:c9:91:b6:64:c1: e9:58:28:31:ff:52:93:da:65:08:95:3e:c3:fb:51:55:2e:d2: a6:13:d8:e2:0c:1e:8d:60:c0:ac:c3:93:92:b4:70:2e:f4:02: 2f:57:a7:57:0d:64:a1:e6:e7:f8:15:8e:d0:19:2d:86:d1:f6: de:43:82:44:3b:ba:80:3c:2f:75:2f:b3:d6:8b:76:a1:6d:45: 47:85:cb:45:2d:a2:3a:5d:32:a3:25:67:a0:09:d1:ce:ca:f9: f0:04:68:12:f7:a0:5f:d7:fb:96:20:a4:30:92:34:35:ed:0c: 99:b6:98:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtcbLkI9QwjZUs9hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YTQzM2YtZDBiYi00ZWE5LTg1ZGEtNTJjNGQ5MDMx N2M2MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YjViZTRhMmItYmNjZi00NTU1LWFkMGYtMjBlMWU4YmNjYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28V9kP0JKciCy8fDz1ROtQm+mjxe5LecQweh BKRsHCKvtl9U/AbGRO9m41L/9qt1wNOI7gVxsm12fCC3bN/EHyl4v+zC8UybbByT SgZ+3TySVFofMVFiGt7F4kkO/8Lk1m//vH75/oiF+ZpBCduxSKpqmbnS4FS0/Xdn SopI0cnHRttEietZLQAdysrsemnTDwzca+JQ1tu9MIzvX3leAvqeXoxnAETkHEYv j3P5GOjssLcmyLUAbTv2X/Ui6RWBTc/1KYMKZc98bkOBtsgLz9mFjmZpXNPt+/AD CvCcOA8GYRKWxLcwv9ugYUvU/DrzxqGyN3hLqhQRERxBdAKPUQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPkU3VR5ENE7XD+4mYZpvfeGG2lEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ODlh NDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkwMzE3YzYvMWU2ZWVmMDctYTRhZS0z MTc2LTkyNDUtYWI5MDBkZGZjNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTg5YTQzM2YtZDBiYi00ZWE5LTg1 ZGEtNTJjNGQ5MDMxN2M2LzU4OWE0MzNmLWQwYmItNGVhOS04NWRhLTUyYzRkOTAz MTdjNi5jcmwwHwYDVR0jBBgwFoAUeWAivjNNGmzb562ED3BKt+mHa/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0 ZDkwMzE3YzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2RwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQrlPxhSZLSqvXgNP7YrXe/6dEdxqgTamXg8TuAAYws3x1GUhgiY7 UKGRzValu+6jtHGXZPZModRA9Tylg55qxEIPoX9VMzq5vZQuQf/aq/IZCjYxclv2 XcXUCOWsVexsmhoDM7DgUrgsdzioB/4YZkSknVCwSAZgDlV+DbMF8S03/AaxKmU6 VeV5f8mRtmTB6VgoMf9Sk9plCJU+w/tRVS7SphPY4gwejWDArMOTkrRwLvQCL1en Vw1koebn+BWO0BkthtH23kOCRDu6gDwvdS+z1ot2oW1FR4XLRS2iOl0yoyVnoAnR zsr58ARoEvegX9f7liCkMJI0Ne0MmbaYcg== -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:29 2025 by rpki-client