$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/c1bfceac-c1ef-3bc8-9417-6ee48577ed30.roa File: c1bfceac-c1ef-3bc8-9417-6ee48577ed30.roa (raw, json) Hash identifier: E4TPJg7CQ71jCddlSp+D7c4OnYIvXf9VaOGekKmllvQ= Subject key identifier: 14:7B:F1:88:E6:C1:07:50:32:EE:5F:B3:91:EC:02:F2:84:6E:50:90 Certificate issuer: /CN=b54185ec-11f3-4557-af8b-4c967c5d4ebb Certificate serial: 010D0C9F4328584B48ACCF6764257C9CD9AF3240 Authority key identifier: 3E:76:DA:0B:E1:8C:CA:7A:86:7F:FA:A2:72:AD:63:36:B6:70:EB:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/c1bfceac-c1ef-3bc8-9417-6ee48577ed30.roa Signing time: Mon 22 Sep 2025 23:14:06 +0000 ROA not before: Mon 22 Sep 2025 23:14:06 +0000 ROA not after: Mon 22 Dec 2025 00:14:06 +0000 asID: 402003 IP address blocks: 2602:f54f::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/b54185ec-11f3-4557-af8b-4c967c5d4ebb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/b54185ec-11f3-4557-af8b-4c967c5d4ebb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:ac:cf:67:64:25:7c:9c:d9:af:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b54185ec-11f3-4557-af8b-4c967c5d4ebb Validity Not Before: Sep 22 23:14:06 2025 GMT Not After : Dec 22 00:14:06 2025 GMT Subject: CN=3a3e8953-e50d-4bab-84ca-15b644ff0ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:17:98:51:4d:f4:41:1f:1f:37:5b:1e:87:7d: 33:c3:b6:cc:0f:8c:a7:c1:6e:92:0e:f0:d1:68:20: d0:a9:4a:7d:dd:a7:54:98:0d:65:4d:bc:3e:14:3b: 28:cc:9e:cc:94:af:5f:af:c6:29:45:8c:73:bc:80: 1e:47:c9:ba:f3:0c:21:0e:34:1d:15:e2:9a:0c:b3: de:f3:a8:94:ef:92:56:48:ad:9d:fe:cf:f1:03:ef: 75:89:19:87:77:ac:40:82:93:44:50:18:c6:01:81: a9:31:d1:d4:ce:5e:3c:4c:a2:07:28:29:86:8b:ee: 23:55:df:d5:86:6c:b8:6a:f3:16:22:75:e9:52:ba: 7b:68:e3:2b:6a:36:d4:f5:66:71:99:e8:aa:a4:d5: 83:c8:25:66:b2:17:d7:9d:58:2c:ea:b2:e5:02:69: d1:07:e6:1f:ef:11:91:c6:b1:ed:2c:6d:55:7e:8c: a7:ac:87:e1:39:22:ea:9e:e6:7b:c5:6d:fe:ac:2d: 1e:d3:12:7b:e7:4c:67:a5:43:70:77:a7:dc:76:87: fe:08:2c:7f:e9:5d:57:4a:a5:95:17:63:cd:d9:b7: 23:5f:b3:cf:2c:99:ad:2a:11:14:27:c6:2f:6b:21: 43:76:99:13:4b:da:cd:10:15:23:7b:11:88:d4:b1: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7B:F1:88:E6:C1:07:50:32:EE:5F:B3:91:EC:02:F2:84:6E:50:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/c1bfceac-c1ef-3bc8-9417-6ee48577ed30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/b54185ec-11f3-4557-af8b-4c967c5d4ebb.crl X509v3 Authority Key Identifier: keyid:3E:76:DA:0B:E1:8C:CA:7A:86:7F:FA:A2:72:AD:63:36:B6:70:EB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb.cer sbgp-ipAddrBlock: critical IPv6: 2602:f54f::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:36:93:de:23:86:3c:02:c5:c7:29:cb:78:2e:b9:e7:1c:07: 19:24:ee:1a:e8:56:e8:ba:88:c6:1a:6f:82:68:0e:dd:a4:aa: 1a:7d:86:c9:55:0a:a6:16:6f:8a:71:33:65:2d:b5:46:5f:09: 9d:95:61:d1:e3:5a:6e:1e:12:77:3f:7b:6e:53:f5:28:0d:4a: 54:ea:53:5e:40:56:cd:26:33:c2:3c:1c:f9:92:24:e1:55:11: 23:18:cb:24:f8:10:3a:7d:09:3a:f0:a3:f5:fb:a8:0d:6f:be: d8:1a:78:b7:1f:76:96:46:57:05:a4:05:ef:73:08:57:af:33: c3:04:1a:9e:66:e7:8a:19:0f:24:53:ef:de:67:3f:72:f9:92: 29:c9:90:6d:2e:a4:da:3f:f4:97:5f:10:1c:21:93:24:6b:3e: a6:81:e2:7b:eb:01:c1:e1:94:e2:d1:26:00:9f:c3:46:01:8e: 6f:6b:55:79:40:4a:fd:a5:a9:ab:4f:d7:28:bc:b8:79:f6:aa: a6:6e:8d:b2:54:0d:12:b4:42:c1:32:79:78:da:1f:bd:d4:69: 34:ed:07:73:c1:61:bf:72:fe:49:2e:cd:7a:d2:12:a6:29:a7: b8:86:c5:5c:8e:c3:a7:32:b6:9e:07:69:6e:54:3f:ab:46:f5: 9a:65:93:9b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtIrM9nZCV8nNmvMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU0MTg1ZWMtMTFmMy00NTU3LWFmOGItNGM5NjdjNWQ0 ZWJiMB4XDTI1MDkyMjIzMTQwNloXDTI1MTIyMjAwMTQwNlowLzEtMCsGA1UEAxMk M2EzZTg5NTMtZTUwZC00YmFiLTg0Y2EtMTViNjQ0ZmYwZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzheYUU30QR8fN1seh30zw7bMD4ynwW6SDvDR aCDQqUp93adUmA1lTbw+FDsozJ7MlK9fr8YpRYxzvIAeR8m68wwhDjQdFeKaDLPe 86iU75JWSK2d/s/xA+91iRmHd6xAgpNEUBjGAYGpMdHUzl48TKIHKCmGi+4jVd/V hmy4avMWInXpUrp7aOMrajbU9WZxmeiqpNWDyCVmshfXnVgs6rLlAmnRB+Yf7xGR xrHtLG1VfoynrIfhOSLqnuZ7xW3+rC0e0xJ750xnpUNwd6fcdof+CCx/6V1XSqWV F2PN2bcjX7PPLJmtKhEUJ8YvayFDdpkTS9rNEBUjexGI1LF9iQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBR78YjmwQdQMu5fs5HsAvKEblCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iNTQx ODVlYy0xMWYzLTQ1NTctYWY4Yi00Yzk2N2M1ZDRlYmIvYzFiZmNlYWMtYzFlZi0z YmM4LTk0MTctNmVlNDg1NzdlZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjU0MTg1ZWMtMTFmMy00NTU3LWFm OGItNGM5NjdjNWQ0ZWJiL2I1NDE4NWVjLTExZjMtNDU1Ny1hZjhiLTRjOTY3YzVk NGViYi5jcmwwHwYDVR0jBBgwFoAUPnbaC+GMynqGf/qicq1jNrZw69MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iNTQxODVlYy0xMWYzLTQ1NTctYWY4Yi00Yzk2 N2M1ZDRlYmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1TwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWzaT3iOGPALFxynLeC655xwHGSTuGuhW6LqIxhpvgmgO3aSqGn2G yVUKphZvinEzZS21Rl8JnZVh0eNabh4Sdz97blP1KA1KVOpTXkBWzSYzwjwc+ZIk 4VURIxjLJPgQOn0JOvCj9fuoDW++2Bp4tx92lkZXBaQF73MIV68zwwQanmbnihkP JFPv3mc/cvmSKcmQbS6k2j/0l18QHCGTJGs+poHie+sBweGU4tEmAJ/DRgGOb2tV eUBK/aWpq0/XKLy4efaqpm6NslQNErRCwTJ5eNofvdRpNO0Hc8Fhv3L+SS7NetIS pimnuIbFXI7DpzK2ngdpblQ/q0b1mmWTmw== -----END CERTIFICATE-----Generated at Wed Oct 8 19:30:32 2025 by rpki-client