$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/7ca1b234-cb9f-3eac-9ac5-a53bb3cd6429.roa File: 7ca1b234-cb9f-3eac-9ac5-a53bb3cd6429.roa (raw, json) Hash identifier: IvVT6J1PvtrznmNE0NVMYm5HMRQwPMkx6oJY0xOrOtk= Subject key identifier: AF:36:BF:97:0C:55:57:CD:8E:9A:DC:7F:5F:BF:4A:F3:52:FE:DE:2B Certificate issuer: /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Certificate serial: 010D0C9F4328584B2ECE4CCC1936D605A649A680 Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/7ca1b234-cb9f-3eac-9ac5-a53bb3cd6429.roa Signing time: Sat 13 Sep 2025 16:50:33 +0000 ROA not before: Sat 13 Sep 2025 16:50:33 +0000 ROA not after: Fri 12 Dec 2025 17:50:33 +0000 asID: 40536 IP address blocks: 2602:f629::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:ce:4c:cc:19:36:d6:05:a6:49:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Validity Not Before: Sep 13 16:50:33 2025 GMT Not After : Dec 12 17:50:33 2025 GMT Subject: CN=f610ed5a-079d-48da-b66e-4e6f6b5d44b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:d6:2b:3d:25:5f:31:36:c0:e8:b3:ab:02: a9:23:e1:20:27:13:e8:26:2e:c0:9f:c6:9c:92:da: 27:0d:28:61:81:c2:46:bf:06:0b:be:7a:ee:13:a9: f7:6d:ab:2d:da:dc:ae:86:66:dc:e7:64:7f:25:35: ff:3d:dc:98:d8:b2:f4:1b:d3:38:34:50:eb:7d:2a: 9e:72:2c:cf:14:dd:ae:d1:56:e5:5b:52:98:a1:1f: 87:e1:17:9c:59:1a:c0:b2:bc:9c:38:04:a8:2d:a7: 2e:34:35:d6:34:fe:af:71:1d:a0:7b:ff:54:01:f6: 55:35:4c:36:2d:c2:5b:2d:eb:dd:cb:b9:ad:4c:eb: c4:3c:14:d6:48:1a:57:e0:42:81:ed:7a:05:32:7d: 31:54:00:9e:3a:56:ff:c8:e2:6f:51:95:5b:16:bb: 82:db:09:bd:52:ea:ae:e6:55:df:ff:45:45:61:b5: bd:4f:c6:2f:f0:a6:a4:a1:12:f9:e6:3a:4e:da:89: 95:11:a3:dd:bc:08:10:fc:66:f6:dd:67:1b:05:73: f0:60:74:58:e5:fa:8e:72:40:d7:df:09:9e:7c:e8: 01:43:dc:d3:d0:a2:4d:3d:73:ca:10:d1:bb:80:e8: 84:50:b8:46:9a:2b:db:be:c8:7d:3d:b2:10:88:10: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:36:BF:97:0C:55:57:CD:8E:9A:DC:7F:5F:BF:4A:F3:52:FE:DE:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/7ca1b234-cb9f-3eac-9ac5-a53bb3cd6429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl X509v3 Authority Key Identifier: keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer sbgp-ipAddrBlock: critical IPv6: 2602:f629::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8a:e5:05:00:8d:8a:0c:07:99:67:8c:f9:41:1e:72:24:a2: 5b:f0:d7:e1:19:db:e0:a8:c9:c1:04:f2:ca:80:f9:fa:bf:b1: 24:4d:fd:6d:a9:35:bb:66:5a:68:72:b4:5a:f3:be:19:05:2c: 84:25:af:1a:4a:f2:f0:1c:ad:e4:69:3d:9f:43:4c:48:81:95: 49:95:8a:69:3d:e0:df:fc:29:96:16:20:96:e7:80:30:1d:b9: 9d:87:f8:66:25:d7:b6:bc:0f:63:ec:fb:c1:9f:df:90:5d:de: c5:50:60:51:4e:50:7e:66:f5:3b:43:72:9e:69:96:88:bf:c1: b9:53:55:49:79:1e:45:6d:5b:d7:53:62:30:98:d2:ff:03:f6: 1d:90:c8:29:17:a6:c3:95:93:33:ac:7a:88:20:b3:c7:1a:ad: 86:d2:83:d8:b9:8f:b6:9f:3f:01:63:68:56:e5:5b:0e:87:a4: 40:75:1a:b8:ef:4b:72:2d:21:cb:b7:f1:a3:e8:21:e5:f5:56: a4:17:d4:96:68:99:d6:b7:58:e4:9f:4d:59:ab:46:3c:42:b0: 7b:4c:33:d3:1c:fd:38:dd:6c:2e:e9:4c:9e:4c:b4:6b:4d:e4: 24:b4:24:a1:0b:a8:c1:63:cb:dc:9d:3b:be:8d:df:59:a4:eb: 31:4d:48:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsuzkzMGTbWBaZJpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJlNDU5MTItZTZlMy00MDBjLWIwYmUtNGY2YzcwMDFm NWNiMB4XDTI1MDkxMzE2NTAzM1oXDTI1MTIxMjE3NTAzM1owLzEtMCsGA1UEAxMk ZjYxMGVkNWEtMDc5ZC00OGRhLWI2NmUtNGU2ZjZiNWQ0NGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBzWKz0lXzE2wOizqwKpI+EgJxPoJi7An8ac ktonDShhgcJGvwYLvnruE6n3bast2tyuhmbc52R/JTX/PdyY2LL0G9M4NFDrfSqe cizPFN2u0VblW1KYoR+H4RecWRrAsrycOASoLacuNDXWNP6vcR2ge/9UAfZVNUw2 LcJbLevdy7mtTOvEPBTWSBpX4EKB7XoFMn0xVACeOlb/yOJvUZVbFruC2wm9Uuqu 5lXf/0VFYbW9T8Yv8KakoRL55jpO2omVEaPdvAgQ/Gb23WcbBXPwYHRY5fqOckDX 3wmefOgBQ9zT0KJNPXPKENG7gOiEULhGmivbvsh9PbIQiBBkFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK82v5cMVVfNjprcf1+/SvNS/t4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0 NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZjNzAwMWY1Y2IvN2NhMWIyMzQtY2I5Zi0z ZWFjLTlhYzUtYTUzYmIzY2Q2NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDJlNDU5MTItZTZlMy00MDBjLWIw YmUtNGY2YzcwMDFmNWNiL2QyZTQ1OTEyLWU2ZTMtNDAwYy1iMGJlLTRmNmM3MDAx ZjVjYi5jcmwwHwYDVR0jBBgwFoAUqXP9VqxhWYP2vyHMtlE4hrEuIB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZj NzAwMWY1Y2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2KQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6K5QUAjYoMB5lnjPlBHnIkolvw1+EZ2+CoycEE8sqA+fq/sSRN /W2pNbtmWmhytFrzvhkFLIQlrxpK8vAcreRpPZ9DTEiBlUmVimk94N/8KZYWIJbn gDAduZ2H+GYl17a8D2Ps+8Gf35Bd3sVQYFFOUH5m9TtDcp5ploi/wblTVUl5HkVt W9dTYjCY0v8D9h2QyCkXpsOVkzOseoggs8carYbSg9i5j7afPwFjaFblWw6HpEB1 GrjvS3ItIcu38aPoIeX1VqQX1JZomda3WOSfTVmrRjxCsHtMM9Mc/TjdbC7pTJ5M tGtN5CS0JKELqMFjy9ydO76N31mk6zFNSNI= -----END CERTIFICATE-----Generated at Wed Oct 8 19:32:34 2025 by rpki-client