$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa File: cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa (raw, json) Hash identifier: rzSfwu7RyPsmuQpdPsO3sJm/f30DDzdJoRUShyKSSY0= Subject key identifier: B5:D7:96:99:68:A2:E4:85:4D:DE:E8:60:0C:BC:A9:C0:BC:53:2B:F0 Certificate issuer: /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Certificate serial: 010D0C9F4328584B2ECEF0183429971274C4CFC0 Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa Signing time: Sat 13 Sep 2025 16:51:50 +0000 ROA not before: Sat 13 Sep 2025 16:51:50 +0000 ROA not after: Fri 12 Dec 2025 17:51:50 +0000 asID: 40536 IP address blocks: 2602:f629:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:ce:f0:18:34:29:97:12:74:c4:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Validity Not Before: Sep 13 16:51:50 2025 GMT Not After : Dec 12 17:51:50 2025 GMT Subject: CN=350420fd-35d2-4a28-b721-c980a2db81b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:65:0e:a1:46:75:56:20:ac:f2:e8:4c:06:63: 46:08:4d:f4:88:84:ed:78:49:b3:70:9f:54:b4:8c: 15:d3:c4:c8:f3:a7:1e:69:34:82:95:df:b2:a9:ca: a4:8a:5e:d5:22:2f:cd:ed:58:30:6a:42:d7:89:57: dd:73:76:8d:d3:1f:5a:6c:ba:ee:06:17:64:f3:b0: 81:46:64:3c:ae:94:6a:80:c6:d3:78:c1:c5:35:fe: f7:61:04:f5:28:13:f2:ed:b6:7e:9a:44:08:84:76: 53:90:4e:ac:2d:cd:ab:9e:ad:2a:85:21:95:1a:8d: 3d:0d:4c:4f:8c:74:b6:ae:b5:be:c5:d0:ad:1d:40: 79:d5:86:a2:c7:a2:0d:be:0a:91:31:64:f7:1a:b4: 37:12:26:10:c5:da:f8:e0:28:f7:f1:7f:09:70:74: 7d:bc:59:bb:d6:e9:cf:9a:fb:13:07:58:72:e6:a2: 85:85:8a:08:b0:c4:c1:d1:91:e8:5b:0c:16:63:ce: 4e:c7:52:a6:1e:ff:4d:cc:bc:ca:75:f3:a9:88:39: f7:e1:ad:85:50:72:9e:e1:72:8f:2e:8b:05:94:fc: 4b:fd:f4:c7:b0:fe:54:e2:10:c8:d8:be:fd:23:74: 77:2b:1b:31:bc:bd:10:93:2a:19:18:87:65:22:da: 85:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D7:96:99:68:A2:E4:85:4D:DE:E8:60:0C:BC:A9:C0:BC:53:2B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl X509v3 Authority Key Identifier: keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer sbgp-ipAddrBlock: critical IPv6: 2602:f629:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:47:81:3b:fd:c1:2c:7c:98:aa:bb:a3:f0:30:28:95:82:52: 10:78:1a:69:3f:bb:11:19:da:2d:63:31:ae:18:78:ff:c0:d6: 09:f8:d6:7e:74:96:8c:49:7b:36:bb:55:ba:45:2d:d1:0a:30: e6:2b:f2:86:f8:e8:45:8a:68:0a:cb:81:6d:d7:e9:4e:65:f2: 42:a6:13:5d:52:47:ac:af:6e:a1:3f:51:d8:46:6d:33:1d:8e: f8:12:16:ac:a8:14:bb:66:55:e6:07:77:e8:8b:1d:46:09:27: 5f:b9:d6:10:d8:36:b3:f5:65:05:5a:4a:15:a5:ce:b0:ca:c4: c1:7d:ac:41:fe:48:17:15:73:e5:2f:15:22:37:61:7b:73:b3: 3c:d0:0b:c0:ad:a5:78:12:32:e3:1b:94:73:ff:83:b5:e2:a3: e2:ad:25:6c:de:c2:b8:08:99:09:d7:8a:6d:03:ff:a4:0f:39: 79:33:a6:22:d8:64:ff:4c:99:c1:b5:07:00:fc:95:a3:10:3f: d0:54:d3:b7:68:c2:12:50:56:24:c2:dd:93:56:7c:b1:8f:51: 99:5b:a7:ae:be:e8:26:d7:ee:97:6a:70:f3:78:ef:40:fa:9a: 15:6d:43:8d:c9:9e:55:e9:58:9f:10:90:1a:5c:c0:d0:0b:28: 2a:b7:7d:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsuzvAYNCmXEnTEz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJlNDU5MTItZTZlMy00MDBjLWIwYmUtNGY2YzcwMDFm NWNiMB4XDTI1MDkxMzE2NTE1MFoXDTI1MTIxMjE3NTE1MFowLzEtMCsGA1UEAxMk MzUwNDIwZmQtMzVkMi00YTI4LWI3MjEtYzk4MGEyZGI4MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmUOoUZ1ViCs8uhMBmNGCE30iITteEmzcJ9U tIwV08TI86ceaTSCld+yqcqkil7VIi/N7VgwakLXiVfdc3aN0x9abLruBhdk87CB RmQ8rpRqgMbTeMHFNf73YQT1KBPy7bZ+mkQIhHZTkE6sLc2rnq0qhSGVGo09DUxP jHS2rrW+xdCtHUB51Yaix6INvgqRMWT3GrQ3EiYQxdr44Cj38X8JcHR9vFm71unP mvsTB1hy5qKFhYoIsMTB0ZHoWwwWY85Ox1KmHv9NzLzKdfOpiDn34a2FUHKe4XKP LosFlPxL/fTHsP5U4hDI2L79I3R3KxsxvL0QkyoZGIdlItqFiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLXXlploouSFTd7oYAy8qcC8UyvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0 NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZjNzAwMWY1Y2IvY2Y5MWNhMTEtNDQzZC0z Y2Y4LWJjMzAtNmJiOTZlMzZkMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDJlNDU5MTItZTZlMy00MDBjLWIw YmUtNGY2YzcwMDFmNWNiL2QyZTQ1OTEyLWU2ZTMtNDAwYy1iMGJlLTRmNmM3MDAx ZjVjYi5jcmwwHwYDVR0jBBgwFoAUqXP9VqxhWYP2vyHMtlE4hrEuIB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZj NzAwMWY1Y2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2KQAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHdHgTv9wSx8mKq7o/AwKJWCUhB4Gmk/uxEZ2i1jMa4YeP/A1gn4 1n50loxJeza7VbpFLdEKMOYr8ob46EWKaArLgW3X6U5l8kKmE11SR6yvbqE/UdhG bTMdjvgSFqyoFLtmVeYHd+iLHUYJJ1+51hDYNrP1ZQVaShWlzrDKxMF9rEH+SBcV c+UvFSI3YXtzszzQC8CtpXgSMuMblHP/g7Xio+KtJWzewrgImQnXim0D/6QPOXkz piLYZP9MmcG1BwD8laMQP9BU07dowhJQViTC3ZNWfLGPUZlbp66+6CbX7pdqcPN4 70D6mhVtQ43JnlXpWJ8QkBpcwNALKCq3fWw= -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:18 2025 by rpki-client