$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa File: 25dbca42-1fd0-38ab-852a-2e2b01909293.roa (raw, json) Hash identifier: Z/An3hakDiZmPLh8N9xfLt2y0WlsD5NixPS6gweKzJI= Subject key identifier: DF:2A:1E:3F:A4:93:15:F6:A6:40:3D:B0:2B:96:62:D6:EE:A0:14:F7 Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Certificate serial: 010D0C9F4328584B9E07A78C443261B636034700 Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 64289 IP address blocks: 2602:2ea::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a7:8c:44:32:61:b6:36:03:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=13097db7-e00e-409b-9846-bccdf0756bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:35:fe:e5:b8:83:d8:09:c7:e5:00:be:d4: e2:a9:2b:83:8c:c6:44:4e:e4:6e:20:1d:e0:4b:30: 46:2b:86:87:1f:9b:56:ca:d8:ef:6c:88:7e:a2:ea: b3:6c:66:33:b9:f0:a3:0b:40:37:a7:78:62:09:2a: ff:78:69:68:ff:22:fe:87:2e:80:29:f6:61:f1:b8: bd:b5:ca:29:72:9b:20:e5:3a:a4:87:73:24:5c:00: 99:91:6c:ce:7b:1f:c6:76:26:df:9d:1f:37:ad:c4: f1:3c:29:8f:2d:49:d6:d7:db:a1:0f:82:49:86:9d: b0:4b:9b:68:0a:c8:8d:a1:21:54:43:24:61:91:cb: a0:a4:19:63:6e:33:e8:39:62:e5:17:87:69:6c:2d: 61:30:c0:89:be:04:ca:e8:c6:14:d2:a7:de:c8:43: 08:aa:cb:51:58:2c:6f:b0:bc:35:9e:27:e6:88:3c: be:e3:9b:a8:63:c8:be:65:be:02:ac:55:b2:4b:e3: 9c:f5:49:73:c1:90:89:02:7a:32:e4:a4:dd:f9:0e: 38:ce:65:d0:0f:ad:6f:39:fd:6d:c1:98:62:6b:d5: b1:43:36:dd:0e:8d:1b:cf:34:4c:4d:4a:9e:fb:b4: 05:06:bd:8a:b8:30:11:e5:be:93:52:f9:a0:81:e6: 87:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2A:1E:3F:A4:93:15:F6:A6:40:3D:B0:2B:96:62:D6:EE:A0:14:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl X509v3 Authority Key Identifier: keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer sbgp-ipAddrBlock: critical IPv6: 2602:2ea::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:08:2c:58:36:b4:e2:cb:e2:62:75:f2:95:88:f6:ca:57:35: b6:fd:b1:75:45:6a:a9:d5:0b:5b:f3:78:14:f8:e0:31:19:4c: 85:0c:c0:06:90:b6:21:b1:b5:51:5d:a6:21:33:3f:c7:eb:b0: 3c:81:0d:6c:29:a0:9e:3d:7c:91:7b:16:17:7f:f0:cb:9d:d8: 37:33:c3:01:c0:ef:d0:3b:04:d1:70:8f:28:70:51:30:75:f4: c0:e0:1a:cc:dc:ae:c4:e6:9f:ab:07:dd:26:b7:19:4c:55:f8: eb:e2:2a:35:7a:11:45:e3:c0:2c:e6:94:32:6e:a2:1f:32:e3: a9:3a:cf:81:23:14:0e:eb:23:f5:e9:5f:63:a8:ce:c3:8a:8c: 66:f4:e8:84:e3:12:e7:58:44:e9:4e:66:64:e1:eb:b7:c6:65: 51:68:b8:87:87:53:1a:a6:d9:33:11:23:9d:81:c2:c8:c0:68: 58:7c:e6:b4:22:c7:4e:09:49:29:52:72:3c:f2:e6:5a:8f:6a: bb:48:0a:ed:d3:f7:30:3a:6d:45:61:0d:8d:fc:95:00:65:2c: 3b:10:f0:cf:81:55:f0:d5:4e:20:7a:d9:ef:7a:ba:0b:7e:15: 25:41:3e:1d:87:a7:9b:dd:1b:85:1d:d4:b6:39:53:b5:f4:03: 31:ed:77:5c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEueB6eMRDJhtjYDRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk MDgwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MTMwOTdkYjctZTAwZS00MDliLTk4NDYtYmNjZGYwNzU2YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn81/uW4g9gJx+UAvtTiqSuDjMZETuRuIB3g SzBGK4aHH5tWytjvbIh+ouqzbGYzufCjC0A3p3hiCSr/eGlo/yL+hy6AKfZh8bi9 tcopcpsg5Tqkh3MkXACZkWzOex/GdibfnR83rcTxPCmPLUnW19uhD4JJhp2wS5to CsiNoSFUQyRhkcugpBljbjPoOWLlF4dpbC1hMMCJvgTK6MYU0qfeyEMIqstRWCxv sLw1nifmiDy+45uoY8i+Zb4CrFWyS+Oc9UlzwZCJAnoy5KTd+Q44zmXQD61vOf1t wZhia9WxQzbdDo0bzzRMTUqe+7QFBr2KuDAR5b6TUvmggeaHoQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN8qHj+kkxX2pkA9sCuWYtbuoBT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvMjVkYmNhNDItMWZkMC0z OGFiLTg1MmEtMmUyYjAxOTA5MjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy MDlmMmQwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIC6gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADwgsWDa04sviYnXylYj2ylc1tv2xdUVqqdULW/N4FPjgMRlMhQzA BpC2IbG1UV2mITM/x+uwPIENbCmgnj18kXsWF3/wy53YNzPDAcDv0DsE0XCPKHBR MHX0wOAazNyuxOafqwfdJrcZTFX46+IqNXoRRePALOaUMm6iHzLjqTrPgSMUDusj 9elfY6jOw4qMZvTohOMS51hE6U5mZOHrt8ZlUWi4h4dTGqbZMxEjnYHCyMBoWHzm tCLHTglJKVJyPPLmWo9qu0gK7dP3MDptRWENjfyVAGUsOxDwz4FV8NVOIHrZ73q6 C34VJUE+HYenm90bhR3UtjlTtfQDMe13XA== -----END CERTIFICATE-----Generated at Mon Nov 3 14:50:14 2025 by rpki-client