$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa File: 3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa (raw, json) Hash identifier: kEYSPHHtP4jYeSZjkVkHmoaTn2S5lcvUHo2wDICAMYE= Subject key identifier: 6A:40:2D:D0:0D:00:96:9D:D2:F3:40:EE:13:CA:DB:98:C8:5C:DB:B0 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584B7DECAE1DF46BD98522F7CE00 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 396952 IP address blocks: 2602:fec2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ae:1d:f4:6b:d9:85:22:f7:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=d0302672-fbca-4c4e-baae-4fbd3f46279e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:28:b4:b5:1e:e4:7d:4c:ee:51:82:d8:3d: d6:ca:a9:64:51:d2:bf:73:12:3c:f5:23:e9:32:0e: 5a:b6:ca:93:f5:3e:4c:f4:4d:b7:24:6d:5b:38:92: 4a:aa:93:c0:61:4e:64:69:44:7a:f1:f5:c4:11:eb: 63:e5:fc:e9:7b:ac:07:5e:96:da:70:ae:54:4c:5b: 71:83:14:68:9e:6f:39:e0:c8:19:f2:fa:f5:d3:b1: d0:a7:52:fb:2d:be:68:cc:b8:c7:84:30:ff:cd:9d: b3:71:5f:54:35:17:59:a4:ab:65:5d:5b:f0:d0:db: 5a:2c:7c:31:d1:42:98:f9:97:62:58:36:d3:fa:a5: 04:5a:cc:53:89:b0:e5:c5:d8:f5:12:45:db:9e:a0: 3f:3e:13:6a:42:8b:67:2a:44:f7:d6:da:f0:68:2a: 5b:55:73:03:f5:ae:ed:36:ef:ca:a4:68:aa:ac:2d: 4a:f4:06:55:93:70:cd:c7:aa:74:53:8d:2a:5a:1e: fb:c2:84:f6:01:bf:fa:30:b8:d8:a2:e9:84:73:b9: 61:c5:e3:1b:6b:79:48:81:3b:2d:ba:d7:e8:72:bb: 45:7e:67:49:68:57:b7:48:d6:b9:1e:ce:eb:c1:09: d7:a0:c6:f0:3a:fe:dc:52:4a:be:e7:c4:3d:a8:21: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:40:2D:D0:0D:00:96:9D:D2:F3:40:EE:13:CA:DB:98:C8:5C:DB:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fec2::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fe:16:ea:bd:8c:45:45:20:b7:15:01:2c:45:a1:c9:ac:1a: c6:73:85:db:92:77:b0:47:5d:0c:6c:dd:c1:d9:9e:08:04:b5: f9:3e:ec:f8:c1:4c:7a:74:76:77:da:c0:67:df:e4:8c:98:dd: 67:75:fa:5c:f8:d7:a3:31:c6:f2:81:50:5c:41:13:8a:5d:08: 71:cd:39:a1:75:c3:e8:3f:c2:2b:07:05:d9:54:9a:53:96:54: 36:8d:dc:10:31:9b:33:38:9e:73:ff:52:cb:72:cd:70:db:2a: 09:dd:0a:23:c8:53:d7:6e:a4:a2:3d:56:b2:e7:bb:dd:b6:11: a8:4e:2f:eb:1b:47:63:d1:59:8b:7f:b8:a3:1e:c2:10:9c:3b: 58:7c:1f:b0:ae:93:5a:bf:73:76:25:8f:7a:c8:b8:42:3d:b0: 6f:b4:74:87:d4:45:ba:59:f5:cd:60:7b:86:07:da:21:c5:ea: e3:63:b4:e3:a8:58:f9:95:09:f6:8c:a4:1a:8c:05:c7:7d:48: 9d:51:a5:0d:c3:9b:4f:92:97:b8:cc:10:3c:5b:f9:c5:fb:09: ee:04:63:2d:7d:02:2b:6e:17:03:3f:34:81:9e:ec:29:1e:c6: 08:6a:9c:cc:71:b9:5b:fa:a9:d3:90:03:42:b8:d1:d3:33:78: a8:d3:b4:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt97K4d9GvZhSL3zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDAzMDI2NzItZmJjYS00YzRlLWJhYWUtNGZiZDNmNDYyNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS4otLUe5H1M7lGC2D3WyqlkUdK/cxI89SPp Mg5atsqT9T5M9E23JG1bOJJKqpPAYU5kaUR68fXEEetj5fzpe6wHXpbacK5UTFtx gxRonm854MgZ8vr107HQp1L7Lb5ozLjHhDD/zZ2zcV9UNRdZpKtlXVvw0NtaLHwx 0UKY+ZdiWDbT+qUEWsxTibDlxdj1EkXbnqA/PhNqQotnKkT31trwaCpbVXMD9a7t Nu/KpGiqrC1K9AZVk3DNx6p0U40qWh77woT2Ab/6MLjYoumEc7lhxeMba3lIgTst utfocrtFfmdJaFe3SNa5Hs7rwQnXoMbwOv7cUkq+58Q9qCEqCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGpALdANAJad0vNA7hPK25jIXNuwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvM2Q3Y2Y5ZWQtYTA0NC0z MmZmLThjZWMtZTAwNjZkMTdjMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL+wjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBA/hbqvYxFRSC3FQEsRaHJrBrGc4XbknewR10MbN3B2Z4IBLX5Puz4 wUx6dHZ32sBn3+SMmN1ndfpc+NejMcbygVBcQROKXQhxzTmhdcPoP8IrBwXZVJpT llQ2jdwQMZszOJ5z/1LLcs1w2yoJ3QojyFPXbqSiPVay57vdthGoTi/rG0dj0VmL f7ijHsIQnDtYfB+wrpNav3N2JY96yLhCPbBvtHSH1EW6WfXNYHuGB9ohxerjY7Tj qFj5lQn2jKQajAXHfUidUaUNw5tPkpe4zBA8W/nF+wnuBGMtfQIrbhcDPzSBnuwp HsYIapzMcblb+qnTkANCuNHTM3io07QO -----END CERTIFICATE-----Generated at Fri Oct 17 12:59:03 2025 by rpki-client