$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/09762465-b2e6-360a-b0d4-36522e5d15ce.roa File: 09762465-b2e6-360a-b0d4-36522e5d15ce.roa (raw, json) Hash identifier: aNAzKU0B1uvxwr+fCUeC7WJLmtfPRlyhwyxd0gN5xzs= Subject key identifier: C7:35:BF:70:D2:C7:AB:E6:67:A3:27:C0:EE:86:93:C0:25:F6:66:61 Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584BAD62543C9305875C32007780 Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/09762465-b2e6-360a-b0d4-36522e5d15ce.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 398843 IP address blocks: 2602:f7c5::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:54:3c:93:05:87:5c:32:00:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=217f6468-6569-4912-9042-3894d129582f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:09:4b:0d:f4:df:07:c1:b9:32:5a:dc:5d:9a: 24:75:44:aa:54:96:39:a7:52:84:2e:3a:90:d9:1f: fd:f8:9a:1b:20:fd:71:41:5e:0a:75:2e:f2:6a:77: cf:b4:5a:cb:04:09:c3:62:a0:b6:ea:40:81:19:f0: b0:af:08:16:5b:2f:83:c4:3e:27:91:c7:d0:23:8d: 0a:58:e2:18:a4:af:b0:5a:1d:f2:85:7b:96:3d:ca: fe:b5:43:f9:d9:0e:37:fe:e9:2d:ce:d4:bf:0a:50: 1d:88:2b:25:73:29:75:af:3e:23:40:4a:52:28:d7: e2:77:85:f1:23:2d:81:5d:ae:52:87:3b:45:2d:1c: 1f:6a:90:07:86:86:c4:d1:dc:29:48:22:f5:38:d7: 37:8d:bf:39:9b:1d:d0:e5:ae:48:dc:c2:00:8f:2c: 01:0a:9e:fc:91:7b:6c:ab:08:ed:02:66:c7:42:df: 5a:53:4c:a1:a9:9a:1f:f8:1a:89:ea:fc:b1:8e:78: cc:63:7e:15:48:09:a2:52:19:ad:be:c5:a0:1f:f8: 06:ed:c3:31:0e:62:a4:c6:57:b0:31:14:b6:9a:7c: 93:1e:9e:9a:aa:23:a4:df:7c:d5:e0:7f:da:fa:e2: 40:7e:d4:35:64:db:d7:96:aa:7c:24:92:d0:86:35: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:BF:70:D2:C7:AB:E6:67:A3:27:C0:EE:86:93:C0:25:F6:66:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/09762465-b2e6-360a-b0d4-36522e5d15ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7c5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b1:e8:d6:a4:d2:f0:2e:77:b7:39:ad:72:ed:57:04:fc:75: f3:c4:fc:93:29:28:7e:17:53:d4:3b:89:71:a3:94:49:89:b2: b3:94:f1:34:d3:dc:82:12:32:1b:fa:e1:4c:89:cb:24:f1:27: ec:8d:1c:2e:56:b5:12:02:fa:88:57:3e:2d:9e:9a:a8:39:6a: bd:79:bf:b0:a7:1e:92:3f:a5:66:5d:31:ac:68:50:c9:2f:72: b5:43:95:3a:5b:38:c4:d9:98:25:4a:6a:0a:3f:70:23:45:53: b4:8c:bf:22:b6:99:5b:9b:e5:38:85:76:93:55:be:5e:5c:4c: e0:f5:70:6b:1e:9f:52:ef:5d:f3:81:97:0c:7b:dd:ad:2c:73: 8e:80:80:15:2e:dc:30:59:c7:82:e9:f4:4f:0c:9b:27:ac:3c: a7:1e:e4:f1:c9:ea:8c:e5:29:33:fb:4e:76:93:eb:44:e1:bb: b6:13:e5:49:4f:b4:93:47:d5:34:de:7d:11:db:8a:5f:b1:62: 6f:86:d0:cb:b3:bc:64:20:80:0e:dd:0a:1e:95:7d:ab:c9:9f: 2b:ca:89:4b:1d:c3:46:60:6f:08:bc:77:66:86:44:4c:2d:7f: 79:82:89:db:35:86:a3:e2:0a:08:11:fc:67:d5:2e:fb:8a:86: 8f:9d:83:45 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEutYlQ8kwWHXDIAd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MjE3ZjY0NjgtNjU2OS00OTEyLTkwNDItMzg5NGQxMjk1ODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhglLDfTfB8G5MlrcXZokdUSqVJY5p1KELjqQ 2R/9+JobIP1xQV4KdS7yanfPtFrLBAnDYqC26kCBGfCwrwgWWy+DxD4nkcfQI40K WOIYpK+wWh3yhXuWPcr+tUP52Q43/uktztS/ClAdiCslcyl1rz4jQEpSKNfid4Xx Iy2BXa5ShztFLRwfapAHhobE0dwpSCL1ONc3jb85mx3Q5a5I3MIAjywBCp78kXts qwjtAmbHQt9aU0yhqZof+BqJ6vyxjnjMY34VSAmiUhmtvsWgH/gG7cMxDmKkxlew MRS2mnyTHp6aqiOk33zV4H/a+uJAftQ1ZNvXlqp8JJLQhjXTRQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMc1v3DSx6vmZ6MnwO6Gk8Al9mZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvMDk3NjI0NjUtYjJlNi0z NjBhLWIwZDQtMzY1MjJlNWQxNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3xQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYbHo1qTS8C53tzmtcu1XBPx188T8kykofhdT1DuJcaOUSYmys5Tx NNPcghIyG/rhTInLJPEn7I0cLla1EgL6iFc+LZ6aqDlqvXm/sKcekj+lZl0xrGhQ yS9ytUOVOls4xNmYJUpqCj9wI0VTtIy/IraZW5vlOIV2k1W+XlxM4PVwax6fUu9d 84GXDHvdrSxzjoCAFS7cMFnHgun0TwybJ6w8px7k8cnqjOUpM/tOdpPrROG7thPl SU+0k0fVNN59EduKX7Fib4bQy7O8ZCCADt0KHpV9q8mfK8qJSx3DRmBvCLx3ZoZE TC1/eYKJ2zWGo+IKCBH8Z9Uu+4qGj52DRQ== -----END CERTIFICATE-----Generated at Wed Oct 29 17:30:28 2025 by rpki-client