$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/d3db7f58-0821-3cab-bd68-a87593c07bd6.roa File: d3db7f58-0821-3cab-bd68-a87593c07bd6.roa (raw, json) Hash identifier: NvPksCyJjnMq702D5JjRJzqa5rdXlMYJeL33OslivTw= Subject key identifier: DB:D5:0B:CA:86:6A:C3:60:75:8D:3B:54:61:D8:59:D1:C2:3D:55:54 Certificate issuer: /CN=18b69f1d-e346-4275-b5e5-d496c35fa747 Certificate serial: 010D0C9F4328584BAF9CDF1985CDF7921B346E00 Authority key identifier: 47:96:86:96:07:48:4F:E8:AF:A3:75:75:6A:DD:55:EA:AB:56:CF:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/d3db7f58-0821-3cab-bd68-a87593c07bd6.roa Signing time: Wed 29 Oct 2025 20:10:14 +0000 ROA not before: Wed 29 Oct 2025 20:10:14 +0000 ROA not after: Tue 27 Jan 2026 21:10:14 +0000 asID: 399970 IP address blocks: 2602:fc3b:f600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/18b69f1d-e346-4275-b5e5-d496c35fa747.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/18b69f1d-e346-4275-b5e5-d496c35fa747.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:9c:df:19:85:cd:f7:92:1b:34:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b69f1d-e346-4275-b5e5-d496c35fa747 Validity Not Before: Oct 29 20:10:14 2025 GMT Not After : Jan 27 21:10:14 2026 GMT Subject: CN=fd524601-3056-46d6-b5af-4e41ad364b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:1f:f4:8b:13:36:41:5d:b0:4f:15:db:6d: 56:3b:b5:2a:87:58:cf:23:28:11:88:9c:0d:6b:01: 2c:ba:e1:57:ce:ee:17:1c:cb:20:2a:a8:89:e7:41: 93:b2:be:cf:65:ac:8e:9c:7e:ad:75:bb:74:69:07: 6a:08:9f:f7:a8:a5:46:77:39:82:1b:e3:ac:66:59: 01:8d:94:1f:3f:d1:cd:40:78:62:eb:00:9d:39:fd: 09:da:a0:19:7d:a7:fd:27:f6:ae:40:87:0b:6f:7f: fa:b1:17:96:4e:ed:b1:1e:44:a8:ee:58:f9:cc:96: 80:e4:f4:c2:6f:bb:7d:a7:5a:4b:f9:fa:af:ce:23: 78:bb:23:9b:0a:de:32:63:57:11:02:90:a7:fa:d9: b5:3c:af:fa:47:73:70:43:a6:aa:df:3e:d1:78:b8: da:52:91:79:62:82:bd:80:a2:09:f0:98:f2:8d:95: 78:cb:47:94:41:10:65:f0:0f:00:79:1d:d3:43:dc: c1:1b:97:96:87:7a:25:72:68:07:8f:e6:49:56:76: a6:3b:c3:d6:0c:b4:6b:f4:14:f8:ab:9e:de:f9:37: 3b:ae:17:70:10:a5:9d:d8:40:26:50:ad:c4:db:ed: a5:d0:13:1b:20:d5:2e:63:59:b5:7e:6d:31:3c:d6: 75:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D5:0B:CA:86:6A:C3:60:75:8D:3B:54:61:D8:59:D1:C2:3D:55:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/d3db7f58-0821-3cab-bd68-a87593c07bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/18b69f1d-e346-4275-b5e5-d496c35fa747.crl X509v3 Authority Key Identifier: keyid:47:96:86:96:07:48:4F:E8:AF:A3:75:75:6A:DD:55:EA:AB:56:CF:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:f600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:05:75:83:35:2f:27:58:be:f3:c8:11:79:aa:00:7b:6f:ec: 56:bf:fb:6f:9d:cf:32:5e:8b:65:57:88:79:7e:df:9e:00:de: f9:75:bb:36:84:0b:37:3a:dc:88:40:29:cd:4f:cb:99:69:2e: d4:6f:5b:7b:27:73:c5:6d:d9:89:30:7f:ec:0c:37:72:95:f3: 96:1c:37:37:c4:15:fe:26:99:32:e1:46:47:cf:82:83:6e:c1: d5:8e:9e:a3:93:cc:4b:58:b2:ac:13:ae:e0:d2:1a:89:05:b8: 3c:8c:7e:c3:86:0f:d4:4e:d6:84:0a:45:2f:25:40:67:ac:c6: 40:75:24:e8:f9:d8:31:38:49:71:d2:2d:e8:9a:b5:93:8a:b5: 23:ca:c8:e5:2e:4e:de:dd:11:bc:c9:2e:b7:ad:be:7f:f0:c8: 3e:e6:92:11:39:39:37:8e:18:36:f3:1e:5b:ee:cd:1c:60:17: 3b:fa:58:51:d9:7c:6a:37:d6:aa:60:21:07:dc:1d:00:3d:a0: 10:7b:83:d8:a0:23:73:1d:50:0a:e7:84:88:4a:ee:bb:78:f3: ef:38:09:76:e4:5f:9a:d7:0b:c7:3e:73:83:0b:57:91:f0:4f: c6:61:ad:51:84:58:13:d0:40:5a:94:dd:c0:f4:ca:b3:97:1e: 5a:d9:c0:98 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuvnN8Zhc33khs0bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThiNjlmMWQtZTM0Ni00Mjc1LWI1ZTUtZDQ5NmMzNWZh NzQ3MB4XDTI1MTAyOTIwMTAxNFoXDTI2MDEyNzIxMTAxNFowLzEtMCsGA1UEAxMk ZmQ1MjQ2MDEtMzA1Ni00NmQ2LWI1YWYtNGU0MWFkMzY0YjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oYf9IsTNkFdsE8V221WO7Uqh1jPIygRiJwN awEsuuFXzu4XHMsgKqiJ50GTsr7PZayOnH6tdbt0aQdqCJ/3qKVGdzmCG+OsZlkB jZQfP9HNQHhi6wCdOf0J2qAZfaf9J/auQIcLb3/6sReWTu2xHkSo7lj5zJaA5PTC b7t9p1pL+fqvziN4uyObCt4yY1cRApCn+tm1PK/6R3NwQ6aq3z7ReLjaUpF5YoK9 gKIJ8JjyjZV4y0eUQRBl8A8AeR3TQ9zBG5eWh3olcmgHj+ZJVnamO8PWDLRr9BT4 q57e+Tc7rhdwEKWd2EAmUK3E2+2l0BMbINUuY1m1fm0xPNZ1JwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNvVC8qGasNgdY07VGHYWdHCPVVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xOGI2 OWYxZC1lMzQ2LTQyNzUtYjVlNS1kNDk2YzM1ZmE3NDcvZDNkYjdmNTgtMDgyMS0z Y2FiLWJkNjgtYTg3NTkzYzA3YmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMThiNjlmMWQtZTM0Ni00Mjc1LWI1 ZTUtZDQ5NmMzNWZhNzQ3LzE4YjY5ZjFkLWUzNDYtNDI3NS1iNWU1LWQ0OTZjMzVm YTc0Ny5jcmwwHwYDVR0jBBgwFoAUR5aGlgdIT+ivo3V1at1V6qtWz08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xOGI2OWYxZC1lMzQ2LTQyNzUtYjVlNS1kNDk2 YzM1ZmE3NDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8O/Yw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAugV1gzUvJ1i+88gReaoAe2/sVr/7b53PMl6LZVeIeX7fngDe+XW7 NoQLNzrciEApzU/LmWku1G9beydzxW3ZiTB/7Aw3cpXzlhw3N8QV/iaZMuFGR8+C g27B1Y6eo5PMS1iyrBOu4NIaiQW4PIx+w4YP1E7WhApFLyVAZ6zGQHUk6PnYMThJ cdIt6Jq1k4q1I8rI5S5O3t0RvMkut62+f/DIPuaSETk5N44YNvMeW+7NHGAXO/pY Udl8ajfWqmAhB9wdAD2gEHuD2KAjcx1QCueEiEruu3jz7zgJduRfmtcLxz5zgwtX kfBPxmGtUYRYE9BAWpTdwPTKs5ceWtnAmA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:01:13 2025 by rpki-client