$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/99370b71-bebd-3bd4-987b-494d0044a88a.roa File: 99370b71-bebd-3bd4-987b-494d0044a88a.roa (raw, json) Hash identifier: 2+9IW4Uwmmc3NPpG2KwGb6BSRSu8Yv8KdKdzwONnz2c= Subject key identifier: 03:75:8C:7F:53:68:6B:6E:62:47:88:4E:B3:3B:AD:03:94:11:6C:47 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584B842CF736A7E88B12778CB840 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/99370b71-bebd-3bd4-987b-494d0044a88a.roa Signing time: Tue 14 Oct 2025 06:45:00 +0000 ROA not before: Tue 14 Oct 2025 06:45:00 +0000 ROA not after: Mon 12 Jan 2026 07:45:00 +0000 asID: 140666 IP address blocks: 2602:fa80:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:2c:f7:36:a7:e8:8b:12:77:8c:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Oct 14 06:45:00 2025 GMT Not After : Jan 12 07:45:00 2026 GMT Subject: CN=2776d039-78f6-4629-9cf9-5c4354d49705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:da:4e:53:b6:d9:3f:c9:6b:aa:2d:86:42: 4c:80:47:05:7c:a9:27:cd:7a:0b:0b:8a:13:ab:84: 38:50:11:82:57:2c:ec:ba:6c:75:ef:43:35:d2:dc: 35:20:6e:61:10:b6:2e:66:20:14:1c:2c:82:c4:84: 49:6b:10:5b:1c:8d:8b:48:1b:40:4a:d8:0b:e8:17: 3e:01:49:f4:71:fd:09:09:7e:10:50:c7:3f:36:a3: a5:f6:10:9f:c9:1c:36:e4:6f:7b:8b:32:99:0b:ce: 75:d2:b2:72:e8:94:db:17:73:04:e2:f5:fa:2a:6d: 4c:60:4f:f5:03:b5:29:4c:2a:a5:b5:27:49:2d:50: 9e:0f:e2:1e:14:d2:63:c9:51:61:8c:a7:6f:d2:ad: 3e:25:b6:b3:67:a8:a0:b5:f7:7e:88:d2:22:c9:0a: 17:cf:f6:b4:60:bd:75:d8:c7:3c:3d:f1:d7:2f:ee: d7:28:50:32:5e:87:49:81:0b:21:a9:ea:be:23:e9: 16:a2:ba:a1:a7:a0:63:22:05:29:c3:5d:85:02:52: 53:b6:6e:c7:8b:8d:e5:22:5e:92:a4:89:f9:2c:d2: c3:1c:89:8f:44:51:a4:9b:31:c4:75:a1:4e:7a:ed: 7d:13:16:23:98:ad:c6:ec:32:a1:ec:fa:69:9b:5f: 85:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:75:8C:7F:53:68:6B:6E:62:47:88:4E:B3:3B:AD:03:94:11:6C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/99370b71-bebd-3bd4-987b-494d0044a88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:56:8e:9e:d1:49:84:31:fd:24:86:0e:3b:ed:04:f9:4c:6d: ea:ec:bf:87:ef:b6:7b:1c:aa:ca:b2:63:14:7c:f9:05:3c:da: f0:2e:d2:d0:22:d6:6e:da:c1:fe:0a:14:08:42:f4:7d:4b:d9: d8:6c:e5:9d:88:d6:51:2c:03:29:5c:57:8e:0f:c0:6e:09:58: 71:58:6f:ba:bc:36:17:7a:06:20:4c:29:12:0b:7a:a1:0b:f2: 36:7a:5f:7f:b7:30:1f:57:8e:3d:46:d2:b9:93:71:14:88:5f: 00:cf:77:17:a5:94:9c:54:bc:33:1a:05:1e:be:4c:27:c4:0f: 31:92:a0:cb:97:af:38:2c:db:df:b0:3f:d0:10:60:18:47:5b: e8:24:a5:ee:01:b5:b0:74:9a:89:93:10:b2:11:9b:5a:2f:e5: 9a:3e:8b:c8:fa:f6:20:fc:07:9b:59:df:cc:ed:04:36:33:bf: 62:45:44:cb:1d:e3:f4:10:07:95:e2:11:cc:0e:0c:92:f4:8c: a9:be:d0:da:88:d4:33:de:2c:73:af:7d:53:18:1e:13:d9:c8: 36:ad:e3:a6:99:ed:b8:26:54:2f:6d:a8:d9:ff:1b:c1:54:59: 75:6e:27:d9:e0:0b:5c:ac:5c:59:c1:84:b3:1c:7f:f0:53:28: a6:4e:76:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuELPc2p+iLEneMuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MTAxNDA2NDUwMFoXDTI2MDExMjA3NDUwMFowLzEtMCsGA1UEAxMk Mjc3NmQwMzktNzhmNi00NjI5LTljZjktNWM0MzU0ZDQ5NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr03aTlO22T/Ja6othkJMgEcFfKknzXoLC4oT q4Q4UBGCVyzsumx170M10tw1IG5hELYuZiAUHCyCxIRJaxBbHI2LSBtAStgL6Bc+ AUn0cf0JCX4QUMc/NqOl9hCfyRw25G97izKZC8510rJy6JTbF3ME4vX6Km1MYE/1 A7UpTCqltSdJLVCeD+IeFNJjyVFhjKdv0q0+JbazZ6igtfd+iNIiyQoXz/a0YL11 2Mc8PfHXL+7XKFAyXodJgQshqeq+I+kWorqhp6BjIgUpw12FAlJTtm7Hi43lIl6S pIn5LNLDHImPRFGkmzHEdaFOeu19ExYjmK3G7DKh7Pppm1+FgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAN1jH9TaGtuYkeITrM7rQOUEWxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvOTkzNzBiNzEtYmViZC0z YmQ0LTk4N2ItNDk0ZDAwNDRhODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gAA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHhWjp7RSYQx/SSGDjvtBPlMbersv4fvtnscqsqyYxR8+QU82vAu 0tAi1m7awf4KFAhC9H1L2dhs5Z2I1lEsAylcV44PwG4JWHFYb7q8Nhd6BiBMKRIL eqEL8jZ6X3+3MB9Xjj1G0rmTcRSIXwDPdxellJxUvDMaBR6+TCfEDzGSoMuXrzgs 29+wP9AQYBhHW+gkpe4BtbB0momTELIRm1ov5Zo+i8j69iD8B5tZ38ztBDYzv2JF RMsd4/QQB5XiEcwODJL0jKm+0NqI1DPeLHOvfVMYHhPZyDat46aZ7bgmVC9tqNn/ G8FUWXVuJ9ngC1ysXFnBhLMcf/BTKKZOdvI= -----END CERTIFICATE-----Generated at Sun Oct 19 16:05:01 2025 by rpki-client