$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926/3cd76fad-75fe-356d-995e-1d81e14cd1da.roa File: 3cd76fad-75fe-356d-995e-1d81e14cd1da.roa (raw, json) Hash identifier: kQEtuf9iotSk5vgCTiNZcDjB2cRuIaEJftdi6rz+lwY= Subject key identifier: 25:A4:D3:7B:02:A4:B1:D1:7A:FC:7B:A1:53:CC:84:88:C0:97:F0:D4 Certificate issuer: /CN=ae71e986-bf08-451a-bb35-0be370d3b926 Certificate serial: 010D0C9F4328584B41E7111A28004108D2233200 Authority key identifier: 80:75:E4:CB:7B:4A:19:FD:BE:65:DA:D6:71:EC:4B:65:E1:95:8B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926/3cd76fad-75fe-356d-995e-1d81e14cd1da.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 401420 IP address blocks: 2602:f7bf::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926/ae71e986-bf08-451a-bb35-0be370d3b926.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926/ae71e986-bf08-451a-bb35-0be370d3b926.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:11:1a:28:00:41:08:d2:23:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae71e986-bf08-451a-bb35-0be370d3b926 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=615451f3-4b5a-43e2-966c-9ad12310db64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:14:e2:f8:ab:eb:3f:df:75:bd:99:e3:40: 78:71:ff:26:3b:27:a5:57:88:6a:70:ff:ea:1a:16: 06:f5:d5:11:bf:e0:c8:db:60:27:77:6a:71:67:b7: 1a:06:18:c4:95:83:43:16:be:97:79:23:a7:5d:2e: 80:9d:63:8d:54:a0:2e:26:23:7e:de:49:2c:fd:cd: 93:ee:dc:49:0a:2b:a1:dc:71:96:ae:8d:7c:64:3b: a5:39:ed:60:42:bc:f7:4b:2b:22:6d:9e:d8:fe:00: 9b:56:70:f7:d7:b2:3a:d8:a3:df:8a:93:59:57:5b: ab:99:ae:6c:30:26:c3:f0:5d:25:f8:60:c2:70:08: 2c:fa:b0:ae:61:32:a8:63:80:78:4e:fc:81:b3:56: 29:c1:14:9e:fb:86:f6:27:9b:e5:78:83:24:1a:5b: 2e:42:2d:5e:e7:25:b5:8b:53:cf:41:1a:be:ea:b8: 2e:7b:87:3a:66:da:bd:b1:ad:6f:3b:e2:e9:86:dd: 58:01:c9:8d:f0:b8:a0:19:a8:e5:46:cb:b0:1f:e9: a3:60:8d:09:54:30:97:6b:87:41:f7:ee:16:20:7c: 13:1c:79:c5:42:3f:1b:36:f3:d8:5b:df:17:35:85: 53:b4:2b:98:38:34:0b:c0:c6:7f:b7:e8:d8:bb:6f: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A4:D3:7B:02:A4:B1:D1:7A:FC:7B:A1:53:CC:84:88:C0:97:F0:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926/3cd76fad-75fe-356d-995e-1d81e14cd1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926/ae71e986-bf08-451a-bb35-0be370d3b926.crl X509v3 Authority Key Identifier: keyid:80:75:E4:CB:7B:4A:19:FD:BE:65:DA:D6:71:EC:4B:65:E1:95:8B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7bf::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:55:f2:e3:92:8b:d5:d4:54:08:0c:ed:6d:f1:e6:16:5d:07: 9f:62:83:20:db:4e:25:54:71:bb:78:9c:1c:28:77:27:97:02: 26:17:7d:b3:e2:93:e7:c1:7f:a1:c8:08:3d:19:81:b2:11:fb: 20:06:d4:78:dc:8b:41:52:3f:68:49:e8:9b:45:6d:7b:af:79: 4d:39:1a:b3:42:50:f3:97:c6:be:af:25:3b:e1:2f:4f:b4:e2: a0:7d:b4:27:23:b8:f9:71:ab:b8:74:2f:6f:fe:70:e6:b3:4a: bc:7e:65:f6:1f:f4:34:05:23:e7:ae:be:b7:9b:32:ae:b3:93: 7f:92:35:cb:90:e9:9b:60:a9:70:29:f5:3e:75:34:df:61:a7: 83:a2:f4:be:df:e9:dd:1b:20:af:fe:d0:72:2a:cc:48:a1:20: ac:ea:4e:d8:b3:46:a7:45:27:25:fd:64:47:ff:09:cd:b0:40: 5d:ed:9a:b8:ec:18:a8:13:f9:38:6d:d9:9c:f0:fe:82:f7:69: 94:c0:8e:e5:ac:df:b6:52:00:7f:c9:97:3d:54:21:cc:1c:91: 1f:81:45:6d:92:73:75:cf:8e:46:67:1c:91:1d:59:7e:a7:9d: 3a:91:8b:7f:23:b5:81:f8:21:f1:55:9b:59:66:3e:75:07:54: 1b:25:c9:1d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtB5xEaKABBCNIjMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3MWU5ODYtYmYwOC00NTFhLWJiMzUtMGJlMzcwZDNi OTI2MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NjE1NDUxZjMtNGI1YS00M2UyLTk2NmMtOWFkMTIzMTBkYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1oU4vir6z/fdb2Z40B4cf8mOyelV4hqcP/q GhYG9dURv+DI22And2pxZ7caBhjElYNDFr6XeSOnXS6AnWONVKAuJiN+3kks/c2T 7txJCiuh3HGWro18ZDulOe1gQrz3SysibZ7Y/gCbVnD317I62KPfipNZV1urma5s MCbD8F0l+GDCcAgs+rCuYTKoY4B4TvyBs1YpwRSe+4b2J5vleIMkGlsuQi1e5yW1 i1PPQRq+6rgue4c6Ztq9sa1vO+Lpht1YAcmN8LigGajlRsuwH+mjYI0JVDCXa4dB 9+4WIHwTHHnFQj8bNvPYW98XNYVTtCuYODQLwMZ/t+jYu29rNwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCWk03sCpLHRevx7oVPMhIjAl/DUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZTcx ZTk4Ni1iZjA4LTQ1MWEtYmIzNS0wYmUzNzBkM2I5MjYvM2NkNzZmYWQtNzVmZS0z NTZkLTk5NWUtMWQ4MWUxNGNkMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWU3MWU5ODYtYmYwOC00NTFhLWJi MzUtMGJlMzcwZDNiOTI2L2FlNzFlOTg2LWJmMDgtNDUxYS1iYjM1LTBiZTM3MGQz YjkyNi5jcmwwHwYDVR0jBBgwFoAUgHXky3tKGf2+ZdrWcexLZeGVi6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZTcxZTk4Ni1iZjA4LTQ1MWEtYmIzNS0wYmUz NzBkM2I5MjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3vwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkVXy45KL1dRUCAztbfHmFl0Hn2KDINtOJVRxu3icHCh3J5cCJhd9 s+KT58F/ocgIPRmBshH7IAbUeNyLQVI/aEnom0Vte695TTkas0JQ85fGvq8lO+Ev T7TioH20JyO4+XGruHQvb/5w5rNKvH5l9h/0NAUj566+t5syrrOTf5I1y5Dpm2Cp cCn1PnU032Gng6L0vt/p3Rsgr/7QcirMSKEgrOpO2LNGp0UnJf1kR/8JzbBAXe2a uOwYqBP5OG3ZnPD+gvdplMCO5azftlIAf8mXPVQhzByRH4FFbZJzdc+ORmcckR1Z fqedOpGLfyO1gfgh8VWbWWY+dQdUGyXJHQ== -----END CERTIFICATE-----Generated at Tue Oct 28 13:11:29 2025 by rpki-client