$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa File: 30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa (raw, json) Hash identifier: tzElHVkQy2THHrHYblhi/xdyHzrLCxpPtEeOeH7RgPU= Subject key identifier: 5D:43:6E:66:1B:17:58:A5:6C:8C:9D:86:F0:A4:BA:10:6D:DE:ED:00 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B84E78935B56DF2C6FB376900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 8075 IP address blocks: 2602:fd5e:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:89:35:b5:6d:f2:c6:fb:37:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=c597a0c7-d01a-4287-8f01-e964e2cacd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:a0:f7:6c:55:d6:aa:9d:28:d5:02:10:74: 2a:48:f3:75:ac:8a:66:ae:00:4f:fa:77:db:03:3f: 45:06:89:3d:b8:06:28:95:76:d0:0b:9e:d3:a2:39: 20:a6:ee:2d:9b:00:8b:3e:71:84:07:5d:cc:a7:3b: 51:2a:0f:cd:c3:89:98:29:73:11:c1:90:a7:f6:f7: 12:e2:35:ee:a4:3a:e1:a7:9b:3e:7a:5c:72:73:48: d0:6b:3d:f8:ec:0b:66:75:70:28:bf:44:e9:26:c7: 9f:8b:ba:be:94:94:3f:2e:60:27:a4:1a:3a:c1:7f: bb:3b:29:a9:9f:88:16:85:90:69:7f:96:7d:eb:7b: 83:4f:a0:ce:76:ca:ec:ca:74:7b:2d:6a:36:38:85: 0f:db:0d:93:24:86:76:4d:6d:8c:80:7c:18:d2:be: 97:3e:22:e5:b5:b2:b7:5b:c4:df:91:1e:99:5f:06: 61:1c:86:25:9b:f6:1a:20:f8:cb:24:e7:bb:4f:3c: 3d:47:92:94:90:0a:9a:8e:24:82:2e:8c:3f:5e:c5: 08:91:8f:02:08:c1:45:98:50:2a:bc:00:fd:bd:c5: 74:24:c9:9c:11:cb:15:df:5c:af:76:58:5d:64:dc: 7d:32:df:16:e3:e1:e8:75:c5:d3:dc:91:82:a8:fb: 1e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:6E:66:1B:17:58:A5:6C:8C:9D:86:F0:A4:BA:10:6D:DE:ED:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd5e:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:92:e6:ad:6c:0a:5e:6a:14:b0:4e:0a:e4:2a:63:d1:8c:58: 03:ef:eb:83:2a:66:11:46:b1:a1:55:64:a5:1e:57:af:aa:84: ab:ea:49:26:3b:1f:eb:ba:55:bf:1f:24:9e:84:68:75:7f:40: 2f:5e:cf:21:8b:7a:aa:45:7e:7d:7e:aa:d8:ec:2c:e3:45:f9: c8:2e:c8:f8:ba:a8:2a:2d:2f:b2:01:03:a5:ce:46:58:a3:72: 5a:f0:78:ae:db:01:33:f3:53:55:ac:ea:41:b6:19:b0:ef:64: ec:6c:0b:82:25:90:a9:a7:f5:33:4a:70:b9:46:9b:ae:aa:29: e5:ac:1c:02:55:2f:61:72:ca:c5:83:e6:ef:b4:24:6d:03:08: 16:46:9a:46:dc:ca:1a:5e:f3:6c:8e:f3:32:8a:58:75:43:5d: e8:92:0d:fe:84:83:e8:c2:fb:9a:21:c4:e6:d9:04:57:96:35: 3c:94:e7:8c:7d:1b:5d:b6:df:61:79:cf:11:da:1c:2d:cf:bb: 99:52:9f:a2:df:e8:8e:79:8a:09:ac:d3:e6:91:bc:d3:22:a6: aa:fa:e6:1f:a6:6b:3c:76:d9:c2:fd:cf:2b:72:8f:30:2e:5d: 75:66:7b:6d:7c:dd:c6:4a:e9:47:38:33:03:ab:81:31:16:33: 9c:26:26:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuE54k1tW3yxvs3aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YzU5N2EwYzctZDAxYS00Mjg3LThmMDEtZTk2NGUyY2FjZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnCg92xV1qqdKNUCEHQqSPN1rIpmrgBP+nfb Az9FBok9uAYolXbQC57Tojkgpu4tmwCLPnGEB13MpztRKg/Nw4mYKXMRwZCn9vcS 4jXupDrhp5s+elxyc0jQaz347AtmdXAov0TpJsefi7q+lJQ/LmAnpBo6wX+7Oymp n4gWhZBpf5Z963uDT6DOdsrsynR7LWo2OIUP2w2TJIZ2TW2MgHwY0r6XPiLltbK3 W8TfkR6ZXwZhHIYlm/YaIPjLJOe7Tzw9R5KUkAqajiSCLow/XsUIkY8CCMFFmFAq vAD9vcV0JMmcEcsV31yvdlhdZNx9Mt8W4+HodcXT3JGCqPsezwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF1DbmYbF1ilbIydhvCkuhBt3u0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzBiMzU5YmEtYmM5Yy0z ZDBlLTkwZTYtNzE3NTFiZTlkMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9XgAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG+S5q1sCl5qFLBOCuQqY9GMWAPv64MqZhFGsaFVZKUeV6+qhKvq SSY7H+u6Vb8fJJ6EaHV/QC9ezyGLeqpFfn1+qtjsLONF+cguyPi6qCotL7IBA6XO RlijclrweK7bATPzU1Ws6kG2GbDvZOxsC4IlkKmn9TNKcLlGm66qKeWsHAJVL2Fy ysWD5u+0JG0DCBZGmkbcyhpe82yO8zKKWHVDXeiSDf6Eg+jC+5ohxObZBFeWNTyU 54x9G12232F5zxHaHC3Pu5lSn6Lf6I55igms0+aRvNMipqr65h+mazx22cL9zyty jzAuXXVme2183cZK6Uc4MwOrgTEWM5wmJgE= -----END CERTIFICATE-----Generated at Mon Oct 20 20:55:51 2025 by rpki-client