$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5b0e913e-6331-377e-ad38-c00fd513c783.roa File: 5b0e913e-6331-377e-ad38-c00fd513c783.roa (raw, json) Hash identifier: qA6xmFsF9ZB7OM1jJJkneOHW7nlvS30F5oDGnV8s+BI= Subject key identifier: 39:E2:A6:F1:2C:48:E7:D7:68:8A:9B:0C:71:18:D2:A7:F1:C4:FE:3F Certificate issuer: /CN=5742dde3-84a3-4488-a01c-525734c4d81b Certificate serial: 010D0C9F4328584B0B76AB2870123E6AF41E9080 Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5b0e913e-6331-377e-ad38-c00fd513c783.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 399924 IP address blocks: 2602:fc53:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ab:28:70:12:3e:6a:f4:1e:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=d79e8ebf-821a-402e-b7cc-69cd2aec7b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:1e:54:9e:26:97:b7:76:de:1c:dd:65:22: 63:d2:d4:31:4e:ed:d4:97:c2:17:d6:7d:b9:4e:83: 4e:aa:7a:bb:fb:0c:e5:d8:0d:0f:bf:bd:13:53:29: 21:9e:c9:b9:27:55:e5:30:0a:d7:c4:04:6e:86:11: 29:87:0e:99:3a:15:e4:8e:c0:ed:aa:49:13:57:e7: d9:45:48:ab:d8:ce:b8:b9:5b:b1:53:68:e8:9a:57: e6:ef:90:94:f8:05:b5:2b:52:24:6a:48:a7:d2:8f: a8:47:1d:1f:e4:41:3b:b4:77:9c:ec:cb:10:c1:6d: 3c:05:5d:4d:fc:76:8a:8c:c0:74:dc:bf:0f:99:44: 85:8a:c0:ef:86:ee:72:38:62:c4:f9:ce:69:b0:25: 89:31:ae:d1:73:59:fd:e9:cb:88:90:1e:35:6d:7c: 8d:79:1a:09:77:25:85:63:c9:d4:83:1c:c4:a5:31: 2c:54:70:cc:47:b4:75:f9:96:6b:75:13:fe:07:23: c5:67:65:70:e8:0e:80:1e:e1:0d:18:82:34:cc:ba: 23:88:b9:01:04:c2:da:fd:1c:0e:9b:b9:a9:a5:73: be:39:f9:71:da:33:1c:33:fd:59:4f:c6:b6:08:dc: 49:40:30:70:b7:bb:df:1d:ad:f4:f8:7f:b5:ab:a3: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E2:A6:F1:2C:48:E7:D7:68:8A:9B:0C:71:18:D2:A7:F1:C4:FE:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5b0e913e-6331-377e-ad38-c00fd513c783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl X509v3 Authority Key Identifier: keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc53:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:57:3c:4e:af:7c:06:10:d9:36:a0:70:51:31:e7:43:09:c8: 59:6a:35:8a:35:67:15:99:61:b4:f3:63:c0:0a:d2:5b:23:16: ad:66:c9:eb:02:2e:d5:d6:57:d9:11:a1:4c:98:fc:51:72:33: 94:63:3f:03:33:4d:4b:ba:b1:eb:be:27:18:f3:e8:a9:fb:bc: 3c:24:cf:63:46:5d:eb:51:15:7e:9e:cd:5f:1b:24:08:fa:77: 5a:35:ad:e9:14:00:ea:54:83:ad:0f:85:12:48:e6:62:ba:52: 35:c7:58:b1:a8:22:d7:38:ae:50:8a:92:97:7a:17:79:d6:04: f5:fb:0d:48:16:90:48:7c:e5:f5:2b:4f:6c:67:c9:97:64:b5: 0b:df:31:d1:01:c5:37:99:01:dd:e4:cc:7b:09:31:45:47:f1: 93:c5:df:30:3b:6c:28:59:b9:df:87:84:ba:20:5e:3e:01:f3: 8f:eb:b3:ec:9d:64:4b:b7:5a:aa:10:33:c1:d1:33:13:29:d5: f5:f6:b4:af:20:f9:be:c5:c1:fd:01:4a:63:50:06:91:e2:54: 78:6f:7a:2c:1d:e4:86:78:68:5a:f3:26:57:57:23:a7:71:6e: 6f:2b:8e:c3:15:50:f8:4f:e9:95:11:7a:1a:a4:23:82:a7:e4: 72:5a:cb:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsLdqsocBI+avQekIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc0MmRkZTMtODRhMy00NDg4LWEwMWMtNTI1NzM0YzRk ODFiMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZDc5ZThlYmYtODIxYS00MDJlLWI3Y2MtNjljZDJhZWM3YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAEeVJ4ml7d23hzdZSJj0tQxTu3Ul8IX1n25 ToNOqnq7+wzl2A0Pv70TUykhnsm5J1XlMArXxARuhhEphw6ZOhXkjsDtqkkTV+fZ RUir2M64uVuxU2jomlfm75CU+AW1K1Ikakin0o+oRx0f5EE7tHec7MsQwW08BV1N /HaKjMB03L8PmUSFisDvhu5yOGLE+c5psCWJMa7Rc1n96cuIkB41bXyNeRoJdyWF Y8nUgxzEpTEsVHDMR7R1+ZZrdRP+ByPFZ2Vw6A6AHuENGII0zLojiLkBBMLa/RwO m7mppXO+Oflx2jMcM/1ZT8a2CNxJQDBwt7vfHa30+H+1q6NyQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDnipvEsSOfXaIqbDHEY0qfxxP4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NzQy ZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3MzRjNGQ4MWIvNWIwZTkxM2UtNjMzMS0z NzdlLWFkMzgtYzAwZmQ1MTNjNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTc0MmRkZTMtODRhMy00NDg4LWEw MWMtNTI1NzM0YzRkODFiLzU3NDJkZGUzLTg0YTMtNDQ4OC1hMDFjLTUyNTczNGM0 ZDgxYi5jcmwwHwYDVR0jBBgwFoAUgPSvREXaX/pZzpyoT5aC/zlDxi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NzQyZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3 MzRjNGQ4MWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8UwAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMRXPE6vfAYQ2TagcFEx50MJyFlqNYo1ZxWZYbTzY8AK0lsjFq1m yesCLtXWV9kRoUyY/FFyM5RjPwMzTUu6seu+Jxjz6Kn7vDwkz2NGXetRFX6ezV8b JAj6d1o1rekUAOpUg60PhRJI5mK6UjXHWLGoItc4rlCKkpd6F3nWBPX7DUgWkEh8 5fUrT2xnyZdktQvfMdEBxTeZAd3kzHsJMUVH8ZPF3zA7bChZud+HhLogXj4B84/r s+ydZEu3WqoQM8HRMxMp1fX2tK8g+b7Fwf0BSmNQBpHiVHhveiwd5IZ4aFrzJldX I6dxbm8rjsMVUPhP6ZURehqkI4Kn5HJay34= -----END CERTIFICATE-----Generated at Wed Nov 5 17:54:32 2025 by rpki-client