$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa File: 21e1f23d-5f1f-317b-8982-26cebe1a6742.roa (raw, json) Hash identifier: v/hw99aAYD42xxkq1jUnadgGuWUHDeiTV5M3poveh+Q= Subject key identifier: 49:F2:93:E5:7C:6F:15:92:D3:A3:09:33:14:A8:BA:A0:C9:77:FF:BE Certificate issuer: /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Certificate serial: 010D0C9F4328584BBFA5A4C8A810AA3C75D61300 Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 398065 IP address blocks: 2602:817:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a4:c8:a8:10:aa:3c:75:d6:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=a99008c6-e988-491b-8d24-be458fae414b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:aa:fc:85:13:11:14:d8:e3:92:40:de:a1: f7:b4:c3:e4:c9:15:0e:35:71:0c:c4:bb:35:ce:e6: 11:59:86:06:32:ce:22:c2:58:75:35:df:77:f2:d0: 1a:0d:33:37:00:f1:5f:c0:7e:f7:c6:6b:fc:36:e2: 3c:ce:4f:f0:73:d3:57:29:70:06:f9:21:68:7b:4e: c3:8e:38:88:8a:b1:59:ce:d2:36:fa:f7:69:71:8c: 59:4b:20:ae:20:d2:1c:37:df:10:bd:7f:ee:38:4f: 74:2f:76:1c:a1:c9:16:d7:b1:ff:05:15:00:8a:16: 7e:29:de:9d:f7:02:01:94:c8:26:26:af:7e:51:85: a4:c5:19:6e:89:f0:ef:6c:bb:3d:b8:53:fb:a7:97: 73:74:78:5d:9b:03:04:72:60:f9:d2:a5:3a:13:91: 7b:31:ab:6a:0e:14:bf:1c:eb:ff:fb:90:12:ae:93: 04:97:77:9e:c4:f8:1e:85:51:6d:72:ef:d5:74:85: 03:1c:5e:4e:de:87:40:32:2c:ad:54:31:db:54:f9: 5a:2d:0c:a1:3d:5c:27:fd:81:7a:c8:43:d7:4d:e9: bc:45:8c:a1:7e:18:11:ed:e5:c1:01:06:19:43:d8: 7a:13:a4:d4:2a:5b:77:99:05:36:d8:69:9a:fd:22: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F2:93:E5:7C:6F:15:92:D3:A3:09:33:14:A8:BA:A0:C9:77:FF:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl X509v3 Authority Key Identifier: keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b6:2b:c3:ad:76:0e:4a:e5:1f:83:db:69:4f:bc:dd:49:4b: 07:27:43:2d:d6:f4:cc:91:0d:38:fa:12:ba:e7:73:db:79:8e: 94:07:5c:df:2e:12:51:95:e6:aa:ad:07:5b:04:4f:b7:de:db: bc:e8:74:a1:f2:f0:da:13:1e:e1:dc:d2:ea:a0:d4:1a:9d:7a: f4:15:d3:1f:8f:59:eb:d4:98:3d:37:bc:2e:dd:97:13:14:3b: a7:3f:8a:91:73:fd:de:73:ea:7b:58:66:0f:1c:56:e2:05:09: d1:26:43:51:4c:d8:a6:0c:19:c5:d6:fa:cd:83:dc:98:df:44: e0:ca:c0:22:98:43:3b:d3:b6:3b:28:fe:1d:d9:83:61:be:6e: 3b:b0:49:6b:82:a5:ff:ff:c3:84:4c:bd:f2:60:cd:c2:8a:b8: 9a:9d:05:ad:23:32:d3:7f:7e:74:fe:40:c7:f1:83:a2:ca:4d: bf:aa:7f:d6:23:a9:c6:47:99:ca:9b:10:6e:36:35:7b:7a:86: d9:cd:b7:8d:30:eb:15:b1:7c:bd:1a:eb:89:ba:09:80:d6:a2: 73:ba:c3:49:c1:ac:7c:95:55:b2:79:3c:cc:aa:0b:ea:24:53: 06:b5:8f:03:9b:23:51:bb:44:93:cb:56:9c:b5:71:a9:03:95: 68:18:f0:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/paTIqBCqPHXWEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY1MjE3NTktYjg4MC00YTdkLWJlOGItM2NlNzBlNGFi YTgzMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YTk5MDA4YzYtZTk4OC00OTFiLThkMjQtYmU0NThmYWU0MTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h6q/IUTERTY45JA3qH3tMPkyRUONXEMxLs1 zuYRWYYGMs4iwlh1Nd938tAaDTM3APFfwH73xmv8NuI8zk/wc9NXKXAG+SFoe07D jjiIirFZztI2+vdpcYxZSyCuINIcN98QvX/uOE90L3YcockW17H/BRUAihZ+Kd6d 9wIBlMgmJq9+UYWkxRluifDvbLs9uFP7p5dzdHhdmwMEcmD50qU6E5F7MatqDhS/ HOv/+5ASrpMEl3eexPgehVFtcu/VdIUDHF5O3odAMiytVDHbVPlaLQyhPVwn/YF6 yEPXTem8RYyhfhgR7eXBAQYZQ9h6E6TUKlt3mQU22Gma/SK/XwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEnyk+V8bxWS06MJMxSouqDJd/++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUy MTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3MGU0YWJhODMvMjFlMWYyM2QtNWYxZi0z MTdiLTg5ODItMjZjZWJlMWE2NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGY1MjE3NTktYjg4MC00YTdkLWJl OGItM2NlNzBlNGFiYTgzLzBmNTIxNzU5LWI4ODAtNGE3ZC1iZThiLTNjZTcwZTRh YmE4My5jcmwwHwYDVR0jBBgwFoAUB8KLUXEBd4+x1cBmbyFq1ySw5VQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUyMTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3 MGU0YWJhODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFzAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ62K8Otdg5K5R+D22lPvN1JSwcnQy3W9MyRDTj6Errnc9t5jpQH XN8uElGV5qqtB1sET7fe27zodKHy8NoTHuHc0uqg1BqdevQV0x+PWevUmD03vC7d lxMUO6c/ipFz/d5z6ntYZg8cVuIFCdEmQ1FM2KYMGcXW+s2D3JjfRODKwCKYQzvT tjso/h3Zg2G+bjuwSWuCpf//w4RMvfJgzcKKuJqdBa0jMtN/fnT+QMfxg6LKTb+q f9YjqcZHmcqbEG42NXt6htnNt40w6xWxfL0a64m6CYDWonO6w0nBrHyVVbJ5PMyq C+okUwa1jwObI1G7RJPLVpy1cakDlWgY8L4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:59 2025 by rpki-client