$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/5237a8f7-1744-3119-91ea-26b40463c896.roa File: 5237a8f7-1744-3119-91ea-26b40463c896.roa (raw, json) Hash identifier: 6ZfWywJBFIj9aMFHkfgGLa0M8xhbT5xH3W0GbQZT+Mc= Subject key identifier: 33:7E:BD:41:61:19:B1:8C:27:91:B3:FA:7E:90:22:38:07:9F:5D:83 Certificate issuer: /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1 Certificate serial: 010D0C9F4328584B99D77C5D231F41BEB4E83580 Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/5237a8f7-1744-3119-91ea-26b40463c896.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397677 IP address blocks: 2602:800:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7c:5d:23:1f:41:be:b4:e8:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0aed3fba-228e-47a4-8be9-53f554454956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:b6:20:64:3c:ed:4d:f5:63:a5:9c:25:6c: 03:83:ad:b9:19:ba:41:45:a4:7e:e8:c0:67:ca:77: 1d:ea:b4:38:c8:12:09:9f:09:80:11:c9:62:b2:6b: 2d:95:bd:17:91:f3:8b:83:55:af:55:39:52:9c:c8: 7f:fb:3e:91:bb:8d:88:e9:64:4b:23:ac:bf:ef:2b: 49:08:a6:81:2a:41:72:9a:6c:26:69:89:5a:ac:b9: 9b:55:56:25:54:40:18:b5:21:2f:ec:a7:b8:4b:c7: b9:21:71:c7:68:7a:23:86:14:58:7a:22:8d:1b:55: 2f:10:d0:1e:ea:4e:fd:40:fa:b7:0d:f5:b9:11:e2: d1:7f:a9:41:57:76:74:08:56:54:4c:e0:e1:d8:e9: 1d:0c:91:0c:09:31:01:5e:9b:63:67:8b:49:6c:44: 42:c5:47:41:5a:b1:77:10:2f:d5:7a:3d:e1:b3:73: c1:96:6d:6d:38:bf:db:a3:11:ab:53:90:7f:54:4e: 7b:aa:c3:29:9a:01:d5:6c:d1:17:b0:3b:65:53:82: 40:29:81:a8:3d:3e:9a:9a:e9:36:07:77:80:a5:fb: 30:ef:97:3d:c9:18:d2:80:68:bb:55:12:56:94:80: b6:80:1b:bd:91:2d:fb:18:1b:f6:8f:0b:b7:4d:98: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7E:BD:41:61:19:B1:8C:27:91:B3:FA:7E:90:22:38:07:9F:5D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/5237a8f7-1744-3119-91ea-26b40463c896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl X509v3 Authority Key Identifier: keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer sbgp-ipAddrBlock: critical IPv6: 2602:800:1005::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:46:56:c3:95:7f:03:ea:24:52:50:79:ba:8c:18:ee:8a:14: 6d:f4:20:97:b1:21:eb:ca:4c:13:79:92:2a:86:fc:8f:30:91: 10:66:d6:00:66:56:1b:a8:0b:42:f3:c6:52:36:ff:fe:df:20: 38:70:ab:33:0b:71:ec:ee:21:23:7d:51:2c:36:2a:32:3b:36: 8e:63:64:a8:68:8e:b6:c2:53:f0:26:4d:9a:66:ea:9b:5e:a8: a4:28:c4:42:09:27:57:22:86:5a:75:de:94:4c:99:bc:57:00: c4:e2:3c:02:2f:7a:36:8e:ce:2a:ea:4a:a4:d4:12:cc:23:eb: 38:54:0b:48:5a:70:ba:78:0b:97:9a:2d:92:19:3c:88:b5:6c: cd:b6:2b:51:e0:57:fb:a7:55:40:99:64:56:3c:f3:e2:4b:28: 11:68:7d:92:88:f6:cd:3c:6f:09:b4:24:37:ee:ec:a6:e2:1c: e5:fb:ce:d4:cd:87:d9:72:5a:69:a0:8c:45:d0:7f:d8:55:1b: 6b:e6:80:8b:70:4d:51:c0:c6:00:9c:bc:e4:69:db:f8:8f:e8: 0c:94:91:c2:aa:eb:bd:e1:e1:df:a6:81:44:f4:ea:83:d3:f0: 29:89:ff:63:c0:1b:07:cc:aa:44:99:c7:8f:8d:2e:4c:1e:49: ce:3c:08:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ13xdIx9BvrToNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY2YTYxMjEtNzc4NC00Y2U0LWFmMzQtMGU1NjUzMGNl M2MxMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MGFlZDNmYmEtMjI4ZS00N2E0LThiZTktNTNmNTU0NDU0OTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpm2IGQ87U31Y6WcJWwDg625GbpBRaR+6MBn yncd6rQ4yBIJnwmAEclismstlb0XkfOLg1WvVTlSnMh/+z6Ru42I6WRLI6y/7ytJ CKaBKkFymmwmaYlarLmbVVYlVEAYtSEv7Ke4S8e5IXHHaHojhhRYeiKNG1UvENAe 6k79QPq3DfW5EeLRf6lBV3Z0CFZUTODh2OkdDJEMCTEBXptjZ4tJbERCxUdBWrF3 EC/Vej3hs3PBlm1tOL/boxGrU5B/VE57qsMpmgHVbNEXsDtlU4JAKYGoPT6amuk2 B3eApfsw75c9yRjSgGi7VRJWlIC2gBu9kS37GBv2jwu3TZgGJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDN+vUFhGbGMJ5Gz+n6QIjgHn12DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjZh NjEyMS03Nzg0LTRjZTQtYWYzNC0wZTU2NTMwY2UzYzEvNTIzN2E4ZjctMTc0NC0z MTE5LTkxZWEtMjZiNDA0NjNjODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY2YTYxMjEtNzc4NC00Y2U0LWFm MzQtMGU1NjUzMGNlM2MxL2U2NmE2MTIxLTc3ODQtNGNlNC1hZjM0LTBlNTY1MzBj ZTNjMS5jcmwwHwYDVR0jBBgwFoAUOi/POciCCweDJWU6WhBWA3QH/+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjZhNjEyMS03Nzg0LTRjZTQtYWYzNC0wZTU2 NTMwY2UzYzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIABAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABlGVsOVfwPqJFJQebqMGO6KFG30IJexIevKTBN5kiqG/I8wkRBm 1gBmVhuoC0LzxlI2//7fIDhwqzMLcezuISN9USw2KjI7No5jZKhojrbCU/AmTZpm 6pteqKQoxEIJJ1cihlp13pRMmbxXAMTiPAIvejaOzirqSqTUEswj6zhUC0hacLp4 C5eaLZIZPIi1bM22K1HgV/unVUCZZFY88+JLKBFofZKI9s08bwm0JDfu7KbiHOX7 ztTNh9lyWmmgjEXQf9hVG2vmgItwTVHAxgCcvORp2/iP6AyUkcKq673h4d+mgUT0 6oPT8CmJ/2PAGwfMqkSZx4+NLkweSc48CFg= -----END CERTIFICATE-----Generated at Wed Nov 5 03:57:39 2025 by rpki-client