$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa File: 7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa (raw, json) Hash identifier: IoMxVZzgJejiF4U/+cGTYV5DEphouc6j7dPANT6miuA= Subject key identifier: FD:A1:68:AB:89:C0:E4:82:44:8A:FC:31:0A:54:CB:BF:BC:24:A6:B8 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584B82D08B77C5573CC359B9E000 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa Signing time: Mon 13 Oct 2025 19:02:59 +0000 ROA not before: Mon 13 Oct 2025 19:02:59 +0000 ROA not after: Sun 11 Jan 2026 20:02:59 +0000 asID: 11017 IP address blocks: 2602:f98b:20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:d0:8b:77:c5:57:3c:c3:59:b9:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Oct 13 19:02:59 2025 GMT Not After : Jan 11 20:02:59 2026 GMT Subject: CN=3e3e9bca-bc07-4630-8d79-abaad786c524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:88:e0:2c:bc:fe:38:83:e0:0c:b7:21:2a: ba:b3:65:6a:34:e0:ed:4f:e3:88:74:13:42:28:cd: e0:e9:c9:2e:93:cb:84:28:f3:49:f1:6e:21:6b:d8: 88:ac:73:e1:2b:c6:d7:81:41:9a:92:cd:a0:be:83: 62:63:91:ee:4b:8c:ea:db:44:6b:04:77:f2:03:ea: dd:de:a7:e5:3e:2c:2e:4f:7c:c5:da:15:66:6f:45: c4:a8:d6:58:65:89:ed:a9:1d:06:e0:ff:74:6b:81: 34:43:c9:fc:aa:19:40:6f:00:ae:cb:6f:0b:37:0e: fe:c3:b2:5c:85:89:cc:20:80:d8:7c:88:42:38:4f: 67:86:a8:94:ea:f3:ac:27:f7:21:6a:4b:3f:dd:95: 0d:c5:be:5c:e3:58:c1:95:51:04:e1:4b:d7:36:e1: 96:c8:f5:4d:a6:23:69:4b:e3:f2:32:3d:a0:48:67: 38:86:69:1b:65:2b:75:bd:c3:56:41:59:39:61:15: 70:e2:c8:6b:a6:89:2d:c0:b2:ff:bf:f3:9d:34:6c: b7:68:9a:3f:3b:78:58:90:d0:fd:f3:9f:f3:67:60: d0:f0:41:6f:ff:db:1b:2e:1b:eb:79:b6:54:70:4c: 59:37:78:7c:92:ea:ab:e7:03:65:92:eb:c8:c8:57: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A1:68:AB:89:C0:E4:82:44:8A:FC:31:0A:54:CB:BF:BC:24:A6:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2c:cf:f8:06:ed:8a:39:76:e7:aa:1a:fa:8b:1c:2b:a1:f3: 37:4f:b8:f0:db:9c:e1:4e:01:0b:13:73:f8:dd:4a:c1:3d:f0: 7e:18:fb:d0:17:82:8f:23:9e:82:e5:2c:b7:e8:af:32:44:ed: 53:a1:70:a1:a4:9e:6c:6f:1b:93:63:9d:d7:c3:88:3f:43:f7: 5a:d3:52:d6:31:0b:a6:cc:4d:9b:28:9a:eb:8c:58:d1:eb:01: 03:e7:09:6f:de:69:85:06:1d:fd:3d:02:10:97:89:b7:10:a6: 37:cb:42:14:a6:2c:79:4c:e6:01:af:98:00:bc:e2:1f:83:f4: 25:e6:00:c7:3e:16:95:73:d8:e3:55:5f:c5:e7:63:f8:14:ca: cd:d6:3f:1b:86:28:f4:e5:c9:19:97:79:62:40:91:a2:d1:48: c1:0a:50:72:03:3f:22:79:18:84:bf:97:3d:a5:29:44:78:e7: 62:eb:5b:a4:c3:46:d4:b8:44:10:a1:8a:0f:25:ca:d4:97:28: ac:c2:f0:3a:f6:59:ef:4d:01:76:d0:6b:ed:c1:92:e0:e9:8d: e1:d4:72:35:38:73:76:f5:5a:df:58:88:f9:69:c7:80:3e:a9: 81:ec:b6:53:c1:41:be:f8:9e:54:84:0b:1d:bb:54:29:9b:05: c3:34:90:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuC0It3xVc8w1m54AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MTAxMzE5MDI1OVoXDTI2MDExMTIwMDI1OVowLzEtMCsGA1UEAxMk M2UzZTliY2EtYmMwNy00NjMwLThkNzktYWJhYWQ3ODZjNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4aI4Cy8/jiD4Ay3ISq6s2VqNODtT+OIdBNC KM3g6ckuk8uEKPNJ8W4ha9iIrHPhK8bXgUGaks2gvoNiY5HuS4zq20RrBHfyA+rd 3qflPiwuT3zF2hVmb0XEqNZYZYntqR0G4P90a4E0Q8n8qhlAbwCuy28LNw7+w7Jc hYnMIIDYfIhCOE9nhqiU6vOsJ/chaks/3ZUNxb5c41jBlVEE4UvXNuGWyPVNpiNp S+PyMj2gSGc4hmkbZSt1vcNWQVk5YRVw4shrpoktwLL/v/OdNGy3aJo/O3hYkND9 85/zZ2DQ8EFv/9sbLhvrebZUcExZN3h8kuqr5wNlkuvIyFfXGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP2haKuJwOSCRIr8MQpUy7+8JKa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvN2ZkZjk4MjEtYWZjMi0z ZjQ4LTllMmMtZWE1MzU0ZWU2ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5iwAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4sz/gG7Yo5dueqGvqLHCuh8zdPuPDbnOFOAQsTc/jdSsE98H4Y +9AXgo8jnoLlLLforzJE7VOhcKGknmxvG5NjndfDiD9D91rTUtYxC6bMTZsomuuM WNHrAQPnCW/eaYUGHf09AhCXibcQpjfLQhSmLHlM5gGvmAC84h+D9CXmAMc+FpVz 2ONVX8XnY/gUys3WPxuGKPTlyRmXeWJAkaLRSMEKUHIDPyJ5GIS/lz2lKUR452Lr W6TDRtS4RBChig8lytSXKKzC8Dr2We9NAXbQa+3BkuDpjeHUcjU4c3b1Wt9YiPlp x4A+qYHstlPBQb74nlSECx27VCmbBcM0kC0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:59:05 2025 by rpki-client