$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa File: 86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa (raw, json) Hash identifier: 0EjHSwaV8PBBa/U3jA9WjRhwgN92wlCAmuo9C5Kd4QA= Subject key identifier: CC:B8:6D:B7:5C:E6:CA:9C:FB:AA:CE:E8:3A:9C:75:95:37:A0:C6:F8 Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F4328584BBB75976C7421FD6DD9AFCD00 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 40569 IP address blocks: 2602:f981::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:97:6c:74:21:fd:6d:d9:af:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=280a78ef-53aa-45c1-8faf-e58da1301776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:cb:72:4c:80:40:e8:02:8c:9f:9e:04:9c: d2:26:87:fb:0e:7d:98:67:ec:cf:31:3c:db:1b:b1: 34:a2:c7:d1:00:66:8a:9c:c6:8b:19:b0:7b:c5:34: 10:a9:02:99:b2:3e:61:7d:01:14:1b:59:d7:50:4d: 78:35:63:86:f3:ac:61:06:e3:e5:3c:2d:32:3e:66: a1:e6:d7:ce:b5:42:a1:c2:92:e7:ea:98:8b:66:a0: 62:3e:85:3b:6d:b1:3a:a5:c4:2c:19:27:f9:1c:ce: 74:33:b7:85:0e:39:45:95:f7:ee:a1:72:94:a8:06: 87:fe:03:62:8f:9a:df:f2:a0:4b:c9:4f:62:5c:3c: 52:aa:55:6b:35:70:d3:e0:cf:d3:93:fc:e2:e5:e1: 64:e1:9d:21:b9:43:00:10:57:87:c6:d9:f0:e1:1a: ca:41:24:b0:76:da:bf:9f:30:a6:02:7e:84:29:e4: 09:3f:65:2b:d8:ad:5a:4b:69:ea:32:39:f5:bd:4a: e7:15:87:aa:81:ec:7c:f3:ed:9e:e2:c0:2e:e0:c9: 55:f9:02:85:61:b1:81:3d:22:30:10:a5:a7:e8:03: d4:1a:e5:1b:3e:6a:e2:f2:10:ee:f3:2b:15:8a:4b: 67:a9:ce:ae:4b:0c:79:c3:5f:35:3b:ba:b1:53:fd: e2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B8:6D:B7:5C:E6:CA:9C:FB:AA:CE:E8:3A:9C:75:95:37:A0:C6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv6: 2602:f981::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:db:74:0a:d4:d4:fe:4d:d5:c2:6c:e2:6c:38:b0:65:55:a6: 5c:12:11:60:b2:29:a6:c8:48:0d:4a:b1:11:20:36:a5:84:f9: 7f:2c:3d:9d:21:05:e5:60:1e:45:d9:0f:78:0e:56:16:de:48: 33:17:80:23:bb:94:a9:35:e7:4e:1c:47:fa:8e:7d:58:af:f8: 23:4c:54:19:4b:20:8d:ba:49:ea:c8:fb:47:69:73:b7:ed:d0: 69:d4:a0:e8:83:ce:a9:00:e4:10:53:46:d8:f9:9d:ff:50:52: 8b:35:99:fe:83:76:e7:9e:47:01:d9:12:d1:67:57:b8:f2:78: b5:39:82:93:8b:d1:47:c0:e5:a6:ad:59:5a:fa:f2:d0:37:00: 98:7b:1c:90:ce:c7:66:b8:f9:f1:20:41:03:3e:26:29:d9:7d: a8:55:4e:9c:c1:2d:e8:c0:18:b0:5f:38:93:96:0d:ec:d6:25: ca:84:4c:e3:21:43:b4:19:be:35:4f:27:0a:f7:ef:1f:37:4f: 17:36:14:d3:cd:c1:dc:70:5a:2e:da:ee:0a:41:81:f5:55:cf: 15:3b:ed:76:b9:6c:3b:b2:fa:8f:ee:f3:70:51:be:e1:39:db: 7c:e5:9a:ea:7d:13:a3:e0:a4:fe:bc:fa:f3:1e:35:b4:d3:19: 2d:2a:d7:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu7dZdsdCH9bdmvzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MjgwYTc4ZWYtNTNhYS00NWMxLThmYWYtZTU4ZGExMzAxNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBzLckyAQOgCjJ+eBJzSJof7Dn2YZ+zPMTzb G7E0osfRAGaKnMaLGbB7xTQQqQKZsj5hfQEUG1nXUE14NWOG86xhBuPlPC0yPmah 5tfOtUKhwpLn6piLZqBiPoU7bbE6pcQsGSf5HM50M7eFDjlFlffuoXKUqAaH/gNi j5rf8qBLyU9iXDxSqlVrNXDT4M/Tk/zi5eFk4Z0huUMAEFeHxtnw4RrKQSSwdtq/ nzCmAn6EKeQJP2Ur2K1aS2nqMjn1vUrnFYeqgex88+2e4sAu4MlV+QKFYbGBPSIw EKWn6APUGuUbPmri8hDu8ysViktnqc6uSwx5w181O7qxU/3iSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMy4bbdc5sqc+6rO6DqcdZU3oMb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvODZjZmQ1NmEtOGVmMC0z ZjEzLWJmNTgtZmMzZDUxOWM0NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5gQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcNt0CtTU/k3VwmzibDiwZVWmXBIRYLIppshIDUqxESA2pYT5fyw9 nSEF5WAeRdkPeA5WFt5IMxeAI7uUqTXnThxH+o59WK/4I0xUGUsgjbpJ6sj7R2lz t+3QadSg6IPOqQDkEFNG2Pmd/1BSizWZ/oN2555HAdkS0WdXuPJ4tTmCk4vRR8Dl pq1ZWvry0DcAmHsckM7HZrj58SBBAz4mKdl9qFVOnMEt6MAYsF84k5YN7NYlyoRM 4yFDtBm+NU8nCvfvHzdPFzYU083B3HBaLtruCkGB9VXPFTvtdrlsO7L6j+7zcFG+ 4TnbfOWa6n0To+Ck/rz68x41tNMZLSrXCA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:31 2025 by rpki-client