$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa File: 99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa (raw, json) Hash identifier: WtXfrYLgzS70Bf/10t7zKouxfvq2siFWPbBLD6pduKw= Subject key identifier: CD:1E:A0:05:FD:61:CD:AF:40:4E:59:10:59:A3:AC:E3:D2:90:85:32 Certificate issuer: /CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Certificate serial: 010D0C9F4328584BA7CD1D990CAB3C9352257A40 Authority key identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 975 IP address blocks: 2602:f989::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:1d:99:0c:ab:3c:93:52:25:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=c68e3bf1-eff3-4483-84b3-c2fbb24456e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:54:db:13:d6:5c:44:9f:a1:ed:71:e6:55:28: a0:15:93:4a:cc:3e:f9:3d:0a:0a:22:fe:fc:5a:ad: 8c:70:e9:5f:e9:7f:33:57:9c:2a:5c:8f:07:dd:b3: 88:01:34:80:3c:a6:1a:bd:dd:20:5b:df:c2:52:46: 7c:f6:46:52:bc:22:db:93:a7:3d:96:a0:b2:01:be: 27:2c:31:85:fd:28:80:44:8b:31:3e:e0:ce:63:43: 67:76:df:ae:9b:0f:1b:ec:a7:d6:47:1d:ea:dc:96: dc:22:5d:5c:99:a2:29:cd:c0:8d:ba:5b:14:29:8a: 4b:8a:34:a0:3a:a2:de:5d:9d:dd:0e:ae:f2:7a:27: d4:ef:b1:a5:3c:27:75:1a:f5:ab:03:12:17:64:5a: 6b:aa:e1:7b:14:b6:d4:ae:4f:dd:d7:10:8e:c2:da: 6e:89:61:76:86:3f:91:be:d4:e7:9f:1e:7b:ef:9a: f2:b2:44:bf:76:36:1c:90:ff:e4:06:50:56:f5:63: f8:c6:a2:2e:9b:2e:16:2a:89:48:9f:eb:b9:04:c5: f0:d9:77:4b:d2:76:18:18:ef:3a:4e:06:79:66:dc: 98:56:b2:c8:07:98:27:e5:05:36:16:b3:af:90:df: 60:2e:8d:b8:bd:c3:0e:13:ea:c1:b8:36:39:40:ec: d6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1E:A0:05:FD:61:CD:AF:40:4E:59:10:59:A3:AC:E3:D2:90:85:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/99d33b50-80b5-3d57-a1e5-a4f1653e1c62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl X509v3 Authority Key Identifier: keyid:84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer sbgp-ipAddrBlock: critical IPv6: 2602:f989::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:96:eb:f6:ca:70:48:3d:8b:f4:af:e9:1f:fb:99:2e:e0:c9: a2:cb:28:72:ff:ee:0b:d5:20:b5:6c:b6:ed:12:29:c4:be:83: 0d:88:2e:cd:c1:51:c8:55:fc:9c:12:1e:b0:c1:6d:93:bb:d3: a9:ef:3e:71:49:91:e6:45:fa:73:6f:fc:5a:0e:1a:41:39:a7: a3:dc:1c:69:65:b4:5f:13:2c:07:91:ca:98:8c:f1:e8:03:00: cf:5f:04:6e:f4:55:4d:51:9d:92:85:8f:14:d8:7e:3e:2e:a1: 61:72:e5:c3:d4:90:b0:3e:ad:aa:53:b1:4f:1b:67:5c:21:0e: 47:32:bf:3c:8a:71:a9:34:80:13:00:85:a3:13:e7:87:c9:08: 3a:d8:aa:0e:45:28:8e:3a:4d:f8:a8:c6:e8:94:20:c8:7e:57: ba:a9:63:42:ee:5b:79:2b:e1:4a:dd:7f:33:89:45:9a:30:c6: 7f:58:a8:35:b7:0f:f5:2b:51:ce:f6:95:69:1e:05:d0:cf:70: 69:93:dd:d3:1f:ba:41:5c:24:18:d7:37:7d:34:fe:92:68:75: 27:57:17:4a:ef:e9:90:73:3d:77:2f:95:d3:64:14:bf:52:ad: 03:52:3b:a8:d5:a9:c0:6c:34:94:f3:56:2a:92:49:56:77:84: ad:dc:fe:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEunzR2ZDKs8k1IlekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmODliNzgtMWU4Ni00NjI5LWFiZGQtNjgyZjA0ZmZi MTY1MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YzY4ZTNiZjEtZWZmMy00NDgzLTg0YjMtYzJmYmIyNDQ1NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVTbE9ZcRJ+h7XHmVSigFZNKzD75PQoKIv78 Wq2McOlf6X8zV5wqXI8H3bOIATSAPKYavd0gW9/CUkZ89kZSvCLbk6c9lqCyAb4n LDGF/SiARIsxPuDOY0Nndt+umw8b7KfWRx3q3JbcIl1cmaIpzcCNulsUKYpLijSg OqLeXZ3dDq7yeifU77GlPCd1GvWrAxIXZFprquF7FLbUrk/d1xCOwtpuiWF2hj+R vtTnnx5775ryskS/djYckP/kBlBW9WP4xqIumy4WKolIn+u5BMXw2XdL0nYYGO86 TgZ5ZtyYVrLIB5gn5QU2FrOvkN9gLo24vcMOE+rBuDY5QOzWlwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM0eoAX9Yc2vQE5ZEFmjrOPSkIUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jYmY4 OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJmMDRmZmIxNjUvOTlkMzNiNTAtODBiNS0z ZDU3LWExZTUtYTRmMTY1M2UxYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2JmODliNzgtMWU4Ni00NjI5LWFi ZGQtNjgyZjA0ZmZiMTY1L2NiZjg5Yjc4LTFlODYtNDYyOS1hYmRkLTY4MmYwNGZm YjE2NS5jcmwwHwYDVR0jBBgwFoAUhH+i4RO33OhJGUcIgw3KK9qhbd8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jYmY4OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJm MDRmZmIxNjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5iQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANZbr9spwSD2L9K/pH/uZLuDJossocv/uC9UgtWy27RIpxL6DDYgu zcFRyFX8nBIesMFtk7vTqe8+cUmR5kX6c2/8Wg4aQTmno9wcaWW0XxMsB5HKmIzx 6AMAz18EbvRVTVGdkoWPFNh+Pi6hYXLlw9SQsD6tqlOxTxtnXCEORzK/PIpxqTSA EwCFoxPnh8kIOtiqDkUojjpN+KjG6JQgyH5XuqljQu5beSvhSt1/M4lFmjDGf1io NbcP9StRzvaVaR4F0M9waZPd0x+6QVwkGNc3fTT+kmh1J1cXSu/pkHM9dy+V02QU v1KtA1I7qNWpwGw0lPNWKpJJVneErdz+9A== -----END CERTIFICATE-----Generated at Wed Nov 5 07:06:21 2025 by rpki-client