$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa File: 5df2f2dc-f00c-33b4-a473-55bf6827f226.roa (raw, json) Hash identifier: jqOf8cVrO822C37KywDZ9tTlN3fMjPa7LQo3QI1rdBI= Subject key identifier: CB:8B:86:15:85:52:4C:65:3E:8C:2B:D3:7F:85:36:3E:64:3D:14:64 Certificate issuer: /CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Certificate serial: 010D0C9F4328584B33F1B4FE8A5ACD31FC135680 Authority key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 401612 IP address blocks: 2602:fb87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b4:fe:8a:5a:cd:31:fc:13:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=4d6ab4c4-fc6b-4cb8-bd3f-e9d2b6dfb1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d8:da:75:3f:8b:53:60:bc:40:ea:fc:a8:83: 18:c6:9f:c9:78:59:6e:fe:68:2e:ac:4f:c2:73:b8: 0e:93:76:f6:00:9e:af:e1:9c:a7:5d:ac:d2:61:cb: a0:23:48:ef:ae:73:30:be:0d:08:fc:9a:3c:d3:21: c2:a8:51:31:a5:50:10:89:3e:f4:00:50:32:3c:b3: 3f:fe:f3:f3:9b:c4:98:62:dc:c4:49:94:21:13:b2: fe:dc:be:c6:8b:f5:4b:36:8d:b3:ca:bf:80:b9:3b: 7f:d3:e1:4c:d4:30:84:cb:d3:be:d2:ab:c4:41:aa: e4:60:25:b8:46:5f:4d:19:17:55:94:81:80:d9:b6: b8:fe:d9:60:82:df:08:af:f3:c7:a6:ba:f7:be:ea: 8b:68:fc:cb:9e:3f:25:3c:95:1b:14:b9:b3:27:2f: 6a:bd:c0:c2:36:55:96:41:38:80:d4:95:1f:81:c6: 5a:fe:63:01:2e:6c:92:c2:1a:55:6f:02:7a:c9:b9: da:e3:32:a1:5e:80:67:9f:0b:c5:32:28:ad:b4:a2: 05:4c:34:2a:ad:5c:54:72:2f:9e:de:5c:6e:89:33: 9d:65:80:f9:09:bb:a7:65:2a:a1:5c:8e:c2:49:d1: d6:8a:b1:20:87:fb:1d:b3:99:1b:5d:28:92:94:5a: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8B:86:15:85:52:4C:65:3E:8C:2B:D3:7F:85:36:3E:64:3D:14:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl X509v3 Authority Key Identifier: keyid:23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb87::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:32:cd:cf:31:3c:92:a5:01:6a:1a:e2:75:bc:0d:23:4a:4e: 9e:c1:9b:d8:cb:dd:68:1d:e0:20:7e:af:ef:92:ae:78:86:ad: 75:7a:26:29:2e:48:78:b1:34:2b:93:ca:79:12:1c:c4:69:20: 05:41:f1:60:ee:0f:e8:a6:63:c0:3d:db:8c:c8:a0:fe:63:25: 93:bd:4c:62:79:5c:04:35:de:9b:1b:85:f0:42:d2:b3:5d:24: 53:23:a5:7c:9b:cc:7a:cd:6d:4d:22:99:6e:8c:e6:b4:8a:6f: 34:f5:63:ec:d9:93:57:3e:f3:bd:12:c6:09:f6:e5:46:24:86: 55:0b:ab:58:c9:ec:29:84:c7:a7:dc:d0:5a:c1:5a:e2:a5:87: 5d:76:2d:44:aa:7c:8e:0b:62:ef:32:85:30:8f:cc:d1:8e:07: d4:68:19:a3:89:ed:39:05:ff:bf:26:1e:5d:ab:30:da:0e:9a: 7e:7a:3b:7a:f4:d9:a2:98:07:ea:dd:f6:88:17:36:44:cc:09: 3e:bb:a9:33:c8:54:8b:61:12:8d:5b:61:77:56:45:85:ac:e7: 9f:45:97:ab:8c:3d:d2:83:d8:8a:e4:0e:0e:d7:ab:31:e7:7b: 7d:c3:c5:02:14:b3:dc:72:b3:2e:59:23:4d:21:c1:1c:1b:33: 35:0c:f6:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsz8bT+ilrNMfwTVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZmIyOWQtNTdhNC00OWM2LWFhODUtNDg5MmMxZjY5 YzQ4MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NGQ2YWI0YzQtZmM2Yi00Y2I4LWJkM2YtZTlkMmI2ZGZiMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tjadT+LU2C8QOr8qIMYxp/JeFlu/mgurE/C c7gOk3b2AJ6v4ZynXazSYcugI0jvrnMwvg0I/Jo80yHCqFExpVAQiT70AFAyPLM/ /vPzm8SYYtzESZQhE7L+3L7Gi/VLNo2zyr+AuTt/0+FM1DCEy9O+0qvEQarkYCW4 Rl9NGRdVlIGA2ba4/tlggt8Ir/PHprr3vuqLaPzLnj8lPJUbFLmzJy9qvcDCNlWW QTiA1JUfgcZa/mMBLmySwhpVbwJ6ybna4zKhXoBnnwvFMiittKIFTDQqrVxUci+e 3lxuiTOdZYD5CbunZSqhXI7CSdHWirEgh/sds5kbXSiSlFoQDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMuLhhWFUkxlPowr03+FNj5kPRRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wM2Jm YjI5ZC01N2E0LTQ5YzYtYWE4NS00ODkyYzFmNjljNDgvNWRmMmYyZGMtZjAwYy0z M2I0LWE0NzMtNTViZjY4MjdmMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDNiZmIyOWQtNTdhNC00OWM2LWFh ODUtNDg5MmMxZjY5YzQ4LzAzYmZiMjlkLTU3YTQtNDljNi1hYTg1LTQ4OTJjMWY2 OWM0OC5jcmwwHwYDVR0jBBgwFoAUI24Bv7J6VPsOidxfKDvh1fZXEYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wM2JmYjI5ZC01N2E0LTQ5YzYtYWE4NS00ODky YzFmNjljNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7hwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADEyzc8xPJKlAWoa4nW8DSNKTp7Bm9jL3Wgd4CB+r++SrniGrXV6 JikuSHixNCuTynkSHMRpIAVB8WDuD+imY8A924zIoP5jJZO9TGJ5XAQ13psbhfBC 0rNdJFMjpXybzHrNbU0imW6M5rSKbzT1Y+zZk1c+870Sxgn25UYkhlULq1jJ7CmE x6fc0FrBWuKlh112LUSqfI4LYu8yhTCPzNGOB9RoGaOJ7TkF/78mHl2rMNoOmn56 O3r02aKYB+rd9ogXNkTMCT67qTPIVIthEo1bYXdWRYWs559Fl6uMPdKD2IrkDg7X qzHne33DxQIUs9xysy5ZI00hwRwbMzUM9kQ= -----END CERTIFICATE-----Generated at Wed Nov 5 16:35:29 2025 by rpki-client