$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa File: 04e7a50e-fdc0-3566-ac52-d12172993b6b.roa (raw, json) Hash identifier: YJMnAPOe1d324Fb0r9IZ8do5GafOqK7xg/3VFZpQlxI= Subject key identifier: 81:A9:3A:82:3D:EA:DA:35:DE:2B:65:22:F8:E4:5D:7F:6F:1B:C2:8E Certificate issuer: /CN=5e6c5242-5ff7-40a8-b144-1f151915227e Certificate serial: 010D0C9F4328584BBFA59600C765F3AECC6A7C00 Authority key identifier: BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 8987 IP address blocks: 2602:fd3a:228::/45 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:96:00:c7:65:f3:ae:cc:6a:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6c5242-5ff7-40a8-b144-1f151915227e Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=02258f27-fdbc-4d1a-b92d-240984d5d5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f5:9e:39:43:cc:33:a4:ae:35:5d:5a:0e:7a: 5f:96:38:f4:38:b6:ae:19:ab:ec:f3:b5:64:fb:ef: ac:0f:0c:e7:ec:89:a3:10:f1:3e:6f:1e:0c:ae:b5: 26:1f:a9:5a:70:e4:a4:95:1f:a9:c1:95:2e:1c:1c: 5d:7d:27:ef:f4:33:a8:7d:f5:c4:9a:31:3a:e5:3a: 60:52:b4:d3:7d:92:c8:2b:ff:31:0a:70:85:c7:48: 02:6a:e7:a3:dc:39:55:de:80:38:fa:8f:bd:37:d2: a4:45:1e:e7:f2:2a:ae:89:68:bc:69:14:e6:44:b6: 48:6a:58:9a:63:c0:8b:4e:48:f1:8b:92:53:62:9b: 01:92:68:bb:58:95:95:b9:e7:c3:99:c1:99:5d:2c: 45:ee:d8:17:6a:80:cc:b9:4a:83:33:3e:5f:52:01: aa:52:2d:e4:5b:5f:49:16:8c:78:82:69:1f:8d:57: e5:f6:c0:35:16:13:d6:4a:4e:ed:9f:b4:ce:f3:3f: 9b:44:05:7d:de:b4:1d:21:44:a4:43:8e:cf:13:68: ff:94:c2:81:a8:b2:41:02:20:45:c1:89:df:b2:40: 7c:ad:42:b5:31:a4:ce:28:c7:d2:67:00:5d:83:8d: d7:82:33:0e:4b:38:8e:51:fa:0e:b9:06:99:d8:42: 1a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A9:3A:82:3D:EA:DA:35:DE:2B:65:22:F8:E4:5D:7F:6F:1B:C2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl X509v3 Authority Key Identifier: keyid:BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd3a:228::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:11:5b:e1:f2:13:83:8b:6a:3c:21:91:0c:e5:a8:a7:d6:f4: d2:c1:be:6d:78:b3:e0:56:0d:32:a9:72:85:d7:49:d5:45:fa: f8:2c:99:fc:f5:e0:fc:0f:e4:75:2e:ae:0f:8d:d4:e0:6e:f9: 75:94:b2:b9:d3:40:6a:6f:bc:1a:c9:de:f1:53:63:87:e0:11: 5c:81:73:45:f2:67:63:a6:f7:f8:9b:68:ac:0c:21:c7:6e:4d: 7c:52:0c:fc:34:68:02:33:57:d0:09:33:16:ee:4d:e7:64:d4: 12:bb:2d:69:c0:bb:0a:50:dd:ce:dc:52:8f:28:56:09:e0:87: ae:9f:93:58:79:27:e6:67:b4:03:df:dc:e0:fc:25:95:e0:54: 3f:2c:a8:63:87:28:11:c5:08:e8:66:cf:9e:62:21:94:c0:e6: 05:50:31:d4:42:bf:f2:af:5d:05:dc:a9:68:a5:06:8b:de:8e: 88:07:03:b5:1c:55:f3:71:de:61:6d:de:6d:9d:52:51:42:fc: 0b:31:63:b8:6d:6c:69:29:1b:47:8d:74:cb:1a:ec:16:d2:b6: 31:36:1f:ca:72:5e:a1:df:ec:bc:ae:7e:cf:12:89:17:fb:1e: 1f:95:ea:1a:dd:48:3a:8c:a6:75:1e:bc:62:6c:95:d9:cc:46: ea:91:3f:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pZYAx2XzrsxqfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU2YzUyNDItNWZmNy00MGE4LWIxNDQtMWYxNTE5MTUy MjdlMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MDIyNThmMjctZmRiYy00ZDFhLWI5MmQtMjQwOTg0ZDVkNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPWeOUPMM6SuNV1aDnpfljj0OLauGavs87Vk +++sDwzn7ImjEPE+bx4MrrUmH6lacOSklR+pwZUuHBxdfSfv9DOoffXEmjE65Tpg UrTTfZLIK/8xCnCFx0gCauej3DlV3oA4+o+9N9KkRR7n8iquiWi8aRTmRLZIalia Y8CLTkjxi5JTYpsBkmi7WJWVuefDmcGZXSxF7tgXaoDMuUqDMz5fUgGqUi3kW19J Fox4gmkfjVfl9sA1FhPWSk7tn7TO8z+bRAV93rQdIUSkQ47PE2j/lMKBqLJBAiBF wYnfskB8rUK1MaTOKMfSZwBdg43XgjMOSziOUfoOuQaZ2EIatwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIGpOoI96to13itlIvjkXX9vG8KOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZj NTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1MTkxNTIyN2UvMDRlN2E1MGUtZmRjMC0z NTY2LWFjNTItZDEyMTcyOTkzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWU2YzUyNDItNWZmNy00MGE4LWIx NDQtMWYxNTE5MTUyMjdlLzVlNmM1MjQyLTVmZjctNDBhOC1iMTQ0LTFmMTUxOTE1 MjI3ZS5jcmwwHwYDVR0jBBgwFoAUv34LCNAcIvjgxdR+Y9c7VtW41+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZjNTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1 MTkxNTIyN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL9OgIo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAwRW+HyE4OLajwhkQzlqKfW9NLBvm14s+BWDTKpcoXXSdVF+vgs mfz14PwP5HUurg+N1OBu+XWUsrnTQGpvvBrJ3vFTY4fgEVyBc0XyZ2Om9/ibaKwM IcduTXxSDPw0aAIzV9AJMxbuTedk1BK7LWnAuwpQ3c7cUo8oVgngh66fk1h5J+Zn tAPf3OD8JZXgVD8sqGOHKBHFCOhmz55iIZTA5gVQMdRCv/KvXQXcqWilBovejogH A7UcVfNx3mFt3m2dUlFC/AsxY7htbGkpG0eNdMsa7BbStjE2H8pyXqHf7Lyufs8S iRf7Hh+V6hrdSDqMpnUevGJsldnMRuqRPzc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:21:21 2025 by rpki-client