$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/97a70c16-3543-3f7c-8c2a-42f698a941c5.roa File: 97a70c16-3543-3f7c-8c2a-42f698a941c5.roa (raw, json) Hash identifier: 5DdAmVEn0QNO8q565oXF2fOCCKzbHP3udE421eWAguw= Subject key identifier: 5D:22:59:CC:EE:93:6F:20:7B:31:32:68:52:01:AD:92:0B:26:E6:A8 Certificate issuer: /CN=5e6c5242-5ff7-40a8-b144-1f151915227e Certificate serial: 010D0C9F4328584BBFA596178C20CB5394F30080 Authority key identifier: BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/97a70c16-3543-3f7c-8c2a-42f698a941c5.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 2602:fd3a:228::/45 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:96:17:8c:20:cb:53:94:f3:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6c5242-5ff7-40a8-b144-1f151915227e Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=f2bfcd29-543c-4247-ba50-f7b3aa14515f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ac:bf:35:64:71:5f:ad:81:af:56:88:e2:b0: 3a:a1:bc:e2:51:ef:8f:bb:79:b9:8b:b8:ff:a9:4e: 1e:44:28:0b:c5:eb:d4:69:61:f6:8f:7e:6a:39:15: 37:e6:58:f7:8b:4b:fd:b5:7c:bd:c5:6e:b4:76:10: 88:e0:8f:c6:10:e8:a8:03:ae:65:44:69:fb:95:c5: ed:14:3a:d9:f7:b3:c6:da:bc:bd:e3:cd:ec:4f:a5: f4:08:bc:72:14:0a:a5:38:7d:02:c8:a3:b8:70:b6: 3e:5d:36:45:f5:50:ef:13:9c:51:27:0c:87:30:eb: f5:65:1d:d1:77:e7:5b:d3:ae:11:9f:8a:ec:52:a4: 51:83:fa:4a:f7:26:25:d9:05:95:63:c7:6c:27:cc: 56:55:30:79:63:07:0c:6d:ad:e6:d4:37:d2:4c:0c: 16:81:ec:6a:ee:f6:08:bb:92:5d:ab:08:c2:eb:bd: 68:7d:b4:59:3f:84:79:af:ce:f4:48:db:80:83:05: a9:44:7f:53:e0:92:af:f9:ce:22:d1:73:52:c3:34: 95:81:10:13:c0:33:9a:8d:d5:29:d0:c6:1d:86:bf: 9f:e8:9b:6d:16:65:36:be:15:4a:4e:3e:2a:64:0b: 79:e7:90:fb:36:b9:77:6f:68:18:47:33:ed:1e:48: 3c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:22:59:CC:EE:93:6F:20:7B:31:32:68:52:01:AD:92:0B:26:E6:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/97a70c16-3543-3f7c-8c2a-42f698a941c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl X509v3 Authority Key Identifier: keyid:BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd3a:228::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:25:e3:e2:f2:8c:9a:58:e1:bf:fc:9e:85:46:c6:92:b4:e2: c7:92:fe:05:4e:89:a1:7d:f9:33:82:d2:2e:28:fb:46:0d:6c: ac:7c:74:77:33:94:46:3a:ad:d4:1b:85:ea:2f:e4:84:c1:0f: 3e:0f:29:bd:9b:8d:79:3b:b5:4f:65:63:b9:e6:44:5c:92:2d: c6:21:4a:56:14:6c:1d:74:bd:3a:f9:38:16:bf:f7:96:c5:89: 2b:97:f7:87:bd:b1:4c:37:57:41:d2:ec:5d:74:8a:b7:03:25: be:7f:da:64:f2:3c:3c:c2:aa:82:66:39:b4:fe:f2:c2:6a:aa: 21:c3:db:38:26:f7:ca:df:b5:7c:e9:ff:99:db:fb:54:73:91: 60:af:1b:9b:17:02:54:d0:47:8d:f9:f1:db:ba:d1:98:a2:5d: 8d:fc:3b:88:ef:de:8a:b1:60:8f:80:27:37:fe:06:06:de:73: 81:27:11:04:76:29:5a:f7:aa:dc:61:b3:4c:75:c5:22:2f:7d: 74:df:65:7c:e2:74:51:f6:da:6f:56:e3:03:cc:0e:a8:6a:90: 2b:d0:2c:01:f1:60:a4:a9:8e:f1:d9:6e:e3:3f:88:5e:00:5e: 58:fb:cb:44:6a:9a:5a:c4:cb:f1:bd:1b:6c:51:8f:72:f4:68: be:43:1b:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pZYXjCDLU5TzAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU2YzUyNDItNWZmNy00MGE4LWIxNDQtMWYxNTE5MTUy MjdlMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZjJiZmNkMjktNTQzYy00MjQ3LWJhNTAtZjdiM2FhMTQ1MTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ay/NWRxX62Br1aI4rA6obziUe+Pu3m5i7j/ qU4eRCgLxevUaWH2j35qORU35lj3i0v9tXy9xW60dhCI4I/GEOioA65lRGn7lcXt FDrZ97PG2ry9483sT6X0CLxyFAqlOH0CyKO4cLY+XTZF9VDvE5xRJwyHMOv1ZR3R d+db064Rn4rsUqRRg/pK9yYl2QWVY8dsJ8xWVTB5YwcMba3m1DfSTAwWgexq7vYI u5JdqwjC671ofbRZP4R5r870SNuAgwWpRH9T4JKv+c4i0XNSwzSVgRATwDOajdUp 0MYdhr+f6JttFmU2vhVKTj4qZAt555D7Nrl3b2gYRzPtHkg8SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF0iWczuk28gezEyaFIBrZILJuaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZj NTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1MTkxNTIyN2UvOTdhNzBjMTYtMzU0My0z ZjdjLThjMmEtNDJmNjk4YTk0MWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWU2YzUyNDItNWZmNy00MGE4LWIx NDQtMWYxNTE5MTUyMjdlLzVlNmM1MjQyLTVmZjctNDBhOC1iMTQ0LTFmMTUxOTE1 MjI3ZS5jcmwwHwYDVR0jBBgwFoAUv34LCNAcIvjgxdR+Y9c7VtW41+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZjNTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1 MTkxNTIyN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL9OgIo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC0l4+LyjJpY4b/8noVGxpK04seS/gVOiaF9+TOC0i4o+0YNbKx8 dHczlEY6rdQbheov5ITBDz4PKb2bjXk7tU9lY7nmRFySLcYhSlYUbB10vTr5OBa/ 95bFiSuX94e9sUw3V0HS7F10ircDJb5/2mTyPDzCqoJmObT+8sJqqiHD2zgm98rf tXzp/5nb+1RzkWCvG5sXAlTQR4358du60ZiiXY38O4jv3oqxYI+AJzf+Bgbec4En EQR2KVr3qtxhs0x1xSIvfXTfZXzidFH22m9W4wPMDqhqkCvQLAHxYKSpjvHZbuM/ iF4AXlj7y0RqmlrEy/G9G2xRj3L0aL5DGzQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:37 2025 by rpki-client