$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa File: 76b42bc4-57ac-394d-ba88-7d614145118a.roa (raw, json) Hash identifier: NnqA7S5eAu9bxM1RT7sPOT9HI6aGXeIO5tXu3bM64BE= Subject key identifier: 43:A5:D4:8F:91:A5:A0:66:C8:31:4B:A7:CD:3B:C6:62:D0:C6:33:13 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584BBFA5958B1C8B88847D83BEA0 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 212149 IP address blocks: 2602:fbf5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:95:8b:1c:8b:88:84:7d:83:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=45de0ca0-71e3-4533-a6bd-cf454fc30960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:de:3b:3d:09:23:b6:76:e9:7f:67:16:8a: ef:85:93:49:a3:46:1a:09:30:0f:a6:34:09:fd:c8: 87:59:76:21:80:8c:52:a6:1b:14:d5:92:9d:64:b6: ce:54:b1:68:cc:35:5d:7f:05:c1:be:ae:64:a1:03: 46:1c:2d:7f:93:5a:5a:ab:e8:03:d4:8c:20:10:8e: 32:4d:9f:0a:f9:e5:1b:22:a9:bb:72:cb:cb:95:ae: 75:01:39:45:bf:21:4c:b9:9d:73:97:02:6d:bc:69: 22:25:6a:71:f7:35:9e:da:ef:e7:c9:d8:d3:f7:ae: 88:ec:4b:fa:c3:f4:69:8a:c3:bb:12:39:a6:67:78: 72:ab:e4:4d:c9:80:bc:e7:e9:a6:58:dd:43:a8:46: db:df:83:fb:ab:04:bb:86:0f:b0:da:c1:ff:32:a9: c8:08:7d:5c:5f:c5:d3:93:77:f8:d7:a1:85:a7:c9: ca:cb:3e:83:e4:47:93:6f:10:0a:e4:46:1c:83:e4: ef:31:5a:43:1c:ca:59:bb:6b:b1:be:77:d8:71:55: ce:c9:b4:7d:ed:1d:95:dc:2f:fc:ec:2a:e3:40:81: 18:ff:25:da:74:36:46:b0:8d:c7:7d:40:51:dc:7a: 50:07:f9:c6:96:31:f7:da:52:d0:cd:bc:81:33:21: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A5:D4:8F:91:A5:A0:66:C8:31:4B:A7:CD:3B:C6:62:D0:C6:33:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbf5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:cc:15:96:cf:b2:05:d8:bd:78:ed:f0:c4:e8:c4:cd:fa:e4: 8f:fb:c9:6d:ff:8a:1a:ab:73:ca:95:ba:07:19:28:82:d1:94: ff:dc:83:61:7e:d6:be:9b:d6:c6:80:ba:10:52:b8:ee:d4:63: 30:83:ba:1b:4c:ad:7d:bf:02:75:18:9a:a8:c2:35:88:a0:f2: 1b:76:99:2b:f4:1b:4b:6c:f1:ee:94:29:4b:d4:49:39:2c:ae: 69:0f:16:c4:0e:5d:3c:4d:af:8e:b2:27:c8:95:20:9e:c9:e9: 13:41:aa:06:73:ad:a3:d2:53:f2:f8:15:9a:be:0b:b7:cf:8c: b3:f4:5d:6e:c5:78:c0:24:2d:bc:b9:66:66:62:e3:8b:26:5c: 23:52:2a:31:20:44:80:41:b6:51:8e:57:85:0b:99:a6:35:09: 62:01:ff:f4:51:15:64:e0:b3:ef:98:35:b9:ed:30:fa:d3:52: 2b:32:2e:72:f3:cb:f2:98:86:a0:20:6d:91:e3:af:0e:ea:00: 37:c3:98:3a:95:b3:1e:6e:e5:90:e0:a7:7d:dc:13:ae:2d:7b: f7:be:95:37:97:b2:0f:00:77:29:27:8c:35:bc:2d:2d:98:37: 12:28:92:37:7e:5f:a3:98:5d:c6:c6:d1:ed:b7:b3:ea:07:d8: 9c:df:f4:9c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu/pZWLHIuIhH2DvqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NDVkZTBjYTAtNzFlMy00NTMzLWE2YmQtY2Y0NTRmYzMwOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DDeOz0JI7Z26X9nForvhZNJo0YaCTAPpjQJ /ciHWXYhgIxSphsU1ZKdZLbOVLFozDVdfwXBvq5koQNGHC1/k1paq+gD1IwgEI4y TZ8K+eUbIqm7csvLla51ATlFvyFMuZ1zlwJtvGkiJWpx9zWe2u/nydjT966I7Ev6 w/RpisO7EjmmZ3hyq+RNyYC85+mmWN1DqEbb34P7qwS7hg+w2sH/MqnICH1cX8XT k3f416GFp8nKyz6D5EeTbxAK5EYcg+TvMVpDHMpZu2uxvnfYcVXOybR97R2V3C/8 7CrjQIEY/yXadDZGsI3HfUBR3HpQB/nGljH32lLQzbyBMyHK5wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEOl1I+RpaBmyDFLp807xmLQxjMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzZiNDJiYzQtNTdhYy0z OTRkLWJhODgtN2Q2MTQxNDUxMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL79QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApcwVls+yBdi9eO3wxOjEzfrkj/vJbf+KGqtzypW6BxkogtGU/9yD YX7WvpvWxoC6EFK47tRjMIO6G0ytfb8CdRiaqMI1iKDyG3aZK/QbS2zx7pQpS9RJ OSyuaQ8WxA5dPE2vjrInyJUgnsnpE0GqBnOto9JT8vgVmr4Lt8+Ms/RdbsV4wCQt vLlmZmLjiyZcI1IqMSBEgEG2UY5XhQuZpjUJYgH/9FEVZOCz75g1ue0w+tNSKzIu cvPL8piGoCBtkeOvDuoAN8OYOpWzHm7lkOCnfdwTri17976VN5eyDwB3KSeMNbwt LZg3EiiSN35fo5hdxsbR7bez6gfYnN/0nA== -----END CERTIFICATE-----Generated at Wed Nov 5 14:58:24 2025 by rpki-client