$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/54b09de8-f12c-3e32-8666-1505aecbce63.roa File: 54b09de8-f12c-3e32-8666-1505aecbce63.roa (raw, json) Hash identifier: IoUPhGHhVmKTA59y0kNCk/NE+wbCXYYn5oqi1vW/qu0= Subject key identifier: 74:D1:12:01:07:50:6F:04:CB:E3:2B:4E:6B:83:5C:6C:1D:2B:2C:08 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584BBB75974B61B549D679EBE380 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/54b09de8-f12c-3e32-8666-1505aecbce63.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 8075 IP address blocks: 2602:f8d5:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:97:4b:61:b5:49:d6:79:eb:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=229b24ba-8884-4313-b277-b28a9baa9770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:06:28:17:aa:55:2a:97:7a:db:11:b2:f2: 1e:6e:db:5c:f9:3a:95:3c:14:cf:2f:77:c7:50:4d: 10:b2:9e:8c:d8:25:43:69:4e:d7:cf:57:4d:c0:80: 5d:f4:47:df:7a:af:48:f7:5f:fa:db:06:15:76:bc: b0:fd:e4:6d:fb:1a:40:6d:2a:ec:64:e5:6f:0a:4f: 9b:a7:2a:02:ed:91:63:64:13:ba:ec:38:1b:ba:5f: c5:56:c4:06:f6:bb:65:e3:93:f8:95:24:39:dd:70: 5d:37:75:56:e4:43:26:ae:c3:a4:ab:a9:b6:60:e3: 91:54:3d:06:39:4e:bb:fe:8c:c0:b4:fc:28:76:6b: 38:b0:3e:e3:b3:de:1a:f9:2a:4e:f3:cc:88:0c:06: 2c:03:d2:0d:7f:89:5e:2d:44:c0:36:0f:73:06:1e: 15:fe:96:4c:32:06:a8:1e:a9:8e:3a:b5:6a:7c:b2: 48:4f:c9:04:2d:89:56:c9:71:1e:2a:20:05:75:fd: 55:6a:c1:52:37:8f:cf:23:4a:b6:ff:6f:e2:eb:c6: 53:35:a6:02:b6:b3:20:4f:e1:80:9a:5f:f8:1a:a4: 47:96:51:14:9a:98:1a:23:ca:ce:4f:37:4c:0c:bf: 28:1c:c3:02:d9:fe:c6:70:62:80:06:99:db:f9:18: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D1:12:01:07:50:6F:04:CB:E3:2B:4E:6B:83:5C:6C:1D:2B:2C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/54b09de8-f12c-3e32-8666-1505aecbce63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8d5:a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:29:88:57:d8:c1:14:77:4b:b1:e0:5e:1d:60:83:10:30:fb: 0b:e4:34:71:1d:76:ca:60:a8:62:42:e4:0a:ef:0a:9d:33:cc: 2e:08:a9:08:de:51:da:40:b9:60:61:19:6b:d7:f6:be:3a:dc: 2a:a4:a7:46:bf:dc:cd:0f:b8:da:fe:33:94:be:64:d7:b9:42: d8:be:14:71:b1:b4:af:86:fa:a5:12:41:ec:b3:5c:82:3b:68: 54:bc:b2:d0:2f:44:ee:0d:1b:ca:f4:a8:af:12:e5:7e:f9:46: 52:12:c4:e0:f3:55:81:a4:f4:90:92:9e:17:68:a3:5c:c1:4d: 38:86:ac:ca:11:11:da:05:18:ac:36:c3:23:a6:bd:c9:d5:ea: 6a:cd:ef:1b:bd:82:b3:11:69:f2:e5:ac:a7:55:1b:39:ef:d1: eb:54:06:be:63:2a:4c:f8:76:e9:d9:a6:6f:a9:76:de:28:d4: b1:11:de:c5:43:60:76:58:99:da:67:9d:bf:4d:a4:0d:06:7f: 2e:25:2b:30:72:39:7a:78:47:6b:7b:bb:80:f9:6b:8f:72:3d: 40:aa:bb:b5:29:91:75:bb:2e:54:f7:96:3b:f4:51:52:9f:4b: cc:17:cb:23:a4:ba:37:75:18:7c:c2:15:77:1f:38:a4:f8:51: b2:7b:70:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu7dZdLYbVJ1nnr44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MjI5YjI0YmEtODg4NC00MzEzLWIyNzctYjI4YTliYWE5NzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqkGKBeqVSqXetsRsvIebttc+TqVPBTPL3fH UE0Qsp6M2CVDaU7Xz1dNwIBd9Effeq9I91/62wYVdryw/eRt+xpAbSrsZOVvCk+b pyoC7ZFjZBO67Dgbul/FVsQG9rtl45P4lSQ53XBdN3VW5EMmrsOkq6m2YOORVD0G OU67/ozAtPwodms4sD7js94a+SpO88yIDAYsA9INf4leLUTANg9zBh4V/pZMMgao HqmOOrVqfLJIT8kELYlWyXEeKiAFdf1VasFSN4/PI0q2/2/i68ZTNaYCtrMgT+GA ml/4GqRHllEUmpgaI8rOTzdMDL8oHMMC2f7GcGKABpnb+RhAQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHTREgEHUG8Ey+MrTmuDXGwdKywIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvNTRiMDlkZTgtZjEyYy0z ZTMyLTg2NjYtMTUwNWFlY2JjZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL41QCg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACopiFfYwRR3S7HgXh1ggxAw+wvkNHEddspgqGJC5ArvCp0zzC4I qQjeUdpAuWBhGWvX9r463Cqkp0a/3M0PuNr+M5S+ZNe5Qti+FHGxtK+G+qUSQeyz XII7aFS8stAvRO4NG8r0qK8S5X75RlISxODzVYGk9JCSnhdoo1zBTTiGrMoREdoF GKw2wyOmvcnV6mrN7xu9grMRafLlrKdVGznv0etUBr5jKkz4dunZpm+pdt4o1LER 3sVDYHZYmdpnnb9NpA0Gfy4lKzByOXp4R2t7u4D5a49yPUCqu7UpkXW7LlT3ljv0 UVKfS8wXyyOkujd1GHzCFXcfOKT4UbJ7cO8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:54:39 2025 by rpki-client