$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa File: cf0646b3-a270-3e91-a9bb-005e44df8feb.roa (raw, json) Hash identifier: 58LZdh2vlFABCWfwSk+CUPH7hm92aeHD7hS7wBZwa0A= Subject key identifier: 28:47:A3:F6:14:82:AC:F7:CA:15:BC:D5:97:5A:F9:D8:A1:06:21:B2 Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584B3821A087CBFC87A01DC48900 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 399805 IP address blocks: 2602:fc88:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a0:87:cb:fc:87:a0:1d:c4:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=b9fd69d5-b48c-4b9d-bba5-75970a9f3127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:a8:11:ff:1f:1b:09:28:17:9c:91:93:b1: 20:57:22:fa:d8:6b:80:0d:49:4a:53:a7:7b:a9:7c: e5:d2:1b:32:fc:ba:05:9c:1b:af:c0:c6:59:ac:f0: 24:fe:34:29:2d:78:d0:d1:18:4c:76:91:89:1c:6e: 4b:7f:28:29:4c:98:c5:11:c3:8d:95:bb:ef:62:99: 26:3d:15:35:ba:17:35:41:d3:75:01:69:26:b5:d8: 10:bf:57:1b:a3:53:fa:a3:1f:5e:b2:7c:5f:07:e5: b3:08:29:ea:f6:76:09:b4:c9:1c:36:c8:31:26:01: 78:ad:d3:5b:25:46:8a:03:f0:3c:2f:fe:45:59:4b: 0c:f1:a2:6b:2b:b1:42:fe:ab:04:5c:a8:47:01:f6: 4b:e6:33:2c:a1:21:41:0d:25:ef:cd:d0:61:40:e0: 8e:3c:0b:a9:93:62:31:8e:d9:1f:3c:b1:c6:b2:d6: 33:69:a8:67:95:a5:76:a4:fd:66:24:ab:6d:e5:a9: e6:a0:74:78:ec:b8:16:81:96:10:2a:65:85:9b:e1: 25:3d:9c:db:20:63:85:b1:d7:fc:fa:86:3a:5f:82: 58:19:89:69:f0:9d:99:2d:a9:85:e3:14:6e:8d:1f: 06:c6:d4:35:b6:71:38:7f:8f:70:85:dc:60:62:47: 37:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:47:A3:F6:14:82:AC:F7:CA:15:BC:D5:97:5A:F9:D8:A1:06:21:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc88:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ba:9e:92:f4:8a:fe:06:bf:38:54:f3:c7:50:71:27:ac:f0: 8c:7d:e8:e6:46:2c:2e:a9:a8:71:6e:19:fc:f3:61:fe:c9:01: 21:99:e3:1b:1b:f2:a6:24:04:19:9a:e1:6a:66:4e:f5:92:23: 50:63:f0:bd:8b:0d:e2:35:46:07:eb:85:58:93:3e:4f:cc:7e: 24:e0:46:64:5f:92:88:d7:36:08:c9:63:18:b4:9b:bd:6b:d1: 0c:fb:4c:a8:73:42:d9:6d:ef:f3:f2:79:2c:dd:d1:73:ae:74: be:bb:f3:39:43:96:bb:46:ef:87:5b:c8:e4:6a:96:be:07:90: 35:e0:37:da:b1:9e:5c:b7:08:8f:da:7f:a2:52:59:e0:36:02: a9:60:75:5b:e7:dd:74:e5:bf:e3:c9:ef:d8:c6:30:c7:a3:e3: 4c:72:58:26:be:1c:81:bb:59:95:fd:19:6e:25:67:7c:8a:db: 4d:70:37:31:e8:78:27:43:17:6d:af:57:9c:17:1e:72:55:3b: 5c:88:44:18:6b:b3:b1:75:ff:ee:b2:8a:20:6f:92:dd:72:0e: 04:84:65:50:86:f0:ca:bd:09:c3:51:ab:5d:be:87:a5:b4:2d: 8e:a0:f9:7b:a0:ad:2a:00:4a:35:6f:86:ea:88:00:07:b5:ae: b1:42:3b:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs4IaCHy/yHoB3EiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YjlmZDY5ZDUtYjQ4Yy00YjlkLWJiYTUtNzU5NzBhOWYzMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgioEf8fGwkoF5yRk7EgVyL62GuADUlKU6d7 qXzl0hsy/LoFnBuvwMZZrPAk/jQpLXjQ0RhMdpGJHG5LfygpTJjFEcONlbvvYpkm PRU1uhc1QdN1AWkmtdgQv1cbo1P6ox9esnxfB+WzCCnq9nYJtMkcNsgxJgF4rdNb JUaKA/A8L/5FWUsM8aJrK7FC/qsEXKhHAfZL5jMsoSFBDSXvzdBhQOCOPAupk2Ix jtkfPLHGstYzaahnlaV2pP1mJKtt5anmoHR47LgWgZYQKmWFm+ElPZzbIGOFsdf8 +oY6X4JYGYlp8J2ZLamF4xRujR8GxtQ1tnE4f49whdxgYkc3LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFChHo/YUgqz3yhW81Zda+dihBiGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvY2YwNjQ2YjMtYTI3MC0z ZTkxLWE5YmItMDA1ZTQ0ZGY4ZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8iAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGi6npL0iv4GvzhU88dQcSes8Ix96OZGLC6pqHFuGfzzYf7JASGZ 4xsb8qYkBBma4WpmTvWSI1Bj8L2LDeI1RgfrhViTPk/MfiTgRmRfkojXNgjJYxi0 m71r0Qz7TKhzQtlt7/PyeSzd0XOudL678zlDlrtG74dbyORqlr4HkDXgN9qxnly3 CI/af6JSWeA2AqlgdVvn3XTlv+PJ79jGMMej40xyWCa+HIG7WZX9GW4lZ3yK201w NzHoeCdDF22vV5wXHnJVO1yIRBhrs7F1/+6yiiBvkt1yDgSEZVCG8Mq9CcNRq12+ h6W0LY6g+XugrSoASjVvhuqIAAe1rrFCO0w= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:14 2025 by rpki-client