$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/0250aa95-d86f-369c-8422-1ae3fad493fa.roa File: 0250aa95-d86f-369c-8422-1ae3fad493fa.roa (raw, json) Hash identifier: b7/gJJDe586FYpIx6oZoGtWuGPo+JSDArxABH5FWscQ= Subject key identifier: EE:F5:52:33:0B:3B:F1:F7:EB:3A:21:2B:43:BE:DF:88:9B:41:4C:92 Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Certificate serial: 010D0C9F4328584B715CB61DC506466E5F11A3A0 Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/0250aa95-d86f-369c-8422-1ae3fad493fa.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 61112 IP address blocks: 2602:fa4f:f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b6:1d:c5:06:46:6e:5f:11:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=75391556-d7a7-4b46-bdf3-11ec564cf2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:61:2f:96:0b:cf:8d:e0:2b:35:28:8a:99: 36:16:51:b9:e2:58:56:ec:59:59:df:18:e9:97:c2: 06:e1:f7:c8:94:1e:b2:d9:6b:dd:b4:7c:fe:60:7e: 86:63:27:c4:79:8e:6b:e5:12:4c:cd:3d:f6:5d:8e: e9:e9:b9:87:c4:d1:5e:dc:19:3e:85:96:1f:7c:23: ff:8e:de:48:8f:e2:45:62:97:77:6b:26:83:65:51: 42:96:f6:90:1c:e7:21:15:da:a6:b7:b0:1e:59:d0: 52:e5:49:1d:5c:b5:48:f3:d5:22:a2:74:c7:9e:20: a1:4e:60:22:59:9d:c3:e6:7c:0d:61:db:a6:cb:13: fa:80:56:69:9f:f6:cc:49:d6:62:99:82:36:a4:e6: a9:8b:b7:9e:4d:05:47:3c:20:4f:05:7e:fc:5d:43: 04:16:05:f3:0b:52:08:10:09:bf:55:f7:b7:b9:5b: 35:e4:5e:bf:3e:f8:08:92:af:3d:29:53:fa:5a:58: d3:8a:5a:a6:6a:ac:79:75:36:30:07:b6:bc:81:3c: 88:ca:37:02:a6:de:f1:5a:0e:59:9c:42:9f:41:97: dc:57:bb:f0:05:fd:4a:2d:66:a6:90:7a:71:4c:1e: e8:d7:a0:1c:a8:bd:4e:a7:e5:bf:2a:1a:ac:13:08: 5b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F5:52:33:0B:3B:F1:F7:EB:3A:21:2B:43:BE:DF:88:9B:41:4C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/0250aa95-d86f-369c-8422-1ae3fad493fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl X509v3 Authority Key Identifier: keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa4f:f0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:65:6b:1b:d1:04:cf:45:ef:a0:d9:81:f0:28:02:ed:70:4c: 7e:41:d3:a3:5d:5a:4c:4a:da:bd:6b:0d:1a:36:19:7c:6b:ad: ce:a5:89:07:9b:27:b5:33:40:2b:e6:aa:2d:3f:64:ae:e7:c0: f5:41:b6:c5:46:79:8e:9e:ab:b0:ed:2e:44:35:4c:ac:1b:c2: 35:44:e4:44:92:2e:4d:61:95:e0:78:a6:c6:96:97:3d:67:20: 99:56:3c:46:40:72:45:20:39:54:4f:fa:81:0f:9f:a6:3e:e1: 2a:84:90:da:29:ee:96:19:cc:ce:fb:e4:78:32:d1:34:3e:36: 0f:34:43:08:76:ac:43:55:be:fc:5c:64:23:07:43:22:16:75: 83:93:15:78:a5:77:82:ec:df:10:7e:89:7b:ea:5c:53:d1:4f: 4d:a2:90:19:19:58:46:59:9c:32:96:df:82:6f:be:42:08:93: 7d:8a:4d:5c:ad:5f:f0:eb:26:2a:4c:c9:0a:52:38:36:da:9f: 77:64:8f:a2:7b:a5:61:d7:f4:44:2a:26:52:07:bb:07:8f:fb: a8:7f:59:85:47:4b:46:6f:9c:10:64:05:a7:4c:44:34:19:cd: 0e:51:da:ca:f9:45:56:06:5c:38:a1:6b:07:70:a3:cc:01:cc: 83:96:f6:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXLYdxQZGbl8Ro6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2 YmY3MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzUzOTE1NTYtZDdhNy00YjQ2LWJkZjMtMTFlYzU2NGNmMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM9hL5YLz43gKzUoipk2FlG54lhW7FlZ3xjp l8IG4ffIlB6y2WvdtHz+YH6GYyfEeY5r5RJMzT32XY7p6bmHxNFe3Bk+hZYffCP/ jt5Ij+JFYpd3ayaDZVFClvaQHOchFdqmt7AeWdBS5UkdXLVI89UionTHniChTmAi WZ3D5nwNYdumyxP6gFZpn/bMSdZimYI2pOapi7eeTQVHPCBPBX78XUMEFgXzC1II EAm/Vfe3uVs15F6/PvgIkq89KVP6WljTilqmaqx5dTYwB7a8gTyIyjcCpt7xWg5Z nEKfQZfcV7vwBf1KLWamkHpxTB7o16AcqL1Op+W/KhqsEwhbEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO71UjMLO/H36zohK0O+34ibQUySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4 ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvMDI1MGFhOTUtZDg2Zi0z NjljLTg0MjItMWFlM2ZhZDQ5M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1 ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2 NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4 ZTU2NjZiZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6TwDw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGllaxvRBM9F76DZgfAoAu1wTH5B06NdWkxK2r1rDRo2GXxrrc6l iQebJ7UzQCvmqi0/ZK7nwPVBtsVGeY6eq7DtLkQ1TKwbwjVE5ESSLk1hleB4psaW lz1nIJlWPEZAckUgOVRP+oEPn6Y+4SqEkNop7pYZzM775Hgy0TQ+Ng80Qwh2rENV vvxcZCMHQyIWdYOTFXild4Ls3xB+iXvqXFPRT02ikBkZWEZZnDKW34JvvkIIk32K TVytX/DrJipMyQpSODban3dkj6J7pWHX9EQqJlIHuweP+6h/WYVHS0ZvnBBkBadM RDQZzQ5R2sr5RVYGXDihawdwo8wBzIOW9ls= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:14 2025 by rpki-client