$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/dd8f9bbe-75a9-3e46-b8c4-d573cc5f97f2.roa File: dd8f9bbe-75a9-3e46-b8c4-d573cc5f97f2.roa (raw, json) Hash identifier: pygmVYkE52QELi9e9UV1qbD27JARuzue/mLa2ks8Njs= Subject key identifier: 94:81:F0:81:5F:EB:2E:87:C2:3B:04:CD:C1:58:95:12:78:86:49:F8 Certificate issuer: /CN=0d419888-80a0-4fd9-90ba-6342b677f849 Certificate serial: 010D0C9F4328584B9B3CE6891B4B17AA5F117480 Authority key identifier: 41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/dd8f9bbe-75a9-3e46-b8c4-d573cc5f97f2.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 13378 IP address blocks: 2602:f7b8::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e6:89:1b:4b:17:aa:5f:11:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d419888-80a0-4fd9-90ba-6342b677f849 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=96449b28-974d-4256-94db-17ab898389b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:be:7d:ea:0f:3a:d0:55:91:c3:32:43:69: 17:e0:54:ce:c4:75:9c:3d:b1:24:fa:08:28:52:6f: ac:9e:12:a2:c7:60:26:2e:53:d4:9a:49:f2:5a:69: 57:33:15:e0:7f:91:45:58:35:d9:68:a5:f5:8b:01: b3:b1:e9:6b:33:1e:c4:aa:f3:00:76:e0:74:72:81: f1:02:32:c5:df:4f:b9:4f:14:79:4c:d3:05:2e:6c: b5:86:c3:bc:74:c5:9a:05:5a:84:77:93:8d:d6:26: c7:6e:67:96:f6:74:97:60:f8:0c:74:6f:45:c9:41: f4:74:20:02:8f:30:2a:a2:be:8e:7f:17:71:5d:dd: 19:de:a6:80:cd:c7:f4:21:f8:ea:0d:23:c2:53:d3: c2:ca:79:84:b4:81:08:8c:3f:35:14:8a:34:63:93: 8c:71:14:27:4b:27:d6:6c:55:19:48:1f:de:aa:99: 52:45:13:61:c3:32:75:36:e9:79:c0:78:8e:79:c8: 06:31:99:f0:bd:1a:6e:9b:91:c2:dd:b7:71:1a:95: 4e:be:f6:d1:a0:2e:1a:b1:69:5d:f5:af:82:b1:4d: 3d:5a:a9:9f:d1:c4:b2:80:7a:55:f1:95:71:de:c8: d6:04:d4:de:51:db:c6:07:ce:26:fc:24:b2:e3:ea: 24:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:81:F0:81:5F:EB:2E:87:C2:3B:04:CD:C1:58:95:12:78:86:49:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/dd8f9bbe-75a9-3e46-b8c4-d573cc5f97f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl X509v3 Authority Key Identifier: keyid:41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7b8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:97:86:6e:13:8a:cc:a4:b3:73:fa:ce:aa:d1:19:99:2f:d3: c2:0b:b2:49:06:93:1d:05:26:fb:4e:23:25:58:87:a0:f6:ae: 2a:ff:68:15:d3:63:eb:a2:ab:5d:4a:30:7e:33:98:db:13:7a: 1c:4b:b4:21:9e:52:5a:b0:8e:53:e8:2f:2d:81:fc:be:10:91: 71:c6:4e:3f:8a:89:97:3b:28:67:65:81:62:7e:47:74:69:26: 93:64:00:6c:e9:49:01:5b:f2:38:9f:ad:5f:63:51:86:86:ce: 32:a8:68:16:d8:65:d6:77:22:ab:ce:62:0a:a7:8e:69:0c:37: 17:d9:89:e9:36:33:b4:83:9d:aa:9c:30:ce:87:f9:ca:73:59: 42:9d:4b:53:34:74:f5:7f:2f:71:80:f9:ca:ed:00:ba:99:d3: 56:5a:6c:8a:1c:5a:f9:4b:92:e4:4e:52:6b:d0:e9:1e:27:f9: 5f:1e:36:5e:7e:80:82:57:42:7b:a2:77:45:56:c2:7b:34:ec: 89:aa:52:2c:e1:0a:89:87:9e:f4:be:23:c2:d0:cf:f5:e3:6c: 9a:d8:90:7b:07:b3:46:11:5b:4e:ca:5e:25:c0:0b:7b:88:7f: 58:b1:a1:5e:fd:53:d0:e1:5c:15:07:44:51:64:43:5e:50:53: 48:e6:df:d9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEubPOaJG0sXql8RdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ0MTk4ODgtODBhMC00ZmQ5LTkwYmEtNjM0MmI2Nzdm ODQ5MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk OTY0NDliMjgtOTc0ZC00MjU2LTk0ZGItMTdhYjg5ODM4OWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRe+feoPOtBVkcMyQ2kX4FTOxHWcPbEk+ggo Um+snhKix2AmLlPUmknyWmlXMxXgf5FFWDXZaKX1iwGzselrMx7EqvMAduB0coHx AjLF30+5TxR5TNMFLmy1hsO8dMWaBVqEd5ON1ibHbmeW9nSXYPgMdG9FyUH0dCAC jzAqor6OfxdxXd0Z3qaAzcf0IfjqDSPCU9PCynmEtIEIjD81FIo0Y5OMcRQnSyfW bFUZSB/eqplSRRNhwzJ1Nul5wHiOecgGMZnwvRpum5HC3bdxGpVOvvbRoC4asWld 9a+CsU09Wqmf0cSygHpV8ZVx3sjWBNTeUdvGB84m/CSy4+okOQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJSB8IFf6y6HwjsEzcFYlRJ4hkn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZDQx OTg4OC04MGEwLTRmZDktOTBiYS02MzQyYjY3N2Y4NDkvZGQ4ZjliYmUtNzVhOS0z ZTQ2LWI4YzQtZDU3M2NjNWY5N2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGQ0MTk4ODgtODBhMC00ZmQ5LTkw YmEtNjM0MmI2NzdmODQ5LzBkNDE5ODg4LTgwYTAtNGZkOS05MGJhLTYzNDJiNjc3 Zjg0OS5jcmwwHwYDVR0jBBgwFoAUQeDNvQAmJWZ21tpDmhJFbaSoFoMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZDQxOTg4OC04MGEwLTRmZDktOTBiYS02MzQy YjY3N2Y4NDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3uAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWJeGbhOKzKSzc/rOqtEZmS/TwguySQaTHQUm+04jJViHoPauKv9o FdNj66KrXUowfjOY2xN6HEu0IZ5SWrCOU+gvLYH8vhCRccZOP4qJlzsoZ2WBYn5H dGkmk2QAbOlJAVvyOJ+tX2NRhobOMqhoFthl1nciq85iCqeOaQw3F9mJ6TYztIOd qpwwzof5ynNZQp1LUzR09X8vcYD5yu0AupnTVlpsihxa+UuS5E5Sa9DpHif5Xx42 Xn6AgldCe6J3RVbCezTsiapSLOEKiYee9L4jwtDP9eNsmtiQewezRhFbTspeJcAL e4h/WLGhXv1T0OFcFQdEUWRDXlBTSObf2Q== -----END CERTIFICATE-----Generated at Wed Nov 5 13:28:51 2025 by rpki-client