$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/acfc81bd-39bf-39a7-9219-e815d915a041.roa File: acfc81bd-39bf-39a7-9219-e815d915a041.roa (raw, json) Hash identifier: lPRGfRlE6NpYAlgnAVmo1ffSJyG9Sk+luyDU3uaw1B8= Subject key identifier: 71:E4:9B:88:23:27:74:32:3C:8B:29:E7:E4:15:D2:26:4B:61:0E:3E Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584BB88D248C81CC188C5BDB8BF8 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/acfc81bd-39bf-39a7-9219-e815d915a041.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 38047 IP address blocks: 2602:f83b:a202::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:24:8c:81:cc:18:8c:5b:db:8b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=9df9ad13-5b17-4ce3-a7dd-d6dfb42a8ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:f7:59:c4:5f:46:a3:71:3d:fb:67:ed:02: 1e:31:db:ba:a0:74:da:e0:c0:e2:be:33:7b:63:e4: 8e:53:39:8d:2e:04:b3:60:f5:17:dd:94:14:0d:79: 95:af:fe:34:20:03:3a:e4:36:85:09:b8:2a:a7:b2: cd:24:1a:67:4e:71:b8:c2:15:f4:45:4f:99:48:0c: 21:ae:41:8d:25:da:ed:dc:0c:d9:ca:80:99:6b:a0: 96:a1:42:87:10:83:93:2c:74:e5:20:30:05:f3:e6: b8:f6:19:0f:da:1b:30:ed:3c:99:e2:fa:ec:d3:03: 05:b9:53:48:95:16:9a:1c:33:a8:7b:4a:af:48:80: dc:f7:47:4a:92:d1:dd:c3:32:c9:c9:e9:88:8f:7b: c0:9a:6c:ed:e4:cb:3c:e5:84:26:5e:f4:8e:0e:93: a9:1e:d7:d5:78:4f:0c:b7:98:2f:2f:55:4d:65:52: c5:c9:ed:70:4d:21:ba:b6:a3:ab:20:2b:9d:72:d3: 36:49:b0:97:ea:d6:2c:e4:87:62:64:d0:c9:a5:05: ba:60:8c:df:bb:b2:b2:25:d1:4b:3f:fd:d6:3e:71: 4a:02:6c:19:5b:94:77:eb:8d:72:23:a0:da:a0:79: 57:4c:82:f5:be:c4:aa:7e:fa:03:8b:08:fe:73:34: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E4:9B:88:23:27:74:32:3C:8B:29:E7:E4:15:D2:26:4B:61:0E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/acfc81bd-39bf-39a7-9219-e815d915a041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv6: 2602:f83b:a202::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:38:e0:58:52:bc:27:3b:b9:4b:6b:ce:96:20:f8:40:66:b7: ad:cf:99:e2:0e:fe:16:4e:f0:76:bc:83:b6:3a:7a:ac:fa:e4: 97:76:0a:a9:fe:98:f4:03:0d:f8:f4:bb:e0:45:77:42:46:6b: 16:da:fb:75:88:43:05:0d:65:5f:6a:88:65:ab:7e:54:2f:00: ce:f3:29:54:41:b5:ac:5c:17:ef:6e:72:b4:c0:ed:58:79:b6: 13:cb:67:8e:6e:9b:79:5d:5b:31:fc:38:ed:1b:e6:47:0c:25: 91:55:47:11:55:df:9d:fa:3b:8c:6b:73:6b:3d:e0:15:f6:a3: a4:a0:b8:f3:90:10:fb:4b:13:fc:be:cc:cc:0b:66:0f:6e:b3: 2d:27:05:05:ce:7f:b8:1c:df:ab:72:26:9a:5e:de:4c:59:17: 48:f8:e2:3d:fd:67:60:c5:1e:95:1b:9a:04:ce:76:44:f9:6f: b7:32:59:7c:36:75:65:74:66:70:bc:58:33:93:69:43:3b:54: 15:0d:00:73:35:20:d5:ef:7f:93:20:87:10:28:ed:b2:cf:fc: 70:4e:46:9d:38:3a:d8:b7:ff:7a:44:98:40:0f:49:ce:70:af: 1a:4b:0d:77:83:70:59:a3:95:1b:27:f0:40:31:71:7b:da:bc: 6d:65:df:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jSSMgcwYjFvbi/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWRmOWFkMTMtNWIxNy00Y2UzLWE3ZGQtZDZkZmI0MmE4ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKL3WcRfRqNxPftn7QIeMdu6oHTa4MDivjN7 Y+SOUzmNLgSzYPUX3ZQUDXmVr/40IAM65DaFCbgqp7LNJBpnTnG4whX0RU+ZSAwh rkGNJdrt3AzZyoCZa6CWoUKHEIOTLHTlIDAF8+a49hkP2hsw7TyZ4vrs0wMFuVNI lRaaHDOoe0qvSIDc90dKktHdwzLJyemIj3vAmmzt5Ms85YQmXvSODpOpHtfVeE8M t5gvL1VNZVLFye1wTSG6tqOrICudctM2SbCX6tYs5IdiZNDJpQW6YIzfu7KyJdFL P/3WPnFKAmwZW5R3641yI6DaoHlXTIL1vsSqfvoDiwj+czQtAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHHkm4gjJ3QyPIsp5+QV0iZLYQ4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvYWNmYzgxYmQtMzliZi0z OWE3LTkyMTktZTgxNWQ5MTVhMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4O6IC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEs44FhSvCc7uUtrzpYg+EBmt63PmeIO/hZO8Ha8g7Y6eqz65Jd2 Cqn+mPQDDfj0u+BFd0JGaxba+3WIQwUNZV9qiGWrflQvAM7zKVRBtaxcF+9ucrTA 7Vh5thPLZ45um3ldWzH8OO0b5kcMJZFVRxFV3536O4xrc2s94BX2o6SguPOQEPtL E/y+zMwLZg9usy0nBQXOf7gc36tyJppe3kxZF0j44j39Z2DFHpUbmgTOdkT5b7cy WXw2dWV0ZnC8WDOTaUM7VBUNAHM1INXvf5MghxAo7bLP/HBORp04Oti3/3pEmEAP Sc5wrxpLDXeDcFmjlRsn8EAxcXvavG1l3/w= -----END CERTIFICATE-----Generated at Wed Nov 5 06:26:46 2025 by rpki-client