$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa File: 5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa (raw, json) Hash identifier: ajzDYBaonWjP402+5Ft3fMdo6KPz7zvJjQQr0RWLQs0= Subject key identifier: 89:7E:A4:45:FD:4D:95:F1:E6:5E:52:52:61:6C:CC:65:F8:86:A6:7E Certificate issuer: /CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Certificate serial: 010D0C9F4328584B63674069CDC523EDD4ACCF10 Authority key identifier: 29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 63302 IP address blocks: 2620:88:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:40:69:cd:c5:23:ed:d4:ac:cf:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=88484b33-0809-4d8c-b938-fa676dd8ea33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e1:6f:be:c0:dd:f5:ef:99:75:86:86:91:38: c4:fc:5e:4c:3b:f6:96:1c:53:e0:c3:08:61:c9:a5: ff:2e:0f:f5:5d:24:4a:a0:80:df:f4:8a:28:23:b5: b4:1b:53:be:a8:04:03:75:65:9a:5a:3e:2c:77:fe: a3:86:b8:42:45:b3:ab:3f:e3:23:d7:db:73:5b:10: 62:5e:f0:e3:8c:18:d1:d8:f3:2b:f1:f2:c7:80:cc: ab:a9:90:09:2b:e2:f7:bc:79:35:9f:a5:bb:38:86: 12:0c:e7:a2:4c:4f:af:74:b6:fc:ed:fd:e5:34:39: e1:65:a8:74:46:1a:2a:a3:81:ca:aa:58:ca:a3:46: b9:84:24:3a:3b:18:9a:d3:80:3a:9a:97:e2:36:4f: 37:72:52:b3:15:ed:55:21:e1:53:5d:6b:fa:83:05: 29:ae:c9:77:ec:3e:22:68:47:04:67:59:d9:19:b7: 78:61:62:15:42:f0:82:82:36:53:9d:4f:7b:0d:04: d3:71:73:ab:f9:37:c6:c5:d3:f1:d1:14:37:40:de: 0c:9e:e0:04:8f:40:2e:1b:b5:1e:ed:ef:ca:be:bc: d5:29:77:b6:87:4a:5c:db:e8:34:29:79:ac:67:7f: 16:26:20:f7:83:8d:ee:a0:bb:38:82:6a:1f:ea:36: d1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7E:A4:45:FD:4D:95:F1:E6:5E:52:52:61:6C:CC:65:F8:86:A6:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl X509v3 Authority Key Identifier: keyid:29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer sbgp-ipAddrBlock: critical IPv6: 2620:88:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2e:a4:35:37:f5:ca:3a:e4:4d:a6:63:5d:fd:48:24:fe:45: ab:df:ac:c9:1b:a4:07:b8:69:9e:67:a2:8a:f8:22:74:93:e8: 27:6d:e0:fb:c6:92:8e:5f:1f:47:37:47:2a:1b:41:9f:d5:20: dc:88:08:f8:5c:11:28:6b:6b:c3:4b:6e:77:a8:4a:5c:c6:af: 13:e4:25:2b:13:12:a2:0d:4a:1e:9b:33:48:0e:1a:69:6f:b9: ce:ce:ba:2a:4d:e5:10:e5:4e:b9:99:37:11:7b:bf:81:4d:4b: 69:16:85:c7:e8:d0:f6:c7:bf:f4:13:b9:27:2e:0c:87:6a:2f: 4e:61:77:cd:b7:62:b2:93:8b:bf:c0:59:26:4a:54:34:b9:80: 29:e9:15:62:a0:8e:5a:b5:87:37:e9:53:c0:9d:1d:f8:fc:21: d1:2b:e0:9d:25:60:75:10:0f:94:7b:99:c0:cb:c8:e6:91:e8: 2a:36:3c:36:f6:aa:fc:92:15:93:10:cf:a8:b1:99:f5:18:40: 0a:92:55:03:f2:66:e6:85:39:f8:16:6d:6a:f6:d6:80:a0:03: 33:4b:2e:3e:bc:29:c6:b8:f9:64:44:b6:89:6d:6b:67:9b:21: a9:19:f6:ce:c6:e5:be:a5:df:a5:b2:96:36:47:a4:63:9d:89: a0:97:f4:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ0BpzcUj7dSszxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y2MDJmYjMtZTBhNC00MzE1LTk2ZTMtNTJiMTM1OWM5 ZDEwMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ODg0ODRiMzMtMDgwOS00ZDhjLWI5MzgtZmE2NzZkZDhlYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eFvvsDd9e+ZdYaGkTjE/F5MO/aWHFPgwwhh yaX/Lg/1XSRKoIDf9IooI7W0G1O+qAQDdWWaWj4sd/6jhrhCRbOrP+Mj19tzWxBi XvDjjBjR2PMr8fLHgMyrqZAJK+L3vHk1n6W7OIYSDOeiTE+vdLb87f3lNDnhZah0 Rhoqo4HKqljKo0a5hCQ6Oxia04A6mpfiNk83clKzFe1VIeFTXWv6gwUprsl37D4i aEcEZ1nZGbd4YWIVQvCCgjZTnU97DQTTcXOr+TfGxdPx0RQ3QN4MnuAEj0AuG7Ue 7e/KvrzVKXe2h0pc2+g0KXmsZ38WJiD3g43uoLs4gmof6jbRTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIl+pEX9TZXx5l5SUmFszGX4hqZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYw MmZiMy1lMGE0LTQzMTUtOTZlMy01MmIxMzU5YzlkMTAvNWY0Y2YyZDYtM2Y4ZS0z YTBkLTk4YWEtNjQ1NTZiNWU5OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Y2MDJmYjMtZTBhNC00MzE1LTk2 ZTMtNTJiMTM1OWM5ZDEwL2NmNjAyZmIzLWUwYTQtNDMxNS05NmUzLTUyYjEzNTlj OWQxMC5jcmwwHwYDVR0jBBgwFoAUKXL7a7GekXOUVcGorgVmc9VSVSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYwMmZiMy1lMGE0LTQzMTUtOTZlMy01MmIx MzU5YzlkMTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAiCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUupDU39co65E2mY139SCT+RavfrMkbpAe4aZ5noor4InST6Cdt 4PvGko5fH0c3RyobQZ/VINyICPhcEShra8NLbneoSlzGrxPkJSsTEqINSh6bM0gO Gmlvuc7OuipN5RDlTrmZNxF7v4FNS2kWhcfo0PbHv/QTuScuDIdqL05hd823YrKT i7/AWSZKVDS5gCnpFWKgjlq1hzfpU8CdHfj8IdEr4J0lYHUQD5R7mcDLyOaR6Co2 PDb2qvySFZMQz6ixmfUYQAqSVQPyZuaFOfgWbWr21oCgAzNLLj68Kca4+WREtolt a2ebIakZ9s7G5b6l36WyljZHpGOdiaCX9K8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:21:08 2025 by rpki-client