$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/b8f411d6-7dc7-3807-96c9-27e04f865d91.roa File: b8f411d6-7dc7-3807-96c9-27e04f865d91.roa (raw, json) Hash identifier: wDMc+MoRChzmR06rphJF9zPih6uvzHABZCRJF0rvu3k= Subject key identifier: E5:35:52:66:9D:9E:1B:3C:80:64:7A:59:B6:C2:A5:B0:24:B2:C6:59 Certificate issuer: /CN=ea962f40-5514-411b-b23b-2a5e787628d5 Certificate serial: 010D0C9F4328584BA39D1FA27FB0685182144F00 Authority key identifier: 95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/b8f411d6-7dc7-3807-96c9-27e04f865d91.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 401336 IP address blocks: 2602:f81b::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1f:a2:7f:b0:68:51:82:14:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea962f40-5514-411b-b23b-2a5e787628d5 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=a2d8d5f2-eee0-4503-9189-ce101fdee1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:5e:8b:3f:98:fc:d7:f8:4f:5a:72:42:12: 63:5b:b5:d2:35:0a:11:e4:ad:bf:ed:20:16:23:03: 06:dd:bb:d1:fb:a6:c8:03:f1:7a:a6:bd:cf:c1:d8: c8:5f:a9:00:8b:21:cd:fa:96:27:2e:11:3a:c1:54: 50:6f:66:74:e3:b1:3b:a1:89:4a:19:62:cb:b8:13: 90:97:ad:37:41:50:1e:6a:41:45:84:e9:86:9b:f7: df:8c:e8:ad:cf:f4:92:67:d7:a7:38:4a:3f:ff:ff: d1:49:eb:53:b1:b4:d2:ca:69:6c:17:f0:98:c2:98: 15:1b:06:4a:25:5d:e3:02:f9:00:25:bf:cc:d7:1d: c8:83:9c:7e:d6:18:a4:ba:33:18:59:ff:ce:1c:83: 4b:95:1a:10:de:1b:d7:82:03:b1:d2:4f:43:59:65: de:64:60:d2:e0:6b:96:cb:f3:3d:a0:07:93:09:a4: d5:99:78:f9:88:76:6b:29:6c:1c:b8:0f:82:ee:09: 5b:a9:9d:00:03:39:11:fe:1a:25:c8:37:80:66:67: b6:b3:fb:da:4c:9c:c7:46:44:f5:c1:71:e4:14:f1: 3b:55:d6:19:76:03:92:29:04:d6:4f:43:85:ed:d7: 28:6d:da:28:74:24:e1:f3:47:25:63:c4:73:85:7e: 4f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:35:52:66:9D:9E:1B:3C:80:64:7A:59:B6:C2:A5:B0:24:B2:C6:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/b8f411d6-7dc7-3807-96c9-27e04f865d91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl X509v3 Authority Key Identifier: keyid:95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer sbgp-ipAddrBlock: critical IPv6: 2602:f81b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:1e:2b:ff:95:a3:3f:29:77:b3:90:4f:ca:ad:7b:ca:7d:46: a5:bf:fe:5f:7e:72:e2:4e:bc:5b:ca:98:6a:c7:52:ae:ac:05: 71:6a:7d:03:da:13:f1:51:ce:43:7e:1b:3d:0b:09:35:b1:67: 6f:28:9e:8d:44:ba:61:e1:02:82:05:d4:7c:e1:91:79:32:d1: ec:7c:c0:61:3b:2e:80:b0:1c:9e:04:39:eb:fb:83:1e:2d:89: 3d:bf:a5:43:be:d0:83:ca:9c:f5:f6:de:be:aa:53:09:48:14: 14:b8:1f:f1:ad:53:fd:9c:ef:b8:9b:b5:a6:e3:9d:5b:10:64: 71:ed:e6:ca:ea:86:36:71:47:52:6b:21:33:bd:cc:b7:8e:c7: a2:b5:b8:f6:21:93:16:89:82:cc:50:6e:f0:9d:5e:ca:68:77: 85:20:8d:79:95:83:40:d7:7d:d1:83:82:73:b1:85:de:b7:9b: 94:59:ea:41:94:65:a8:90:3b:f6:c6:3c:85:d2:e7:c4:60:34: 44:a0:a4:a8:ae:6b:0c:88:f3:ed:52:9b:b9:c0:a8:b4:81:0c: 22:b4:a2:0e:a9:78:bd:da:93:26:09:e4:77:00:be:ed:d6:26: f3:c2:e4:83:02:53:b4:9a:90:62:9e:b0:26:65:10:11:bb:e8: 69:0c:78:1d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEujnR+if7BoUYIUTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE5NjJmNDAtNTUxNC00MTFiLWIyM2ItMmE1ZTc4NzYy OGQ1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YTJkOGQ1ZjItZWVlMC00NTAzLTkxODktY2UxMDFmZGVlMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifVeiz+Y/Nf4T1pyQhJjW7XSNQoR5K2/7SAW IwMG3bvR+6bIA/F6pr3PwdjIX6kAiyHN+pYnLhE6wVRQb2Z047E7oYlKGWLLuBOQ l603QVAeakFFhOmGm/ffjOitz/SSZ9enOEo////RSetTsbTSymlsF/CYwpgVGwZK JV3jAvkAJb/M1x3Ig5x+1hikujMYWf/OHINLlRoQ3hvXggOx0k9DWWXeZGDS4GuW y/M9oAeTCaTVmXj5iHZrKWwcuA+C7glbqZ0AAzkR/holyDeAZme2s/vaTJzHRkT1 wXHkFPE7VdYZdgOSKQTWT0OF7dcobdoodCTh80clY8RzhX5PlQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOU1Umadnhs8gGR6WbbCpbAkssZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk2 MmY0MC01NTE0LTQxMWItYjIzYi0yYTVlNzg3NjI4ZDUvYjhmNDExZDYtN2RjNy0z ODA3LTk2YzktMjdlMDRmODY1ZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWE5NjJmNDAtNTUxNC00MTFiLWIy M2ItMmE1ZTc4NzYyOGQ1L2VhOTYyZjQwLTU1MTQtNDExYi1iMjNiLTJhNWU3ODc2 MjhkNS5jcmwwHwYDVR0jBBgwFoAUlewonBG6R3Dlqv0OrkBPqn3B8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk2MmY0MC01NTE0LTQxMWItYjIzYi0yYTVl Nzg3NjI4ZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4GwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKx4r/5WjPyl3s5BPyq17yn1Gpb/+X35y4k68W8qYasdSrqwFcWp9 A9oT8VHOQ34bPQsJNbFnbyiejUS6YeECggXUfOGReTLR7HzAYTsugLAcngQ56/uD Hi2JPb+lQ77Qg8qc9fbevqpTCUgUFLgf8a1T/ZzvuJu1puOdWxBkce3myuqGNnFH UmshM73Mt47HorW49iGTFomCzFBu8J1eymh3hSCNeZWDQNd90YOCc7GF3reblFnq QZRlqJA79sY8hdLnxGA0RKCkqK5rDIjz7VKbucCotIEMIrSiDql4vdqTJgnkdwC+ 7dYm88LkgwJTtJqQYp6wJmUQEbvoaQx4HQ== -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:27 2025 by rpki-client