$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa File: efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa (raw, json) Hash identifier: uPwcsumiaBfdb73+6FaCkjk6sSYqcHpWdG3a679m8iI= Subject key identifier: DE:85:06:8C:8F:4A:13:6E:59:68:F9:54:59:69:8A:54:00:08:B8:BA Certificate issuer: /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Certificate serial: 010D0C9F4328584B99D78453F74DEA0C7E1212C0 Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 2602:808:4001::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:84:53:f7:4d:ea:0c:7e:12:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9470a641-806c-428b-8b8a-f78e923b7443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:5e:9d:eb:f0:99:e8:da:5e:a7:be:ac:bd: 9c:c8:d6:68:04:53:ed:d1:cf:fd:2d:1e:1a:36:98: 7d:de:ff:1c:0f:46:7d:96:a2:80:6b:7d:89:8c:97: 8b:de:5f:eb:c5:21:1a:f7:92:38:76:05:9b:c3:c3: 38:d2:02:71:d7:2e:21:a6:db:12:e8:8a:29:a1:89: 2d:6a:a9:fc:85:83:4e:9b:94:28:a2:43:7f:05:25: 61:60:99:de:87:77:a5:8a:ca:6f:93:87:45:0e:92: 1b:73:f7:3b:18:84:86:52:c9:ac:0b:66:24:a3:9f: 83:63:1b:26:3d:a0:3a:33:7e:5a:7f:fe:e2:9c:21: 7f:d6:a6:dd:45:9b:66:a6:d4:f8:05:40:97:42:3c: 2b:6d:a3:92:5d:af:07:f4:5b:96:6c:c7:26:34:e2: aa:85:76:84:aa:d5:72:72:d2:69:56:19:bf:8c:8d: a3:11:a9:14:54:c6:db:74:d8:ab:f3:df:a3:cd:ca: 40:79:fe:82:76:ac:ed:1a:f5:73:0b:22:27:a0:d2: 87:89:36:ff:a6:48:76:91:80:c9:6b:d5:ba:3e:39: 1c:90:e9:a9:86:65:d0:f2:a7:64:47:2d:c0:3a:a0: 50:6a:8d:15:db:e8:22:b2:03:54:ec:38:07:ee:0d: 91:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:85:06:8C:8F:4A:13:6E:59:68:F9:54:59:69:8A:54:00:08:B8:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl X509v3 Authority Key Identifier: keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer sbgp-ipAddrBlock: critical IPv6: 2602:808:4001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:59:03:99:70:32:21:f2:11:03:90:bb:f5:48:c9:e1:31:f9: 67:43:41:c7:8b:bd:7a:f0:81:72:ed:e1:c3:6d:fe:6c:b4:f3: 5c:37:9b:a6:89:68:e2:dc:21:f5:3f:7e:a6:8b:57:bc:d9:da: d4:b6:d6:22:db:7b:a4:20:90:e2:e7:ad:d1:9f:73:a2:78:21: 54:f6:65:7b:0a:e4:0e:c3:d9:c7:e7:b7:13:71:af:0d:fe:5d: 4d:ef:e8:a1:20:31:e2:d9:de:cf:9a:c5:cd:38:1a:30:d0:e5: 78:a6:75:b6:56:e6:ef:29:5f:24:d9:a6:dd:f1:5a:08:e8:82: 5e:57:9f:03:fe:95:f3:6b:74:ef:7b:ab:14:52:13:c9:00:fd: 2b:79:8a:bf:1a:64:f8:a4:1f:05:19:97:bc:fd:e2:25:27:cd: 68:2f:93:26:7a:68:57:09:b4:3e:d1:3b:24:a5:71:90:1c:67: 02:ed:6d:f7:ef:d0:6a:70:dd:f2:5b:be:8f:7e:79:76:3d:6a: 69:b5:3e:61:18:cf:d2:2d:73:1e:d3:81:2b:2d:4e:0d:93:e1: 61:d0:55:de:98:66:85:97:fc:f9:08:cd:81:be:75:57:a5:4f: 4d:c3:e7:28:f4:ee:7e:e6:24:6d:74:35:7a:11:ec:2d:61:32: 27:3e:1e:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ14RT903qDH4SEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThlMjY0OGUtODg2OS00YWZkLWEwYmQtYTFhYzdjMWYy M2RiMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OTQ3MGE2NDEtODA2Yy00MjhiLThiOGEtZjc4ZTkyM2I3NDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVBenevwmejaXqe+rL2cyNZoBFPt0c/9LR4a Nph93v8cD0Z9lqKAa32JjJeL3l/rxSEa95I4dgWbw8M40gJx1y4hptsS6IopoYkt aqn8hYNOm5QookN/BSVhYJneh3elispvk4dFDpIbc/c7GISGUsmsC2Yko5+DYxsm PaA6M35af/7inCF/1qbdRZtmptT4BUCXQjwrbaOSXa8H9FuWbMcmNOKqhXaEqtVy ctJpVhm/jI2jEakUVMbbdNir89+jzcpAef6CdqztGvVzCyInoNKHiTb/pkh2kYDJ a9W6PjkckOmphmXQ8qdkRy3AOqBQao0V2+gisgNU7DgH7g2RVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN6FBoyPShNuWWj5VFlpilQACLi6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUy NjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFjN2MxZjIzZGIvZWZiNTlhYmUtMmMxYy0z NWEzLTlhMTktYzlhNWJlNDZiMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMThlMjY0OGUtODg2OS00YWZkLWEw YmQtYTFhYzdjMWYyM2RiLzE4ZTI2NDhlLTg4NjktNGFmZC1hMGJkLWExYWM3YzFm MjNkYi5jcmwwHwYDVR0jBBgwFoAUA9CNha/VYO1h+yq5qYqSTv68/rAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUyNjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFj N2MxZjIzZGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICEAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACZZA5lwMiHyEQOQu/VIyeEx+WdDQceLvXrwgXLt4cNt/my081w3 m6aJaOLcIfU/fqaLV7zZ2tS21iLbe6QgkOLnrdGfc6J4IVT2ZXsK5A7D2cfntxNx rw3+XU3v6KEgMeLZ3s+axc04GjDQ5XimdbZW5u8pXyTZpt3xWgjogl5XnwP+lfNr dO97qxRSE8kA/St5ir8aZPikHwUZl7z94iUnzWgvkyZ6aFcJtD7ROySlcZAcZwLt bffv0Gpw3fJbvo9+eXY9amm1PmEYz9Itcx7TgSstTg2T4WHQVd6YZoWX/PkIzYG+ dVelT03D5yj07n7mJG10NXoR7C1hMic+HqE= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:24 2025 by rpki-client