$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/a477901f-5a7c-3596-8981-3046fca64b4e.roa File: a477901f-5a7c-3596-8981-3046fca64b4e.roa (raw, json) Hash identifier: TFQCYD3e3iqREQoKhwOsxOq1Nd9MK28p8qVOZJTHieU= Subject key identifier: 33:94:6D:A8:C1:EA:83:E8:C2:0C:5C:E5:69:53:A0:C8:B8:DE:3B:A8 Certificate issuer: /CN=17c52074-58cb-4941-b609-0f5d1e4bca32 Certificate serial: 010D0C9F4328584BA39D1460B276A6A12E1B8080 Authority key identifier: 81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/a477901f-5a7c-3596-8981-3046fca64b4e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 399772 IP address blocks: 2602:fc5f::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:14:60:b2:76:a6:a1:2e:1b:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c52074-58cb-4941-b609-0f5d1e4bca32 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=95a85cb0-61a7-4099-8a38-e56c2c0daa12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:35:af:5d:1d:e8:32:9c:2a:49:39:23:99: 06:4b:a3:8e:94:9f:00:ea:d2:d5:6a:41:40:b2:4d: 3f:5a:ef:6c:5a:27:57:d5:bc:b8:4a:6a:16:2b:a3: f0:06:96:91:15:c3:47:5a:3b:f5:60:2e:fe:a3:58: 88:11:22:96:a2:0e:70:03:6d:84:8d:fb:78:1a:a1: 1c:59:ba:09:ee:cd:41:92:8e:74:af:4d:c4:23:8a: 08:9e:ac:60:9c:41:52:5b:ad:f5:c3:32:bf:f4:e0: 58:7a:37:58:d4:d7:30:e7:af:64:db:d3:6c:95:b0: 12:d4:6e:d9:e5:7f:15:76:7b:37:3f:64:38:1c:85: 7a:8a:ff:9c:2a:81:a5:f0:4c:38:eb:39:5e:9e:a5: 6d:8f:01:80:ee:ca:dd:18:80:39:d0:22:b2:7c:b1: 7a:b7:6c:fa:0e:60:6f:db:bb:7f:3d:86:a8:e8:cb: c7:69:1f:21:1c:aa:a7:d1:07:b0:0f:2d:f3:81:de: 27:59:71:d0:b0:d9:c4:af:ad:cf:70:e5:d7:2a:3b: ff:62:95:6e:17:8c:d6:d2:c0:2c:22:d4:72:2d:ee: f6:1a:3e:c2:06:92:d5:81:5d:ba:d7:5a:53:47:3b: 6b:a6:f3:7b:56:6c:6c:54:dd:c0:b9:24:b4:ee:54: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:94:6D:A8:C1:EA:83:E8:C2:0C:5C:E5:69:53:A0:C8:B8:DE:3B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/a477901f-5a7c-3596-8981-3046fca64b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl X509v3 Authority Key Identifier: keyid:81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc5f::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:46:d8:5f:ab:ee:78:6f:c5:10:82:91:fa:52:5a:c1:aa:67: d8:6e:10:76:c6:b9:56:e5:86:b8:27:50:52:0e:fa:41:ad:06: 98:38:ae:e8:03:26:00:b3:91:3b:03:61:7b:57:90:88:96:4a: 89:a5:8f:6a:a3:a8:de:13:9b:21:cc:3c:ff:5c:06:a6:f6:66: 12:66:c9:4f:7a:ee:bb:1e:52:21:de:54:d5:a0:d9:b4:cb:5a: bb:d3:89:09:cd:fd:98:40:6f:54:d4:c3:88:a2:7b:1e:f4:03: f0:4c:f4:78:cf:66:2e:0f:eb:17:c4:a3:b3:a6:31:62:d0:f5: 60:d5:f1:57:e3:60:34:43:d5:18:0c:5c:d7:0f:12:dd:82:63: 8c:8c:5b:43:6c:e8:27:91:a2:de:08:a8:51:88:ce:7c:8b:c6: 05:b1:0c:7f:3d:9f:84:4d:8d:18:1e:c0:5b:8e:85:02:f3:43: 9d:c9:1b:fc:5c:25:f6:d3:25:dc:51:9d:e4:02:25:f4:80:26: 31:17:72:68:c0:70:8a:f4:8e:3f:f1:cb:ec:75:83:c5:6f:bf: 3e:17:8c:ee:c5:cd:ee:eb:81:9d:62:33:fa:93:6f:e5:c1:ef: c4:32:fa:0c:a2:d1:d6:73:42:a3:b9:f5:e7:3e:16:de:78:69: 9f:5e:94:18 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEujnRRgsnamoS4bgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjNTIwNzQtNThjYi00OTQxLWI2MDktMGY1ZDFlNGJj YTMyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTVhODVjYjAtNjFhNy00MDk5LThhMzgtZTU2YzJjMGRhYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f01r10d6DKcKkk5I5kGS6OOlJ8A6tLVakFA sk0/Wu9sWidX1by4SmoWK6PwBpaRFcNHWjv1YC7+o1iIESKWog5wA22Ejft4GqEc WboJ7s1Bko50r03EI4oInqxgnEFSW631wzK/9OBYejdY1Ncw569k29NslbAS1G7Z 5X8Vdns3P2Q4HIV6iv+cKoGl8Ew46zlenqVtjwGA7srdGIA50CKyfLF6t2z6DmBv 27t/PYao6MvHaR8hHKqn0QewDy3zgd4nWXHQsNnEr63PcOXXKjv/YpVuF4zW0sAs ItRyLe72Gj7CBpLVgV2611pTRztrpvN7VmxsVN3AuSS07lSHUwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDOUbajB6oPowgxc5WlToMi43juoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xN2M1 MjA3NC01OGNiLTQ5NDEtYjYwOS0wZjVkMWU0YmNhMzIvYTQ3NzkwMWYtNWE3Yy0z NTk2LTg5ODEtMzA0NmZjYTY0YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTdjNTIwNzQtNThjYi00OTQxLWI2 MDktMGY1ZDFlNGJjYTMyLzE3YzUyMDc0LTU4Y2ItNDk0MS1iNjA5LTBmNWQxZTRi Y2EzMi5jcmwwHwYDVR0jBBgwFoAUgWNxnJSYNAcPH2TiDsn/edGr36QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xN2M1MjA3NC01OGNiLTQ5NDEtYjYwOS0wZjVk MWU0YmNhMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8XwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqUbYX6vueG/FEIKR+lJawapn2G4Qdsa5VuWGuCdQUg76Qa0GmDiu 6AMmALOROwNhe1eQiJZKiaWPaqOo3hObIcw8/1wGpvZmEmbJT3ruux5SId5U1aDZ tMtau9OJCc39mEBvVNTDiKJ7HvQD8Ez0eM9mLg/rF8Sjs6YxYtD1YNXxV+NgNEPV GAxc1w8S3YJjjIxbQ2zoJ5Gi3gioUYjOfIvGBbEMfz2fhE2NGB7AW46FAvNDnckb /Fwl9tMl3FGd5AIl9IAmMRdyaMBwivSOP/HL7HWDxW+/PheM7sXN7uuBnWIz+pNv 5cHvxDL6DKLR1nNCo7n15z4W3nhpn16UGA== -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:49 2025 by rpki-client