$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa File: cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa (raw, json) Hash identifier: 2KRf8oVWFzjqgv/W69IcQawwNj2K4o61dKgHfUKPzcw= Subject key identifier: 4A:45:3D:E9:07:F6:70:76:AD:2D:49:65:BB:F0:21:F3:74:12:3E:5F Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584B970CD6311D642E9DA0540EC0 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 20278 IP address blocks: 2602:ffc8::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d6:31:1d:64:2e:9d:a0:54:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=884c4818-4d9f-4ab9-a0e7-faa059524139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:57:74:5e:e0:1e:c8:e1:3b:41:59:93:c8: a5:cb:3b:26:d5:3b:a1:d1:bd:5e:a3:0e:97:84:a6: 03:63:de:d1:81:72:93:87:79:32:5a:41:7f:84:e9: 0e:a7:6c:40:aa:e5:91:86:9e:cc:31:6a:33:a4:79: cb:07:96:9b:8e:2c:02:a2:f5:7e:de:18:6b:dd:2c: 3e:51:bd:b7:9c:b4:5f:31:1c:3e:45:5a:6a:ae:e3: cf:1b:a0:e8:96:6c:00:64:de:4b:3a:2d:cc:93:98: 74:e5:e0:90:72:7e:c8:50:01:5b:63:15:53:67:07: ae:ae:77:81:cf:7e:b3:b1:17:7a:1a:84:e6:2c:cb: 78:3a:40:15:d7:30:f2:fb:c1:e0:f1:42:e5:9c:53: 2d:21:d3:f5:4e:ce:cf:eb:ce:7b:2a:97:fe:13:3b: 2a:7c:4c:70:75:51:90:03:f5:e9:5f:d1:90:c5:77: 0c:74:3a:e5:01:4e:c2:43:09:51:92:d6:23:09:26: 91:d6:64:2f:8f:5f:9b:87:d0:b5:57:03:da:77:87: cc:96:2f:7e:5d:73:af:b8:a8:c0:5d:d4:a2:73:fa: 88:d7:f0:65:67:bf:c3:ad:08:86:b5:9a:7a:cf:9c: 0c:00:7f:2d:a5:03:c3:86:8b:14:20:cd:ef:de:9e: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:45:3D:E9:07:F6:70:76:AD:2D:49:65:BB:F0:21:F3:74:12:3E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffc8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:69:b2:b1:64:ed:3d:ba:90:a0:df:f6:8b:52:5b:95:7c:60: e5:7e:87:e3:89:75:86:71:af:34:0a:bf:93:d9:28:ef:9c:e7: c3:da:86:37:00:d3:aa:4a:fb:e5:ae:01:8e:35:f0:ee:91:cc: 85:4b:40:25:1e:18:65:36:27:23:47:b0:d3:d4:a9:a5:47:ff: d5:66:e1:eb:00:68:f8:4d:22:fb:d8:9d:c1:9b:81:21:58:49: 74:0c:53:6b:53:82:e8:a7:bf:81:31:a0:5f:03:e9:a0:0a:b8: 86:04:b8:5c:81:9a:00:ac:a6:41:35:8b:28:9f:f2:05:e7:ac: 0e:4a:73:d7:5b:13:03:29:c5:40:cb:85:0f:3f:ce:ac:ac:0f: cd:48:c2:11:fa:4d:54:6f:1f:9a:65:85:8c:a9:93:00:da:6e: 8a:48:4f:5b:08:ee:37:16:31:ae:f2:35:a3:c2:35:34:8f:d7: 66:54:54:c4:67:30:05:52:5b:d5:ee:0c:42:df:4c:4e:59:7f: a1:c6:b2:5f:0e:01:1c:35:ee:7d:15:47:e9:7b:82:c7:46:80: 87:7d:24:cd:78:fa:9d:26:8d:cc:a6:db:72:fe:9f:72:46:3b: 3c:8c:6d:d1:17:ad:2a:66:88:83:4b:d8:b6:0a:fa:22:55:07: 42:6f:f1:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuXDNYxHWQunaBUDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ODg0YzQ4MTgtNGQ5Zi00YWI5LWEwZTctZmFhMDU5NTI0MTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD5XdF7gHsjhO0FZk8ilyzsm1Tuh0b1eow6X hKYDY97RgXKTh3kyWkF/hOkOp2xAquWRhp7MMWozpHnLB5abjiwCovV+3hhr3Sw+ Ub23nLRfMRw+RVpqruPPG6DolmwAZN5LOi3Mk5h05eCQcn7IUAFbYxVTZweurneB z36zsRd6GoTmLMt4OkAV1zDy+8Hg8ULlnFMtIdP1Ts7P6857Kpf+EzsqfExwdVGQ A/XpX9GQxXcMdDrlAU7CQwlRktYjCSaR1mQvj1+bh9C1VwPad4fMli9+XXOvuKjA XdSic/qI1/BlZ7/DrQiGtZp6z5wMAH8tpQPDhosUIM3v3p7L4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEpFPekH9nB2rS1JZbvwIfN0Ej5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvY2IxOGRjNjYtZTg4Yy0z NzgyLTg4ZjYtOTZjN2E0NWNjNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL/yDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmabKxZO09upCg3/aLUluVfGDlfofjiXWGca80Cr+T2SjvnOfD2oY3 ANOqSvvlrgGONfDukcyFS0AlHhhlNicjR7DT1KmlR//VZuHrAGj4TSL72J3Bm4Eh WEl0DFNrU4Lop7+BMaBfA+mgCriGBLhcgZoArKZBNYson/IF56wOSnPXWxMDKcVA y4UPP86srA/NSMIR+k1Ubx+aZYWMqZMA2m6KSE9bCO43FjGu8jWjwjU0j9dmVFTE ZzAFUlvV7gxC30xOWX+hxrJfDgEcNe59FUfpe4LHRoCHfSTNePqdJo3Mptty/p9y Rjs8jG3RF60qZoiDS9i2CvoiVQdCb/Es -----END CERTIFICATE-----Generated at Wed Nov 5 08:41:20 2025 by rpki-client