$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa File: 34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa (raw, json) Hash identifier: IOl9pvl3wa/BKaQ+o068EbaV0+QHnGgBC1yz2H2D3+g= Subject key identifier: 00:F6:D9:B7:66:8C:6D:09:AC:4F:07:1F:8D:74:B8:DD:B6:D9:81:94 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584BB88D2B80CD3E8F1D16FEA200 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 2602:fdaa:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2b:80:cd:3e:8f:1d:16:fe:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=7dad7f6b-d379-4d30-875b-d7980c931398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:c1:67:71:c0:b6:07:0a:ed:6b:69:a4:1b: 0e:5d:39:ec:ea:62:0e:08:b1:f0:6c:d1:4a:d4:e3: df:f0:72:2e:f1:b9:49:6d:3e:b0:7e:ea:6f:0a:ec: 35:ae:f2:05:00:df:99:d5:6f:59:6c:6d:cc:50:c2: 2a:da:b2:c4:2a:ee:72:d6:ca:18:ba:41:ad:9e:92: eb:9a:2a:00:66:74:a6:d7:41:f1:8f:56:7a:74:aa: 62:87:39:0b:69:9b:ab:d6:b7:bb:ba:77:34:46:70: 8b:df:22:be:b8:b9:d1:59:38:d6:3e:de:6f:25:91: 28:cb:c0:34:d3:c5:37:11:7d:02:d8:21:bf:c3:d5: d1:93:81:56:94:3a:97:ec:8b:64:7f:48:ea:66:9d: 28:5a:10:f4:24:8c:a4:25:f5:b1:38:94:59:fc:47: 30:20:c8:d4:44:1c:bc:e4:16:69:03:6e:69:ae:a8: 1f:86:e3:43:2f:ee:0c:e7:3d:f0:63:8c:18:66:64: 04:17:bd:e0:f1:fb:0f:d0:f4:60:23:7e:e9:47:bb: 98:89:93:ea:f5:62:d5:2b:2f:cd:b3:9d:d9:5e:d6: 2a:58:02:15:ed:e9:11:12:70:d9:25:b1:47:5a:31: fc:55:cc:c4:25:13:be:43:96:5a:0d:5c:64:4a:20: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F6:D9:B7:66:8C:6D:09:AC:4F:07:1F:8D:74:B8:DD:B6:D9:81:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:79:32:aa:d6:90:1b:9d:74:22:07:05:0d:f7:3a:00:3e:6c: 10:1c:72:00:69:db:6e:ae:3f:76:11:6f:96:86:a3:a6:aa:18: c2:1a:b9:10:15:40:85:cb:e9:ba:ad:1f:2a:22:5d:e4:82:23: eb:3f:78:3f:3d:96:50:d1:4f:f2:00:01:2b:4e:10:bc:b9:94: 0d:1a:4b:15:7c:5a:eb:1c:7f:36:82:bd:b6:7e:d4:fe:15:b9: f8:fd:55:85:74:2c:96:0d:90:41:07:5e:5f:e4:c5:82:56:9c: 02:35:f8:78:e3:92:50:68:d6:77:73:76:fa:41:d7:6c:e5:46: 38:50:a6:84:34:7a:c8:6c:6a:1d:c9:37:37:f4:51:15:62:2d: 36:98:fd:4c:88:14:1d:f7:13:40:7c:0d:17:26:5e:5f:80:26: 2d:16:81:fa:55:cf:68:b4:76:30:15:e9:5c:fa:75:15:ea:81: 7a:c4:45:99:1c:5d:5c:71:2d:a8:96:53:cd:67:43:0b:d0:77: d5:93:8f:62:b4:25:d7:21:07:93:87:54:f8:14:07:a4:3f:ce: fa:5b:77:ea:39:ca:92:18:b5:d6:c8:47:53:aa:80:dc:8c:d7: d8:c8:16:c3:07:d9:7b:4c:73:a6:d2:13:24:6f:19:74:37:65: f8:06:e6:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jSuAzT6PHRb+ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk N2RhZDdmNmItZDM3OS00ZDMwLTg3NWItZDc5ODBjOTMxMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN7BZ3HAtgcK7WtppBsOXTns6mIOCLHwbNFK 1OPf8HIu8blJbT6wfupvCuw1rvIFAN+Z1W9ZbG3MUMIq2rLEKu5y1soYukGtnpLr mioAZnSm10Hxj1Z6dKpihzkLaZur1re7unc0RnCL3yK+uLnRWTjWPt5vJZEoy8A0 08U3EX0C2CG/w9XRk4FWlDqX7Itkf0jqZp0oWhD0JIykJfWxOJRZ/EcwIMjURBy8 5BZpA25prqgfhuNDL+4M5z3wY4wYZmQEF73g8fsP0PRgI37pR7uYiZPq9WLVKy/N s53ZXtYqWAIV7ekREnDZJbFHWjH8VczEJRO+Q5ZaDVxkSiBM5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAD22bdmjG0JrE8HH410uN222YGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvMzRmZmQxZjctZjc4ZC0z Yjc4LWFiNWQtNDhmYTRmZDM2NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD95MqrWkBuddCIHBQ33OgA+bBAccgBp226uP3YRb5aGo6aqGMIa uRAVQIXL6bqtHyoiXeSCI+s/eD89llDRT/IAAStOELy5lA0aSxV8WuscfzaCvbZ+ 1P4Vufj9VYV0LJYNkEEHXl/kxYJWnAI1+HjjklBo1ndzdvpB12zlRjhQpoQ0eshs ah3JNzf0URViLTaY/UyIFB33E0B8DRcmXl+AJi0WgfpVz2i0djAV6Vz6dRXqgXrE RZkcXVxxLaiWU81nQwvQd9WTj2K0JdchB5OHVPgUB6Q/zvpbd+o5ypIYtdbIR1Oq gNyM19jIFsMH2XtMc6bSEyRvGXQ3ZfgG5no= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:10 2025 by rpki-client