$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa File: 3a54cfd6-2753-3926-8778-b5bccb05925a.roa (raw, json) Hash identifier: c/tp3dLnqkRVgh9ZbBDiRhxOHV+i4XFFgfkFKfnXJ8c= Subject key identifier: B3:3B:B8:4C:3C:D1:73:84:DA:73:2D:7B:DC:BB:9D:1E:6E:6F:46:16 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584BB88D1FD914BBDE3DFEB8F880 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 2602:fdaa:b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:1f:d9:14:bb:de:3d:fe:b8:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=f30fd26f-832f-42cd-9a42-8ee8bc60bbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:68:6c:ce:f7:8b:85:fb:f7:b0:62:59:f8: ff:7d:c0:b2:08:de:f7:68:5e:c6:d5:bc:07:5f:9b: ea:2a:13:d7:40:77:b2:ba:fe:d7:87:88:f3:e0:a8: e3:d8:98:62:5b:d8:73:b7:45:97:a7:8a:13:fb:6f: 12:97:35:da:ab:3b:b5:95:f8:1b:4f:af:8c:6d:39: 63:43:0a:f1:e4:4b:42:05:b4:63:43:70:00:b0:9f: 59:15:63:64:f7:d1:d2:81:1d:93:89:bf:5a:4d:8e: c8:27:c7:9a:06:ac:f2:87:e2:a9:ce:cd:0c:ca:1f: 3e:3d:09:c4:1e:5d:a9:a2:89:b4:83:90:83:e9:ab: 71:f2:d5:82:b4:a0:fa:58:24:fa:34:9c:14:a4:52: 83:f4:29:a8:f4:aa:28:fc:90:6f:9b:b3:fc:29:32: f7:a9:46:e1:5d:5b:79:bf:f8:53:9e:bb:80:14:2a: 9b:16:70:2f:1b:3d:f5:ea:dd:78:0b:f0:e0:e1:81: 7e:6d:d5:46:b3:7a:78:f3:88:bc:38:eb:ea:62:05: ed:26:a4:71:8f:5a:b4:e3:4f:95:1b:4b:80:c8:fd: 51:fc:61:73:96:76:74:37:fb:ef:bf:6d:1c:1c:5b: 84:b4:6a:08:67:68:ee:f9:a8:a4:43:ac:47:ab:82: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3B:B8:4C:3C:D1:73:84:DA:73:2D:7B:DC:BB:9D:1E:6E:6F:46:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:b0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:4f:af:c5:5d:10:72:90:16:c8:af:9f:c7:f4:3b:fd:41:42: 6d:2a:4f:9e:27:c3:2c:f4:5f:2f:50:24:df:38:94:6b:8e:ba: b0:db:3c:6f:5d:7c:6f:f6:e5:3e:af:ea:5d:94:3b:fb:9c:30: bf:a2:b5:8a:6d:10:92:d8:f7:c3:2e:dd:b2:1d:32:32:4e:19: fd:2d:4f:a3:d8:ce:9b:9e:7b:29:74:42:f0:1c:a6:2e:6e:7f: 87:0b:8a:11:f3:5a:96:6a:9f:e7:67:67:da:cb:52:fa:36:60: d9:28:0d:d6:df:0f:f6:3e:c8:e3:0b:c9:55:3a:60:83:8d:b3: 70:ec:06:31:57:3e:e0:8e:70:64:b9:c8:64:90:7d:ce:49:db: 52:92:42:80:eb:a6:60:ef:10:65:f9:16:b6:a3:ca:40:b7:68: b9:ed:6f:97:f2:54:2f:29:36:15:b4:c5:3c:c1:80:7e:cb:bc: af:f7:37:e4:5f:b2:c3:d9:c3:54:77:f5:0b:64:b0:7c:b7:7a: f9:98:b2:98:ae:86:6d:b3:08:29:d2:37:da:e5:ed:d8:b9:c4: 21:66:d9:90:ce:5f:ed:46:13:e6:76:de:58:f0:24:02:c8:e1: a0:a3:f5:d9:38:3c:d1:d5:a4:9b:9b:11:a1:c9:d0:85:50:a0: 72:21:99:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jR/ZFLvePf64+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjMwZmQyNmYtODMyZi00MmNkLTlhNDItOGVlOGJjNjBiYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHZobM73i4X797BiWfj/fcCyCN73aF7G1bwH X5vqKhPXQHeyuv7Xh4jz4Kjj2JhiW9hzt0WXp4oT+28SlzXaqzu1lfgbT6+MbTlj Qwrx5EtCBbRjQ3AAsJ9ZFWNk99HSgR2Tib9aTY7IJ8eaBqzyh+Kpzs0Myh8+PQnE Hl2poom0g5CD6atx8tWCtKD6WCT6NJwUpFKD9Cmo9Koo/JBvm7P8KTL3qUbhXVt5 v/hTnruAFCqbFnAvGz316t14C/Dg4YF+bdVGs3p484i8OOvqYgXtJqRxj1q040+V G0uAyP1R/GFzlnZ0N/vvv20cHFuEtGoIZ2ju+aikQ6xHq4JTzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLM7uEw80XOE2nMte9y7nR5ub0YWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvM2E1NGNmZDYtMjc1My0z OTI2LTg3NzgtYjViY2NiMDU5MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgCw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBPr8VdEHKQFsivn8f0O/1BQm0qT54nwyz0Xy9QJN84lGuOurDb PG9dfG/25T6v6l2UO/ucML+itYptEJLY98Mu3bIdMjJOGf0tT6PYzpueeyl0QvAc pi5uf4cLihHzWpZqn+dnZ9rLUvo2YNkoDdbfD/Y+yOMLyVU6YIONs3DsBjFXPuCO cGS5yGSQfc5J21KSQoDrpmDvEGX5FrajykC3aLntb5fyVC8pNhW0xTzBgH7LvK/3 N+RfssPZw1R39QtksHy3evmYspiuhm2zCCnSN9rl7di5xCFm2ZDOX+1GE+Z23ljw JALI4aCj9dk4PNHVpJubEaHJ0IVQoHIhmck= -----END CERTIFICATE-----Generated at Wed Nov 5 18:20:19 2025 by rpki-client