$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d4f39c72-7dcb-367e-aed2-496d64afd372.roa File: d4f39c72-7dcb-367e-aed2-496d64afd372.roa (raw, json) Hash identifier: 5jLbhYVuQezQPdXEicM2FXMXVRSvqSlZfT1CLYN5PWA= Subject key identifier: A9:1A:A7:9F:76:92:2C:1F:8A:3D:07:F6:E2:C5:FD:12:40:28:91:1A Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584BB88D2CFEF3C6BFFEA7574E20 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d4f39c72-7dcb-367e-aed2-496d64afd372.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 2602:fdaa:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2c:fe:f3:c6:bf:fe:a7:57:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=a4e24dbf-6b20-4b22-a826-e2654a358695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:98:b0:b9:0c:15:7d:2b:be:87:76:85:8b: 6c:e2:90:a2:d8:59:37:1e:78:13:94:5f:2c:4e:f1: 81:40:5d:1b:d0:74:b1:11:c4:02:d0:e9:80:67:ba: fb:2d:09:fe:e7:04:57:aa:3b:54:c8:c9:bb:7a:36: 7d:fc:ce:a0:24:c1:c3:b2:5d:e7:72:99:cd:dc:c6: 12:c9:eb:2d:10:f2:36:91:13:b1:c1:8d:e0:14:f0: 5d:4e:e5:fc:43:03:bb:25:f6:27:8f:f8:37:f0:c5: e5:1b:4a:c4:05:73:5d:7c:24:23:01:b4:24:3c:ae: a8:35:06:4f:cd:fb:5a:70:9d:69:55:9c:7f:c2:5b: 41:34:ac:dc:ed:23:ac:21:47:35:3f:ed:47:07:10: bd:db:28:81:1c:37:2f:b7:81:c8:93:5b:0a:19:52: e5:87:42:6c:78:3a:4f:32:dd:fa:30:34:7f:dc:09: da:9b:6a:e5:66:73:8c:20:86:cc:6e:1a:4b:4e:0e: 17:33:1f:0f:f8:ae:7d:a4:f2:d1:dc:fa:c8:83:0a: f5:73:09:7d:d9:4a:4c:36:a9:f9:7b:69:5a:0a:2b: 6c:fe:88:cd:f8:ef:8a:fc:bb:15:21:b2:50:68:cb: 64:27:e6:fe:49:28:93:4d:e9:be:1f:a9:02:cb:e5: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1A:A7:9F:76:92:2C:1F:8A:3D:07:F6:E2:C5:FD:12:40:28:91:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d4f39c72-7dcb-367e-aed2-496d64afd372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:64:97:3e:ec:da:30:bd:41:fe:a0:54:cb:d0:66:97:aa:3c: 85:5d:c1:c3:bd:db:dd:e1:a0:6e:01:2d:52:5b:b5:9d:9d:67: 42:8f:51:38:b7:18:2b:2d:49:b0:a2:ae:78:40:42:f5:a7:90: 46:0d:48:3b:52:3b:ab:63:15:91:4a:3b:f5:0d:62:df:11:9d: 17:a8:6e:ed:f2:68:59:1a:72:99:45:82:9c:75:7c:ec:7d:e4: 1e:aa:c5:80:14:4d:bb:cb:58:ea:cf:3e:df:97:ce:44:b2:cc: f2:55:03:de:ef:f6:9e:2c:af:07:bf:f2:40:3a:44:11:c0:56: 96:ba:d9:14:55:5a:7c:e5:b8:f4:85:8c:88:29:1b:02:84:23: 77:13:cb:e1:a1:01:4f:1a:f1:ff:56:e7:09:8e:c8:8f:48:38: 4b:e7:1e:26:40:5b:7c:1a:fd:a9:09:df:86:5e:14:97:c2:85: bc:3d:bd:d0:1d:37:4d:da:0c:76:d9:65:64:a1:75:6b:b5:96: ba:68:be:a2:ff:16:12:97:e7:74:ac:92:b9:47:82:59:7f:0a: 37:82:68:88:d4:7d:e9:c8:8e:eb:56:ff:13:d7:e8:ec:13:a7: e0:e7:8b:cf:74:d1:38:f9:41:8b:fd:b1:a5:0d:8f:6f:59:ae: 19:12:dd:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jSz+88a//qdXTiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTRlMjRkYmYtNmIyMC00YjIyLWE4MjYtZTI2NTRhMzU4Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVmYsLkMFX0rvod2hYts4pCi2Fk3HngTlF8s TvGBQF0b0HSxEcQC0OmAZ7r7LQn+5wRXqjtUyMm7ejZ9/M6gJMHDsl3ncpnN3MYS yestEPI2kROxwY3gFPBdTuX8QwO7JfYnj/g38MXlG0rEBXNdfCQjAbQkPK6oNQZP zftacJ1pVZx/wltBNKzc7SOsIUc1P+1HBxC92yiBHDcvt4HIk1sKGVLlh0JseDpP Mt36MDR/3Anam2rlZnOMIIbMbhpLTg4XMx8P+K59pPLR3PrIgwr1cwl92UpMNqn5 e2laCits/ojN+O+K/LsVIbJQaMtkJ+b+SSiTTem+H6kCy+Uf5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKkap592kiwfij0H9uLF/RJAKJEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvZDRmMzljNzItN2RjYi0z NjdlLWFlZDItNDk2ZDY0YWZkMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgBx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZklz7s2jC9Qf6gVMvQZpeqPIVdwcO9293hoG4BLVJbtZ2dZ0KP UTi3GCstSbCirnhAQvWnkEYNSDtSO6tjFZFKO/UNYt8RnReobu3yaFkacplFgpx1 fOx95B6qxYAUTbvLWOrPPt+XzkSyzPJVA97v9p4srwe/8kA6RBHAVpa62RRVWnzl uPSFjIgpGwKEI3cTy+GhAU8a8f9W5wmOyI9IOEvnHiZAW3wa/akJ34ZeFJfChbw9 vdAdN03aDHbZZWShdWu1lrpovqL/FhKX53SskrlHgll/CjeCaIjUfenIjutW/xPX 6OwTp+Dni8900Tj5QYv9saUNj29ZrhkS3Vo= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:08 2025 by rpki-client