$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f68c6d33-6e51-3d66-8664-13a4890962a6.roa File: f68c6d33-6e51-3d66-8664-13a4890962a6.roa (raw, json) Hash identifier: fJqKmnCGmJoRst5YjpS0lNUi5wEzdr0sUazXxXLgG1A= Subject key identifier: D9:1A:8C:42:C2:B1:5C:18:7A:99:DA:15:E3:21:7D:93:B8:B1:4E:71 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584B95A7973E780C2FB0D2B61BE0 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f68c6d33-6e51-3d66-8664-13a4890962a6.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 31898 IP address blocks: 2602:fdaa:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:97:3e:78:0c:2f:b0:d2:b6:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d0a003f0-a6a8-415e-8981-80bdd3dc751b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:68:9d:80:05:da:62:d8:6a:07:88:fe:d2: a7:35:fb:e4:e7:cf:08:68:12:c3:34:c3:38:48:51: 9e:ce:c2:57:25:d7:da:c5:dc:b8:64:d7:c9:d2:b2: fb:a8:20:ce:b1:74:ff:b6:e4:56:92:f6:a4:ad:cc: 53:bd:91:70:52:53:0e:99:dc:f8:57:26:db:5b:6d: 13:c9:1f:2a:23:35:43:b8:59:0f:ee:b3:a1:11:9b: 1b:8a:9c:2f:6a:0d:35:a7:77:03:93:ed:51:4d:d9: 9d:dc:9e:60:9b:b7:e1:f6:58:84:aa:24:bc:5f:25: c4:28:10:30:66:ac:fd:30:30:07:6c:48:33:09:8a: d1:8c:7b:f9:e7:f0:68:97:7a:f0:9f:56:5d:ce:56: 07:bf:a4:ea:95:10:de:ce:ca:1a:eb:7e:1c:d5:4c: 6e:d9:f0:c4:d9:e4:5d:17:5f:e9:07:40:ba:76:a7: 57:67:6d:24:67:54:6b:ac:81:6e:21:8d:9b:22:d3: 62:42:eb:1a:6a:5e:1e:6c:56:2c:c4:05:23:3b:d2: e2:0f:57:9d:06:1a:01:ed:95:24:03:1f:11:ac:ed: 38:00:0a:2d:f2:e0:03:5b:5c:d1:22:37:61:34:b5: 8a:17:f7:79:29:e0:7f:8d:b5:14:fb:e3:1e:61:1c: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1A:8C:42:C2:B1:5C:18:7A:99:DA:15:E3:21:7D:93:B8:B1:4E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f68c6d33-6e51-3d66-8664-13a4890962a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b7:ff:4f:41:a5:67:e6:52:a8:19:08:31:f1:0c:5a:03:aa: ee:72:38:c2:79:23:b5:d8:74:b0:b5:75:43:97:12:e3:be:ba: b4:29:1a:d1:09:c6:0b:1c:e6:9c:ea:28:c0:40:cd:d5:98:87: bf:39:44:24:ad:86:59:50:43:d7:00:6f:ce:bb:5e:ae:b2:25: 93:72:a4:73:a4:77:e0:87:32:2b:1b:3f:d7:a2:a6:6c:da:be: c9:c3:b8:0f:5e:4b:73:46:7c:46:f7:91:27:97:33:48:cc:a3: ba:0d:7a:47:e8:f6:2b:e4:84:a0:88:9e:f4:f2:fc:bd:87:89: 6a:3e:2e:22:3a:2b:3c:74:ea:a9:d9:71:14:3d:d7:1b:ba:b4: 71:d6:06:90:ee:a8:bf:26:86:03:29:27:53:db:72:bd:03:40: 2c:17:6b:59:33:ac:54:9c:6d:61:f0:83:85:79:07:c2:07:45: 50:02:de:ca:ac:18:82:63:21:8e:ba:de:09:42:22:f8:32:e0: 3d:82:e8:c1:3d:90:4d:ed:17:5b:26:31:73:06:89:de:63:64: 63:de:7e:a5:1b:2f:df:69:69:5b:d9:f0:61:80:68:bb:1e:c1: 46:2d:6f:25:53:0a:eb:1a:7b:8d:3b:b2:7a:9a:cd:0d:f6:b4: fc:7c:98:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuVp5c+eAwvsNK2G+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDBhMDAzZjAtYTZhOC00MTVlLTg5ODEtODBiZGQzZGM3NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoodonYAF2mLYageI/tKnNfvk588IaBLDNMM4 SFGezsJXJdfaxdy4ZNfJ0rL7qCDOsXT/tuRWkvakrcxTvZFwUlMOmdz4VybbW20T yR8qIzVDuFkP7rOhEZsbipwvag01p3cDk+1RTdmd3J5gm7fh9liEqiS8XyXEKBAw Zqz9MDAHbEgzCYrRjHv55/Bol3rwn1ZdzlYHv6TqlRDezsoa634c1Uxu2fDE2eRd F1/pB0C6dqdXZ20kZ1RrrIFuIY2bItNiQusaal4ebFYsxAUjO9LiD1edBhoB7ZUk Ax8RrO04AAot8uADW1zRIjdhNLWKF/d5KeB/jbUU++MeYRxAxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNkajELCsVwYepnaFeMhfZO4sU5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvZjY4YzZkMzMtNmU1MS0z ZDY2LTg2NjQtMTNhNDg5MDk2MmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIS3/09BpWfmUqgZCDHxDFoDqu5yOMJ5I7XYdLC1dUOXEuO+urQp GtEJxgsc5pzqKMBAzdWYh785RCSthllQQ9cAb867Xq6yJZNypHOkd+CHMisbP9ei pmzavsnDuA9eS3NGfEb3kSeXM0jMo7oNekfo9ivkhKCInvTy/L2HiWo+LiI6Kzx0 6qnZcRQ91xu6tHHWBpDuqL8mhgMpJ1Pbcr0DQCwXa1kzrFScbWHwg4V5B8IHRVAC 3sqsGIJjIY663glCIvgy4D2C6ME9kE3tF1smMXMGid5jZGPefqUbL99paVvZ8GGA aLsewUYtbyVTCusae407snqazQ32tPx8mI0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:53 2025 by rpki-client