$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa File: da0869fc-7a2f-3359-ac12-16c14348d383.roa (raw, json) Hash identifier: MzwNra6pDgqiATtN+5zSWLjOn/sJEucbuvTCH6LCy2o= Subject key identifier: C6:8A:04:86:8B:83:64:2F:69:79:3C:77:31:AE:70:9D:33:FB:8D:2B Certificate issuer: /CN=43d85349-fcc3-4834-8564-24f8a824b0cd Certificate serial: 010D0C9F4328584B36BC48B6B819B92AB0CBF480 Authority key identifier: 04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 399613 IP address blocks: 2602:f698::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:48:b6:b8:19:b9:2a:b0:cb:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d85349-fcc3-4834-8564-24f8a824b0cd Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=735d94ab-442b-41bd-8446-5f99fcc7673d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:f1:a8:ce:96:f3:66:cc:6e:03:ff:d0:4e: 52:57:c7:d8:01:63:91:3e:7c:62:32:a0:5a:24:99: 5b:67:3f:b6:96:7e:c2:5c:74:4e:a5:be:4e:52:1c: 12:32:6e:8c:e1:a7:e9:f5:a4:60:e4:ce:d5:99:cf: 6d:e8:c4:f0:ae:8b:bc:e4:28:92:00:a7:c1:05:59: 0f:6c:2b:cf:24:df:d9:7a:cd:8c:84:cb:1c:72:55: de:87:ad:2f:e4:1e:94:09:04:1f:43:fd:16:53:59: 47:0d:8d:73:25:41:5a:e1:11:be:07:22:08:bb:97: c9:b8:2e:50:9f:59:e3:fc:dd:91:0f:be:34:78:17: 25:8e:6d:33:02:e9:1d:a1:dd:92:4d:66:41:44:37: 7b:b7:28:a7:1b:cd:aa:3e:d3:60:c2:a3:93:68:b1: 53:e5:1d:a1:7f:07:3d:05:50:df:e0:8f:da:e7:c4: 21:3b:ac:c3:60:77:cf:23:2e:a7:4e:76:52:1b:cc: e8:96:56:37:59:7e:a8:81:65:de:ff:3f:2f:0e:54: d0:d5:1c:66:06:d4:1e:8e:64:2a:15:5c:6f:05:3c: 48:2b:bb:85:0a:dd:1c:b8:c7:17:80:cc:bf:2c:52: 0a:89:55:ce:df:8a:f7:2e:94:69:0a:5e:54:02:16: a1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8A:04:86:8B:83:64:2F:69:79:3C:77:31:AE:70:9D:33:FB:8D:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl X509v3 Authority Key Identifier: keyid:04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:f698::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:9e:12:4c:41:21:71:70:55:ec:a8:7b:32:b3:e9:01:5f:41: 04:df:99:f4:7d:3e:ba:e3:e1:de:b6:e2:0c:ea:c9:bb:f6:7f: 97:e6:09:a5:59:5c:cc:0a:5c:0d:16:b7:bd:66:c3:21:9b:61: b3:23:d7:be:8e:1c:d0:73:35:b9:0d:5c:a2:cd:4f:21:9f:ae: 49:48:42:82:31:1f:4b:c3:03:eb:35:e9:03:8f:ef:52:24:c7: 95:df:c1:f0:a7:f4:bc:25:26:8d:5f:36:b7:c7:be:e0:56:08: 74:17:55:8a:9a:e7:69:2e:77:16:80:71:8f:21:c6:8a:85:e2: 4f:1b:67:48:f0:71:86:fb:6d:80:81:62:60:46:97:24:c9:62: 3e:0a:11:30:c0:59:20:ba:60:7e:56:06:49:d9:86:99:9d:6f: 4e:94:a4:b9:09:e2:ff:ac:e0:5f:ac:4f:cd:50:be:23:60:ba: a7:6a:c6:f1:6a:16:c2:cf:86:00:7d:cc:7e:1b:19:69:b6:ca: af:e6:c2:37:c6:78:99:72:65:c5:89:7b:58:90:5a:ca:e4:9c: 9d:14:f2:e3:47:5a:fb:1c:07:00:e4:5a:d8:30:f2:76:de:44: 6c:4d:bd:90:0a:c5:68:5e:cc:92:0a:dd:97:46:6c:f6:50:cc: a8:db:d0:6b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs2vEi2uBm5KrDL9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkODUzNDktZmNjMy00ODM0LTg1NjQtMjRmOGE4MjRi MGNkMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk NzM1ZDk0YWItNDQyYi00MWJkLTg0NDYtNWY5OWZjYzc2NzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2XxqM6W82bMbgP/0E5SV8fYAWORPnxiMqBa JJlbZz+2ln7CXHROpb5OUhwSMm6M4afp9aRg5M7Vmc9t6MTwrou85CiSAKfBBVkP bCvPJN/Zes2MhMscclXeh60v5B6UCQQfQ/0WU1lHDY1zJUFa4RG+ByIIu5fJuC5Q n1nj/N2RD740eBcljm0zAukdod2STWZBRDd7tyinG82qPtNgwqOTaLFT5R2hfwc9 BVDf4I/a58QhO6zDYHfPIy6nTnZSG8zollY3WX6ogWXe/z8vDlTQ1RxmBtQejmQq FVxvBTxIK7uFCt0cuMcXgMy/LFIKiVXO34r3LpRpCl5UAhahIwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMaKBIaLg2QvaXk8dzGucJ0z+40rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4 NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4YTgyNGIwY2QvZGEwODY5ZmMtN2EyZi0z MzU5LWFjMTItMTZjMTQzNDhkMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDNkODUzNDktZmNjMy00ODM0LTg1 NjQtMjRmOGE4MjRiMGNkLzQzZDg1MzQ5LWZjYzMtNDgzNC04NTY0LTI0ZjhhODI0 YjBjZC5jcmwwHwYDVR0jBBgwFoAUBObOxSR8mKRrw6KaFqvjm+WiToIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4 YTgyNGIwY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL2mAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAuJ4STEEhcXBV7Kh7MrPpAV9BBN+Z9H0+uuPh3rbiDOrJu/Z/l+YJ pVlczApcDRa3vWbDIZthsyPXvo4c0HM1uQ1cos1PIZ+uSUhCgjEfS8MD6zXpA4/v UiTHld/B8Kf0vCUmjV82t8e+4FYIdBdViprnaS53FoBxjyHGioXiTxtnSPBxhvtt gIFiYEaXJMliPgoRMMBZILpgflYGSdmGmZ1vTpSkuQni/6zgX6xPzVC+I2C6p2rG 8WoWws+GAH3MfhsZabbKr+bCN8Z4mXJlxYl7WJBayuScnRTy40da+xwHAORa2DDy dt5EbE29kArFaF7Mkgrdl0Zs9lDMqNvQaw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:20:24 2025 by rpki-client