$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/8afe91d7-ac39-3f9a-99e6-08b83450bc1a.roa File: 8afe91d7-ac39-3f9a-99e6-08b83450bc1a.roa (raw, json) Hash identifier: wVjjnU7Unw0anheABM/N2dBVAygWTsp8mr39e89q9NA= Subject key identifier: C2:EA:D1:66:98:1A:05:31:82:15:F6:EB:1C:26:1B:8C:77:1E:26:4B Certificate issuer: /CN=81d86d00-f6e5-47a7-932c-048a6cc0c427 Certificate serial: 010D0C9F4328584B328C3EA09928B913DA259D20 Authority key identifier: E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/8afe91d7-ac39-3f9a-99e6-08b83450bc1a.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 400882 IP address blocks: 2602:fa19::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3e:a0:99:28:b9:13:da:25:9d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81d86d00-f6e5-47a7-932c-048a6cc0c427 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=7ba8d2ff-33d7-45ca-ae86-79de57f443b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:a1:0d:b1:18:85:58:58:68:05:f1:b7:78: 3b:87:f0:e3:c3:51:16:d8:f5:61:2e:2f:59:a8:79: a4:ad:b0:83:7c:f9:d7:5f:0c:1c:c3:09:ea:7b:38: 81:cb:12:c0:74:37:5f:04:e6:e7:e8:e9:a9:7d:2c: e8:26:d3:2f:a2:37:74:0c:c7:5d:7f:3f:6a:89:40: fa:c8:b9:71:67:73:71:91:f8:a9:99:73:25:8f:d0: a2:d1:71:1b:aa:cd:6d:7a:e0:a0:e6:96:c0:35:7f: 37:e7:92:c6:f2:ea:49:20:e3:df:1e:fd:fd:9d:70: 1c:b7:1e:19:d4:f1:96:ef:1b:fd:eb:3a:ba:e8:cd: ca:1f:b1:25:9f:69:ae:f0:7c:29:1a:8a:5d:b1:0f: 17:b6:73:f9:68:61:17:3f:6b:c3:32:a6:b5:1c:bc: 8c:e4:2b:ea:ad:56:be:c1:8a:e9:46:77:67:28:0f: cb:75:f0:16:2d:91:bc:f5:10:da:b1:75:c7:20:aa: c9:6a:7c:51:ec:43:3f:ba:a5:e0:37:7b:bf:6a:43: fc:05:83:ec:58:e6:47:10:73:f3:4f:fa:46:78:93: d1:cf:0a:15:81:2a:e6:2d:55:f7:e1:29:35:94:fb: cf:cf:02:6e:9b:c3:51:b6:e7:d7:4a:ff:8a:cd:59: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EA:D1:66:98:1A:05:31:82:15:F6:EB:1C:26:1B:8C:77:1E:26:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/8afe91d7-ac39-3f9a-99e6-08b83450bc1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl X509v3 Authority Key Identifier: keyid:E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa19::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7e:6b:ef:43:f6:d2:c9:be:89:37:dd:1e:cc:b3:b2:48:42: a8:34:4d:8e:0e:c2:08:96:fb:7d:b6:b3:54:a6:83:e4:32:14: 74:96:a2:e6:a3:73:73:5a:48:13:11:92:6f:fd:3f:ae:17:e3: b4:ef:50:52:63:e9:bc:d0:38:11:e6:94:20:e5:b8:6c:7d:a9: 61:e5:34:a4:f8:9f:ca:43:02:31:47:d3:9a:aa:14:59:50:df: cf:eb:34:44:d1:cd:48:e0:c9:f4:7a:12:12:4f:b7:9f:05:80: 6d:02:dc:a9:65:9b:b3:3f:9e:96:12:0a:66:9a:cc:d7:c7:a8: 23:c1:c3:62:62:b8:b4:21:5c:70:54:d0:4a:58:9a:88:41:a2: 5e:69:14:12:0b:59:12:4d:2d:50:42:8b:c8:bf:fa:98:7d:61: fb:40:66:53:83:b0:1d:8e:31:5a:eb:c4:b0:26:c8:12:4d:f7: 08:b0:bb:b8:e5:ae:76:eb:89:04:35:43:41:66:c8:cc:92:18: 02:d8:fd:0b:6b:12:25:1e:c8:2e:69:52:ff:57:2d:88:85:e6: 28:56:4d:5b:c5:98:e3:78:55:5e:c7:fc:4b:6e:fb:6e:d1:5e: 85:a1:e9:37:b6:64:05:3d:65:97:50:03:6c:fe:1f:f2:06:2b: 2b:da:91:eb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsyjD6gmSi5E9olnSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFkODZkMDAtZjZlNS00N2E3LTkzMmMtMDQ4YTZjYzBj NDI3MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk N2JhOGQyZmYtMzNkNy00NWNhLWFlODYtNzlkZTU3ZjQ0M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppihDbEYhVhYaAXxt3g7h/Djw1EW2PVhLi9Z qHmkrbCDfPnXXwwcwwnqeziByxLAdDdfBObn6OmpfSzoJtMvojd0DMddfz9qiUD6 yLlxZ3NxkfipmXMlj9Ci0XEbqs1teuCg5pbANX8355LG8upJIOPfHv39nXActx4Z 1PGW7xv96zq66M3KH7Eln2mu8HwpGopdsQ8XtnP5aGEXP2vDMqa1HLyM5CvqrVa+ wYrpRndnKA/LdfAWLZG89RDasXXHIKrJanxR7EM/uqXgN3u/akP8BYPsWOZHEHPz T/pGeJPRzwoVgSrmLVX34Sk1lPvPzwJum8NRtufXSv+KzVmAvQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMLq0WaYGgUxghX26xwmG4x3HiZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWQ4 NmQwMC1mNmU1LTQ3YTctOTMyYy0wNDhhNmNjMGM0MjcvOGFmZTkxZDctYWMzOS0z ZjlhLTk5ZTYtMDhiODM0NTBiYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFkODZkMDAtZjZlNS00N2E3LTkz MmMtMDQ4YTZjYzBjNDI3LzgxZDg2ZDAwLWY2ZTUtNDdhNy05MzJjLTA0OGE2Y2Mw YzQyNy5jcmwwHwYDVR0jBBgwFoAU6edUqU0xhxQtXcuRSykkoYq7bvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MWQ4NmQwMC1mNmU1LTQ3YTctOTMyYy0wNDhh NmNjMGM0MjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6GQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALn5r70P20sm+iTfdHsyzskhCqDRNjg7CCJb7fbazVKaD5DIUdJai 5qNzc1pIExGSb/0/rhfjtO9QUmPpvNA4EeaUIOW4bH2pYeU0pPifykMCMUfTmqoU WVDfz+s0RNHNSODJ9HoSEk+3nwWAbQLcqWWbsz+elhIKZprM18eoI8HDYmK4tCFc cFTQSliaiEGiXmkUEgtZEk0tUEKLyL/6mH1h+0BmU4OwHY4xWuvEsCbIEk33CLC7 uOWuduuJBDVDQWbIzJIYAtj9C2sSJR7ILmlS/1ctiIXmKFZNW8WY43hVXsf8S277 btFehaHpN7ZkBT1ll1ADbP4f8gYrK9qR6w== -----END CERTIFICATE-----Generated at Wed Nov 5 01:20:38 2025 by rpki-client