$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa File: 38aa2871-1127-35de-be08-5b917c38fae4.roa (raw, json) Hash identifier: 1Bc1VsFR/XeoUCKa5uSDNMEFhb7272K9Nq3C+BIPwoY= Subject key identifier: EA:1B:35:FF:2F:EB:C0:37:77:7D:3B:44:EA:53:C3:AC:AB:65:EF:3A Certificate issuer: /CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce Certificate serial: 010D0C9F4328584B8EACDD69018D9B930A72CE80 Authority key identifier: A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 2602:2df::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:dd:69:01:8d:9b:93:0a:72:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=52848681-d0a1-4747-a748-a57b98a8931d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:05:fc:22:61:22:b9:28:6f:20:b6:cf:df: 89:d1:b5:51:3c:57:11:62:10:34:3e:ca:cf:8c:68: ae:41:58:ce:3b:e2:ae:77:1b:06:72:04:fb:ad:19: 57:bb:43:5b:b8:53:5f:51:d6:14:4b:dd:c8:0b:e7: d2:e7:1f:1f:ed:f0:94:b8:16:ac:84:72:4b:c6:39: 63:9b:37:3e:1f:13:80:91:b5:7c:ac:b7:c4:f4:6e: da:90:6b:80:a0:0c:2b:56:42:48:19:4f:aa:32:13: f6:60:dd:d2:4d:05:01:b8:ba:2c:be:0b:f3:2d:6f: d8:9b:67:a8:4e:44:e6:d9:52:f3:f5:1e:4e:3c:5f: 44:88:92:19:5d:7f:f9:8f:29:2e:8e:4b:29:97:38: b3:f3:08:cc:39:3f:be:56:a6:88:46:ab:60:8a:d8: 5a:35:f4:68:b0:fe:30:85:1a:3c:30:6f:a9:9f:c8: 3a:7e:44:70:67:7d:75:41:2b:3a:91:f8:e9:9b:0e: c7:9a:ea:34:02:fc:13:9d:f2:9a:7a:49:5f:b4:65: 6b:f1:a6:e2:82:a6:45:f2:7c:b0:86:c5:28:6f:fa: f5:eb:2d:f8:20:f1:d4:b4:b1:9c:bd:bb:00:d1:6e: b5:f1:a5:e2:72:f7:91:d2:02:0c:a8:f2:75:a3:15: 0f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1B:35:FF:2F:EB:C0:37:77:7D:3B:44:EA:53:C3:AC:AB:65:EF:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl X509v3 Authority Key Identifier: keyid:A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer sbgp-ipAddrBlock: critical IPv6: 2602:2df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:db:e8:96:16:61:b7:23:2d:4a:6b:2c:ce:87:3e:87:b7:05: a5:6c:d0:fc:21:a1:c4:2b:59:3f:3c:b7:fd:88:4f:ee:d4:73: f0:d3:a4:42:5f:c1:f5:8f:76:c3:dd:7d:09:0e:ec:8c:e9:00: 74:05:e6:7e:86:7f:dd:e4:70:0b:32:72:52:6b:6d:1e:fa:92: d0:5b:f2:3f:f5:17:3a:71:28:a4:93:21:74:6a:c7:f0:03:6c: 10:38:c6:d3:3a:cb:ab:9c:4b:6d:98:ca:22:31:cc:ee:30:29: fb:73:37:12:7f:61:34:87:e4:03:78:ec:0b:16:95:43:6b:ce: 13:4f:85:ee:ce:8e:af:07:c5:b1:87:30:f3:f6:9f:51:f5:27: 5c:1f:f7:95:be:c6:38:5c:35:33:46:e1:50:c6:41:ae:d8:91: 7e:19:c9:00:dc:2a:09:00:d7:b6:f5:b0:6f:ae:a5:c9:f6:97: 47:5c:7a:7e:59:6c:f0:54:41:f3:a9:6f:88:81:0f:62:4e:39: e7:88:20:a2:f8:6f:70:03:ee:62:44:9a:78:ea:3d:6f:30:8e: 32:b3:db:d2:4a:b0:51:f5:49:51:cb:2d:37:53:b7:f0:75:3d: 16:c2:15:c3:bb:aa:a1:ca:4c:f5:fc:53:5d:9c:9b:d7:33:b3: f1:47:64:48 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuOrN1pAY2bkwpyzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzZTkzZDYtNDdmMy00ZGZmLWE3ZDItZDdkZTRhMmEw NGNlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NTI4NDg2ODEtZDBhMS00NzQ3LWE3NDgtYTU3Yjk4YTg5MzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgMF/CJhIrkobyC2z9+J0bVRPFcRYhA0PsrP jGiuQVjOO+KudxsGcgT7rRlXu0NbuFNfUdYUS93IC+fS5x8f7fCUuBashHJLxjlj mzc+HxOAkbV8rLfE9G7akGuAoAwrVkJIGU+qMhP2YN3STQUBuLosvgvzLW/Ym2eo TkTm2VLz9R5OPF9EiJIZXX/5jykujksplziz8wjMOT++VqaIRqtgithaNfRosP4w hRo8MG+pn8g6fkRwZ311QSs6kfjpmw7Hmuo0AvwTnfKaeklftGVr8abigqZF8nyw hsUob/r16y34IPHUtLGcvbsA0W618aXicveR0gIMqPJ1oxUP/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOobNf8v68A3d307ROpTw6yrZe86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NDNl OTNkNi00N2YzLTRkZmYtYTdkMi1kN2RlNGEyYTA0Y2UvMzhhYTI4NzEtMTEyNy0z NWRlLWJlMDgtNWI5MTdjMzhmYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDQzZTkzZDYtNDdmMy00ZGZmLWE3 ZDItZDdkZTRhMmEwNGNlLzQ0M2U5M2Q2LTQ3ZjMtNGRmZi1hN2QyLWQ3ZGU0YTJh MDRjZS5jcmwwHwYDVR0jBBgwFoAUoHZOjRPy6znnFgLswCZditWT4lswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NDNlOTNkNi00N2YzLTRkZmYtYTdkMi1kN2Rl NGEyYTA0Y2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC3wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANtvolhZhtyMtSmsszoc+h7cFpWzQ/CGhxCtZPzy3/YhP7tRz8NOk Ql/B9Y92w919CQ7sjOkAdAXmfoZ/3eRwCzJyUmttHvqS0FvyP/UXOnEopJMhdGrH 8ANsEDjG0zrLq5xLbZjKIjHM7jAp+3M3En9hNIfkA3jsCxaVQ2vOE0+F7s6OrwfF sYcw8/afUfUnXB/3lb7GOFw1M0bhUMZBrtiRfhnJANwqCQDXtvWwb66lyfaXR1x6 flls8FRB86lviIEPYk4554ggovhvcAPuYkSaeOo9bzCOMrPb0kqwUfVJUcstN1O3 8HU9FsIVw7uqocpM9fxTXZyb1zOz8UdkSA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:54 2025 by rpki-client