$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa File: 4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa (raw, json) Hash identifier: 2yA54A57llGWiywD6qxOg/MuVj48hhktzTGyN3hDkNc= Subject key identifier: 95:F5:99:F5:12:EF:7B:76:55:0A:C8:BD:14:89:9D:77:89:9C:AE:7D Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584B9E07C5C7555D9680ED37C200 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 33020 IP address blocks: 2602:2b7:c30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c5:c7:55:5d:96:80:ed:37:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=1a5d9abf-cfdb-4f74-b617-6d85e64b6797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ca:d4:d1:65:df:13:b3:d7:e8:c8:6d:84:eb: e6:28:c3:3c:fc:33:8c:df:ab:bd:f6:a9:50:53:4a: 20:30:3c:0a:7e:1a:75:d3:d4:37:28:8b:21:16:fe: 09:e6:63:92:5e:98:40:5e:34:e5:79:55:a7:b4:86: 71:d3:21:bd:2d:6c:ee:66:6b:1e:bf:32:06:c8:1e: 6e:f0:77:59:4c:22:ab:e5:4d:e1:1e:c3:96:cb:1c: 19:d6:a9:46:bd:1b:b9:92:c9:ea:7b:5f:89:bf:d6: b2:3b:2d:ce:8b:fd:02:4a:98:6e:ab:e4:f3:dd:96: ab:3e:cf:c2:72:6e:fb:b2:8f:3f:79:db:46:b4:24: 0b:c5:39:4c:b8:1a:c7:24:0e:70:c8:0f:4f:96:f8: b1:24:d2:fd:89:52:58:ba:4e:4c:bc:b2:71:36:8d: 7a:52:5d:02:45:3d:39:fc:40:4b:4d:b4:7a:a7:02: 89:28:99:20:27:2b:4f:46:53:81:02:f6:5e:e7:92: 81:38:6f:37:7a:c8:c1:ad:5a:48:15:46:85:ce:0c: 82:d0:61:5a:08:8e:34:27:8c:37:ed:de:55:a2:a6: 45:ab:4e:51:b6:48:45:3b:bb:5a:8e:91:86:a0:1d: d5:7d:35:cd:e8:5c:0c:a7:38:05:56:82:43:78:06: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F5:99:F5:12:EF:7B:76:55:0A:C8:BD:14:89:9D:77:89:9C:AE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:c30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:24:16:7e:51:24:ae:3c:26:e8:6c:e2:b1:31:a3:43:c0:d9: de:e9:f2:f3:53:d5:3a:a6:af:0b:83:2e:1e:36:1b:f0:eb:0c: 50:13:4a:52:8b:38:e0:b9:ea:0c:5c:3f:23:88:b2:8f:4a:75: 95:16:0b:2d:86:f1:1f:2f:3f:23:53:6d:41:45:49:d9:87:8a: 09:03:27:5a:06:a1:60:23:d4:34:a3:82:d7:c1:1c:bd:97:62: 17:42:a3:46:ce:1d:18:2c:a8:77:fa:c2:e0:90:34:2b:41:3d: 46:0e:c2:ca:32:7a:eb:cc:94:e4:87:e9:6b:a0:fe:5e:66:ba: d4:eb:54:8d:25:4f:ec:e0:a8:76:fd:b5:d5:54:80:d7:69:10: d2:21:64:45:8f:e0:33:1d:67:85:3a:38:dd:62:21:cb:33:1e: 13:da:99:2b:b0:66:68:b4:85:28:f0:90:37:c3:5c:84:25:51: 2c:9d:28:ad:8e:86:53:3c:05:4d:e5:ba:81:ca:22:14:9a:3a: ef:27:93:a6:af:96:c6:8f:d1:5b:d2:e8:0e:8c:58:54:32:10: 68:59:57:7b:d0:05:0e:c1:72:38:c3:79:d6:66:91:be:f8:76: 40:9a:aa:84:34:e7:b6:ce:30:49:17:59:f1:fa:17:ac:02:ca: da:40:4d:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB8XHVV2WgO03wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MWE1ZDlhYmYtY2ZkYi00Zjc0LWI2MTctNmQ4NWU2NGI2Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsrU0WXfE7PX6MhthOvmKMM8/DOM36u99qlQ U0ogMDwKfhp109Q3KIshFv4J5mOSXphAXjTleVWntIZx0yG9LWzuZmsevzIGyB5u 8HdZTCKr5U3hHsOWyxwZ1qlGvRu5ksnqe1+Jv9ayOy3Oi/0CSphuq+Tz3ZarPs/C cm77so8/edtGtCQLxTlMuBrHJA5wyA9PlvixJNL9iVJYuk5MvLJxNo16Ul0CRT05 /EBLTbR6pwKJKJkgJytPRlOBAvZe55KBOG83esjBrVpIFUaFzgyC0GFaCI40J4w3 7d5VoqZFq05RtkhFO7tajpGGoB3VfTXN6FwMpzgFVoJDeAbsnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJX1mfUS73t2VQrIvRSJnXeJnK59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNDg4OWIwZWMtMDU4OC0z Y2YyLTljMGMtOTg4YmU0Mzk4ZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwww MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACgkFn5RJK48Juhs4rExo0PA2d7p8vNT1TqmrwuDLh42G/DrDFAT SlKLOOC56gxcPyOIso9KdZUWCy2G8R8vPyNTbUFFSdmHigkDJ1oGoWAj1DSjgtfB HL2XYhdCo0bOHRgsqHf6wuCQNCtBPUYOwsoyeuvMlOSH6Wug/l5mutTrVI0lT+zg qHb9tdVUgNdpENIhZEWP4DMdZ4U6ON1iIcszHhPamSuwZmi0hSjwkDfDXIQlUSyd KK2OhlM8BU3luoHKIhSaOu8nk6avlsaP0VvS6A6MWFQyEGhZV3vQBQ7BcjjDedZm kb74dkCaqoQ057bOMEkXWfH6F6wCytpATYk= -----END CERTIFICATE-----Generated at Thu Nov 6 02:40:35 2025 by rpki-client