$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/02775a85-6b59-327a-a5a3-3a383ca23040.roa File: 02775a85-6b59-327a-a5a3-3a383ca23040.roa (raw, json) Hash identifier: ytI7lY27X1oVS9RYYheGBNypH0XFXqV44KvDLGgGufs= Subject key identifier: A4:10:3D:BF:F1:B9:4F:A8:EB:58:92:96:13:8A:A1:B6:18:FA:58:0E Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584B842C6C5697799AD92D3BF280 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/02775a85-6b59-327a-a5a3-3a383ca23040.roa Signing time: Tue 14 Oct 2025 06:43:55 +0000 ROA not before: Tue 14 Oct 2025 06:43:55 +0000 ROA not after: Mon 12 Jan 2026 07:43:55 +0000 asID: 140666 IP address blocks: 2602:fa80:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:2c:6c:56:97:79:9a:d9:2d:3b:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Oct 14 06:43:55 2025 GMT Not After : Jan 12 07:43:55 2026 GMT Subject: CN=4c400561-d3f7-4a53-9aed-40361e836c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3b:1f:ba:b3:2a:e3:4e:21:de:35:80:77:7d: f3:5a:c1:e3:66:39:28:27:ba:0e:99:e4:ec:8b:8e: 68:35:0f:8f:9a:4c:16:2a:d3:bb:8c:81:83:3e:72: d3:9b:bc:28:4b:e8:ae:53:69:ad:c5:45:0c:d3:0d: c1:64:91:38:a5:4e:a9:94:2a:fd:22:15:37:07:ee: 2d:06:61:96:61:76:4c:4e:1e:53:65:ab:f1:ff:90: a7:72:43:b8:f9:80:88:eb:ec:75:0a:14:b3:37:86: da:31:66:6e:dd:4d:4f:de:f0:1b:d1:ce:df:61:d8: 7e:b6:0d:20:de:66:b2:0b:13:62:55:96:18:a2:09: 7a:54:e6:91:f7:47:15:01:e3:71:71:de:18:e3:f8: df:2a:cc:d3:9a:e3:95:e6:51:ec:31:44:da:4d:fa: 50:c3:40:87:68:2d:9d:6c:3c:5c:1d:36:40:6a:d5: c5:08:85:a3:3f:50:68:38:44:ca:c9:ce:22:59:0a: a1:dd:92:99:10:5d:15:d1:61:e2:36:cb:df:9c:a9: bf:82:c3:8a:bb:ab:aa:c7:6c:1a:10:7a:70:12:82: 70:13:22:5e:1a:14:ac:2a:83:2c:5d:9a:b9:f2:dc: 2e:bb:4e:f1:8b:01:21:eb:cb:2c:cc:f9:0b:ce:c3: 6d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:10:3D:BF:F1:B9:4F:A8:EB:58:92:96:13:8A:A1:B6:18:FA:58:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/02775a85-6b59-327a-a5a3-3a383ca23040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:06:45:37:32:71:de:e1:88:55:aa:4a:cc:4a:ab:4a:c0:03: b4:18:b4:bc:d4:0e:9f:d6:c1:f9:18:b5:d0:c4:51:35:c7:e6: d8:d6:59:e2:a8:c6:d2:cd:55:3a:78:e3:f4:7e:e0:90:42:b3: c5:e7:02:40:1f:9e:84:04:13:eb:1d:f3:9a:19:db:b9:8a:ad: dc:45:da:28:54:ef:73:1b:ca:0a:3d:a9:44:a0:9f:1a:07:59: 3a:52:3a:05:a0:f8:17:0d:cf:a2:58:be:a0:6a:7b:60:0f:a7: fd:67:ef:5a:fb:1d:7c:c3:f9:17:40:b7:81:b9:4b:63:4d:7d: 14:b7:cb:67:87:cf:d0:57:6c:19:63:d5:40:95:e6:de:72:fb: ec:3a:d0:6f:8c:d3:cd:50:d9:7c:31:08:83:f2:10:ee:8f:55: 40:a5:a7:88:fa:b8:e5:d9:14:97:2d:8b:34:09:18:b6:ed:db: 18:76:ff:1b:09:25:89:00:45:72:dc:5c:ab:35:c0:23:bb:98: 36:00:bd:a9:e2:95:41:97:42:2d:30:b7:f7:8e:0c:4b:5e:e2: c7:fb:6f:2b:15:04:67:15:97:61:02:d8:03:ef:9f:04:c3:1e: 68:26:bb:33:c4:d3:3f:fc:80:1e:c3:8f:18:4b:ef:e5:e7:49: 20:16:d0:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuELGxWl3ma2S078oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MTAxNDA2NDM1NVoXDTI2MDExMjA3NDM1NVowLzEtMCsGA1UEAxMk NGM0MDA1NjEtZDNmNy00YTUzLTlhZWQtNDAzNjFlODM2Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjsfurMq404h3jWAd33zWsHjZjkoJ7oOmeTs i45oNQ+PmkwWKtO7jIGDPnLTm7woS+iuU2mtxUUM0w3BZJE4pU6plCr9IhU3B+4t BmGWYXZMTh5TZavx/5CnckO4+YCI6+x1ChSzN4baMWZu3U1P3vAb0c7fYdh+tg0g 3mayCxNiVZYYogl6VOaR90cVAeNxcd4Y4/jfKszTmuOV5lHsMUTaTfpQw0CHaC2d bDxcHTZAatXFCIWjP1BoOETKyc4iWQqh3ZKZEF0V0WHiNsvfnKm/gsOKu6uqx2wa EHpwEoJwEyJeGhSsKoMsXZq58twuu07xiwEh68sszPkLzsNtLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQQPb/xuU+o61iSlhOKobYY+lgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvMDI3NzVhODUtNmI1OS0z MjdhLWE1YTMtM2EzODNjYTIzMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYGRTcycd7hiFWqSsxKq0rAA7QYtLzUDp/WwfkYtdDEUTXH5tjW WeKoxtLNVTp44/R+4JBCs8XnAkAfnoQEE+sd85oZ27mKrdxF2ihU73Mbygo9qUSg nxoHWTpSOgWg+BcNz6JYvqBqe2APp/1n71r7HXzD+RdAt4G5S2NNfRS3y2eHz9BX bBlj1UCV5t5y++w60G+M081Q2XwxCIPyEO6PVUClp4j6uOXZFJctizQJGLbt2xh2 /xsJJYkARXLcXKs1wCO7mDYAvanilUGXQi0wt/eODEte4sf7bysVBGcVl2EC2APv nwTDHmgmuzPE0z/8gB7DjxhL7+XnSSAW0OA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:18 2025 by rpki-client