$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/d35e1e59-2d15-3254-bcb4-1d4adbd85dc2.roa File: d35e1e59-2d15-3254-bcb4-1d4adbd85dc2.roa (raw, json) Hash identifier: hJVc3oQqvzRQC9BaTITxl7Dqk4YMJ61R1NMVD5IXlyA= Subject key identifier: BD:93:60:7C:2A:44:B7:99:EB:1B:B2:71:90:F6:23:58:7F:CA:F6:D2 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584B842D65AD5B923B7ADFCF5B80 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/d35e1e59-2d15-3254-bcb4-1d4adbd85dc2.roa Signing time: Tue 14 Oct 2025 06:45:52 +0000 ROA not before: Tue 14 Oct 2025 06:45:52 +0000 ROA not after: Mon 12 Jan 2026 07:45:52 +0000 asID: 140666 IP address blocks: 2602:fa80:3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:2d:65:ad:5b:92:3b:7a:df:cf:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Oct 14 06:45:52 2025 GMT Not After : Jan 12 07:45:52 2026 GMT Subject: CN=52b06e16-5796-49e6-ba17-ef41653531e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a4:10:01:76:41:f3:22:2a:1b:51:3a:97:8d: 17:eb:63:04:38:94:b5:31:73:a0:3f:49:a1:c1:6c: a5:66:f6:af:88:e0:c7:f7:c1:15:c7:6a:02:18:ec: 31:e3:26:40:1a:b1:93:99:26:98:df:e5:47:e3:24: 61:32:96:1f:e5:db:85:4e:01:03:3c:5c:1a:3d:ca: b6:9d:56:63:0b:3f:df:62:d8:75:fe:1b:74:0c:3d: 45:70:c5:de:c5:1d:a8:78:8b:32:10:7c:0e:f2:cb: 81:f2:48:6b:e0:10:b4:ef:e3:46:a4:74:c3:df:5a: b6:04:0f:bd:47:43:bd:0a:87:d1:98:6e:34:5d:56: ff:69:09:0c:7e:19:ef:07:49:93:78:89:59:19:e1: 72:f8:2f:f7:11:4b:d8:86:f8:54:d2:c5:9d:75:84: 26:81:a4:1b:29:80:bc:29:c8:e0:17:3b:9f:a6:3f: 8c:4c:6e:8a:6e:78:c4:f3:af:aa:1d:ef:b5:5d:56: 7c:d5:0d:89:81:e5:7a:b5:80:80:aa:89:2d:fa:d6: 82:cc:dc:59:29:40:b3:65:8c:a7:b0:1b:65:73:4f: 08:c8:90:61:e4:d9:51:ab:dd:41:ba:fb:35:32:c2: e4:95:ba:38:a2:4a:d5:8c:6f:c2:d3:d7:e3:7e:56: 06:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:93:60:7C:2A:44:B7:99:EB:1B:B2:71:90:F6:23:58:7F:CA:F6:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/d35e1e59-2d15-3254-bcb4-1d4adbd85dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:3c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:12:d5:0a:91:10:5d:6b:3c:8f:ce:f5:58:78:19:18:d5:e9: 71:10:92:c4:27:25:77:99:81:b0:52:f9:7f:27:43:00:21:e2: b8:05:0a:bb:1a:4f:65:41:63:c4:93:bb:32:4f:3d:db:42:32: d8:c8:69:42:73:dd:f1:8a:f8:97:4a:25:7e:06:5e:f7:b8:00: 11:3c:18:e1:a1:05:74:eb:f0:42:a2:d6:fc:50:fa:86:20:09: dc:cf:35:5d:53:c7:33:6f:ec:07:34:eb:0a:fc:02:8d:40:e8: ec:67:d8:bc:0d:b9:1c:35:d7:32:db:7d:5b:c9:22:2a:04:40: 78:6b:4c:31:a7:2f:b8:63:27:a9:32:dc:99:06:aa:fb:a3:29: 12:f1:4a:5a:e4:eb:49:b8:43:bc:6e:ba:22:21:60:8b:ac:df: 39:bc:1e:40:d7:69:13:30:44:19:24:f5:18:ef:03:d9:7f:69: bb:f4:51:ca:0b:4e:7f:58:e6:76:ff:1d:5b:01:69:06:19:e2: cf:09:04:02:b9:03:81:bd:90:36:7f:92:2f:03:91:e9:08:01: 42:1b:9d:0b:d6:5f:62:e0:c4:cb:9d:80:91:06:55:bf:67:84: 80:2b:dd:77:49:8f:97:86:7e:bb:fe:3d:86:7d:16:65:e7:ea: fe:c2:65:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuELWWtW5I7et/PW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MTAxNDA2NDU1MloXDTI2MDExMjA3NDU1MlowLzEtMCsGA1UEAxMk NTJiMDZlMTYtNTc5Ni00OWU2LWJhMTctZWY0MTY1MzUzMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaQQAXZB8yIqG1E6l40X62MEOJS1MXOgP0mh wWylZvaviODH98EVx2oCGOwx4yZAGrGTmSaY3+VH4yRhMpYf5duFTgEDPFwaPcq2 nVZjCz/fYth1/ht0DD1FcMXexR2oeIsyEHwO8suB8khr4BC07+NGpHTD31q2BA+9 R0O9CofRmG40XVb/aQkMfhnvB0mTeIlZGeFy+C/3EUvYhvhU0sWddYQmgaQbKYC8 KcjgFzufpj+MTG6KbnjE86+qHe+1XVZ81Q2JgeV6tYCAqokt+taCzNxZKUCzZYyn sBtlc08IyJBh5NlRq91Buvs1MsLklbo4okrVjG/C09fjflYGpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL2TYHwqRLeZ6xuycZD2I1h/yvbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvZDM1ZTFlNTktMmQxNS0z MjU0LWJjYjQtMWQ0YWRiZDg1ZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gAA8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADES1QqREF1rPI/O9Vh4GRjV6XEQksQnJXeZgbBS+X8nQwAh4rgF CrsaT2VBY8STuzJPPdtCMtjIaUJz3fGK+JdKJX4GXve4ABE8GOGhBXTr8EKi1vxQ +oYgCdzPNV1TxzNv7Ac06wr8Ao1A6Oxn2LwNuRw11zLbfVvJIioEQHhrTDGnL7hj J6ky3JkGqvujKRLxSlrk60m4Q7xuuiIhYIus3zm8HkDXaRMwRBkk9RjvA9l/abv0 UcoLTn9Y5nb/HVsBaQYZ4s8JBAK5A4G9kDZ/ki8DkekIAUIbnQvWX2LgxMudgJEG Vb9nhIAr3XdJj5eGfrv+PYZ9FmXn6v7CZdc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:52:47 2025 by rpki-client