$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/432bb520-6b1c-359c-8425-18dca6b8785b.roa File: 432bb520-6b1c-359c-8425-18dca6b8785b.roa (raw, json) Hash identifier: 2sHCQ+CKhtqXyjhyU/OO6oEL3i/eatF/lc1HUHeDRDM= Subject key identifier: BB:F9:84:55:A5:D3:88:6C:F1:8F:C1:74:F1:F3:8C:F3:A0:7F:97:BA Certificate issuer: /CN=25cf742f-4f64-4e51-b004-d972a8dd5948 Certificate serial: 010D0C9F4328584B864CB220DC100FF1E130F480 Authority key identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/432bb520-6b1c-359c-8425-18dca6b8785b.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 2602:f84e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b2:20:dc:10:0f:f1:e1:30:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25cf742f-4f64-4e51-b004-d972a8dd5948 Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=409a26d1-0baf-4fba-a660-878511d6fd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:30:99:4d:c0:ba:f9:3e:b4:9b:ff:a3:73: 11:d9:44:7f:49:a3:26:c7:85:43:82:60:9d:f4:2b: 34:a5:8b:07:a1:ce:01:71:23:2f:87:4b:5b:f6:c8: 01:55:da:f2:36:21:2c:8f:9b:d3:32:36:54:5c:55: b4:6b:e6:4b:71:46:57:fa:60:52:b2:9f:cb:91:ab: 43:57:49:ea:f9:ef:50:6a:bd:dd:e4:d7:1b:09:50: d2:ac:92:5a:e7:e7:8c:3c:3c:ac:e0:3e:b7:fa:69: 5c:8f:e1:82:9f:42:86:59:af:b9:27:09:22:51:47: 8b:92:3c:9c:53:9c:07:86:d0:b2:d1:d3:89:16:4f: d7:e9:4f:cd:f8:b1:93:9c:74:ba:66:15:86:b8:99: 80:21:46:37:b6:70:dd:01:5c:50:b9:37:a7:5b:c5: ad:6d:20:92:7b:b2:03:b4:f6:af:99:ca:63:bc:c2: 06:e2:aa:45:67:b4:3b:7a:3e:65:48:a8:8f:0a:b0: a6:e9:b1:62:31:7e:2e:88:cf:56:0c:ec:80:c3:df: b1:bf:2d:98:f5:40:71:94:e0:52:37:32:b3:5b:fc: 1d:b1:a5:3d:56:8c:02:31:4a:e3:7d:fe:e4:d5:3e: dd:90:66:3b:4f:d4:aa:41:67:ad:94:2c:c1:c5:04: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F9:84:55:A5:D3:88:6C:F1:8F:C1:74:F1:F3:8C:F3:A0:7F:97:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/432bb520-6b1c-359c-8425-18dca6b8785b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl X509v3 Authority Key Identifier: keyid:07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a0:e6:dc:ce:5c:be:20:2d:42:2e:23:68:9b:4f:12:ce:94: a4:04:46:83:6a:61:f0:5c:15:33:04:ad:fc:52:6e:03:b9:12: 43:53:13:cf:c2:3b:a0:83:59:ee:bd:b0:cd:bc:3e:34:a5:d8: 6d:dc:15:9a:0c:32:a3:62:63:78:41:f4:82:39:81:b4:ba:0f: 26:02:bc:05:54:6b:f6:59:59:d4:91:7c:f7:9a:6a:de:ca:44: a0:61:0d:d9:52:a0:79:b5:75:46:62:4f:a2:e1:73:e2:43:e9: f4:0c:6d:a6:93:cf:84:c6:09:a2:67:23:34:c4:8d:64:73:62: e0:85:e7:37:21:61:52:e5:c6:a8:65:db:8a:e3:92:6a:03:43: c2:d8:65:77:5c:21:42:c2:0c:ae:f8:8d:32:96:f7:a1:7b:ff: 0f:5f:de:9a:7c:89:ab:1a:b1:55:2c:aa:c4:44:60:78:96:5e: c9:84:48:1e:ff:db:da:e4:eb:66:17:8c:1a:6c:b2:d8:84:f5: a2:39:6a:3d:65:88:13:72:36:ac:da:d8:3d:2f:3d:e5:ce:25: 65:34:94:02:13:d8:f4:42:55:12:21:a7:be:27:80:29:dd:06: 32:7a:74:4f:be:66:2e:bb:65:c0:15:8e:31:f6:4e:36:80:a8: 13:46:27:2e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuGTLIg3BAP8eEw9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVjZjc0MmYtNGY2NC00ZTUxLWIwMDQtZDk3MmE4ZGQ1 OTQ4MB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk NDA5YTI2ZDEtMGJhZi00ZmJhLWE2NjAtODc4NTExZDZmZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTcwmU3Auvk+tJv/o3MR2UR/SaMmx4VDgmCd 9Cs0pYsHoc4BcSMvh0tb9sgBVdryNiEsj5vTMjZUXFW0a+ZLcUZX+mBSsp/LkatD V0nq+e9Qar3d5NcbCVDSrJJa5+eMPDys4D63+mlcj+GCn0KGWa+5JwkiUUeLkjyc U5wHhtCy0dOJFk/X6U/N+LGTnHS6ZhWGuJmAIUY3tnDdAVxQuTenW8WtbSCSe7ID tPavmcpjvMIG4qpFZ7Q7ej5lSKiPCrCm6bFiMX4uiM9WDOyAw9+xvy2Y9UBxlOBS NzKzW/wdsaU9VowCMUrjff7k1T7dkGY7T9SqQWetlCzBxQT1lwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLv5hFWl04hs8Y/BdPHzjPOgf5e6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNWNm NzQyZi00ZjY0LTRlNTEtYjAwNC1kOTcyYThkZDU5NDgvNDMyYmI1MjAtNmIxYy0z NTljLTg0MjUtMThkY2E2Yjg3ODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjVjZjc0MmYtNGY2NC00ZTUxLWIw MDQtZDk3MmE4ZGQ1OTQ4LzI1Y2Y3NDJmLTRmNjQtNGU1MS1iMDA0LWQ5NzJhOGRk NTk0OC5jcmwwHwYDVR0jBBgwFoAUB6FemCGVdr04+tI6DnGOexkMr2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNWNmNzQyZi00ZjY0LTRlNTEtYjAwNC1kOTcy YThkZDU5NDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4TgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgKDm3M5cviAtQi4jaJtPEs6UpARGg2ph8FwVMwSt/FJuA7kSQ1MT z8I7oINZ7r2wzbw+NKXYbdwVmgwyo2JjeEH0gjmBtLoPJgK8BVRr9llZ1JF895pq 3spEoGEN2VKgebV1RmJPouFz4kPp9AxtppPPhMYJomcjNMSNZHNi4IXnNyFhUuXG qGXbiuOSagNDwthld1whQsIMrviNMpb3oXv/D1/emnyJqxqxVSyqxERgeJZeyYRI Hv/b2uTrZheMGmyy2IT1ojlqPWWIE3I2rNrYPS895c4lZTSUAhPY9EJVEiGnvieA Kd0GMnp0T75mLrtlwBWOMfZONoCoE0YnLg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:57 2025 by rpki-client