$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/253211cd-2b24-395a-8f15-6259b12163c1.roa File: 253211cd-2b24-395a-8f15-6259b12163c1.roa (raw, json) Hash identifier: 2N8+mQBUPdEpBlob+sku7HLD8hFIhghJ5hHPVFP2iLI= Subject key identifier: F8:50:B9:A4:03:5F:9D:72:F0:FC:3B:62:60:A2:4F:4E:FA:EA:B1:35 Certificate issuer: /CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315 Certificate serial: 010D0C9F4328584BA9326459E14A24125BCE1300 Authority key identifier: 4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/253211cd-2b24-395a-8f15-6259b12163c1.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 395153 IP address blocks: 2602:f6f6:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:64:59:e1:4a:24:12:5b:ce:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=6f837eff-0d13-4cc1-bb3b-9251f26d0327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:16:9f:dc:14:74:ee:92:cf:1f:45:a7:0b: dc:ed:af:ec:53:a6:95:fc:b6:fc:19:f6:3c:99:15: 2a:e9:17:91:89:14:99:65:2f:df:e0:a7:5c:54:87: 12:cc:59:f8:1d:6b:65:5a:c3:85:ae:0a:b5:08:b3: e1:7d:af:02:f8:01:21:c0:39:cc:83:3e:3a:fa:41: 25:ac:d3:4f:1c:6f:51:5d:f6:5f:21:b1:f5:35:85: c3:ee:77:3c:e2:7c:39:91:36:76:b0:25:a2:0b:32: 64:4f:b0:1a:6c:1b:d6:30:c5:d5:38:d3:7b:44:ee: 85:d4:6c:ad:a5:3c:94:40:f6:e9:7f:b5:46:c8:63: fb:68:a3:e5:6c:0b:26:f8:45:7f:cc:23:db:aa:27: 5f:2d:29:10:84:09:2e:ed:87:e8:ea:21:e5:09:cc: f5:55:3b:d6:16:3a:4d:23:4f:5e:ed:70:69:f1:78: 94:e8:ac:05:73:87:04:5d:ed:e2:88:60:0d:af:6f: 7a:6d:ac:2c:9d:5a:b7:42:cd:18:ad:d2:a5:6a:db: 2f:9d:58:27:f0:68:e2:9e:4f:24:81:05:29:86:e4: 2f:40:6c:b3:26:38:ef:3e:f6:10:de:02:b5:af:13: 3c:11:0b:56:0d:0b:e2:84:14:95:fb:ba:b3:6c:0c: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:50:B9:A4:03:5F:9D:72:F0:FC:3B:62:60:A2:4F:4E:FA:EA:B1:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/253211cd-2b24-395a-8f15-6259b12163c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl X509v3 Authority Key Identifier: keyid:4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6f6:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ea:7b:94:e6:8f:7e:27:d4:57:71:a6:f7:3d:e1:2e:d1:a0: 0c:de:7d:91:8b:f9:84:0e:61:29:f6:64:21:07:5d:e5:86:61: 3b:33:dc:4e:b2:62:c0:8d:95:01:01:1b:cf:65:e5:c1:d2:09: 4b:27:ca:e6:e9:58:c5:8e:8a:0f:ad:1a:21:62:a5:c5:42:c0: 68:d3:e4:2b:1b:75:7e:1f:a5:cd:8d:22:16:bf:b3:8e:32:73: 3f:73:f5:d4:f7:ab:5d:55:40:80:e4:c8:65:1a:3f:9b:06:94: 9a:01:09:13:bd:16:2a:51:1d:b5:f7:1a:bd:8f:7a:2b:04:67: b9:ea:a4:78:ab:3f:98:64:65:0b:4e:29:47:d7:17:2f:7d:f9: d8:76:70:01:f7:cd:8d:d8:d0:e2:df:52:2b:89:e5:28:48:82: 3a:03:92:1c:71:19:c7:26:96:cd:64:96:a1:5c:93:e9:03:c4: 4e:6c:b0:8e:19:41:0d:44:d8:97:a5:7d:6d:c0:18:3d:48:41: 24:79:a8:69:e0:c1:24:92:fd:81:3f:1a:03:76:2a:2c:7a:32: de:54:2f:e1:22:f1:a8:82:d7:ee:b2:41:b4:f0:a4:8f:83:0f: 46:9f:d4:80:aa:26:b5:7d:89:70:a9:70:8f:04:cc:c8:7e:45: 09:22:07:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMmRZ4UokElvOEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5MGMyZDMtZDJlNC00NDNlLWI0NGUtZDUzMGZjN2Yz MzE1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NmY4MzdlZmYtMGQxMy00Y2MxLWJiM2ItOTI1MWYyNmQwMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p8Wn9wUdO6Szx9Fpwvc7a/sU6aV/Lb8GfY8 mRUq6ReRiRSZZS/f4KdcVIcSzFn4HWtlWsOFrgq1CLPhfa8C+AEhwDnMgz46+kEl rNNPHG9RXfZfIbH1NYXD7nc84nw5kTZ2sCWiCzJkT7AabBvWMMXVONN7RO6F1Gyt pTyUQPbpf7VGyGP7aKPlbAsm+EV/zCPbqidfLSkQhAku7Yfo6iHlCcz1VTvWFjpN I09e7XBp8XiU6KwFc4cEXe3iiGANr296bawsnVq3Qs0YrdKlatsvnVgn8Gjink8k gQUphuQvQGyzJjjvPvYQ3gK1rxM8EQtWDQvihBSV+7qzbAyeIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhQuaQDX51y8Pw7YmCiT0766rE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZTkw YzJkMy1kMmU0LTQ0M2UtYjQ0ZS1kNTMwZmM3ZjMzMTUvMjUzMjExY2QtMmIyNC0z OTVhLThmMTUtNjI1OWIxMjE2M2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2U5MGMyZDMtZDJlNC00NDNlLWI0 NGUtZDUzMGZjN2YzMzE1LzdlOTBjMmQzLWQyZTQtNDQzZS1iNDRlLWQ1MzBmYzdm MzMxNS5jcmwwHwYDVR0jBBgwFoAUS0UBiQjBjieMPcnhaA+Aq/Dka6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZTkwYzJkMy1kMmU0LTQ0M2UtYjQ0ZS1kNTMw ZmM3ZjMzMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL29gAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF3qe5Tmj34n1Fdxpvc94S7RoAzefZGL+YQOYSn2ZCEHXeWGYTsz 3E6yYsCNlQEBG89l5cHSCUsnyubpWMWOig+tGiFipcVCwGjT5CsbdX4fpc2NIha/ s44ycz9z9dT3q11VQIDkyGUaP5sGlJoBCRO9FipRHbX3Gr2PeisEZ7nqpHirP5hk ZQtOKUfXFy99+dh2cAH3zY3Y0OLfUiuJ5ShIgjoDkhxxGccmls1klqFck+kDxE5s sI4ZQQ1E2JelfW3AGD1IQSR5qGngwSSS/YE/GgN2Kix6Mt5UL+Ei8aiC1+6yQbTw pI+DD0af1ICqJrV9iXCpcI8EzMh+RQkiB7g= -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:28 2025 by rpki-client