$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/40098f28-c8af-3ec2-938c-cb4a7f4cd922.roa File: 40098f28-c8af-3ec2-938c-cb4a7f4cd922.roa (raw, json) Hash identifier: p1r2wZHwBsuaJIMsy+eWFkBp2xkIjQ5qtMrOZVa6Vaw= Subject key identifier: 96:0A:64:EA:10:F5:17:ED:C0:94:6B:69:D7:7B:18:FE:C8:28:89:B3 Certificate issuer: /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Certificate serial: 010D0C9F4328584B97C65EC39218E672FB71C600 Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/40098f28-c8af-3ec2-938c-cb4a7f4cd922.roa Signing time: Tue 21 Oct 2025 07:14:27 +0000 ROA not before: Tue 21 Oct 2025 07:14:27 +0000 ROA not after: Mon 19 Jan 2026 08:14:27 +0000 asID: 13696 IP address blocks: 2602:f77c::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:c6:5e:c3:92:18:e6:72:fb:71:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Validity Not Before: Oct 21 07:14:27 2025 GMT Not After : Jan 19 08:14:27 2026 GMT Subject: CN=a0e38a5b-6f6e-493c-a97e-d421e63449e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:fc:94:5d:39:12:2b:b1:df:ca:d1:81:2b: b9:48:89:25:12:cd:55:cf:20:12:39:37:50:09:b6: 6d:35:89:1c:6a:f4:9d:52:14:8d:87:45:c9:5c:1d: a9:b0:4b:35:56:a3:c8:1f:01:d3:07:61:c9:44:4b: ea:3c:86:7d:fc:89:c3:3f:77:57:ad:51:9f:2f:95: b5:bf:71:6c:26:c9:8e:20:f7:24:8d:69:c2:17:e1: f1:33:49:08:d9:02:c8:11:4d:b1:a3:82:28:d6:48: d7:c3:f4:c5:c6:dd:2f:e5:da:0c:7d:41:52:e9:8c: ee:02:7a:43:57:1b:da:38:a2:82:d6:10:c5:8b:ba: 54:1b:05:f8:76:89:0c:80:54:da:be:5a:d2:46:d9: 1c:25:4d:a8:e4:ca:93:bf:de:6e:5e:88:ec:7e:b8: 34:f1:34:63:33:d2:6d:43:4b:b7:f0:db:ba:35:89: b0:63:97:e1:e4:ae:a7:62:41:fa:99:06:cc:f0:15: a1:aa:a2:94:d3:ca:b5:8d:fe:2e:48:2b:6b:93:40: 3c:93:08:cb:18:95:d0:f8:00:07:7c:ce:ed:a4:3a: 10:00:8a:6a:49:ea:25:aa:bd:a2:69:07:53:ec:98: 9b:ff:ce:65:79:e8:a1:c1:25:67:3a:15:8e:cd:63: 5a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:64:EA:10:F5:17:ED:C0:94:6B:69:D7:7B:18:FE:C8:28:89:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/40098f28-c8af-3ec2-938c-cb4a7f4cd922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl X509v3 Authority Key Identifier: keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f77c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:44:75:19:a6:70:c3:53:19:97:b9:fc:a7:e7:d6:03:bc:21: 61:7b:3b:33:1c:c7:2b:49:64:4a:86:6d:cf:53:39:fe:d8:e5: 8b:35:16:c0:8c:10:03:df:b6:d3:2c:fd:97:1d:b5:e2:c2:78: 69:20:34:cc:90:9b:e2:fe:1c:e1:25:f8:13:1c:80:ba:f4:c4: b9:a8:33:91:56:57:68:e7:b8:8f:13:ad:94:e6:78:72:04:5d: 6f:91:36:89:a7:fe:1a:3d:29:9a:fc:53:a0:58:ca:b4:ad:1a: a2:9c:c7:99:65:2b:bc:d0:8f:b0:99:2f:3a:64:5b:19:5e:78: 1d:1f:74:10:31:fa:4b:25:a4:c6:35:91:0f:7c:18:0c:f3:c5: ba:9c:ad:e0:d1:b3:be:0a:4e:b3:97:43:54:b8:89:4f:f4:14: 27:d0:ea:60:e0:d4:d5:6d:34:ab:9e:a7:f1:57:71:f7:a7:0a: 71:84:cd:0e:4d:06:45:d7:7c:af:2a:8d:6d:e8:f6:54:fc:55: 76:b2:fa:d5:07:67:9e:ee:ef:af:a6:28:2d:46:39:cd:1e:47: e5:b3:4c:9e:24:8d:1a:13:f4:05:cf:c3:e1:f1:00:da:75:81: 5d:18:a0:52:63:51:a1:22:6d:1f:4f:e4:44:ca:4b:91:2f:fe: db:ad:63:6b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuXxl7DkhjmcvtxxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4 NTBiMB4XDTI1MTAyMTA3MTQyN1oXDTI2MDExOTA4MTQyN1owLzEtMCsGA1UEAxMk YTBlMzhhNWItNmY2ZS00OTNjLWE5N2UtZDQyMWU2MzQ0OWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bv8lF05Eiux38rRgSu5SIklEs1VzyASOTdQ CbZtNYkcavSdUhSNh0XJXB2psEs1VqPIHwHTB2HJREvqPIZ9/InDP3dXrVGfL5W1 v3FsJsmOIPckjWnCF+HxM0kI2QLIEU2xo4Io1kjXw/TFxt0v5doMfUFS6YzuAnpD VxvaOKKC1hDFi7pUGwX4dokMgFTavlrSRtkcJU2o5MqTv95uXojsfrg08TRjM9Jt Q0u38Nu6NYmwY5fh5K6nYkH6mQbM8BWhqqKU08q1jf4uSCtrk0A8kwjLGJXQ+AAH fM7tpDoQAIpqSeolqr2iaQdT7Jib/85leeihwSVnOhWOzWNaqQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJYKZOoQ9RftwJRradd7GP7IKImzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NGY2 MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvNDAwOThmMjgtYzhhZi0z ZWMyLTkzOGMtY2I0YTdmNGNkOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTRmNjIzZTctYzZiZS00YzNiLWI1 NTQtNmFkNmFjYjA4NTBiLzk0ZjYyM2U3LWM2YmUtNGMzYi1iNTU0LTZhZDZhY2Iw ODUwYi5jcmwwHwYDVR0jBBgwFoAUkcXbHtylYSuEC6CupI1kxQXIEEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2 YWNiMDg1MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3fAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAP0R1GaZww1MZl7n8p+fWA7whYXs7MxzHK0lkSoZtz1M5/tjlizUW wIwQA9+20yz9lx214sJ4aSA0zJCb4v4c4SX4ExyAuvTEuagzkVZXaOe4jxOtlOZ4 cgRdb5E2iaf+Gj0pmvxToFjKtK0aopzHmWUrvNCPsJkvOmRbGV54HR90EDH6SyWk xjWRD3wYDPPFupyt4NGzvgpOs5dDVLiJT/QUJ9DqYODU1W00q56n8Vdx96cKcYTN Dk0GRdd8ryqNbej2VPxVdrL61Qdnnu7vr6YoLUY5zR5H5bNMniSNGhP0Bc/D4fEA 2nWBXRigUmNRoSJtH0/kRMpLkS/+261jaw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:35:43 2025 by rpki-client