$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/d042b490-4d59-34f5-999f-12f430d5e811.roa File: d042b490-4d59-34f5-999f-12f430d5e811.roa (raw, json) Hash identifier: eYw4V5Ohvd1UzArft375bmpUMruIoHuPhkkUxB9ygJQ= Subject key identifier: 65:D7:E6:49:D2:63:F6:7F:11:5F:86:D5:D2:B6:53:7E:EE:07:A1:B7 Certificate issuer: /CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b Certificate serial: 010D0C9F4328584BBD440DA3DA2F2BEC1EAC1CC0 Authority key identifier: D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/d042b490-4d59-34f5-999f-12f430d5e811.roa Signing time: Mon 03 Nov 2025 17:32:36 +0000 ROA not before: Mon 03 Nov 2025 17:32:36 +0000 ROA not after: Sun 01 Feb 2026 17:32:36 +0000 asID: 396982 IP address blocks: 2602:f4df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:44:0d:a3:da:2f:2b:ec:1e:ac:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b Validity Not Before: Nov 3 17:32:36 2025 GMT Not After : Feb 1 17:32:36 2026 GMT Subject: CN=892234bf-a832-43ff-9e54-10bb038d22bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:8b:44:e2:d6:e7:ea:6e:0d:d4:11:04:9a: e5:56:17:e1:4c:ef:15:1d:8c:b8:98:3c:04:f3:0c: 40:02:08:f9:8e:1a:ce:ce:9c:df:61:cc:1a:a3:b3: 6a:25:f8:33:dc:2c:dc:22:e4:ea:ca:34:ce:80:ae: 4c:28:8f:cf:11:e3:5a:1c:50:db:6e:7f:53:d0:ae: d0:52:34:a2:de:cc:36:56:2f:6b:0c:ae:3f:b0:a3: fe:7d:70:03:1e:51:7c:cc:ec:db:d5:c4:42:11:d8: b0:08:cd:c3:f3:17:22:4e:35:f8:99:8f:09:ce:d4: c0:42:56:76:a1:28:50:ac:f4:2b:c8:08:ac:75:ba: 86:5f:d7:d3:ad:60:67:44:bc:15:c0:00:fb:6a:2b: d4:5d:2a:a1:06:19:0b:51:cf:4e:e7:a2:10:24:7b: 83:8b:0e:69:37:4c:3a:e1:5f:2a:91:69:94:b7:8c: 12:50:d2:1a:0a:01:8d:24:04:05:cd:1f:0e:24:b1: 1b:ed:38:2a:9f:cd:c3:0d:45:b0:3a:1d:99:2f:2e: 7d:3b:54:4b:6a:09:df:75:ef:fe:c0:60:2d:77:f9: 62:7a:de:1f:9f:20:81:2d:6a:a9:0b:19:ad:13:8a: 08:f9:1e:f0:89:eb:68:5d:98:97:b9:02:cd:55:eb: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D7:E6:49:D2:63:F6:7F:11:5F:86:D5:D2:B6:53:7E:EE:07:A1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/d042b490-4d59-34f5-999f-12f430d5e811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl X509v3 Authority Key Identifier: keyid:D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4c:c0:be:bd:46:1b:5b:b9:61:16:92:3a:65:47:dc:40:20: 9e:9b:44:e0:db:7f:7c:60:c0:87:03:49:7b:d2:3c:e0:4d:a1: f2:e2:17:65:c2:9d:af:d8:53:ce:d0:00:d1:80:14:56:e2:ea: 07:9a:42:03:9b:dc:5d:35:0e:a5:d1:5b:b2:e5:7f:a0:3c:cc: 3e:7d:40:42:88:3d:a6:6b:0d:27:51:7c:39:42:06:af:23:85: b7:45:e8:0b:c5:37:da:1f:b4:4c:5e:de:93:27:0d:4b:18:c1: ca:0c:3f:5c:48:d3:c5:f6:69:db:f4:4d:b7:f5:cb:80:05:9f: e3:e0:bc:28:9a:96:cd:b0:88:5d:ee:da:a0:91:36:a4:45:b5: c6:e5:14:25:b0:68:3e:51:bc:74:b5:68:80:e5:6f:87:7d:e9: a9:1d:72:5c:56:0e:9f:7b:af:44:1f:8c:3a:b3:f4:a0:5a:6b: 84:01:d1:19:94:d8:48:40:90:c9:6c:ac:7f:30:af:bd:c5:2a: 31:20:10:57:61:23:c6:fc:30:e3:bd:dc:f6:d2:09:70:d6:81: ba:2a:a3:dc:3c:21:33:69:c7:4f:ef:3d:5c:51:cc:97:01:0a: ae:69:e3:e9:36:62:2c:75:ce:ca:cc:e1:6c:56:ab:ad:8b:1f: c9:9f:4b:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu9RA2j2i8r7B6sHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTlkZDcwYTctYTZmNS00OTc1LTljMjMtMGFiMTIzNmU2 MDJiMB4XDTI1MTEwMzE3MzIzNloXDTI2MDIwMTE3MzIzNlowLzEtMCsGA1UEAxMk ODkyMjM0YmYtYTgzMi00M2ZmLTllNTQtMTBiYjAzOGQyMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQuLROLW5+puDdQRBJrlVhfhTO8VHYy4mDwE 8wxAAgj5jhrOzpzfYcwao7NqJfgz3CzcIuTqyjTOgK5MKI/PEeNaHFDbbn9T0K7Q UjSi3sw2Vi9rDK4/sKP+fXADHlF8zOzb1cRCEdiwCM3D8xciTjX4mY8JztTAQlZ2 oShQrPQryAisdbqGX9fTrWBnRLwVwAD7aivUXSqhBhkLUc9O56IQJHuDiw5pN0w6 4V8qkWmUt4wSUNIaCgGNJAQFzR8OJLEb7Tgqn83DDUWwOh2ZLy59O1RLagnfde/+ wGAtd/liet4fnyCBLWqpCxmtE4oI+R7wietoXZiXuQLNVeu2CwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXX5knSY/Z/EV+G1dK2U37uB6G3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOWRk NzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIxMjM2ZTYwMmIvZDA0MmI0OTAtNGQ1OS0z NGY1LTk5OWYtMTJmNDMwZDVlODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTlkZDcwYTctYTZmNS00OTc1LTlj MjMtMGFiMTIzNmU2MDJiL2U5ZGQ3MGE3LWE2ZjUtNDk3NS05YzIzLTBhYjEyMzZl NjAyYi5jcmwwHwYDVR0jBBgwFoAU0RJH4f9RDhpe5bL8Dz2d+y6AlYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOWRkNzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIx MjM2ZTYwMmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL03wAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF9MwL69RhtbuWEWkjplR9xAIJ6bRODbf3xgwIcDSXvSPOBNofLi F2XCna/YU87QANGAFFbi6geaQgOb3F01DqXRW7Llf6A8zD59QEKIPaZrDSdRfDlC Bq8jhbdF6AvFN9oftExe3pMnDUsYwcoMP1xI08X2adv0Tbf1y4AFn+PgvCials2w iF3u2qCRNqRFtcblFCWwaD5RvHS1aIDlb4d96akdclxWDp97r0QfjDqz9KBaa4QB 0RmU2EhAkMlsrH8wr73FKjEgEFdhI8b8MOO93PbSCXDWgboqo9w8ITNpx0/vPVxR zJcBCq5p4+k2Yix1zsrM4WxWq62LH8mfSws= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:06 2025 by rpki-client