$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/590e1a00-70cd-3b97-9411-2d2ded29202e.roa File: 590e1a00-70cd-3b97-9411-2d2ded29202e.roa (raw, json) Hash identifier: JJMyrZUUGhki+UdWtyb6cQbim7jKLIxmDH9+pQwpnNs= Subject key identifier: E4:68:95:14:9F:05:95:C9:73:01:9F:6B:72:60:79:8B:EC:52:55:CB Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F4328584B99D79F45AD9D190A4B6C6280 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/590e1a00-70cd-3b97-9411-2d2ded29202e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54613 IP address blocks: 2602:fd9a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:9f:45:ad:9d:19:0a:4b:6c:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d735cfaf-1255-4f26-9f34-972679b00175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:00:35:73:81:f6:d3:d5:ba:d9:36:4f:19: 3b:18:27:30:b0:d3:39:40:83:9a:69:85:a3:19:03: 8f:42:20:ae:69:e9:d9:d4:14:7e:0f:fc:60:50:20: 0d:67:5c:ab:3d:9c:df:de:74:a0:36:f4:4f:32:c3: 31:79:fc:a1:82:e7:4e:2b:68:4e:3e:cf:48:f9:98: af:3c:8c:80:38:ac:1e:c0:b1:3d:bc:95:35:47:4a: d3:c2:a0:ad:14:a6:eb:d2:74:55:57:75:46:13:1b: d4:64:10:1a:b0:d6:99:f9:86:4c:c8:9c:1d:51:75: bf:33:dd:d9:11:5d:0c:83:0a:61:ad:4d:0c:51:b9: fd:e2:d3:e5:ce:9d:56:e5:bc:12:52:06:ad:30:95: 4d:47:7b:e1:94:d7:e4:16:10:36:90:fc:b7:3d:4b: da:67:89:13:ab:08:1b:4d:5d:3c:12:d2:b5:76:24: fb:83:e2:6e:4a:30:97:58:d8:d6:a3:c3:70:da:5e: a5:41:33:9d:36:32:8f:52:de:07:be:60:2d:d2:7c: cf:f2:51:71:b3:66:78:75:75:49:d1:38:4f:cf:3f: 42:aa:9d:a4:b0:c5:7b:e9:dd:06:91:0a:c1:69:d1: 99:13:c7:9d:bf:c5:97:0a:53:da:30:18:fb:5f:90: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:68:95:14:9F:05:95:C9:73:01:9F:6B:72:60:79:8B:EC:52:55:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/590e1a00-70cd-3b97-9411-2d2ded29202e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd9a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:ed:60:21:fe:fa:51:09:e7:a6:21:f1:f9:1b:c3:52:47:1e: 97:f0:ec:30:94:9d:2c:f3:70:ac:e8:83:70:bb:69:aa:e2:97: fc:64:91:14:08:80:a0:41:dc:2a:e4:a8:60:a5:31:b4:41:e9: ce:d2:a6:f1:76:7b:c6:65:53:3c:a2:9b:d3:8b:d5:94:c4:69: c0:25:98:9b:2b:3b:e5:e0:d6:7b:80:7b:08:19:87:5e:a8:b4: 41:3d:2c:bc:d7:cd:22:90:9a:d0:a7:d1:d8:fe:da:e4:f3:ec: 9b:f0:da:aa:c0:e5:bd:26:47:df:c8:13:ab:5a:78:75:36:33: ac:b6:b7:27:62:f4:25:d0:12:67:6b:01:84:d5:64:67:7b:e3: 49:df:6e:e8:45:8f:73:ed:b3:4f:56:6f:6a:26:40:2b:e2:d9: 92:d5:39:ea:62:ba:ac:08:6e:bb:2b:62:e7:20:5e:16:ed:d6: fb:5e:bf:d1:ea:ac:da:e5:45:f4:ed:94:39:d4:14:db:fb:77: 16:04:86:f0:09:cd:4a:eb:39:3b:61:48:0f:eb:d8:15:62:5c: f3:9a:95:c5:53:ef:3c:40:bf:8b:6b:b9:c1:c0:45:a2:f1:88: bd:07:9f:45:a1:e7:c7:66:53:42:a0:3c:d8:03:ca:1b:9b:9f: df:ab:f7:b2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuZ159FrZ0ZCktsYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDczNWNmYWYtMTI1NS00ZjI2LTlmMzQtOTcyNjc5YjAwMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi0ANXOB9tPVutk2Txk7GCcwsNM5QIOaaYWj GQOPQiCuaenZ1BR+D/xgUCANZ1yrPZzf3nSgNvRPMsMxefyhgudOK2hOPs9I+Ziv PIyAOKwewLE9vJU1R0rTwqCtFKbr0nRVV3VGExvUZBAasNaZ+YZMyJwdUXW/M93Z EV0MgwphrU0MUbn94tPlzp1W5bwSUgatMJVNR3vhlNfkFhA2kPy3PUvaZ4kTqwgb TV08EtK1diT7g+JuSjCXWNjWo8Nw2l6lQTOdNjKPUt4HvmAt0nzP8lFxs2Z4dXVJ 0ThPzz9Cqp2ksMV76d0GkQrBadGZE8edv8WXClPaMBj7X5BPQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFORolRSfBZXJcwGfa3JgeYvsUlXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvNTkwZTFhMDAtNzBjZC0z Yjk3LTk0MTEtMmQyZGVkMjkyMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9mgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApO1gIf76UQnnpiHx+RvDUkcel/DsMJSdLPNwrOiDcLtpquKX/GSR FAiAoEHcKuSoYKUxtEHpztKm8XZ7xmVTPKKb04vVlMRpwCWYmys75eDWe4B7CBmH Xqi0QT0svNfNIpCa0KfR2P7a5PPsm/DaqsDlvSZH38gTq1p4dTYzrLa3J2L0JdAS Z2sBhNVkZ3vjSd9u6EWPc+2zT1ZvaiZAK+LZktU56mK6rAhuuyti5yBeFu3W+16/ 0eqs2uVF9O2UOdQU2/t3FgSG8AnNSus5O2FID+vYFWJc85qVxVPvPEC/i2u5wcBF ovGIvQefRaHnx2ZTQqA82APKG5uf36v3sg== -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:35 2025 by rpki-client