$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa File: b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa (raw, json) Hash identifier: R4r7LeteW+VKSE0aW4f76WyAr6s8KJwTtM6TvEw15To= Subject key identifier: 92:3B:13:DB:C3:23:6A:3C:8F:B4:66:EA:17:12:5A:E5:24:1D:95:46 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584B8AA475E05E417BC710758580 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa Signing time: Thu 16 Oct 2025 14:20:37 +0000 ROA not before: Thu 16 Oct 2025 14:20:37 +0000 ROA not after: Wed 14 Jan 2026 15:20:37 +0000 asID: 401659 IP address blocks: 2602:f5c1:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:a4:75:e0:5e:41:7b:c7:10:75:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Oct 16 14:20:37 2025 GMT Not After : Jan 14 15:20:37 2026 GMT Subject: CN=be238124-06d3-4297-a5af-4ad8cdf93dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:2a:a2:1d:18:1f:e5:23:af:f3:c7:6f:e6: ae:54:62:c9:cd:ac:71:53:ac:a2:3e:fe:dc:18:8e: d8:bf:aa:94:c0:5c:6a:65:30:c5:a4:53:6a:98:31: f2:aa:d2:d4:0e:93:57:6d:c2:8a:34:70:c2:c4:ca: 7d:e4:e1:8f:10:f9:58:ca:b1:72:97:84:6a:aa:71: c5:8a:d0:4e:4d:97:56:57:9d:3b:7e:cc:19:e1:1d: 17:86:ec:c6:0b:27:fd:18:68:da:4a:4f:b8:73:86: af:0d:3e:44:17:cd:6f:45:8c:5b:54:b1:a6:3b:4c: 1e:c3:70:66:07:47:9b:c4:bc:86:5b:de:4b:25:78: 58:c0:72:fb:bb:bf:37:83:21:be:78:3e:45:ff:62: f1:37:8c:1b:af:1c:b8:30:ea:15:8b:8b:a5:df:52: b8:e4:b4:10:72:6a:01:e0:da:3f:cf:bd:15:48:11: f0:e2:0a:51:3e:14:6f:53:d6:34:61:55:f4:56:8d: c1:ce:d6:bd:50:13:e8:7b:18:37:ef:e9:f8:6a:3c: 85:c6:da:b4:bf:6a:19:aa:34:56:54:7e:34:e7:e3: a8:e0:88:c6:9f:0c:7c:38:93:9a:d8:75:d5:00:b4: 52:d9:27:04:a7:be:72:9e:41:d0:0a:85:25:af:13: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3B:13:DB:C3:23:6A:3C:8F:B4:66:EA:17:12:5A:E5:24:1D:95:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b0:f6:23:08:2c:a1:e8:ed:f9:a5:71:ed:df:79:29:74:05: bd:cd:d9:70:84:31:d1:f6:dd:b3:94:b1:06:1a:a6:15:e5:41: 03:7b:da:44:20:ec:e2:7d:bd:f2:54:00:ea:de:53:7a:49:e7: 9c:97:62:db:8c:a7:4c:6a:26:a3:76:2a:15:89:be:38:51:15: 5a:65:ac:9a:d6:7e:f5:07:f9:9d:cd:1b:03:38:c2:6b:1c:72: 37:3b:fd:c8:b3:37:40:f3:22:23:b5:3f:ee:23:6f:a4:a0:39: 91:f1:2e:50:30:04:83:9f:7e:b9:e0:96:80:dd:f7:ef:54:8b: a4:de:f4:8a:5d:aa:49:1e:de:04:23:59:6d:7d:ed:0a:fa:f8: 11:40:12:d6:48:84:b3:d3:65:5c:b1:a6:f7:52:93:a5:bf:90: bb:5f:ea:97:f1:9f:1e:3c:a0:5d:33:9d:1c:8d:24:7e:09:f6: 62:e2:bf:80:d8:dc:ff:02:02:5d:f7:3f:0a:a8:88:9f:1c:cd: f1:ed:a8:ee:25:60:0c:58:cf:c2:3a:bb:8e:80:a5:96:e3:50: 49:4f:46:e4:0a:10:8d:2b:6a:55:98:99:80:6e:47:72:b9:e3: a4:e4:71:ff:7a:f6:01:19:19:5f:11:6e:d9:2e:01:89:a2:c0: 65:d6:37:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuKpHXgXkF7xxB1hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI1MTAxNjE0MjAzN1oXDTI2MDExNDE1MjAzN1owLzEtMCsGA1UEAxMk YmUyMzgxMjQtMDZkMy00Mjk3LWE1YWYtNGFkOGNkZjkzZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro0qoh0YH+Ujr/PHb+auVGLJzaxxU6yiPv7c GI7Yv6qUwFxqZTDFpFNqmDHyqtLUDpNXbcKKNHDCxMp95OGPEPlYyrFyl4RqqnHF itBOTZdWV507fswZ4R0XhuzGCyf9GGjaSk+4c4avDT5EF81vRYxbVLGmO0wew3Bm B0ebxLyGW95LJXhYwHL7u783gyG+eD5F/2LxN4wbrxy4MOoVi4ul31K45LQQcmoB 4No/z70VSBHw4gpRPhRvU9Y0YVX0Vo3Bzta9UBPoexg37+n4ajyFxtq0v2oZqjRW VH405+Oo4IjGnwx8OJOa2HXVALRS2ScEp75ynkHQCoUlrxP5mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJI7E9vDI2o8j7Rm6hcSWuUkHZVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYjJmMmVhMWUtZjJjOS0z ZjEzLWFkYzctZTM3MmQ2MTBmYTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKCw9iMILKHo7fmlce3feSl0Bb3N2XCEMdH23bOUsQYaphXlQQN7 2kQg7OJ9vfJUAOreU3pJ55yXYtuMp0xqJqN2KhWJvjhRFVplrJrWfvUH+Z3NGwM4 wmsccjc7/cizN0DzIiO1P+4jb6SgOZHxLlAwBIOffrngloDd9+9Ui6Te9Ipdqkke 3gQjWW197Qr6+BFAEtZIhLPTZVyxpvdSk6W/kLtf6pfxnx48oF0znRyNJH4J9mLi v4DY3P8CAl33PwqoiJ8czfHtqO4lYAxYz8I6u46ApZbjUElPRuQKEI0ralWYmYBu R3K546Tkcf969gEZGV8RbtkuAYmiwGXWN/s= -----END CERTIFICATE-----Generated at Wed Nov 5 06:47:37 2025 by rpki-client