$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/cb8dfe46-45a8-3613-b90e-91142e177fbf.roa File: cb8dfe46-45a8-3613-b90e-91142e177fbf.roa (raw, json) Hash identifier: z1b5tnxp1Mtiw9Ju3RrDfKsJFw6ZLO1N5e9i+rAyuJ4= Subject key identifier: 96:FE:47:46:21:57:FD:5F:FC:A6:A1:FC:C5:B3:6D:CF:71:3B:83:7E Certificate issuer: /CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Certificate serial: 010D0C9F4328584BB88D5A696E117E451FFBB100 Authority key identifier: 10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/cb8dfe46-45a8-3613-b90e-91142e177fbf.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 401911 IP address blocks: 2602:f5a7::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:5a:69:6e:11:7e:45:1f:fb:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=8a81823d-56d7-4c97-a67d-69d4d1fdb0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:af:b9:50:3d:88:7d:62:58:ee:bc:94:11:00: b5:d8:81:94:69:0b:b2:45:54:4b:96:f8:45:27:bc: 2a:5b:28:aa:fe:79:f8:96:96:13:e7:0b:fb:d2:37: a6:ab:2c:c6:4c:54:84:f0:94:65:3d:2a:c0:1d:ec: 5e:c9:d4:25:32:f9:30:f8:39:d5:0c:c3:69:a9:fa: 01:53:b6:b5:7f:7f:d9:06:fd:9a:4e:d5:96:c4:7a: 9d:8f:04:b2:ca:c1:9e:10:25:ec:c7:0c:7b:a6:c0: b6:a7:89:84:ba:55:cc:3f:7f:f6:77:64:99:d2:b5: 24:71:e8:f3:d4:b1:2f:16:35:0c:96:91:4e:3d:38: c4:99:71:dd:3e:71:0e:ff:45:8a:b8:41:60:0c:34: 81:b3:b1:b7:a3:10:cd:d8:10:c9:b3:f6:cf:b5:21: 77:d5:b2:5e:bb:87:16:db:b1:07:c7:fe:a0:be:ec: e5:e1:ba:e8:1c:88:c6:b8:54:58:3a:91:af:1e:32: 1e:25:33:71:71:20:f7:62:78:9a:f9:7e:0c:ae:e4: e4:36:8c:6d:9d:f8:93:3e:fe:56:17:be:c3:4a:45: 1e:c6:42:59:aa:7e:e2:87:15:bd:b5:72:32:c3:81: dd:d6:8a:ed:19:85:97:43:9d:73:43:bd:05:b8:8f: 5e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FE:47:46:21:57:FD:5F:FC:A6:A1:FC:C5:B3:6D:CF:71:3B:83:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/cb8dfe46-45a8-3613-b90e-91142e177fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl X509v3 Authority Key Identifier: keyid:10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5a7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a7:93:57:60:41:20:d1:7f:3a:c6:05:b8:ed:2e:15:1a:d6: a5:a9:a5:80:a8:a2:97:4c:f4:4c:10:7f:9e:b3:ed:c6:68:ae: 2b:5d:5a:df:94:13:69:e3:8f:ff:d0:49:8d:44:64:ce:6b:6d: 44:32:bd:08:c5:10:6a:67:9e:b3:2f:19:fb:31:37:3a:c3:03: e5:bc:3d:8b:41:17:4e:84:60:97:db:58:7f:26:61:17:32:8c: 62:7a:ae:ee:ae:44:4c:ab:e8:cc:64:05:b7:25:45:81:68:0d: 01:24:68:eb:84:59:2c:14:4e:2f:b2:9b:07:56:42:02:08:c7: fc:5a:72:84:73:3a:16:41:5e:4b:47:a3:2e:5a:c5:ce:36:b6: ba:ea:a7:58:c3:ee:f9:e1:b8:49:c4:e6:a0:86:1e:5a:f5:49: 87:19:10:63:97:18:67:d9:19:02:5c:75:d6:97:de:b0:3b:a4: 31:ea:6d:fa:07:44:fd:c9:4c:47:ce:7d:3c:bd:50:cd:41:d7: e9:d0:d3:6a:80:26:83:d6:90:ba:a7:dd:df:4d:ee:28:de:2a: ec:24:61:88:18:81:22:2d:15:72:f2:64:05:c5:89:aa:4a:70: ee:26:cb:58:1b:02:59:3d:bf:89:b0:02:dc:23:20:9d:fa:3d: c5:2a:42:7b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu4jVppbhF+RR/7sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjFhZWQtODBkYS00NzRkLThlNzctMDAwMGNhMGQ2 MDI1MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OGE4MTgyM2QtNTZkNy00Yzk3LWE2N2QtNjlkNGQxZmRiMGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q+5UD2IfWJY7ryUEQC12IGUaQuyRVRLlvhF J7wqWyiq/nn4lpYT5wv70jemqyzGTFSE8JRlPSrAHexeydQlMvkw+DnVDMNpqfoB U7a1f3/ZBv2aTtWWxHqdjwSyysGeECXsxwx7psC2p4mEulXMP3/2d2SZ0rUkcejz 1LEvFjUMlpFOPTjEmXHdPnEO/0WKuEFgDDSBs7G3oxDN2BDJs/bPtSF31bJeu4cW 27EHx/6gvuzl4broHIjGuFRYOpGvHjIeJTNxcSD3Ynia+X4MruTkNoxtnfiTPv5W F77DSkUexkJZqn7ihxW9tXIyw4Hd1ortGYWXQ51zQ70FuI9ecQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJb+R0YhV/1f/Kah/MWzbc9xO4N+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Fm MWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAwY2EwZDYwMjUvY2I4ZGZlNDYtNDVhOC0z NjEzLWI5MGUtOTExNDJlMTc3ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNhZjFhZWQtODBkYS00NzRkLThl NzctMDAwMGNhMGQ2MDI1LzljYWYxYWVkLTgwZGEtNDc0ZC04ZTc3LTAwMDBjYTBk NjAyNS5jcmwwHwYDVR0jBBgwFoAUEOs5P4bIZlPGQR7UjZfrcZlM5iswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2FmMWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAw Y2EwZDYwMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL1pwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARqeTV2BBINF/OsYFuO0uFRrWpamlgKiil0z0TBB/nrPtxmiuK11a 35QTaeOP/9BJjURkzmttRDK9CMUQameesy8Z+zE3OsMD5bw9i0EXToRgl9tYfyZh FzKMYnqu7q5ETKvozGQFtyVFgWgNASRo64RZLBROL7KbB1ZCAgjH/FpyhHM6FkFe S0ejLlrFzja2uuqnWMPu+eG4ScTmoIYeWvVJhxkQY5cYZ9kZAlx11pfesDukMept +gdE/clMR859PL1QzUHX6dDTaoAmg9aQuqfd303uKN4q7CRhiBiBIi0VcvJkBcWJ qkpw7ibLWBsCWT2/ibAC3CMgnfo9xSpCew== -----END CERTIFICATE-----Generated at Wed Nov 5 10:14:28 2025 by rpki-client