$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/2eb9e830-c0c5-3628-841f-641872da277d.roa File: 2eb9e830-c0c5-3628-841f-641872da277d.roa (raw, json) Hash identifier: Y3CwNSuvdW7U2g2XO/Fcg/Oew/kjxh+Atz3PxDqhTb8= Subject key identifier: 4A:FA:FD:EF:E3:97:B2:B4:42:C6:A8:06:17:F6:47:FC:D9:ED:47:59 Certificate issuer: /CN=a13e27aa-7ea5-4d1a-989e-af8db15b38f4 Certificate serial: 010D0C9F4328584BB5C2696FB37FC2FA1BE37980 Authority key identifier: 29:05:3A:20:D6:83:D8:80:13:3F:62:7E:86:20:7B:6C:FB:D9:22:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/2eb9e830-c0c5-3628-841f-641872da277d.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 398898 IP address blocks: 2602:fbe7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:69:6f:b3:7f:c2:fa:1b:e3:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a13e27aa-7ea5-4d1a-989e-af8db15b38f4 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=da4a83e4-3f9c-4526-ab1f-626c4c90ad9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4f:39:75:11:d4:7a:95:e0:f4:61:08:79:84: 23:68:df:ef:89:fe:87:83:fb:13:b7:a3:60:aa:54: 91:65:83:52:1b:6c:0f:e0:97:c7:3a:88:6c:17:2f: 22:2c:ba:e6:4e:66:b1:d0:d2:5b:74:35:aa:a9:70: 45:50:da:21:0e:3a:07:28:8a:6d:70:96:4c:b4:bf: f0:75:87:af:b0:95:1f:34:6b:72:c0:e6:f0:26:2e: 66:d3:89:53:01:da:73:e1:55:fd:e6:9b:50:31:3f: 16:0f:b6:af:08:2c:bb:98:58:2a:eb:a6:25:f1:cd: 93:23:95:eb:b7:5b:95:3a:a2:71:d0:0c:6f:59:1a: 24:b4:c9:35:01:b4:22:05:58:11:30:01:40:78:24: 67:a8:2e:f2:d3:a9:5d:e4:a1:bc:71:68:7b:e8:68: 06:e5:22:42:1a:cc:58:a9:6d:23:88:d8:56:f9:78: 95:4a:0d:b2:c0:4e:34:c3:60:6c:2f:29:7f:a3:61: 03:a3:30:66:6e:c6:ed:76:c4:8a:6c:0d:83:05:35: 3b:a1:fc:ef:c0:57:dc:53:84:56:35:16:ee:54:11: 70:eb:72:1a:75:eb:bd:11:93:17:6c:ec:b5:16:4e: e1:a4:ea:dc:82:b4:cc:fb:21:db:97:3e:37:2f:49: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FA:FD:EF:E3:97:B2:B4:42:C6:A8:06:17:F6:47:FC:D9:ED:47:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/2eb9e830-c0c5-3628-841f-641872da277d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.crl X509v3 Authority Key Identifier: keyid:29:05:3A:20:D6:83:D8:80:13:3F:62:7E:86:20:7B:6C:FB:D9:22:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbe7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:14:ec:0d:0d:9b:42:a6:77:55:e1:d9:fc:58:09:d2:20:d9: af:3d:f7:3e:34:2d:e4:7a:a9:84:f5:5b:a1:fe:9c:f2:ee:ee: af:c4:30:cb:de:28:9a:a8:3f:62:cf:15:7b:9f:e1:07:11:f9: e0:bd:78:b2:de:22:d1:1f:f3:c6:7f:df:30:81:f3:25:ac:04: c1:98:71:5d:16:1b:7b:01:be:ce:ef:e6:7a:ec:94:4b:c3:a0: 1e:85:91:f7:6f:fa:af:20:81:c1:cb:2f:04:82:9c:5f:e4:bb: e3:0b:30:3d:58:7f:2e:bf:0e:ed:f9:22:51:2f:32:d0:60:54: f9:87:53:ca:02:00:15:a9:cd:d8:38:c2:0c:18:bc:d7:14:26: 23:bc:d7:26:5d:f8:b9:33:22:6c:ba:b3:38:c8:03:da:59:05: f7:51:16:10:c1:3d:2b:3d:59:9d:81:8b:0b:c4:e8:f9:cf:7f: 7d:a9:1d:b2:4f:a4:0c:c1:51:2c:61:9e:eb:73:a1:46:f6:e7: 7f:fc:b5:56:d0:92:f6:d7:73:bd:16:8e:41:49:7b:21:70:8b: c5:c4:53:c9:27:4f:ef:83:14:1a:3c:2a:5e:2d:9a:dc:63:3d: 47:65:82:32:b1:cf:9b:44:07:30:97:a7:4f:05:f7:90:b4:3e: 7f:ea:d3:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu1wmlvs3/C+hvjeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEzZTI3YWEtN2VhNS00ZDFhLTk4OWUtYWY4ZGIxNWIz OGY0MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZGE0YTgzZTQtM2Y5Yy00NTI2LWFiMWYtNjI2YzRjOTBhZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE85dRHUepXg9GEIeYQjaN/vif6Hg/sTt6Ng qlSRZYNSG2wP4JfHOohsFy8iLLrmTmax0NJbdDWqqXBFUNohDjoHKIptcJZMtL/w dYevsJUfNGtywObwJi5m04lTAdpz4VX95ptQMT8WD7avCCy7mFgq66Yl8c2TI5Xr t1uVOqJx0AxvWRoktMk1AbQiBVgRMAFAeCRnqC7y06ld5KG8cWh76GgG5SJCGsxY qW0jiNhW+XiVSg2ywE40w2BsLyl/o2EDozBmbsbtdsSKbA2DBTU7ofzvwFfcU4RW NRbuVBFw63Iadeu9EZMXbOy1Fk7hpOrcgrTM+yHblz43L0nZ7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEr6/e/jl7K0QsaoBhf2R/zZ7UdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMTNl MjdhYS03ZWE1LTRkMWEtOTg5ZS1hZjhkYjE1YjM4ZjQvMmViOWU4MzAtYzBjNS0z NjI4LTg0MWYtNjQxODcyZGEyNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTEzZTI3YWEtN2VhNS00ZDFhLTk4 OWUtYWY4ZGIxNWIzOGY0L2ExM2UyN2FhLTdlYTUtNGQxYS05ODllLWFmOGRiMTVi MzhmNC5jcmwwHwYDVR0jBBgwFoAUKQU6INaD2IATP2J+hiB7bPvZIn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMTNlMjdhYS03ZWE1LTRkMWEtOTg5ZS1hZjhk YjE1YjM4ZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL75wAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADAU7A0Nm0Kmd1Xh2fxYCdIg2a899z40LeR6qYT1W6H+nPLu7q/E MMveKJqoP2LPFXuf4QcR+eC9eLLeItEf88Z/3zCB8yWsBMGYcV0WG3sBvs7v5nrs lEvDoB6Fkfdv+q8ggcHLLwSCnF/ku+MLMD1Yfy6/Du35IlEvMtBgVPmHU8oCABWp zdg4wgwYvNcUJiO81yZd+LkzImy6szjIA9pZBfdRFhDBPSs9WZ2BiwvE6PnPf32p HbJPpAzBUSxhnutzoUb253/8tVbQkvbXc70WjkFJeyFwi8XEU8knT++DFBo8Kl4t mtxjPUdlgjKxz5tEBzCXp08F95C0Pn/q01A= -----END CERTIFICATE-----Generated at Wed Nov 5 23:21:02 2025 by rpki-client