$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf261d6c-a652-301a-9b41-868da8fbfa85.roa File: cf261d6c-a652-301a-9b41-868da8fbfa85.roa (raw, json) Hash identifier: lFtSKui/6jtOF8PlN3OCPy+5iSAtIr9VjlPu8e7J7d4= Subject key identifier: 14:9C:52:01:17:A8:F1:D9:AD:C2:EC:D9:4D:2A:D2:00:38:D8:F4:2B Certificate issuer: /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Certificate serial: 010D0C9F4328584B2ECED67F481DCC3E35EE82A0 Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf261d6c-a652-301a-9b41-868da8fbfa85.roa Signing time: Sat 13 Sep 2025 16:51:38 +0000 ROA not before: Sat 13 Sep 2025 16:51:38 +0000 ROA not after: Fri 12 Dec 2025 17:51:38 +0000 asID: 40536 IP address blocks: 2602:f629:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:ce:d6:7f:48:1d:cc:3e:35:ee:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Validity Not Before: Sep 13 16:51:38 2025 GMT Not After : Dec 12 17:51:38 2025 GMT Subject: CN=bd497e50-8816-430b-aedf-5d0be330ef7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:a3:55:69:dd:61:ba:9c:7d:c4:35:23:f1: 5e:ff:29:fe:a3:85:17:3b:84:a2:4c:a0:fc:c1:82: ad:7c:3a:38:02:0f:69:0c:ce:18:d7:c1:13:bd:c3: 10:0f:d0:6d:2c:77:b8:b1:e0:19:83:a3:0f:80:f2: e2:da:11:01:66:96:bd:79:57:c8:8d:cc:75:ad:69: 93:c9:f5:ba:ae:63:59:a3:fc:c7:79:99:22:3d:88: 6e:12:c2:4a:ea:f5:85:e2:20:fa:28:79:e1:cd:ef: 12:51:86:f1:d6:ec:4c:31:ca:8e:a5:00:1a:f9:10: ef:5a:a1:c2:12:e5:55:34:fb:9e:f6:1d:c6:a3:24: 69:ce:8c:92:cd:9c:78:24:80:b2:f4:08:0d:bb:43: 31:14:6f:92:e3:ef:5f:35:96:d7:b7:ec:54:bf:51: 04:a6:4d:c5:05:d0:b0:4d:85:94:c5:c0:9c:7f:a7: 76:40:04:1d:d9:db:aa:5a:9a:b7:da:1c:f3:68:44: 41:13:55:a0:d9:6f:36:06:97:9c:68:02:9b:ab:a9: f7:6f:a1:20:8e:46:31:6e:ef:f9:18:ee:1d:af:6c: 19:7b:41:32:1b:20:53:34:fc:64:91:09:1d:2e:e8: 80:34:a2:54:51:1f:45:81:65:4f:cc:3e:fc:a6:34: 91:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9C:52:01:17:A8:F1:D9:AD:C2:EC:D9:4D:2A:D2:00:38:D8:F4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf261d6c-a652-301a-9b41-868da8fbfa85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl X509v3 Authority Key Identifier: keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer sbgp-ipAddrBlock: critical IPv6: 2602:f629:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d1:b1:89:12:a4:29:de:4b:6f:4c:65:2d:29:46:84:c1:89: 3f:79:d2:dd:54:b4:4a:d5:1b:c8:41:67:38:b8:dc:78:7b:18: ce:39:f1:90:79:8c:23:65:c3:f3:d3:3e:0c:73:cb:86:45:b8: 49:c3:f8:5a:92:b1:71:80:e1:f4:19:10:ca:b0:f7:2a:fe:2a: 71:cb:20:6c:09:9d:bf:0e:e7:4a:56:d0:54:93:dc:51:71:c5: 36:7a:41:99:0f:e8:fa:59:3d:30:7a:ca:f0:5a:45:84:40:d5: 62:13:e9:bc:dc:f2:97:c8:4d:45:f0:6f:74:c9:cd:af:12:5e: 7a:61:18:f6:98:9a:70:62:53:b5:2c:7f:d1:f9:0e:5f:85:bc: f8:77:0b:dd:be:fc:b1:89:bd:1f:cc:21:b4:8a:f2:69:a2:11: e2:e8:f2:30:2c:83:d8:8a:82:12:8e:85:4f:48:b1:ea:bc:6e: 94:7b:63:ea:45:56:b2:a6:73:c7:43:e1:6c:4e:9e:4e:8e:49: d2:3a:4d:e7:97:a2:14:0f:53:68:13:4e:95:da:c8:fd:32:d8: b8:eb:43:63:0c:e2:7f:82:29:04:c6:ec:d2:44:05:b6:f8:44: ba:15:ed:f2:98:13:71:f3:2d:f1:db:3f:f2:59:39:09:6b:88: 2b:dc:ce:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsuztZ/SB3MPjXugqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJlNDU5MTItZTZlMy00MDBjLWIwYmUtNGY2YzcwMDFm NWNiMB4XDTI1MDkxMzE2NTEzOFoXDTI1MTIxMjE3NTEzOFowLzEtMCsGA1UEAxMk YmQ0OTdlNTAtODgxNi00MzBiLWFlZGYtNWQwYmUzMzBlZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpOjVWndYbqcfcQ1I/Fe/yn+o4UXO4SiTKD8 wYKtfDo4Ag9pDM4Y18ETvcMQD9BtLHe4seAZg6MPgPLi2hEBZpa9eVfIjcx1rWmT yfW6rmNZo/zHeZkiPYhuEsJK6vWF4iD6KHnhze8SUYbx1uxMMcqOpQAa+RDvWqHC EuVVNPue9h3GoyRpzoySzZx4JICy9AgNu0MxFG+S4+9fNZbXt+xUv1EEpk3FBdCw TYWUxcCcf6d2QAQd2duqWpq32hzzaERBE1Wg2W82BpecaAKbq6n3b6EgjkYxbu/5 GO4dr2wZe0EyGyBTNPxkkQkdLuiANKJUUR9FgWVPzD78pjSRJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBScUgEXqPHZrcLs2U0q0gA42PQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0 NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZjNzAwMWY1Y2IvY2YyNjFkNmMtYTY1Mi0z MDFhLTliNDEtODY4ZGE4ZmJmYTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDJlNDU5MTItZTZlMy00MDBjLWIw YmUtNGY2YzcwMDFmNWNiL2QyZTQ1OTEyLWU2ZTMtNDAwYy1iMGJlLTRmNmM3MDAx ZjVjYi5jcmwwHwYDVR0jBBgwFoAUqXP9VqxhWYP2vyHMtlE4hrEuIB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZj NzAwMWY1Y2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2KQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADnRsYkSpCneS29MZS0pRoTBiT950t1UtErVG8hBZzi43Hh7GM45 8ZB5jCNlw/PTPgxzy4ZFuEnD+FqSsXGA4fQZEMqw9yr+KnHLIGwJnb8O50pW0FST 3FFxxTZ6QZkP6PpZPTB6yvBaRYRA1WIT6bzc8pfITUXwb3TJza8SXnphGPaYmnBi U7Usf9H5Dl+FvPh3C92+/LGJvR/MIbSK8mmiEeLo8jAsg9iKghKOhU9Iseq8bpR7 Y+pFVrKmc8dD4WxOnk6OSdI6TeeXohQPU2gTTpXayP0y2LjrQ2MM4n+CKQTG7NJE Bbb4RLoV7fKYE3HzLfHbP/JZOQlriCvczkM= -----END CERTIFICATE-----Generated at Wed Nov 5 16:53:39 2025 by rpki-client