$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/33fe89fd-975e-3f3c-bcfd-053ad93b15fa.roa File: 33fe89fd-975e-3f3c-bcfd-053ad93b15fa.roa (raw, json) Hash identifier: 4N4SCRjv7NIopZDxpilMrRxAX1yL/A4xp/J/uzcjbRE= Subject key identifier: 52:E7:41:9D:6A:BF:80:37:7B:9C:F6:C5:D5:C0:59:F4:BA:D2:E0:3E Certificate issuer: /CN=eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1 Certificate serial: 010D0C9F4328584B99D7FDE2B7C062A9D5CEE020 Authority key identifier: 64:2E:1D:CF:D8:3E:08:5E:0C:F9:D8:83:17:85:CB:2E:0C:F5:39:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/33fe89fd-975e-3f3c-bcfd-053ad93b15fa.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 401898 IP address blocks: 2602:f5ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fd:e2:b7:c0:62:a9:d5:ce:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ace437a7-1d31-4fb3-93c0-ebfc82c987ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:4a:01:c3:8b:02:a0:02:3a:12:b2:de:b3: 0e:ba:da:82:08:ac:19:55:da:a3:b1:6d:16:ab:6f: 0f:41:cc:99:f4:c5:27:26:75:19:b6:09:cb:b0:46: 33:a5:00:f0:0f:bc:cf:01:51:ba:5f:f4:53:86:ea: e2:b3:6a:e1:6f:f3:90:ed:cc:24:e2:42:fa:a6:d4: fc:b7:a0:60:40:67:b0:83:3e:3e:5f:3d:5f:1c:b2: 25:c6:66:89:35:2f:31:f7:eb:03:8a:67:03:6b:ef: ef:fd:a8:27:60:2b:04:d1:70:48:dc:a4:46:4e:25: 5b:32:a5:5e:64:1d:79:53:27:04:7f:64:c7:c6:eb: 74:7f:08:a2:00:0a:47:17:0d:df:e4:24:0f:8a:a8: bc:98:ed:4e:18:91:56:e9:43:b0:98:f9:2b:1a:b6: 7a:2d:4a:4e:10:05:f0:4e:a5:8a:2e:10:79:eb:b8: d8:a9:95:95:18:87:d5:14:5e:27:19:c1:7a:15:34: fd:39:95:1e:25:e3:d4:d9:ae:fa:b9:a6:62:4d:cb: cb:1b:0c:ed:4e:aa:55:80:64:bb:83:79:f3:2f:ce: da:22:e5:e8:72:4d:88:7d:a3:44:c5:7a:75:f5:0d: 9d:ba:e3:94:93:a8:b0:4c:6f:a4:bb:e0:1d:a5:05: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E7:41:9D:6A:BF:80:37:7B:9C:F6:C5:D5:C0:59:F4:BA:D2:E0:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/33fe89fd-975e-3f3c-bcfd-053ad93b15fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.crl X509v3 Authority Key Identifier: keyid:64:2E:1D:CF:D8:3E:08:5E:0C:F9:D8:83:17:85:CB:2E:0C:F5:39:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f5:ee:98:70:bc:e5:84:6e:02:9b:62:08:dd:14:94:4e:d1: 8b:fe:29:1a:33:50:0c:a4:a9:cb:e3:9c:7a:41:62:83:3a:af: df:02:fc:cf:be:0d:50:7b:c7:ad:02:e3:16:98:d0:2f:10:5d: ca:83:e4:c4:71:01:33:8b:ee:68:00:31:ba:aa:85:b5:ac:fd: 55:01:f7:6d:87:1c:e0:55:e1:98:9e:ae:6c:19:59:45:91:8a: ea:98:b7:ba:9f:62:3a:2b:89:13:9b:c9:2f:79:02:ca:a6:55: 2d:ab:52:4c:19:eb:fb:57:8c:0f:68:61:15:76:5a:fb:d7:28: a2:0c:6f:a1:82:61:40:24:bd:1b:2b:9f:29:fb:46:dc:9c:e4: 42:3c:08:c8:67:7b:ea:4c:4b:84:4e:df:b9:8f:81:9f:f9:3e: 3b:b7:4c:83:9c:29:d0:98:4f:00:bf:a8:01:fa:f8:ba:ce:38: 79:61:d3:ec:8e:46:c0:c2:ea:71:95:d8:2e:56:f8:4d:1a:27: 04:87:b1:b5:46:25:a4:44:31:c4:75:89:e0:68:6e:b7:28:3f: 0e:32:37:72:03:51:0e:15:6f:6d:55:12:21:f1:aa:8f:af:f0: fe:87:2f:8c:d9:1d:54:38:ab:56:f0:6d:45:75:65:f6:ca:7f: 37:61:ba:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/3it8BiqdXO4CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIyZTRhMmItYmQyOS00MjgzLThjYmItYWJlM2ZhZjY3 YWExMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YWNlNDM3YTctMWQzMS00ZmIzLTkzYzAtZWJmYzgyYzk4N2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXhKAcOLAqACOhKy3rMOutqCCKwZVdqjsW0W q28PQcyZ9MUnJnUZtgnLsEYzpQDwD7zPAVG6X/RThuris2rhb/OQ7cwk4kL6ptT8 t6BgQGewgz4+Xz1fHLIlxmaJNS8x9+sDimcDa+/v/agnYCsE0XBI3KRGTiVbMqVe ZB15UycEf2THxut0fwiiAApHFw3f5CQPiqi8mO1OGJFW6UOwmPkrGrZ6LUpOEAXw TqWKLhB567jYqZWVGIfVFF4nGcF6FTT9OZUeJePU2a76uaZiTcvLGwztTqpVgGS7 g3nzL87aIuXock2IfaNExXp19Q2duuOUk6iwTG+ku+AdpQXqUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFLnQZ1qv4A3e5z2xdXAWfS60uA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lYjJl NGEyYi1iZDI5LTQyODMtOGNiYi1hYmUzZmFmNjdhYTEvMzNmZTg5ZmQtOTc1ZS0z ZjNjLWJjZmQtMDUzYWQ5M2IxNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWIyZTRhMmItYmQyOS00MjgzLThj YmItYWJlM2ZhZjY3YWExL2ViMmU0YTJiLWJkMjktNDI4My04Y2JiLWFiZTNmYWY2 N2FhMS5jcmwwHwYDVR0jBBgwFoAUZC4dz9g+CF4M+diDF4XLLgz1OR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lYjJlNGEyYi1iZDI5LTQyODMtOGNiYi1hYmUz ZmFmNjdhYTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1rAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACP17phwvOWEbgKbYgjdFJRO0Yv+KRozUAykqcvjnHpBYoM6r98C /M++DVB7x60C4xaY0C8QXcqD5MRxATOL7mgAMbqqhbWs/VUB922HHOBV4ZiermwZ WUWRiuqYt7qfYjoriRObyS95AsqmVS2rUkwZ6/tXjA9oYRV2WvvXKKIMb6GCYUAk vRsrnyn7Rtyc5EI8CMhne+pMS4RO37mPgZ/5Pju3TIOcKdCYTwC/qAH6+LrOOHlh 0+yORsDC6nGV2C5W+E0aJwSHsbVGJaREMcR1ieBobrcoPw4yN3IDUQ4Vb21VEiHx qo+v8P6HL4zZHVQ4q1bwbUV1ZfbKfzdhugE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:23:42 2025 by rpki-client