$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/85c6424c-74b9-39b7-92e4-fc54805bebbd.roa File: 85c6424c-74b9-39b7-92e4-fc54805bebbd.roa (raw, json) Hash identifier: dtgLINam+z8YKU5fP+yCNqEQolCUOvRnCBBk+tZV83o= Subject key identifier: 60:50:F7:33:A1:77:39:AA:CD:0E:47:1D:50:8C:3D:1F:93:76:E1:7E Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584B16A15F32480BD8AB1507A680 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/85c6424c-74b9-39b7-92e4-fc54805bebbd.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 2600:2700::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5f:32:48:0b:d8:ab:15:07:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=89c6556c-7df4-4aac-8f25-662e09d53b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:da:f8:5f:84:3f:42:0e:a0:9b:16:6b:01: 85:4a:41:37:76:c4:53:3b:55:dd:58:18:95:75:04: 71:86:3d:40:3e:ba:9b:69:9d:e3:00:26:e2:86:8b: 15:d4:87:6b:f7:42:5a:c2:e3:e8:22:fd:24:70:9b: 94:2d:24:00:a9:9a:61:b9:fa:28:e1:36:62:bc:75: 89:9e:35:67:b9:d9:65:e4:ab:a0:db:9c:59:51:f0: 4d:54:61:a6:ad:cd:de:01:3f:60:c4:b2:c4:5c:61: 89:e2:5c:4f:8e:db:0c:84:70:c7:b2:03:d6:81:b9: 0d:0d:02:41:ca:22:7d:08:f1:2a:1e:3c:de:a6:30: be:4e:c1:bb:71:1f:f4:62:a7:70:2c:2a:80:d5:34: 75:70:4e:54:a4:9c:8e:eb:44:ad:84:50:f9:e0:8d: 8f:17:6b:b3:33:83:59:e6:36:65:f8:5d:c3:64:fe: 0b:bc:74:2d:5c:c9:07:eb:fe:b7:d9:a1:ec:80:a8: 5b:48:61:09:c0:4b:5e:cf:ad:8a:5f:f8:14:94:72: 62:b6:aa:ef:c5:11:d0:a4:d5:cd:ca:91:62:e8:bd: 45:ab:c8:ec:34:fb:cb:97:75:58:1f:1e:87:d8:fa: 74:03:06:c7:74:f0:35:eb:e8:5b:35:0b:b9:9b:ed: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:50:F7:33:A1:77:39:AA:CD:0E:47:1D:50:8C:3D:1F:93:76:E1:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/85c6424c-74b9-39b7-92e4-fc54805bebbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2700::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e2:ec:5b:ae:07:fd:3f:88:ef:77:84:ce:fb:66:b5:d8:f9: 8c:95:e4:12:40:0f:6e:b6:9c:30:e3:6f:db:81:25:6c:b6:64: 31:2b:5d:41:4c:31:9e:58:cc:d1:39:61:98:ad:d7:2c:de:cf: e7:f6:f0:d6:c4:ac:28:4c:14:89:1f:41:d4:92:11:f4:c2:07: 30:35:5f:a6:96:f7:86:e6:5c:5d:59:5b:20:bd:c1:85:0f:c1: 39:0d:f1:49:87:9a:0f:8e:3c:fe:83:91:9a:60:64:f1:63:5a: 5d:97:7c:d5:36:22:7f:0f:3c:e6:91:6d:d2:60:f5:1b:b7:38: 79:6a:88:ce:ed:7a:26:c0:45:74:8a:72:49:00:1f:9d:87:1b: d0:78:46:ed:96:4a:8a:15:55:f7:5e:ba:f0:6b:d1:d3:03:3a: a9:c2:b0:45:ff:ae:af:64:df:3b:b5:39:bf:5d:1b:40:6f:bd: 0e:13:ba:83:33:68:48:e9:55:1d:5b:0d:29:ae:53:81:85:81: 73:3a:6d:67:d0:d5:d8:e5:e2:21:52:86:bb:c7:59:5f:58:41: de:11:9a:de:25:7e:27:5f:15:ce:32:8e:00:d7:48:ce:b7:22: f6:e6:e0:48:7f:66:77:e6:68:a1:e7:29:3d:6b:35:5d:f5:31: 7d:87:b1:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsWoV8ySAvYqxUHpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODljNjU1NmMtN2RmNC00YWFjLThmMjUtNjYyZTA5ZDUzYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAra+F+EP0IOoJsWawGFSkE3dsRTO1XdWBiV dQRxhj1APrqbaZ3jACbihosV1Idr90JawuPoIv0kcJuULSQAqZphufoo4TZivHWJ njVnudll5Kug25xZUfBNVGGmrc3eAT9gxLLEXGGJ4lxPjtsMhHDHsgPWgbkNDQJB yiJ9CPEqHjzepjC+TsG7cR/0YqdwLCqA1TR1cE5UpJyO60SthFD54I2PF2uzM4NZ 5jZl+F3DZP4LvHQtXMkH6/632aHsgKhbSGEJwEtez62KX/gUlHJitqrvxRHQpNXN ypFi6L1Fq8jsNPvLl3VYHx6H2Pp0AwbHdPA16+hbNQu5m+1VUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGBQ9zOhdzmqzQ5HHVCMPR+TduF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvODVjNjQyNGMtNzRiOS0z OWI3LTkyZTQtZmM1NDgwNWJlYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCU4uxbrgf9P4jvd4TO+2a12PmMleQSQA9utpww42/bgSVstmQxK11B TDGeWMzROWGYrdcs3s/n9vDWxKwoTBSJH0HUkhH0wgcwNV+mlveG5lxdWVsgvcGF D8E5DfFJh5oPjjz+g5GaYGTxY1pdl3zVNiJ/DzzmkW3SYPUbtzh5aojO7XomwEV0 inJJAB+dhxvQeEbtlkqKFVX3Xrrwa9HTAzqpwrBF/66vZN87tTm/XRtAb70OE7qD M2hI6VUdWw0prlOBhYFzOm1n0NXY5eIhUoa7x1lfWEHeEZreJX4nXxXOMo4A10jO tyL25uBIf2Z35mih5yk9azVd9TF9h7HS -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:19 2025 by rpki-client