$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa File: 706a9542-5b90-3186-b2aa-86e2e6a16930.roa (raw, json) Hash identifier: SDFKi36sc5jBxyjat4vyyHC6xUxvigOAUvIdLU9UQyM= Subject key identifier: E2:29:7D:33:B8:43:C7:CF:73:21:25:64:84:BA:08:E2:E4:9B:D8:F0 Certificate issuer: /CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Certificate serial: 010D0C9F4328584AFC1BF2F28D3412EDF55D91E8 Authority key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 198949 IP address blocks: 2606:2b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f2:f2:8d:34:12:ed:f5:5d:91:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=a17c0bca-3793-4a52-a0b6-4bdd87df9852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:d2:e4:27:85:34:dc:b7:97:34:a6:63:d5: 6d:52:60:b3:ff:03:66:ba:3e:66:39:8e:e3:62:de: 2b:72:d3:d8:ce:20:3d:b4:ab:c5:5c:98:47:2c:57: 21:04:40:fb:a2:7e:df:f9:f0:c9:fd:0a:59:e8:ef: e7:87:8e:b7:c4:04:1d:8e:55:92:b0:c0:e0:6c:6f: 0f:d3:9c:4b:e2:01:57:32:f1:1d:ed:42:60:f2:97: ba:9f:c0:54:8e:56:f3:e3:1c:5c:0f:ef:c3:40:86: 1b:d3:d5:9a:1e:e3:0b:18:06:b7:15:8f:38:1e:ca: 0f:b2:d8:60:a9:29:f9:93:65:93:29:da:ed:18:3d: 6e:47:74:8b:76:f2:77:cc:77:31:b0:13:63:70:3f: ca:3a:68:f4:17:3d:18:75:9b:dc:96:90:4a:bd:e0: 6c:f2:3a:e3:78:c7:3e:f3:2e:60:b9:8f:b4:12:fd: 72:c3:29:41:f3:ee:a1:fa:99:ef:80:9c:2c:8b:52: 06:33:03:9a:09:aa:b6:6e:6b:fd:72:e5:77:35:60: 7e:3e:04:d5:8d:95:1e:10:3c:c5:f8:47:2b:be:76: 32:f2:73:3c:c6:e6:f4:fc:58:c9:fd:59:7b:dd:3d: 65:50:e9:5a:76:19:80:60:b9:57:f3:fe:25:c4:c7: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:29:7D:33:B8:43:C7:CF:73:21:25:64:84:BA:08:E2:E4:9B:D8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl X509v3 Authority Key Identifier: keyid:3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer sbgp-ipAddrBlock: critical IPv6: 2606:2b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:03:8a:5a:73:de:54:a6:45:e6:27:77:05:d1:22:0c:f5:33: 8c:cc:57:0a:01:5d:79:28:7c:0a:d7:f7:f1:16:4d:a6:15:65: f4:02:2f:88:5d:73:e8:9f:98:b0:bd:95:28:f6:18:fe:1f:30: 85:27:10:19:8a:a4:1a:7a:cd:ba:98:8a:0e:fb:ff:0b:51:a2: 78:a8:ef:9c:40:13:ee:e6:47:96:0d:7f:e5:08:3f:2d:58:f4: 62:da:62:97:d0:16:7c:a7:2b:01:66:59:73:b8:ed:bc:aa:90: ab:99:09:d5:8f:63:30:6d:6d:36:95:95:ee:aa:2c:b4:31:31: df:48:bb:a8:58:8a:8e:a9:9b:d1:e4:6a:0a:e0:3a:c5:0c:e0: 46:07:99:6a:aa:ea:b7:83:42:76:68:9d:f7:fe:7f:e8:42:54: 89:09:e3:15:1a:7a:23:21:3d:d8:29:83:fa:62:66:91:ff:2c: f1:47:58:f9:3a:79:0a:4e:e3:a4:79:2a:93:f1:67:e6:8a:06: cb:43:9c:2f:b1:ee:e6:ca:be:8f:fc:fb:42:d2:46:27:f9:da: c3:e8:64:b2:1f:6c:49:4f:a4:2a:ed:d6:3c:62:d0:10:08:44: ff:ac:e5:8e:71:bb:d8:d8:1c:5c:81:2d:8f:8b:bd:db:02:c7: d2:2c:52:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr8G/LyjTQS7fVdkegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE0MjhkOTktYWQyMy00ZDU4LWI1ZjQtMTdkYTRhNTBk NTlhMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YTE3YzBiY2EtMzc5My00YTUyLWEwYjYtNGJkZDg3ZGY5ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QHS5CeFNNy3lzSmY9VtUmCz/wNmuj5mOY7j Yt4rctPYziA9tKvFXJhHLFchBED7on7f+fDJ/QpZ6O/nh463xAQdjlWSsMDgbG8P 05xL4gFXMvEd7UJg8pe6n8BUjlbz4xxcD+/DQIYb09WaHuMLGAa3FY84HsoPsthg qSn5k2WTKdrtGD1uR3SLdvJ3zHcxsBNjcD/KOmj0Fz0YdZvclpBKveBs8jrjeMc+ 8y5guY+0Ev1ywylB8+6h+pnvgJwsi1IGMwOaCaq2bmv9cuV3NWB+PgTVjZUeEDzF +EcrvnYy8nM8xub0/FjJ/Vl73T1lUOladhmAYLlX8/4lxMdGsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOIpfTO4Q8fPcyElZIS6COLkm9jwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQy OGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2RhNGE1MGQ1OWEvNzA2YTk1NDItNWI5MC0z MTg2LWIyYWEtODZlMmU2YTE2OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzE0MjhkOTktYWQyMy00ZDU4LWI1 ZjQtMTdkYTRhNTBkNTlhL2MxNDI4ZDk5LWFkMjMtNGQ1OC1iNWY0LTE3ZGE0YTUw ZDU5YS5jcmwwHwYDVR0jBBgwFoAUPSeukFqBAFFVHkS35T2ti7Vtfo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQyOGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2Rh NGE1MGQ1OWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYrADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDBA4pac95UpkXmJ3cF0SIM9TOMzFcKAV15KHwK1/fxFk2mFWX0Ai+I XXPon5iwvZUo9hj+HzCFJxAZiqQaes26mIoO+/8LUaJ4qO+cQBPu5keWDX/lCD8t WPRi2mKX0BZ8pysBZllzuO28qpCrmQnVj2MwbW02lZXuqiy0MTHfSLuoWIqOqZvR 5GoK4DrFDOBGB5lqquq3g0J2aJ33/n/oQlSJCeMVGnojIT3YKYP6YmaR/yzxR1j5 OnkKTuOkeSqT8WfmigbLQ5wvse7myr6P/PtC0kYn+drD6GSyH2xJT6Qq7dY8YtAQ CET/rOWOcbvY2BxcgS2Pi73bAsfSLFIg -----END CERTIFICATE-----Generated at Sat Oct 11 03:13:28 2025 by rpki-client