$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa File: 72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa (raw, json) Hash identifier: sGfi2CMpy9t+dz7Pih37d7r//U+eXlh5uYQAHfWROo0= Subject key identifier: 5B:04:66:26:CC:42:93:F6:B9:54:8D:3A:71:5B:80:F1:A5:7B:94:F1 Certificate issuer: /CN=007561fe-4b04-417a-b423-349b8b4b047d Certificate serial: 010D0C9F4328584B4E7717BDE122F1C64647EC00 Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 19651 IP address blocks: 2602:f9ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:17:bd:e1:22:f1:c6:46:47:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=d1ee04d9-c9ef-4a16-9cf1-4566891f333b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:ff:a2:8e:03:91:a2:b4:4b:54:d1:1e:52: 15:0d:13:c3:d3:2b:5f:fd:ae:6a:79:64:41:d1:86: 95:c7:49:84:43:6e:c0:ba:1f:bf:14:d7:37:72:c8: 93:6c:07:9f:9e:14:e7:c0:a4:82:61:4f:ce:c7:d6: 39:9e:da:ea:b5:42:49:0f:dd:f3:1d:46:0a:c4:56: 23:5e:ff:32:29:6f:67:98:07:bb:ba:b5:06:78:81: 76:12:19:26:58:a2:ae:70:94:c7:5a:2d:ab:32:8b: 3b:78:9b:3e:2d:cc:b7:57:15:1c:33:9f:23:f6:0f: 3f:74:e7:5b:59:22:be:8f:c3:67:ce:c3:b8:10:2d: 74:6e:51:90:a7:85:61:46:79:1a:b9:68:13:9a:fd: 7a:b8:41:5c:76:cc:8e:db:f8:2e:75:e6:56:5c:e5: 46:a3:ae:bf:93:3f:b2:8a:90:7a:aa:5f:25:bf:ca: eb:b6:77:26:ab:65:5d:b0:22:ef:f3:48:c2:cd:05: e0:7d:d8:51:5f:c2:d9:65:4f:3f:42:97:3e:b8:66: 11:5e:5a:86:4a:5f:55:67:06:b1:3f:7f:a1:a6:d6: b1:c1:e3:91:44:44:90:f7:b5:39:31:47:b2:bb:74: ad:bf:41:73:5d:d4:b4:02:da:6a:63:88:fa:1c:3e: 48:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:04:66:26:CC:42:93:F6:B9:54:8D:3A:71:5B:80:F1:A5:7B:94:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl X509v3 Authority Key Identifier: keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9ec::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:86:2f:21:bb:df:68:c1:5d:f3:ac:fd:8d:6a:c2:cf:d0:a3: 53:21:4f:43:69:c1:c7:91:cf:aa:57:fd:12:76:4f:9f:04:e0: ef:17:94:d9:23:fd:a4:d7:bc:f6:1c:75:75:b2:05:97:4d:61: 1c:6e:d8:d6:91:b4:30:5d:f8:07:80:d7:3d:33:6a:d6:2c:f8: 98:f9:32:fd:93:90:0c:a8:f2:d2:90:af:23:61:ea:a0:9b:cd: c2:da:1e:c0:e1:0b:27:f7:f8:1e:05:72:e3:8c:36:71:57:7b: f5:69:49:7c:ef:9c:fe:f1:6f:97:a7:a6:a9:be:ff:83:3f:24: ed:d9:b6:6e:f1:de:c4:64:00:6e:df:83:ed:e8:f0:c7:64:69: be:4b:3c:36:61:4f:b0:e3:ba:47:3a:ef:d1:4d:0c:0f:e7:e8: a1:2a:a1:e1:27:07:a6:e3:49:f9:66:73:bd:64:97:92:4e:5b: bf:f6:9c:75:09:f4:8c:9a:14:b5:ba:2e:3f:7c:08:72:c7:08: 8c:5b:87:0b:02:09:c6:d3:a8:e2:79:0d:7f:a1:e2:a7:45:04: 37:f8:90:b8:df:a2:5c:21:30:11:53:18:ab:84:56:b8:61:88: 84:86:9c:a5:4e:4e:7d:51:d6:6a:a3:30:85:65:18:f2:06:92: 57:46:45:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtOdxe94SLxxkZH7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw NDdkMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDFlZTA0ZDktYzllZi00YTE2LTljZjEtNDU2Njg5MWYzMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAb/oo4DkaK0S1TRHlIVDRPD0ytf/a5qeWRB 0YaVx0mEQ27Auh+/FNc3csiTbAefnhTnwKSCYU/Ox9Y5ntrqtUJJD93zHUYKxFYj Xv8yKW9nmAe7urUGeIF2EhkmWKKucJTHWi2rMos7eJs+Lcy3VxUcM58j9g8/dOdb WSK+j8NnzsO4EC10blGQp4VhRnkauWgTmv16uEFcdsyO2/gudeZWXOVGo66/kz+y ipB6ql8lv8rrtncmq2VdsCLv80jCzQXgfdhRX8LZZU8/Qpc+uGYRXlqGSl9VZwax P3+hptaxweORRESQ97U5MUeyu3Stv0FzXdS0AtpqY4j6HD5IfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFsEZibMQpP2uVSNOnFbgPGle5TxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1 NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvNzJkY2JmZmQtYWE1MC0z YjQ3LWEyYmMtMGE1NDQyZjlhODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0 MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli OGI0YjA0N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL57AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADyGLyG732jBXfOs/Y1qws/Qo1MhT0NpwceRz6pX/RJ2T58E4O8X lNkj/aTXvPYcdXWyBZdNYRxu2NaRtDBd+AeA1z0zatYs+Jj5Mv2TkAyo8tKQryNh 6qCbzcLaHsDhCyf3+B4FcuOMNnFXe/VpSXzvnP7xb5enpqm+/4M/JO3Ztm7x3sRk AG7fg+3o8Mdkab5LPDZhT7Djukc679FNDA/n6KEqoeEnB6bjSflmc71kl5JOW7/2 nHUJ9IyaFLW6Lj98CHLHCIxbhwsCCcbTqOJ5DX+h4qdFBDf4kLjfolwhMBFTGKuE VrhhiISGnKVOTn1R1mqjMIVlGPIGkldGRaI= -----END CERTIFICATE-----Generated at Sat Oct 11 18:02:26 2025 by rpki-client