$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa File: 870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa (raw, json) Hash identifier: gBYoYCeP4gNHfdF8r/3Hlt6zAt7BKOXqjkZnfeCmdt8= Subject key identifier: 3D:F6:D6:04:47:5F:AD:D2:1B:0D:9F:6F:A4:AA:FC:BC:DC:E3:83:18 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584B4E7711416136A532BA719C00 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 5744 IP address blocks: 2602:810:d000::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:11:41:61:36:a5:32:ba:71:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=7ce84c52-c182-474c-87dd-c8b54975ea82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:a0:b4:fb:8d:fd:2f:69:9d:17:62:dc:ef: e4:e6:3d:13:96:e9:07:31:7b:9d:65:85:64:06:c7: 07:fb:60:9a:1b:a2:b2:6d:25:ed:7f:c1:3b:6c:eb: 73:00:d1:eb:f7:db:7c:68:72:91:29:5e:e5:a3:12: 4d:c4:58:82:ce:e8:0b:58:79:c5:36:f1:ef:20:ed: ce:db:82:36:69:86:a7:42:64:98:7c:73:82:00:d9: 8a:0a:01:01:5f:74:61:2d:b7:9f:00:44:48:30:99: ec:95:74:f9:67:60:8c:6e:dc:6b:5f:70:f8:7f:4a: 47:44:23:80:fe:76:ac:f6:15:9f:cb:e8:8e:ac:ba: 8a:a8:7e:cc:0b:f4:f3:90:9b:3e:70:31:b8:8e:04: 2a:3d:bb:a8:57:df:1b:ae:b3:42:34:41:c1:71:07: 70:af:b3:4a:91:2e:c6:f5:77:72:53:01:fe:80:34: 15:ef:5a:6f:78:7b:be:10:8b:b8:04:d8:32:4a:3e: 50:21:2d:c6:af:84:ad:23:e9:fc:ee:e5:00:a1:19: 39:61:74:5c:32:58:90:d8:49:dd:97:0e:db:2a:33: 0b:85:a4:8c:6a:06:29:c7:58:f5:43:08:bf:ae:6d: d4:4d:64:b2:d5:01:ec:47:1c:6e:4c:8d:62:af:d6: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F6:D6:04:47:5F:AD:D2:1B:0D:9F:6F:A4:AA:FC:BC:DC:E3:83:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv6: 2602:810:d000::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:6d:d6:a9:02:e9:30:fb:e4:8d:b3:dc:07:d2:a2:c5:34:47: 23:7d:44:a4:bd:1f:56:a0:03:2e:80:42:93:c2:5f:16:30:da: 5f:41:85:63:f0:4d:7d:0e:9a:09:dc:dd:ca:95:fb:78:2a:81: e9:40:ba:34:ec:80:90:50:5b:3c:b7:97:f2:58:d2:4d:4b:34: 3f:12:8e:9d:30:69:87:b2:66:2b:53:44:e4:11:a8:ad:16:05: 75:fc:fd:26:74:4c:2f:a8:25:46:f8:af:ba:d5:66:a0:98:81: c7:06:c5:03:ee:93:55:b5:dc:0b:84:a3:d0:04:ff:64:f9:e6: 1a:9b:19:66:d5:22:db:24:d4:f1:ee:c3:01:8d:2f:6e:41:6e: 56:94:76:7e:70:4a:d4:11:d3:53:b9:59:7e:0a:d9:46:bd:10: 4e:6a:e9:8c:3f:56:54:77:d9:c1:0e:90:84:00:08:fe:fd:46: 2b:36:e4:0d:1a:38:0d:d4:4f:53:1c:a2:93:40:11:3c:03:65: 8b:3e:24:ec:c2:f5:a5:db:5f:3f:b2:7b:a3:ea:b5:a3:ad:57: d0:67:85:54:cc:82:b0:c0:35:79:e4:3c:b9:63:b8:42:69:f2: 31:8b:02:d7:27:20:4c:94:a7:7d:08:fe:f7:c3:65:41:3b:3d: c7:92:c1:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtOdxFBYTalMrpxnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk N2NlODRjNTItYzE4Mi00NzRjLTg3ZGQtYzhiNTQ5NzVlYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X+gtPuN/S9pnRdi3O/k5j0TlukHMXudZYVk BscH+2CaG6KybSXtf8E7bOtzANHr99t8aHKRKV7loxJNxFiCzugLWHnFNvHvIO3O 24I2aYanQmSYfHOCANmKCgEBX3RhLbefAERIMJnslXT5Z2CMbtxrX3D4f0pHRCOA /nas9hWfy+iOrLqKqH7MC/TzkJs+cDG4jgQqPbuoV98brrNCNEHBcQdwr7NKkS7G 9XdyUwH+gDQV71pveHu+EIu4BNgySj5QIS3Gr4StI+n87uUAoRk5YXRcMliQ2End lw7bKjMLhaSMagYpx1j1Qwi/rm3UTWSy1QHsRxxuTI1ir9ZnywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD321gRHX63SGw2fb6Sq/Lzc44MYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvODcwZDlkMDEtNmRmOS0z NWMxLWE0MWItMjhkNjBmNmNiMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIIENAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKVt1qkC6TD75I2z3AfSosU0RyN9RKS9H1agAy6AQpPCXxYw2l9B hWPwTX0Omgnc3cqV+3gqgelAujTsgJBQWzy3l/JY0k1LND8Sjp0waYeyZitTROQR qK0WBXX8/SZ0TC+oJUb4r7rVZqCYgccGxQPuk1W13AuEo9AE/2T55hqbGWbVItsk 1PHuwwGNL25BblaUdn5wStQR01O5WX4K2Ua9EE5q6Yw/VlR32cEOkIQACP79Ris2 5A0aOA3UT1McopNAETwDZYs+JOzC9aXbXz+ye6PqtaOtV9BnhVTMgrDANXnkPLlj uEJp8jGLAtcnIEyUp30I/vfDZUE7PceSwfU= -----END CERTIFICATE-----Generated at Sat Oct 11 19:13:18 2025 by rpki-client