$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa File: 2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa (raw, json) Hash identifier: uOuICqJxEXqY2aZa+sjEEOTYtQL5QlfHhv+Ts1iUP1E= Subject key identifier: 02:2C:0C:EB:ED:27:EB:37:F6:7A:84:74:D5:B1:49:2A:45:0A:3C:7E Certificate issuer: /CN=2fd7ea67-f633-4dbd-8774-6209ce64a048 Certificate serial: 010D0C9F4328584B715CB6759B2CC39F70D1DE80 Authority key identifier: 1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 2602:29e:a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b6:75:9b:2c:c3:9f:70:d1:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd7ea67-f633-4dbd-8774-6209ce64a048 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ff107879-800f-4e1a-9f56-314d78b8e4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:6d:cd:f5:9c:b1:18:f5:c9:27:f4:82:79: ff:60:c1:76:42:23:d9:cf:48:07:48:dc:aa:4d:4d: 9c:ad:4c:a9:67:6e:25:de:91:5f:6d:e1:9c:e9:24: 37:62:7b:1d:81:c4:5d:94:6a:e6:27:06:94:8f:12: 4d:2a:60:6d:3d:45:94:56:8d:06:7e:fa:b0:5c:0a: 9c:00:04:f3:d1:7b:f5:df:2a:aa:23:71:2c:a9:62: 82:69:d1:39:e8:74:e7:d7:11:8f:4d:be:66:a2:fe: 21:6b:de:7e:94:08:ac:01:a8:6a:7e:70:0e:bf:8d: 2e:20:c8:9f:45:3f:ac:6a:d4:0d:f5:e2:fe:57:82: c7:ca:e3:91:d1:ec:6b:28:0c:52:8a:9d:4a:cd:ce: fa:8d:e7:fc:f2:19:f3:57:41:fa:0a:47:a7:56:b8: cd:1d:39:b5:ee:fc:97:83:d1:a1:82:0e:29:a8:dc: 9c:da:10:93:98:21:c7:ca:ad:db:27:a1:82:5b:52: 04:15:06:94:f9:e2:37:08:da:ff:21:fa:34:86:b7: c4:75:73:27:d4:f8:a3:1e:d0:da:f3:27:b3:66:7a: ca:54:51:92:65:e2:bd:8f:ee:e9:a6:38:6a:cb:2c: 10:9d:bf:c8:d6:bd:83:e2:a5:62:03:b0:36:53:99: f2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2C:0C:EB:ED:27:EB:37:F6:7A:84:74:D5:B1:49:2A:45:0A:3C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl X509v3 Authority Key Identifier: keyid:1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer sbgp-ipAddrBlock: critical IPv6: 2602:29e:a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:af:8e:ce:e1:35:1c:48:90:ce:34:0b:95:01:60:48:3e:2e: ac:fd:a2:9b:4f:05:f3:7c:04:36:f7:98:aa:7a:e4:17:65:27: 8e:ca:33:49:20:78:ba:25:51:5c:3a:9e:fc:3c:eb:0b:fa:22: 39:4c:ed:af:11:55:23:95:a1:15:98:2d:0d:ff:6a:28:be:ab: f9:e0:84:c9:ad:4c:e6:0e:f5:be:a6:04:2d:3e:cb:93:71:23: 17:a8:7f:75:df:24:3e:1e:25:c1:de:2f:9e:ae:51:62:16:c9: f6:c6:64:e2:c4:24:d7:58:30:da:47:2a:43:d2:cc:61:84:49: 7b:5f:74:64:81:15:9a:1c:1c:66:70:05:66:16:7b:61:0d:7c: 0f:91:fb:5f:68:b1:9d:85:a9:d7:4b:59:65:54:15:0f:11:ab: 26:c2:bb:76:c4:bc:21:1d:fd:73:02:5d:9b:41:cc:32:13:35: fc:2e:77:08:63:b7:fd:5e:c2:27:64:5e:a5:25:bc:79:17:8c: a6:cc:22:5d:af:90:f7:04:91:4b:36:12:6f:ef:af:11:0f:a9: 4e:bb:18:d9:bb:b8:42:b1:7f:da:a6:ec:f6:e0:0e:df:15:3a: ce:ac:ec:35:c6:ec:52:31:f8:26:c9:d7:12:0d:d2:34:8f:1e: f4:91:b0:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXLZ1myzDn3DR3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkN2VhNjctZjYzMy00ZGJkLTg3NzQtNjIwOWNlNjRh MDQ4MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZmYxMDc4NzktODAwZi00ZTFhLTlmNTYtMzE0ZDc4YjhlNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0ttzfWcsRj1ySf0gnn/YMF2QiPZz0gHSNyq TU2crUypZ24l3pFfbeGc6SQ3YnsdgcRdlGrmJwaUjxJNKmBtPUWUVo0GfvqwXAqc AATz0Xv13yqqI3EsqWKCadE56HTn1xGPTb5mov4ha95+lAisAahqfnAOv40uIMif RT+satQN9eL+V4LHyuOR0exrKAxSip1Kzc76jef88hnzV0H6CkenVrjNHTm17vyX g9Ghgg4pqNyc2hCTmCHHyq3bJ6GCW1IEFQaU+eI3CNr/Ifo0hrfEdXMn1PijHtDa 8yezZnrKVFGSZeK9j+7ppjhqyywQnb/I1r2D4qViA7A2U5nyEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAIsDOvtJ+s39nqEdNWxSSpFCjx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZmQ3 ZWE2Ny1mNjMzLTRkYmQtODc3NC02MjA5Y2U2NGEwNDgvMmJjMTc4NGQtZTk4OC0z OWI1LWI1YTMtM2RhZDkwYmRiODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmZkN2VhNjctZjYzMy00ZGJkLTg3 NzQtNjIwOWNlNjRhMDQ4LzJmZDdlYTY3LWY2MzMtNGRiZC04Nzc0LTYyMDljZTY0 YTA0OC5jcmwwHwYDVR0jBBgwFoAUHHTmn0SjtAR9pFecI6imwJ/gH+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZmQ3ZWE2Ny1mNjMzLTRkYmQtODc3NC02MjA5 Y2U2NGEwNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICngCh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFavjs7hNRxIkM40C5UBYEg+Lqz9optPBfN8BDb3mKp65BdlJ47K M0kgeLolUVw6nvw86wv6IjlM7a8RVSOVoRWYLQ3/aii+q/nghMmtTOYO9b6mBC0+ y5NxIxeof3XfJD4eJcHeL56uUWIWyfbGZOLEJNdYMNpHKkPSzGGESXtfdGSBFZoc HGZwBWYWe2ENfA+R+19osZ2FqddLWWVUFQ8RqybCu3bEvCEd/XMCXZtBzDITNfwu dwhjt/1ewidkXqUlvHkXjKbMIl2vkPcEkUs2Em/vrxEPqU67GNm7uEKxf9qm7Pbg Dt8VOs6s7DXG7FIx+CbJ1xIN0jSPHvSRsAk= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:01 2025 by rpki-client