$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa File: 39d37bab-e9cc-3fec-86ef-a7daf491525a.roa (raw, json) Hash identifier: tUqL+OtoN5DYESKoFUGHJjQp7mfgO5MhTuT97V6mqQc= Subject key identifier: BE:4D:4F:3F:0B:8C:2F:DF:E4:25:C2:67:A4:CB:CA:75:2F:72:25:BA Certificate issuer: /CN=8de2686c-f2c7-4e46-bfb3-85a78f602984 Certificate serial: 010D0C9F4328584B2A2C3539030DC4D2F57D7500 Authority key identifier: 26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 14618 IP address blocks: 2602:f6fc::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:35:39:03:0d:c4:d2:f5:7d:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8de2686c-f2c7-4e46-bfb3-85a78f602984 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=7d1dcd77-b506-4dd5-8e64-f67d15ecb08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:fc:83:7e:77:13:8d:48:5b:ca:9b:cc:d7: 10:5b:65:75:63:15:9e:0d:5c:f8:ac:3a:0d:8d:ea: 2e:a5:ec:39:0e:fe:5f:1e:78:92:04:ec:17:3a:32: d7:c9:8f:26:95:71:13:b3:1b:bf:12:74:d0:2b:6a: e2:bc:1d:aa:75:22:f0:80:79:a3:92:3a:a0:91:e0: 9f:e3:8b:5c:f8:a0:5c:39:f6:25:3e:5a:cc:37:7a: ee:8a:f7:74:e7:de:3b:f7:3e:9b:c5:9e:2c:70:f4: 0e:58:b6:a8:6d:dd:fa:f7:dd:6c:bf:f5:82:3d:72: 29:b2:6d:43:55:62:d6:14:12:da:03:a7:75:a0:5b: 00:37:56:df:99:26:0e:eb:7c:60:d8:3c:48:dd:77: 1c:90:bd:7e:f3:8a:62:99:e7:b3:02:10:17:5c:b8: 6d:41:45:cc:63:be:8d:81:bb:c2:c1:2c:8b:f7:15: 82:2e:91:84:39:96:f1:7d:ef:7f:16:aa:91:7c:ca: 05:78:04:b8:cd:95:c1:c9:69:4e:6d:1c:20:f2:ee: 0a:5a:78:e6:a6:9b:43:c7:f3:20:3c:03:15:7a:06: 47:9a:86:60:f8:41:47:f5:3e:fb:fe:82:f3:12:c4: e9:88:c1:22:40:b4:2d:c6:80:ed:4d:10:18:47:93: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4D:4F:3F:0B:8C:2F:DF:E4:25:C2:67:A4:CB:CA:75:2F:72:25:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl X509v3 Authority Key Identifier: keyid:26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6fc::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f6:fe:41:d5:01:e6:c7:ca:87:cf:02:b1:a6:85:0d:8a:36: 1e:06:a4:a1:c8:45:36:24:6a:49:eb:f0:e7:5d:00:cd:fc:b9: 6d:3c:37:fc:ef:28:4d:72:0f:82:54:7c:ea:63:0d:5d:f5:97: e1:b6:03:cd:95:67:28:cd:fa:d0:37:56:59:a9:32:72:b1:d7: 4e:07:36:ba:a2:e5:33:d6:cd:ac:aa:22:fa:3a:39:b2:bf:de: 2d:6d:3d:57:d1:a1:51:24:21:09:11:b9:fd:56:04:83:34:d1: 76:15:40:59:0b:c9:91:e2:4a:ae:4e:11:38:b8:dd:16:9e:6f: 43:8c:bd:50:e4:12:33:25:0f:ba:07:16:b4:66:24:e6:87:77: c5:f7:37:48:86:80:4f:21:21:4f:30:ba:88:4c:d1:fe:24:5a: 98:13:77:40:31:be:06:6a:4f:f8:50:e4:9b:33:ee:75:8b:52: ca:0e:d4:c0:7c:b1:41:29:9b:4a:d8:e5:c0:54:4f:3a:9c:15: 62:2d:ee:1e:5c:a1:8b:bd:4b:2e:4c:a3:88:f3:23:2b:c0:3e: 78:56:2b:de:e7:2b:d2:76:58:c6:40:fb:1d:ba:d7:bd:bf:98: f6:06:72:d1:41:04:dc:d3:27:14:e8:49:6e:b9:a4:c8:fb:64: 9a:1a:0f:2b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsqLDU5Aw3E0vV9dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRlMjY4NmMtZjJjNy00ZTQ2LWJmYjMtODVhNzhmNjAy OTg0MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk N2QxZGNkNzctYjUwNi00ZGQ1LThlNjQtZjY3ZDE1ZWNiMDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7T8g353E41IW8qbzNcQW2V1YxWeDVz4rDoN jeoupew5Dv5fHniSBOwXOjLXyY8mlXETsxu/EnTQK2rivB2qdSLwgHmjkjqgkeCf 44tc+KBcOfYlPlrMN3ruivd059479z6bxZ4scPQOWLaobd36991sv/WCPXIpsm1D VWLWFBLaA6d1oFsAN1bfmSYO63xg2DxI3XcckL1+84pimeezAhAXXLhtQUXMY76N gbvCwSyL9xWCLpGEOZbxfe9/FqqRfMoFeAS4zZXByWlObRwg8u4KWnjmpptDx/Mg PAMVegZHmoZg+EFH9T77/oLzEsTpiMEiQLQtxoDtTRAYR5P/6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL5NTz8LjC/f5CXCZ6TLynUvciW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZGUy Njg2Yy1mMmM3LTRlNDYtYmZiMy04NWE3OGY2MDI5ODQvMzlkMzdiYWItZTljYy0z ZmVjLTg2ZWYtYTdkYWY0OTE1MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGRlMjY4NmMtZjJjNy00ZTQ2LWJm YjMtODVhNzhmNjAyOTg0LzhkZTI2ODZjLWYyYzctNGU0Ni1iZmIzLTg1YTc4ZjYw Mjk4NC5jcmwwHwYDVR0jBBgwFoAUJor28S5xh4BDwjiwVVQTlktluAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZGUyNjg2Yy1mMmM3LTRlNDYtYmZiMy04NWE3 OGY2MDI5ODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2/AAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAC/b+QdUB5sfKh88CsaaFDYo2HgakochFNiRqSevw510Azfy5bTw3 /O8oTXIPglR86mMNXfWX4bYDzZVnKM360DdWWakycrHXTgc2uqLlM9bNrKoi+jo5 sr/eLW09V9GhUSQhCRG5/VYEgzTRdhVAWQvJkeJKrk4ROLjdFp5vQ4y9UOQSMyUP ugcWtGYk5od3xfc3SIaATyEhTzC6iEzR/iRamBN3QDG+BmpP+FDkmzPudYtSyg7U wHyxQSmbStjlwFRPOpwVYi3uHlyhi71LLkyjiPMjK8A+eFYr3ucr0nZYxkD7HbrX vb+Y9gZy0UEE3NMnFOhJbrmkyPtkmhoPKw== -----END CERTIFICATE-----Generated at Fri Oct 10 16:11:31 2025 by rpki-client