$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/56f10411-4489-347f-8d08-8f6071826d7e.roa File: 56f10411-4489-347f-8d08-8f6071826d7e.roa (raw, json) Hash identifier: eOR6jOWsvDTBSAyUc9HeO5BM3205IidpVpAS9A1PzSk= Subject key identifier: 9C:D3:A0:FE:BC:2A:82:73:6A:89:C3:3F:CD:1C:59:82:27:E8:0C:44 Certificate issuer: /CN=8de2686c-f2c7-4e46-bfb3-85a78f602984 Certificate serial: 010D0C9F4328584B2A2C4CAC39AF8EE07AF27A00 Authority key identifier: 26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/56f10411-4489-347f-8d08-8f6071826d7e.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 2602:f6fc::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4c:ac:39:af:8e:e0:7a:f2:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8de2686c-f2c7-4e46-bfb3-85a78f602984 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=0721f9b6-a92f-4d2e-9568-084e7c90c2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:ee:61:45:4c:a8:c6:d8:47:11:d1:3f:0e: 9d:04:40:da:29:39:a8:08:e9:d1:d0:2b:15:db:95: 1d:60:41:88:bb:ae:b1:8c:28:e3:4c:e8:c4:b5:53: 3f:c2:c3:b9:38:ac:25:42:b1:ec:94:79:e9:c6:f2: 3c:8f:23:76:c3:37:e7:c9:ff:40:c1:ec:f1:8e:d7: 64:48:02:28:6d:01:17:41:86:17:cc:2a:ba:4e:ae: d0:c8:04:b6:5e:5c:05:f4:e5:20:da:a0:f3:d3:d4: 52:fc:39:c0:1a:07:60:3b:05:0b:8a:40:75:ea:b4: 1f:bb:26:11:69:cd:33:bc:7e:f7:ec:09:93:07:44: 3c:3a:b8:63:93:29:1c:65:18:18:7d:e0:2e:6c:83: 30:78:43:2b:83:6d:66:fe:79:99:67:17:c5:71:4e: 9d:db:2b:23:2e:8c:ac:10:1e:cf:a0:46:50:50:48: a8:5c:9f:84:dc:2f:9c:bb:a3:72:0b:0e:5e:47:ea: 69:fe:23:fa:3c:a0:88:cf:a6:58:d4:35:74:d9:8f: 50:fc:10:97:99:99:c7:01:1e:99:18:71:f4:d0:7f: 0e:56:35:d4:2e:0d:ac:89:98:23:8c:91:1d:c8:b2: 18:ac:d2:cc:33:64:1e:40:9b:3b:71:5e:20:f2:e5: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D3:A0:FE:BC:2A:82:73:6A:89:C3:3F:CD:1C:59:82:27:E8:0C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/56f10411-4489-347f-8d08-8f6071826d7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl X509v3 Authority Key Identifier: keyid:26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6fc::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:84:5e:c9:f4:13:f5:cf:65:56:ab:21:8c:af:8f:a7:d7:65: 9b:ea:6e:6d:cf:56:51:b0:7e:8c:fa:2b:bf:12:01:7b:8a:23: e2:d3:69:09:4e:66:71:92:76:04:c0:31:60:60:e2:b2:3d:31: 43:b9:bc:ba:1b:18:4d:d7:b5:a9:5a:06:7c:9a:30:d9:aa:04: 1e:a4:d4:db:9f:07:c8:8c:b0:de:d3:95:d6:67:af:95:64:fb: 55:4f:94:3e:9f:94:11:13:13:c4:d8:50:b1:0c:58:a2:b5:ed: b3:96:9a:27:a8:fc:86:e1:8e:b9:0a:6a:41:0c:96:12:03:99: 86:5d:ba:8c:3b:ee:66:8f:6a:68:0d:79:29:6d:94:6d:1e:7d: 45:be:e8:d4:f6:19:80:14:3b:51:6a:53:06:21:99:5b:6c:5d: 1d:7b:8e:ff:df:48:cb:9d:5e:4c:07:25:b8:af:3b:7b:f4:6a: 30:39:b7:92:28:6f:ba:c2:fa:c9:89:fc:24:ac:94:f0:b8:85: 94:60:7e:9f:91:7c:7c:89:d3:4d:44:4f:91:08:31:4e:a6:0f: f6:0a:dc:47:01:fe:f1:4c:a1:aa:04:6e:33:8b:7f:be:48:07: 48:f0:d6:b1:42:fc:d0:ba:d2:02:b5:c7:19:8c:b7:36:58:db: 1e:49:95:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsqLEysOa+O4HryegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRlMjY4NmMtZjJjNy00ZTQ2LWJmYjMtODVhNzhmNjAy OTg0MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MDcyMWY5YjYtYTkyZi00ZDJlLTk1NjgtMDg0ZTdjOTBjMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW7uYUVMqMbYRxHRPw6dBEDaKTmoCOnR0CsV 25UdYEGIu66xjCjjTOjEtVM/wsO5OKwlQrHslHnpxvI8jyN2wzfnyf9Awezxjtdk SAIobQEXQYYXzCq6Tq7QyAS2XlwF9OUg2qDz09RS/DnAGgdgOwULikB16rQfuyYR ac0zvH737AmTB0Q8OrhjkykcZRgYfeAubIMweEMrg21m/nmZZxfFcU6d2ysjLoys EB7PoEZQUEioXJ+E3C+cu6NyCw5eR+pp/iP6PKCIz6ZY1DV02Y9Q/BCXmZnHAR6Z GHH00H8OVjXULg2siZgjjJEdyLIYrNLMM2QeQJs7cV4g8uXZpwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJzToP68KoJzaonDP80cWYIn6AxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZGUy Njg2Yy1mMmM3LTRlNDYtYmZiMy04NWE3OGY2MDI5ODQvNTZmMTA0MTEtNDQ4OS0z NDdmLThkMDgtOGY2MDcxODI2ZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGRlMjY4NmMtZjJjNy00ZTQ2LWJm YjMtODVhNzhmNjAyOTg0LzhkZTI2ODZjLWYyYzctNGU0Ni1iZmIzLTg1YTc4ZjYw Mjk4NC5jcmwwHwYDVR0jBBgwFoAUJor28S5xh4BDwjiwVVQTlktluAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZGUyNjg2Yy1mMmM3LTRlNDYtYmZiMy04NWE3 OGY2MDI5ODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2/AAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAS4ReyfQT9c9lVqshjK+Pp9dlm+pubc9WUbB+jPorvxIBe4oj4tNp CU5mcZJ2BMAxYGDisj0xQ7m8uhsYTde1qVoGfJow2aoEHqTU258HyIyw3tOV1mev lWT7VU+UPp+UERMTxNhQsQxYorXts5aaJ6j8huGOuQpqQQyWEgOZhl26jDvuZo9q aA15KW2UbR59Rb7o1PYZgBQ7UWpTBiGZW2xdHXuO/99Iy51eTAcluK87e/RqMDm3 kihvusL6yYn8JKyU8LiFlGB+n5F8fInTTURPkQgxTqYP9grcRwH+8UyhqgRuM4t/ vkgHSPDWsUL80LrSArXHGYy3NljbHkmVoA== -----END CERTIFICATE-----Generated at Fri Oct 10 16:15:29 2025 by rpki-client