$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa File: 2824194e-8305-35b7-934a-dfe3c0b4c203.roa (raw, json) Hash identifier: otjTicxilRL4qIrM7ZgARsZS5y3Rqt0vRV8FZbk8N84= Subject key identifier: FD:B4:42:E1:69:17:82:4B:FC:38:F7:20:1F:CD:DF:45:B0:09:23:13 Certificate issuer: /CN=3e7444b5-1f39-42b3-8603-6480a7a61609 Certificate serial: 010D0C9F4328584B667A7652A0561E06F6E17200 Authority key identifier: 10:E0:C2:B7:DA:AB:E8:42:D0:C6:55:49:1B:F7:AB:D2:29:FE:BD:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa Signing time: Fri 03 Oct 2025 15:26:54 +0000 ROA not before: Fri 03 Oct 2025 15:26:54 +0000 ROA not after: Thu 01 Jan 2026 16:26:54 +0000 asID: 20473 IP address blocks: 2602:f533::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:7a:76:52:a0:56:1e:06:f6:e1:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e7444b5-1f39-42b3-8603-6480a7a61609 Validity Not Before: Oct 3 15:26:54 2025 GMT Not After : Jan 1 16:26:54 2026 GMT Subject: CN=98ffe736-8f19-4506-9b05-c9466fd17dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:22:a6:90:2d:51:da:15:8b:6c:a1:fa:23:3d: 08:63:90:41:17:24:88:ec:c7:ab:1d:75:0d:0b:8d: 1b:58:ff:53:3d:27:85:bc:fe:b3:14:a5:ef:49:07: 6f:e1:5f:a1:0f:e6:29:0a:d8:a8:66:d6:26:f0:5f: f7:e2:e8:70:6a:e2:47:93:a8:32:62:f7:e0:3c:92: fe:3d:c1:92:94:8b:63:58:8f:13:32:26:ab:2b:0a: c2:33:fa:83:fe:2d:15:2e:cc:8f:96:cf:eb:f4:a2: 87:b0:75:98:eb:cc:6a:b2:03:ce:f4:3c:cb:93:26: e8:97:c1:93:96:06:33:9b:d1:a6:14:03:e9:a3:5a: 46:00:6b:cb:9c:50:b9:29:fb:ef:91:08:45:38:50: cc:e0:d2:2f:e3:01:66:a4:7a:4d:1d:e6:c1:48:ad: 0d:84:6f:4b:88:e4:4a:6c:50:01:45:5e:7e:8f:ed: 0d:d7:3c:ca:ba:c2:70:72:c5:1f:39:5f:ad:05:a8: 12:41:f9:61:d9:0c:0f:27:9a:0e:94:3b:42:60:13: 7a:d3:c7:4f:0b:a0:d4:82:30:97:2a:09:3e:29:d4: 32:4a:f2:ee:ce:6a:96:e9:05:40:81:b5:0e:47:64: 7a:3c:6b:75:12:8a:7a:b9:f1:00:16:14:3d:fb:e0: 6e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B4:42:E1:69:17:82:4B:FC:38:F7:20:1F:CD:DF:45:B0:09:23:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.crl X509v3 Authority Key Identifier: keyid:10:E0:C2:B7:DA:AB:E8:42:D0:C6:55:49:1B:F7:AB:D2:29:FE:BD:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer sbgp-ipAddrBlock: critical IPv6: 2602:f533::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:81:82:2a:30:30:33:89:5a:88:7f:f7:ce:bd:05:16:0a:8f: af:fd:c7:4e:68:91:9b:71:d9:ab:fc:89:32:2e:73:44:e1:7c: 16:b1:b0:28:ac:e7:e5:ed:17:27:2a:35:44:d8:84:19:5c:e4: 7d:34:b1:64:47:bd:e6:bd:0d:0d:5f:59:30:87:c5:2e:96:8b: 8f:cb:b0:21:65:09:d7:51:62:39:24:d0:78:bc:26:d9:cb:6d: 1c:52:03:d7:9f:63:cb:29:d3:b6:c9:db:0e:5d:5c:76:a8:ae: 5c:d0:1f:8b:a5:25:08:ff:8a:01:4b:42:3f:2e:26:40:b6:11: d7:6a:74:8c:a8:cb:88:d3:a0:a5:9f:fd:fa:9e:6b:3a:e8:74: 45:07:c4:19:e8:06:35:b1:46:84:62:51:f5:72:38:67:94:47: b7:23:78:ec:35:83:3a:1c:3c:4f:ca:0c:e2:eb:a3:76:18:43: 3b:ee:82:fc:0d:d2:3c:e4:09:2f:14:ff:69:6e:29:35:bb:7e: 2e:7b:7d:8f:d4:99:22:20:e1:d3:fa:b9:12:9a:b9:b9:90:f0: 0e:8a:2a:48:86:65:8a:0c:f1:3c:12:8b:05:e1:29:d3:29:fa: 4e:ad:a5:24:cf:04:40:41:68:16:6b:3d:47:1c:aa:f4:d6:f8: c7:91:b1:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtmenZSoFYeBvbhcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U3NDQ0YjUtMWYzOS00MmIzLTg2MDMtNjQ4MGE3YTYx NjA5MB4XDTI1MTAwMzE1MjY1NFoXDTI2MDEwMTE2MjY1NFowLzEtMCsGA1UEAxMk OThmZmU3MzYtOGYxOS00NTA2LTliMDUtYzk0NjZmZDE3ZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCKmkC1R2hWLbKH6Iz0IY5BBFySI7MerHXUN C40bWP9TPSeFvP6zFKXvSQdv4V+hD+YpCtioZtYm8F/34uhwauJHk6gyYvfgPJL+ PcGSlItjWI8TMiarKwrCM/qD/i0VLsyPls/r9KKHsHWY68xqsgPO9DzLkybol8GT lgYzm9GmFAPpo1pGAGvLnFC5KfvvkQhFOFDM4NIv4wFmpHpNHebBSK0NhG9LiORK bFABRV5+j+0N1zzKusJwcsUfOV+tBagSQflh2QwPJ5oOlDtCYBN608dPC6DUgjCX Kgk+KdQySvLuzmqW6QVAgbUOR2R6PGt1Eop6ufEAFhQ9++BuYQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP20QuFpF4JL/Dj3IB/N30WwCSMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZTc0 NDRiNS0xZjM5LTQyYjMtODYwMy02NDgwYTdhNjE2MDkvMjgyNDE5NGUtODMwNS0z NWI3LTkzNGEtZGZlM2MwYjRjMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2U3NDQ0YjUtMWYzOS00MmIzLTg2 MDMtNjQ4MGE3YTYxNjA5LzNlNzQ0NGI1LTFmMzktNDJiMy04NjAzLTY0ODBhN2E2 MTYwOS5jcmwwHwYDVR0jBBgwFoAUEODCt9qr6ELQxlVJG/er0in+vRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZTc0NDRiNS0xZjM5LTQyYjMtODYwMy02NDgw YTdhNjE2MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1MwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVoGCKjAwM4laiH/3zr0FFgqPr/3HTmiRm3HZq/yJMi5zROF8FrGw KKzn5e0XJyo1RNiEGVzkfTSxZEe95r0NDV9ZMIfFLpaLj8uwIWUJ11FiOSTQeLwm 2cttHFID159jyynTtsnbDl1cdqiuXNAfi6UlCP+KAUtCPy4mQLYR12p0jKjLiNOg pZ/9+p5rOuh0RQfEGegGNbFGhGJR9XI4Z5RHtyN47DWDOhw8T8oM4uujdhhDO+6C /A3SPOQJLxT/aW4pNbt+Lnt9j9SZIiDh0/q5Epq5uZDwDooqSIZligzxPBKLBeEp 0yn6Tq2lJM8EQEFoFms9Rxyq9Nb4x5Gx5A== -----END CERTIFICATE-----Generated at Wed Oct 8 22:54:05 2025 by rpki-client