$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/25c7a11e-7692-386c-9cc9-4d0633fea32b.roa File: 25c7a11e-7692-386c-9cc9-4d0633fea32b.roa (raw, json) Hash identifier: ZKcFqAY6v0Q3xpm63hyCd3v+27fJmcMKMPUy5wBGD8Q= Subject key identifier: ED:AA:BC:AD:BC:24:EA:F7:25:35:76:56:6C:43:5C:2C:12:00:CE:CB Certificate issuer: /CN=45c9903a-58e9-4d12-b429-df86258726e0 Certificate serial: 010D0C9F4328584E5D259ED1CF2AAF27870DC000 Authority key identifier: 84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/25c7a11e-7692-386c-9cc9-4d0633fea32b.roa Signing time: Thu 02 Jul 2026 09:34:29 +0000 ROA not before: Thu 02 Jul 2026 09:34:29 +0000 ROA not after: Wed 30 Sep 2026 09:34:29 +0000 asID: 8075 IP address blocks: 2602:f387:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:25:9e:d1:cf:2a:af:27:87:0d:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45c9903a-58e9-4d12-b429-df86258726e0 Validity Not Before: Jul 2 09:34:29 2026 GMT Not After : Sep 30 09:34:29 2026 GMT Subject: CN=7df5ff0c-fbfe-4bf8-b122-d5eb3dcc7cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:d8:35:8b:7c:96:a4:2b:f5:10:b2:38:5c: ea:37:27:49:90:80:8c:08:da:5e:16:e8:c9:df:42: 03:6a:50:a1:f6:0e:d9:90:35:c8:b3:2e:a0:d6:d7: 82:b5:cd:7a:66:b3:a2:ee:2e:55:da:59:dd:27:d3: ab:d1:68:4f:60:8b:a7:dd:df:58:a4:ca:ba:0a:f2: 01:01:82:b0:e1:aa:00:e4:f1:fb:61:64:43:35:cd: 09:2e:6f:67:68:2c:54:7d:80:16:b2:90:12:84:4e: 38:e4:38:40:5d:11:40:91:bb:35:f1:b6:58:4d:94: 53:d4:54:2c:9c:8f:f7:b0:df:33:f6:49:28:ed:3e: b9:48:1c:93:6c:5c:2a:06:d5:7b:8f:0c:79:b4:c4: ba:9b:08:16:28:81:8b:52:d3:93:97:3c:83:12:1f: 3a:ab:dc:f0:e4:6f:19:36:ac:75:74:96:bc:2d:c3: cf:9a:11:22:43:93:af:65:80:31:36:26:e4:4f:bc: 5e:6c:76:a4:a1:81:b4:cf:cc:4e:cf:fc:35:4d:9d: e9:35:c3:32:59:80:38:68:0a:9a:9f:c7:2e:f0:a4: 0b:72:91:b9:81:6a:27:0b:96:6c:5a:e3:88:77:ff: 7d:1c:4f:a5:6d:55:dd:82:02:71:01:d8:a9:6b:49: d9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AA:BC:AD:BC:24:EA:F7:25:35:76:56:6C:43:5C:2C:12:00:CE:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/25c7a11e-7692-386c-9cc9-4d0633fea32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl X509v3 Authority Key Identifier: keyid:84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer sbgp-ipAddrBlock: critical IPv6: 2602:f387:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:44:8c:43:0c:74:03:28:49:f8:1c:49:08:e5:06:17:46:9f: 5d:bf:01:72:14:40:43:09:35:66:78:10:8a:cc:ba:43:18:42: 37:e8:19:38:19:93:90:7b:c7:da:53:e5:e4:e6:4b:94:7f:17: 4b:81:bc:75:1a:86:c7:32:58:f7:90:0c:9b:03:44:7c:b1:86: 41:16:80:03:f8:7d:79:d0:b7:83:f0:fb:16:45:65:f5:77:3a: e5:ab:43:7a:3d:6e:f7:50:a4:99:0e:43:69:44:27:5b:d6:10: f1:9a:12:17:da:44:df:96:d5:5d:a6:9a:f1:3c:fc:72:e3:bb: 98:cf:95:e5:1c:5a:29:54:d6:fe:69:da:7e:d2:e0:72:61:a7: 4e:48:78:8a:fc:2c:bc:ed:9f:3f:69:43:b5:37:f5:15:fb:7a: f4:6c:e1:ec:92:52:69:af:b8:14:43:e8:43:c2:37:99:7e:d8: bd:25:60:92:37:15:0c:96:ac:ed:c7:d2:47:39:04:f5:54:01: 9b:36:b1:19:70:e8:bf:c4:76:dc:5b:a1:11:cd:28:09:0f:2a: e2:21:ef:08:d0:50:e9:5b:be:9e:64:68:db:70:9b:e6:fb:f6: cf:9b:fb:82:b3:ec:d1:5f:39:e3:ea:8a:03:48:31:63:b9:11: 58:a9:02:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5dJZ7RzyqvJ4cNwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVjOTkwM2EtNThlOS00ZDEyLWI0MjktZGY4NjI1ODcy NmUwMB4XDTI2MDcwMjA5MzQyOVoXDTI2MDkzMDA5MzQyOVowLzEtMCsGA1UEAxMk N2RmNWZmMGMtZmJmZS00YmY4LWIxMjItZDVlYjNkY2M3Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o7YNYt8lqQr9RCyOFzqNydJkICMCNpeFujJ 30IDalCh9g7ZkDXIsy6g1teCtc16ZrOi7i5V2lndJ9Or0WhPYIun3d9YpMq6CvIB AYKw4aoA5PH7YWRDNc0JLm9naCxUfYAWspAShE445DhAXRFAkbs18bZYTZRT1FQs nI/3sN8z9kko7T65SByTbFwqBtV7jwx5tMS6mwgWKIGLUtOTlzyDEh86q9zw5G8Z Nqx1dJa8LcPPmhEiQ5OvZYAxNibkT7xebHakoYG0z8xOz/w1TZ3pNcMyWYA4aAqa n8cu8KQLcpG5gWonC5ZsWuOId/99HE+lbVXdggJxAdipa0nZNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO2qvK28JOr3JTV2VmxDXCwSAM7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80NWM5 OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2MjU4NzI2ZTAvMjVjN2ExMWUtNzY5Mi0z ODZjLTljYzktNGQwNjMzZmVhMzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDVjOTkwM2EtNThlOS00ZDEyLWI0 MjktZGY4NjI1ODcyNmUwLzQ1Yzk5MDNhLTU4ZTktNGQxMi1iNDI5LWRmODYyNTg3 MjZlMC5jcmwwHwYDVR0jBBgwFoAUhKDn2ZJeW04YqwxDqqKAXoRSDaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80NWM5OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2 MjU4NzI2ZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLzhwAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIFEjEMMdAMoSfgcSQjlBhdGn12/AXIUQEMJNWZ4EIrMukMYQjfo GTgZk5B7x9pT5eTmS5R/F0uBvHUahscyWPeQDJsDRHyxhkEWgAP4fXnQt4Pw+xZF ZfV3OuWrQ3o9bvdQpJkOQ2lEJ1vWEPGaEhfaRN+W1V2mmvE8/HLju5jPleUcWilU 1v5p2n7S4HJhp05IeIr8LLztnz9pQ7U39RX7evRs4eySUmmvuBRD6EPCN5l+2L0l YJI3FQyWrO3H0kc5BPVUAZs2sRlw6L/EdtxboRHNKAkPKuIh7wjQUOlbvp5kaNtw m+b79s+b+4Kz7NFfOePqigNIMWO5EVipAsE= -----END CERTIFICATE-----Generated at Mon Jul 6 20:03:39 2026 by rpki-client