$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/b74c0189-c905-3046-8d51-dc9a10241a23.roa File: b74c0189-c905-3046-8d51-dc9a10241a23.roa (raw, json) Hash identifier: sizkKmiVCl+IppBYZTPmDjt68mX1uGpW52EwMJQPdRk= Subject key identifier: 94:76:42:D9:BE:1E:B7:63:E7:94:15:29:1E:EC:23:71:3D:F2:A8:24 Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157 Certificate serial: 010D0C9F4328584B7C8761DCC23344A1890401C0 Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/b74c0189-c905-3046-8d51-dc9a10241a23.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 400919 IP address blocks: 2602:817:2002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:61:dc:c2:33:44:a1:89:04:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=42995c29-35d6-4441-868a-b1def60ea743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:eb:84:52:b9:42:ba:b7:dd:93:b7:09:97:6a: c3:88:dd:11:29:fd:23:33:e6:2c:cc:36:03:2f:c5: 7c:e1:43:93:60:8e:f9:0c:51:00:bb:df:9d:f7:3a: 9a:65:2b:82:f6:cc:5a:75:c0:74:46:bf:4b:5c:35: 1f:b9:99:a5:e3:d3:4e:10:c4:2b:fc:91:49:6d:e6: a4:07:14:8d:42:b8:ca:df:ec:4d:30:09:c6:9c:e5: 88:bb:88:a4:37:26:5e:43:a4:07:9c:1b:8d:70:64: 78:ca:bc:b7:5b:bb:12:f1:95:02:d8:29:cf:9b:a4: 5a:b6:66:0d:7b:b4:88:c2:e8:bc:02:cf:8f:a2:62: bb:28:92:51:ae:0f:02:59:0e:17:64:fb:29:23:00: c7:4e:71:e0:6e:a9:3b:a4:ec:15:19:25:51:9e:24: 26:fa:d4:51:99:f7:04:3b:c8:64:32:9e:88:a2:a6: a4:74:0b:af:36:b8:d2:cf:63:6f:e5:f1:c8:d0:01: 36:e0:34:85:d8:da:6a:42:e7:c2:04:1f:e7:5a:60: e8:81:3f:ce:0c:80:79:93:36:a3:cd:b2:25:01:cc: c7:7d:23:e9:51:66:8a:a4:97:ef:e1:6a:e0:0d:d8: 58:04:8c:b1:ad:f3:fc:ee:39:da:3d:c8:59:81:ea: 73:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:76:42:D9:BE:1E:B7:63:E7:94:15:29:1E:EC:23:71:3D:F2:A8:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/b74c0189-c905-3046-8d51-dc9a10241a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl X509v3 Authority Key Identifier: keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:2002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e8:87:d2:12:70:09:56:b3:8a:59:7d:72:a2:61:8d:ee:ca: 20:2c:97:0a:13:89:46:2b:9a:e5:17:13:ad:9d:17:f6:78:8a: 5e:e3:69:78:3e:eb:10:a3:38:fd:d9:82:54:e6:a5:1c:e2:c2: d3:fb:60:56:8f:52:53:35:a0:2d:19:ab:cd:ec:1f:75:04:1f: 48:52:2f:37:df:68:7c:cc:c7:b3:e1:7e:55:3a:20:f9:1a:82: 5f:34:45:00:37:80:cd:82:66:16:e7:d7:c0:30:2b:48:2a:b7: 2a:71:6e:9b:ed:52:d1:85:b9:64:50:9d:31:c0:fa:e2:2b:0f: fb:e8:42:b7:fa:f6:cb:03:80:91:96:5b:07:86:c3:0d:13:e6: e3:34:90:85:d3:f5:a6:e7:b1:b7:a9:35:eb:67:75:05:a0:2d: 29:ce:9e:d5:df:e1:63:df:af:d2:f6:86:80:0c:32:17:1f:a4: 87:fc:e6:0b:c7:88:fd:6d:2f:a5:00:0b:4b:2c:06:5b:db:62: de:3c:8f:a6:eb:39:26:d7:2f:c7:ce:fe:00:01:a9:13:93:57: 6f:5f:ce:29:de:6e:8b:3e:be:8b:d6:db:42:0a:4f:b2:55:02: f0:f8:44:e0:3f:c2:65:d0:c0:26:8b:f4:97:14:10:1e:6d:54: 24:91:ef:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt8h2HcwjNEoYkEAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3NjdmYjMtMDkxMS00MzVhLWEzYTQtMTg5YjgyNjIy MTU3MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk NDI5OTVjMjktMzVkNi00NDQxLTg2OGEtYjFkZWY2MGVhNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeuEUrlCurfdk7cJl2rDiN0RKf0jM+YszDYD L8V84UOTYI75DFEAu9+d9zqaZSuC9sxadcB0Rr9LXDUfuZml49NOEMQr/JFJbeak BxSNQrjK3+xNMAnGnOWIu4ikNyZeQ6QHnBuNcGR4yry3W7sS8ZUC2CnPm6RatmYN e7SIwui8As+PomK7KJJRrg8CWQ4XZPspIwDHTnHgbqk7pOwVGSVRniQm+tRRmfcE O8hkMp6IoqakdAuvNrjSz2Nv5fHI0AE24DSF2NpqQufCBB/nWmDogT/ODIB5kzaj zbIlAczHfSPpUWaKpJfv4WrgDdhYBIyxrfP87jnaPchZgepzEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJR2Qtm+Hrdj55QVKR7sI3E98qgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYTc2 N2ZiMy0wOTExLTQzNWEtYTNhNC0xODliODI2MjIxNTcvYjc0YzAxODktYzkwNS0z MDQ2LThkNTEtZGM5YTEwMjQxYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWE3NjdmYjMtMDkxMS00MzVhLWEz YTQtMTg5YjgyNjIyMTU3LzFhNzY3ZmIzLTA5MTEtNDM1YS1hM2E0LTE4OWI4MjYy MjE1Ny5jcmwwHwYDVR0jBBgwFoAUMZd8fKTs1HliGSxrDAQkrzTVdKEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xYTc2N2ZiMy0wOTExLTQzNWEtYTNhNC0xODli ODI2MjIxNTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFyAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJboh9IScAlWs4pZfXKiYY3uyiAslwoTiUYrmuUXE62dF/Z4il7j aXg+6xCjOP3ZglTmpRziwtP7YFaPUlM1oC0Zq83sH3UEH0hSLzffaHzMx7PhflU6 IPkagl80RQA3gM2CZhbn18AwK0gqtypxbpvtUtGFuWRQnTHA+uIrD/voQrf69ssD gJGWWweGww0T5uM0kIXT9abnsbepNetndQWgLSnOntXf4WPfr9L2hoAMMhcfpIf8 5gvHiP1tL6UAC0ssBlvbYt48j6brOSbXL8fO/gABqROTV29fzinebos+vovW20IK T7JVAvD4ROA/wmXQwCaL9JcUEB5tVCSR76U= -----END CERTIFICATE-----Generated at Mon Oct 20 08:35:52 2025 by rpki-client