$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa File: b8428946-1e88-3bc3-9f06-263a19c73513.roa (raw, json) Hash identifier: 8h3kQ4IzgfkokSe1lOuobtJAcSUhu/7MpzGbcp616ys= Subject key identifier: B2:ED:4C:DD:AF:F1:7E:C2:EB:85:AC:1C:8B:9C:21:12:43:F8:DD:22 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584B6632033EA25A41D29E84BC40 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 206018 IP address blocks: 2602:fc09:f70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:03:3e:a2:5a:41:d2:9e:84:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=cc4acd5e-945f-4a61-bdd0-15b4271a76ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5a:1f:3c:3b:d7:0b:9e:50:21:82:b7:3d:b5: 47:62:dd:17:a8:30:3a:52:82:c3:a4:2b:10:c2:17: 52:26:87:25:28:76:c1:9b:d0:45:b2:14:89:80:56: f5:2f:d6:8b:77:77:6f:89:fb:c5:00:3f:1b:3f:9b: e1:f1:e4:87:89:2b:ec:ae:b2:5f:c6:74:17:69:3f: e8:46:8e:51:fb:f6:58:ad:a1:a5:6f:cf:42:5b:43: 12:10:52:66:84:72:22:58:07:4e:28:cf:ca:c0:b2: 4a:8b:9e:cb:b8:fa:37:bb:01:5b:77:29:80:68:47: 6c:17:9e:db:47:80:a2:13:3e:75:4d:26:db:ef:fe: ef:05:0a:1f:de:4a:70:f3:6d:95:38:bb:4a:d1:7d: b9:0a:06:4f:e3:96:b0:f5:90:c6:6e:e9:fc:45:a3: 3c:76:2a:7e:78:f2:8c:7d:82:51:b4:85:b2:d0:1f: d8:64:aa:94:72:6c:fb:c9:2f:43:17:d7:19:c0:40: ee:22:34:07:83:d3:9c:21:4b:fa:d5:2f:8f:61:5a: 70:86:39:32:24:60:42:9c:d6:7c:d9:7b:fb:96:cb: ea:d5:25:46:20:cf:1e:53:8d:e4:e3:06:ca:61:0b: 36:be:8d:65:4d:1f:a0:42:d8:a5:56:c4:0c:1f:71: 0d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:ED:4C:DD:AF:F1:7E:C2:EB:85:AC:1C:8B:9C:21:12:43:F8:DD:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc09:f70::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e0:ba:d6:04:f4:b4:89:fe:4b:55:dc:e2:a2:ef:c8:92:c2: fc:1e:56:06:1a:78:5b:3f:cc:9c:66:67:b5:7b:13:eb:c1:de: 80:11:1d:c6:03:85:9d:13:5f:71:9f:8b:9a:b5:4c:80:49:70: 12:ce:d3:27:60:cf:93:ef:f0:22:16:3d:e3:35:0a:11:2e:70: d0:2e:ea:1a:2a:57:1f:14:66:2d:1f:e6:95:98:85:31:a5:87: 4d:02:e4:3f:e4:68:10:58:0f:63:88:4d:0c:ea:48:c4:a8:bc: 46:e7:8a:c7:b8:bc:9d:d5:1f:a4:0a:68:5e:0f:2f:9c:2a:ca: 0a:88:06:a2:75:90:3f:9a:99:a4:9a:11:20:15:e0:a6:46:70: dd:6c:69:0d:6b:80:b7:2c:eb:b0:d9:97:6d:35:ff:d2:55:d2: 78:d2:8d:af:19:aa:14:68:44:3f:bd:8a:3d:63:86:78:f8:5d: bd:16:da:0b:89:81:44:8f:60:a6:46:59:3e:99:b8:92:c2:6c: 06:6a:15:36:98:1b:4f:6e:91:f8:6e:be:eb:ba:bb:69:e6:e8: e4:a4:ce:57:1e:54:e9:2c:0e:3a:ce:49:3c:cc:f9:88:d8:a5: c4:b4:74:eb:f6:cf:fe:95:49:4f:c8:14:d2:84:bf:86:06:bb: 40:35:37:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMgM+olpB0p6EvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk Y2M0YWNkNWUtOTQ1Zi00YTYxLWJkZDAtMTViNDI3MWE3NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FofPDvXC55QIYK3PbVHYt0XqDA6UoLDpCsQ whdSJoclKHbBm9BFshSJgFb1L9aLd3dvifvFAD8bP5vh8eSHiSvsrrJfxnQXaT/o Ro5R+/ZYraGlb89CW0MSEFJmhHIiWAdOKM/KwLJKi57LuPo3uwFbdymAaEdsF57b R4CiEz51TSbb7/7vBQof3kpw822VOLtK0X25CgZP45aw9ZDGbun8RaM8dip+ePKM fYJRtIWy0B/YZKqUcmz7yS9DF9cZwEDuIjQHg9OcIUv61S+PYVpwhjkyJGBCnNZ8 2Xv7lsvq1SVGIM8eU43k4wbKYQs2vo1lTR+gQtilVsQMH3EN2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLtTN2v8X7C64WsHIucIRJD+N0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvYjg0Mjg5NDYtMWU4OC0z YmMzLTlmMDYtMjYzYTE5YzczNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8CQ9w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAngutYE9LSJ/ktV3OKi78iSwvweVgYaeFs/zJxmZ7V7E+vB3oAR HcYDhZ0TX3Gfi5q1TIBJcBLO0ydgz5Pv8CIWPeM1ChEucNAu6hoqVx8UZi0f5pWY hTGlh00C5D/kaBBYD2OITQzqSMSovEbnise4vJ3VH6QKaF4PL5wqygqIBqJ1kD+a maSaESAV4KZGcN1saQ1rgLcs67DZl201/9JV0njSja8ZqhRoRD+9ij1jhnj4Xb0W 2guJgUSPYKZGWT6ZuJLCbAZqFTaYG09ukfhuvuu6u2nm6OSkzlceVOksDjrOSTzM +YjYpcS0dOv2z/6VSU/IFNKEv4YGu0A1N0Q= -----END CERTIFICATE-----Generated at Sun Nov 2 22:54:19 2025 by rpki-client