$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa File: 2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa (raw, json) Hash identifier: bqnC4C7RCehYVpjujlTwFNKLMCcCoAz9mSvbB45uDdY= Subject key identifier: 5F:B7:C6:7A:E9:0F:16:FE:DB:71:60:72:15:3F:A1:D4:41:A9:88:69 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584B25FC35B851EFF78EBEF7A700 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 6181 IP address blocks: 2600:2b00::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:35:b8:51:ef:f7:8e:be:f7:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=b7a595b5-e439-450a-946c-b3fac82a2cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:e5:ae:5f:55:60:7a:bf:10:54:ee:1b:4c: ea:f6:64:6f:b5:14:ff:ed:75:4f:dc:9b:31:79:47: b0:00:12:1a:27:fe:ff:c5:a0:49:30:36:4b:04:d9: c9:45:d8:44:fc:dc:c0:f6:cc:45:29:8a:33:3b:28: fa:14:e4:ae:1d:dd:e6:81:93:1c:31:c0:d2:1d:bd: d6:99:1a:9c:e1:99:59:81:fa:7a:c2:16:46:c9:3c: 48:be:e1:32:33:d3:fd:d3:38:12:87:9f:44:9e:f0: 9f:c2:83:39:1d:3e:84:90:e0:b7:fa:f0:3f:2b:82: 80:f5:1d:a0:b0:c5:09:1e:fc:b6:d2:d9:d3:00:76: 79:13:61:31:42:78:4f:83:55:db:7f:7f:f4:19:cf: 47:31:90:72:b9:ba:4d:29:6c:c1:25:c7:c4:f8:42: 27:83:17:7f:c5:81:3d:e0:87:85:dc:6d:d1:8d:8d: a8:d0:73:59:ec:30:6a:3b:b2:de:e5:57:86:a7:c4: 90:cb:70:48:92:4c:9f:8a:bf:53:df:fa:7a:96:ee: 16:6c:93:39:b2:dc:75:4b:42:ce:8a:ce:61:80:cc: 9e:c0:45:a2:ce:92:e8:ee:50:a6:02:56:43:15:8b: 27:73:3d:2a:93:98:00:84:28:53:4f:65:1f:fe:55: 2a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B7:C6:7A:E9:0F:16:FE:DB:71:60:72:15:3F:A1:D4:41:A9:88:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv6: 2600:2b00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9d:4d:cd:4a:92:b4:9b:36:74:06:ba:26:6b:11:4c:d5:29: eb:64:f2:39:27:e9:22:4e:a9:ec:5a:bb:41:e0:cc:2a:c4:74: c6:38:1a:93:55:8e:84:4f:ac:c8:be:c7:14:a1:7d:cc:91:b2: b3:25:27:56:f1:2a:35:9a:58:eb:c5:08:65:ef:ba:b5:5c:b0: 83:9a:80:47:c2:74:b9:67:a8:b7:75:be:cc:75:c5:4e:8e:11: 63:38:0d:25:31:b8:cd:a6:46:34:6e:66:a9:60:64:97:91:08: 81:99:f0:af:1f:78:15:ab:5a:f7:d2:56:cf:17:eb:7a:a0:8e: 56:43:94:1a:95:c0:1d:30:1e:ed:63:f6:39:ae:a3:57:6e:6d: 1e:ed:b7:ac:e9:49:b9:94:49:e0:b5:b6:22:b8:cf:28:07:ba: 69:41:34:99:7a:2f:53:fa:15:ee:40:ea:dc:e5:9b:5e:e3:f1: 19:ae:43:21:3a:0f:35:9e:61:b9:b0:3b:82:cf:8c:88:69:e8: ff:f6:5e:bd:4a:bf:cf:94:eb:4e:c7:e5:c6:b0:08:d6:7d:bd: fd:df:bd:8d:77:da:ee:da:58:50:d9:ff:e0:31:e3:10:17:91: c4:93:93:b6:c8:b9:5e:8e:f8:de:b5:54:6d:c6:2b:65:cf:c0: 7d:19:92:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsl/DW4Ue/3jr73pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YjdhNTk1YjUtZTQzOS00NTBhLTk0NmMtYjNmYWM4MmEyY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLnlrl9VYHq/EFTuG0zq9mRvtRT/7XVP3Jsx eUewABIaJ/7/xaBJMDZLBNnJRdhE/NzA9sxFKYozOyj6FOSuHd3mgZMcMcDSHb3W mRqc4ZlZgfp6whZGyTxIvuEyM9P90zgSh59EnvCfwoM5HT6EkOC3+vA/K4KA9R2g sMUJHvy20tnTAHZ5E2ExQnhPg1Xbf3/0Gc9HMZByubpNKWzBJcfE+EIngxd/xYE9 4IeF3G3RjY2o0HNZ7DBqO7Le5VeGp8SQy3BIkkyfir9T3/p6lu4WbJM5stx1S0LO is5hgMyewEWizpLo7lCmAlZDFYsncz0qk5gAhChTT2Uf/lUqLwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF+3xnrpDxb+23FgchU/odRBqYhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMmRmMzFlM2UtMWJkYS0z YzdhLTkxNTItYjUxYzZhZWI1NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgArADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFnU3NSpK0mzZ0BromaxFM1SnrZPI5J+kiTqnsWrtB4MwqxHTGOBqT VY6ET6zIvscUoX3MkbKzJSdW8So1mljrxQhl77q1XLCDmoBHwnS5Z6i3db7MdcVO jhFjOA0lMbjNpkY0bmapYGSXkQiBmfCvH3gVq1r30lbPF+t6oI5WQ5QalcAdMB7t Y/Y5rqNXbm0e7bes6Um5lEngtbYiuM8oB7ppQTSZei9T+hXuQOrc5Zte4/EZrkMh Og81nmG5sDuCz4yIaej/9l69Sr/PlOtOx+XGsAjWfb39372Nd9ru2lhQ2f/gMeMQ F5HEk5O2yLlejvjetVRtxitlz8B9GZJn -----END CERTIFICATE-----Generated at Fri Sep 19 22:35:24 2025 by rpki-client