$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/efc9d516-031f-362d-af74-4f185e826d9d.roa File: efc9d516-031f-362d-af74-4f185e826d9d.roa (raw, json) Hash identifier: AygoAKL856HcBD58AzrZSEnIVO3qdBV/9pGSu9EggEU= Subject key identifier: 70:6E:0F:AE:B2:95:AB:E4:56:E1:D6:96:04:F9:97:37:4E:D9:AF:81 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A737876C31D433E18CDF00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/efc9d516-031f-362d-af74-4f185e826d9d.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:568:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:37:87:6c:31:d4:33:e1:8c:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=6b4505d5-d390-42b2-a6b5-74923e6c6e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:31:8c:c5:b7:2e:77:9d:ae:0f:ca:fb:31: 5e:25:47:43:f5:6f:cd:da:18:3c:59:aa:00:77:c2: 54:3a:c6:2b:73:78:38:75:57:00:ae:8a:6a:29:03: e9:91:49:c6:47:d0:c2:b1:36:3a:f4:ed:c3:47:a9: da:8b:7b:05:bb:57:f1:bb:46:84:38:ae:a4:79:63: 7c:45:96:e4:bb:ca:65:49:fc:e4:76:0c:40:59:2a: cc:da:e9:e9:0e:ef:db:da:9c:1d:41:dc:a0:1f:b6: a7:a0:2b:fa:b5:7b:0e:0b:87:81:8d:5b:0b:cc:be: d8:f7:ad:f2:55:78:3d:ab:de:13:d6:13:30:3f:a0: 9e:44:96:91:2d:ce:da:a7:47:f8:9b:2e:17:1d:f3: b6:50:fa:5d:b0:22:8a:60:92:0b:d3:f4:12:67:f5: 7e:0d:ed:58:36:bd:2f:04:b8:af:b8:d7:a8:53:f7: 84:04:12:30:26:09:5e:1a:52:2d:75:12:53:f4:f1: ab:b0:15:c3:d5:b4:da:b1:3e:1c:84:bd:17:a3:5c: d2:46:c6:7e:8a:4a:bd:13:bb:32:e5:58:dc:72:f6: da:35:0a:eb:61:13:a1:95:29:5f:f7:dd:f1:1f:d5: de:fc:03:06:45:16:ae:f7:46:46:ac:bd:39:f3:60: 53:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6E:0F:AE:B2:95:AB:E4:56:E1:D6:96:04:F9:97:37:4E:D9:AF:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/efc9d516-031f-362d-af74-4f185e826d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:86:b9:d1:fc:77:df:2e:37:54:8b:da:06:bb:69:26:2f:79: 9a:a0:37:c0:a1:b1:f7:c1:4f:4a:56:66:f9:0c:f9:b4:1a:82: 3e:ce:60:c7:18:f3:18:99:76:13:9f:7b:bd:3a:b1:3e:96:db: da:a5:95:b8:f6:00:d6:43:ff:ef:bb:bb:c2:a5:2b:95:fb:62: 46:60:97:65:eb:fb:89:c0:76:54:37:5e:a5:8f:19:24:40:47: 08:4b:67:c5:42:0b:2a:61:3c:08:a2:75:7a:bb:b3:2b:40:98: b1:31:73:03:89:56:df:92:0f:64:23:20:64:a9:59:6f:2d:bb: f1:41:58:95:c6:8d:a2:03:ee:b2:29:11:a8:08:fc:db:3f:17: 14:b3:45:cb:c3:c6:4e:d7:c9:37:3a:80:ca:de:92:60:1f:41: 3d:6e:3d:5a:c6:5c:99:52:50:7d:1d:07:61:4f:a6:3d:ce:4d: 2c:43:da:be:c5:ea:68:1c:18:41:50:e9:c2:a6:5e:24:2f:9a: 44:2b:75:23:01:eb:e5:7d:eb:b8:c8:8b:9c:d3:1e:bf:82:cf: 09:cf:57:a5:5e:32:fc:a3:aa:93:18:50:b4:09:2b:d0:d7:8c: 95:ed:5a:cf:79:74:d7:d9:d5:24:0f:fd:02:7a:78:75:3f:af: 17:68:c0:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzeHbDHUM+GM3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NmI0NTA1ZDUtZDM5MC00MmIyLWE2YjUtNzQ5MjNlNmM2ZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4UxjMW3Lnedrg/K+zFeJUdD9W/N2hg8WaoA d8JUOsYrc3g4dVcAropqKQPpkUnGR9DCsTY69O3DR6nai3sFu1fxu0aEOK6keWN8 RZbku8plSfzkdgxAWSrM2unpDu/b2pwdQdygH7anoCv6tXsOC4eBjVsLzL7Y963y VXg9q94T1hMwP6CeRJaRLc7ap0f4my4XHfO2UPpdsCKKYJIL0/QSZ/V+De1YNr0v BLivuNeoU/eEBBIwJgleGlItdRJT9PGrsBXD1bTasT4chL0Xo1zSRsZ+ikq9E7sy 5VjccvbaNQrrYROhlSlf993xH9Xe/AMGRRau90ZGrL0582BT2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHBuD66ylavkVuHWlgT5lzdO2a+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZWZjOWQ1MTYtMDMxZi0z NjJkLWFmNzQtNGYxODVlODI2ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIuGudH8d98uN1SL2ga7aSYveZqgN8ChsffBT0pWZvkM+bQagj7O YMcY8xiZdhOfe706sT6W29qllbj2ANZD/++7u8KlK5X7YkZgl2Xr+4nAdlQ3XqWP GSRARwhLZ8VCCyphPAiidXq7sytAmLExcwOJVt+SD2QjIGSpWW8tu/FBWJXGjaID 7rIpEagI/Ns/FxSzRcvDxk7XyTc6gMrekmAfQT1uPVrGXJlSUH0dB2FPpj3OTSxD 2r7F6mgcGEFQ6cKmXiQvmkQrdSMB6+V967jIi5zTHr+CzwnPV6VeMvyjqpMYULQJ K9DXjJXtWs95dNfZ1SQP/QJ6eHU/rxdowJA= -----END CERTIFICATE-----Generated at Fri Oct 24 08:20:54 2025 by rpki-client