$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/6a8b657b-426d-3e00-88a2-687128d3b714.roa File: 6a8b657b-426d-3e00-88a2-687128d3b714.roa (raw, json) Hash identifier: HUmyLNd71ry49yO+PzBFDYRvh/BBLD5KeCwBkJ9sMF4= Subject key identifier: BC:E7:A6:F8:D1:7A:C4:88:C6:95:C7:AC:C3:41:5D:89:EB:E8:46:14 Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F4328584B129DA0CCB98417E3341F5B00 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/6a8b657b-426d-3e00-88a2-687128d3b714.roa Signing time: Wed 03 Sep 2025 14:29:51 +0000 ROA not before: Wed 03 Sep 2025 14:29:51 +0000 ROA not after: Tue 02 Dec 2025 15:29:51 +0000 asID: 213903 IP address blocks: 2602:f92a:d1ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:9d:a0:cc:b9:84:17:e3:34:1f:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Sep 3 14:29:51 2025 GMT Not After : Dec 2 15:29:51 2025 GMT Subject: CN=c8ff8f51-ab1c-4a38-aef9-2616e63d9551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:96:29:a6:44:99:87:8b:3a:9b:77:2b:f8:d5: 09:8e:64:d3:2a:75:d8:92:e7:61:8a:f9:c9:11:c2: 1d:b4:dc:ef:57:20:9a:0c:52:fc:36:60:c5:0b:6a: 49:ec:67:95:61:a3:26:1c:d5:c5:c6:78:5b:93:6e: 6e:b0:99:18:39:c4:f8:26:e1:43:82:81:b9:53:8e: f0:47:cf:ec:ed:95:04:39:da:1f:c9:7c:3f:58:48: 08:ba:f9:21:b6:45:a5:11:7b:dd:ba:64:42:2d:45: 6c:24:9c:f6:3a:b4:72:76:f8:01:d8:44:d3:4a:d6: f5:b7:72:a3:e5:61:d4:25:20:e9:75:f6:ff:95:59: 69:43:96:7f:eb:5d:76:92:1e:48:cb:fc:5f:39:f4: fa:67:42:54:20:01:41:47:ed:6c:92:77:f9:89:94: 2e:42:a4:82:18:72:3d:1f:ba:a6:bc:c9:2c:15:3d: ae:f4:a5:19:54:8c:eb:3d:5f:cf:90:08:10:59:9a: 83:37:52:71:64:d9:70:97:85:ae:a5:4a:de:80:32: 1f:03:d5:74:ef:1f:f6:28:ba:50:68:51:cf:7e:84: 0e:3a:26:0c:3a:3d:cb:c1:93:33:18:bc:60:d6:77: 65:4f:63:b6:09:e4:da:06:62:b2:3e:11:2a:cf:7e: 77:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E7:A6:F8:D1:7A:C4:88:C6:95:C7:AC:C3:41:5D:89:EB:E8:46:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/6a8b657b-426d-3e00-88a2-687128d3b714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f92a:d1ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:69:69:ea:8d:9e:89:a6:42:28:98:41:5c:7b:d8:82:2b:15: ac:e3:a7:b0:49:e6:e7:c9:3b:b7:59:75:fd:b5:b7:5f:6b:22: 74:47:2f:92:26:c1:7d:fa:b0:eb:25:14:4d:ae:52:e0:d2:1a: a2:83:50:6b:77:e2:5e:b3:37:09:d3:43:19:50:55:0e:0b:a1: 96:f6:c1:49:eb:54:40:2f:f2:fc:24:6d:31:f3:5e:2d:2b:1d: 8f:61:b7:a5:25:d9:b5:8d:8f:26:0a:d3:4a:cd:d9:35:1c:4e: de:6a:cd:9e:23:cd:23:ca:0b:94:66:5f:65:1f:c2:84:a3:52: 47:04:e9:30:95:be:8e:22:06:ff:6a:b5:33:69:5d:ce:bc:a5: 17:e0:2f:3f:82:13:85:ac:2f:35:6d:57:00:8b:61:b6:c7:0a: 56:23:73:38:08:7e:3d:0b:51:ef:00:6f:c2:75:b4:22:09:75: c5:63:2d:ad:97:f3:e2:17:1f:d5:63:39:49:d0:b6:0c:87:39: 3a:4e:6d:d9:63:74:a6:11:ca:e0:47:cd:35:cc:1b:60:c8:6f: 6c:af:fe:6f:a5:ba:d0:59:3f:0d:e0:47:3c:57:cf:b4:ec:fe: c3:f8:c1:a1:e9:7f:76:8f:5e:ca:9c:96:5b:f8:95:6b:76:ca: e1:26:2d:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsSnaDMuYQX4zQfWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MDkwMzE0Mjk1MVoXDTI1MTIwMjE1Mjk1MVowLzEtMCsGA1UEAxMk YzhmZjhmNTEtYWIxYy00YTM4LWFlZjktMjYxNmU2M2Q5NTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5YppkSZh4s6m3cr+NUJjmTTKnXYkudhivnJ EcIdtNzvVyCaDFL8NmDFC2pJ7GeVYaMmHNXFxnhbk25usJkYOcT4JuFDgoG5U47w R8/s7ZUEOdofyXw/WEgIuvkhtkWlEXvdumRCLUVsJJz2OrRydvgB2ETTStb1t3Kj 5WHUJSDpdfb/lVlpQ5Z/6112kh5Iy/xfOfT6Z0JUIAFBR+1sknf5iZQuQqSCGHI9 H7qmvMksFT2u9KUZVIzrPV/PkAgQWZqDN1JxZNlwl4WupUregDIfA9V07x/2KLpQ aFHPfoQOOiYMOj3LwZMzGLxg1ndlT2O2CeTaBmKyPhEqz353EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLznpvjResSIxpXHrMNBXYnr6EYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvNmE4YjY1N2ItNDI2ZC0z ZTAwLTg4YTItNjg3MTI4ZDNiNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5KtH/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNpaeqNnommQiiYQVx72IIrFazjp7BJ5ufJO7dZdf21t19rInRH L5ImwX36sOslFE2uUuDSGqKDUGt34l6zNwnTQxlQVQ4LoZb2wUnrVEAv8vwkbTHz Xi0rHY9ht6Ul2bWNjyYK00rN2TUcTt5qzZ4jzSPKC5RmX2UfwoSjUkcE6TCVvo4i Bv9qtTNpXc68pRfgLz+CE4WsLzVtVwCLYbbHClYjczgIfj0LUe8Ab8J1tCIJdcVj La2X8+IXH9VjOUnQtgyHOTpObdljdKYRyuBHzTXMG2DIb2yv/m+lutBZPw3gRzxX z7Ts/sP4waHpf3aPXsqcllv4lWt2yuEmLVM= -----END CERTIFICATE-----Generated at Sun Sep 7 09:28:26 2025 by rpki-client