$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/b6cae054-cc53-3983-bd1c-ac6989c6a32a.roa File: b6cae054-cc53-3983-bd1c-ac6989c6a32a.roa (raw, json) Hash identifier: h3wgxD9gDO/pQdGIwryNQUlyCugjKFhyRi1pok0/OuE= Subject key identifier: 31:9B:F2:5A:96:F0:14:51:FD:43:24:87:FF:1E:49:6A:A3:A4:B4:10 Certificate issuer: /CN=2bf72053-6e89-4e8b-8a04-02150ff7c010 Certificate serial: 010D0C9F4328584B3DBA2B012B0E89ACDF1C5C20 Authority key identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/b6cae054-cc53-3983-bd1c-ac6989c6a32a.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 398338 IP address blocks: 2602:f605::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:2b:01:2b:0e:89:ac:df:1c:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf72053-6e89-4e8b-8a04-02150ff7c010 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=e78b2bfb-f8f9-4716-b7b2-34b43a9d00e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:7c:ff:2c:22:7e:f7:70:81:3a:0e:93:2c: 00:ff:9f:b9:b3:bc:93:9d:75:83:36:5a:e8:52:03: 41:45:a4:9e:ca:3f:26:30:4a:e9:f5:d4:17:de:c4: 78:70:d1:7e:f9:fd:b0:01:3e:d3:ec:b9:fc:81:b6: 99:69:a4:3e:09:d2:0d:98:64:41:d4:0c:62:e4:ab: 72:40:48:a7:53:a1:f4:0e:39:23:3f:4f:35:70:57: 54:a5:f7:49:a0:50:28:06:da:f2:af:86:54:66:d0: 5e:e5:47:e5:30:b5:1c:6f:c2:bb:83:50:e0:35:67: 7d:93:b8:cc:28:51:79:c2:54:cd:2e:a4:51:32:85: f2:7f:7e:f2:b9:e9:29:92:c8:e3:14:99:a2:80:5f: ea:cc:15:2a:08:9f:89:a2:38:49:57:91:cc:7c:a5: 2c:7e:60:e5:8f:61:82:bc:d7:dd:05:e1:9b:48:c5: 95:7c:3f:ed:34:33:23:8f:b4:42:8c:98:14:8e:79: 8c:95:6d:99:25:52:f9:55:92:b8:f8:0b:ae:86:1b: 55:e0:9d:2c:40:74:5f:b2:af:f4:d3:1f:85:73:67: 42:11:52:26:2c:59:46:e9:b3:6c:5b:31:31:17:8b: 93:fe:cc:28:c1:5c:57:6f:5b:ee:3a:ad:30:a4:fa: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9B:F2:5A:96:F0:14:51:FD:43:24:87:FF:1E:49:6A:A3:A4:B4:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/b6cae054-cc53-3983-bd1c-ac6989c6a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl X509v3 Authority Key Identifier: keyid:C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer sbgp-ipAddrBlock: critical IPv6: 2602:f605::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:03:70:90:d9:56:95:29:b7:06:cb:63:11:7f:16:a8:95:93: f4:60:22:e4:5f:b6:36:01:d0:ae:bf:b6:e5:88:43:d3:ca:93: 9e:6d:35:d7:ef:22:3d:1e:21:cb:96:e8:e1:e1:cc:0f:3c:15: a5:8c:7d:48:a1:08:1e:e4:09:b8:06:7d:80:02:39:f8:3a:52: 1f:a2:5a:1e:45:68:a4:54:1c:ec:85:07:21:18:95:fd:6e:79: b5:37:ff:54:39:34:ab:a7:03:d6:d0:22:4a:45:f8:93:d3:29: df:8a:60:7e:4a:96:e8:26:e0:98:2c:69:29:46:48:c8:44:4b: 37:ee:fa:14:d5:61:9b:ac:cf:f3:b6:6b:84:02:22:ad:32:c0: 42:18:d5:75:41:8a:2e:17:cb:55:8b:bf:f2:b7:3e:e3:12:b8: af:32:65:69:54:ba:02:2a:b8:7b:3f:e0:74:20:8c:fe:82:8c: 5a:e6:19:3b:cb:9a:91:6d:dc:13:47:60:49:31:db:c6:ff:8b: 1c:a5:1c:8a:06:52:fd:90:fd:5b:9b:c6:bd:7d:2a:03:dc:0c: 30:22:d1:cf:b5:44:ab:d4:0e:3a:0f:2d:c4:49:0b:e7:44:8e: 06:50:67:65:e0:f2:2e:75:b8:26:6f:6b:90:23:c1:44:1c:24: 4b:2e:b2:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs9uisBKw6JrN8cXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJmNzIwNTMtNmU4OS00ZThiLThhMDQtMDIxNTBmZjdj MDEwMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZTc4YjJiZmItZjhmOS00NzE2LWI3YjItMzRiNDNhOWQwMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7x8/ywifvdwgToOkywA/5+5s7yTnXWDNlro UgNBRaSeyj8mMErp9dQX3sR4cNF++f2wAT7T7Ln8gbaZaaQ+CdINmGRB1Axi5Kty QEinU6H0DjkjP081cFdUpfdJoFAoBtryr4ZUZtBe5UflMLUcb8K7g1DgNWd9k7jM KFF5wlTNLqRRMoXyf37yuekpksjjFJmigF/qzBUqCJ+JojhJV5HMfKUsfmDlj2GC vNfdBeGbSMWVfD/tNDMjj7RCjJgUjnmMlW2ZJVL5VZK4+AuuhhtV4J0sQHRfsq/0 0x+Fc2dCEVImLFlG6bNsWzExF4uT/swowVxXb1vuOq0wpPr8CwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDGb8lqW8BRR/UMkh/8eSWqjpLQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmY3 MjA1My02ZTg5LTRlOGItOGEwNC0wMjE1MGZmN2MwMTAvYjZjYWUwNTQtY2M1My0z OTgzLWJkMWMtYWM2OTg5YzZhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJmNzIwNTMtNmU4OS00ZThiLThh MDQtMDIxNTBmZjdjMDEwLzJiZjcyMDUzLTZlODktNGU4Yi04YTA0LTAyMTUwZmY3 YzAxMC5jcmwwHwYDVR0jBBgwFoAUxf4s5TdGT5CrmFfPeM8WzIuAz/8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmY3MjA1My02ZTg5LTRlOGItOGEwNC0wMjE1 MGZmN2MwMTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2BQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADQNwkNlWlSm3BstjEX8WqJWT9GAi5F+2NgHQrr+25YhD08qTnm01 1+8iPR4hy5bo4eHMDzwVpYx9SKEIHuQJuAZ9gAI5+DpSH6JaHkVopFQc7IUHIRiV /W55tTf/VDk0q6cD1tAiSkX4k9Mp34pgfkqW6CbgmCxpKUZIyERLN+76FNVhm6zP 87ZrhAIirTLAQhjVdUGKLhfLVYu/8rc+4xK4rzJlaVS6Aiq4ez/gdCCM/oKMWuYZ O8uakW3cE0dgSTHbxv+LHKUcigZS/ZD9W5vGvX0qA9wMMCLRz7VEq9QOOg8txEkL 50SOBlBnZeDyLnW4Jm9rkCPBRBwkSy6yOA== -----END CERTIFICATE-----Generated at Tue Oct 28 13:08:08 2025 by rpki-client