$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/64e86581-a845-341c-9b18-0fe045bcfe1d.roa File: 64e86581-a845-341c-9b18-0fe045bcfe1d.roa (raw, json) Hash identifier: XD9Z++wtAbaaa3yp/ojxPYUPcI5FTnpkBKirhiKm3B8= Subject key identifier: B1:DB:D7:A9:B0:7D:97:70:52:C0:81:F0:9A:99:D4:CA:28:67:31:3A Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584BA932754DF22F9589B07A3080 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/64e86581-a845-341c-9b18-0fe045bcfe1d.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 207556 IP address blocks: 2602:fb68::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:75:4d:f2:2f:95:89:b0:7a:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=2307055a-7eea-418e-8e98-c37d813a9e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:6a:05:d1:a9:61:ca:39:3a:b8:f5:d3:74: 14:b9:9d:81:e7:09:f9:31:a1:9f:ef:aa:52:d4:d1: fb:50:1e:59:c1:f5:e1:49:9b:de:30:e7:55:a5:da: f2:0e:a9:5f:a3:f9:20:50:f1:49:ba:be:02:e5:f1: c7:8f:c6:a7:67:d0:0e:7c:dc:32:3b:bf:93:d1:ba: 73:c7:50:03:76:3f:f9:2f:49:b1:d5:0e:33:c1:37: 6e:16:f3:42:c1:2f:8c:ea:ad:f9:63:03:ee:c7:3d: 6a:a1:3b:bd:28:64:29:e7:85:3a:47:50:88:86:f4: 6b:11:45:09:b4:51:0d:42:75:5c:17:9e:be:a2:b5: e5:64:60:8f:ec:52:35:bd:9c:f9:f1:cc:e4:a3:d4: b5:5a:4a:aa:ec:99:32:37:a3:3d:d9:98:58:28:92: 85:d6:3d:17:32:df:2d:d9:89:d5:a1:f4:e7:f5:6b: 58:89:c7:18:d0:2c:d6:ec:89:5f:3d:ee:93:8d:3a: 2d:9e:3f:0b:c2:e7:6f:ee:07:a0:6a:8a:ef:59:6e: 63:5b:a0:cd:01:f8:d8:a4:84:83:8d:b0:70:c5:e5: 24:63:65:00:32:e1:1d:f8:5e:8b:5a:f0:12:59:b1: 93:c2:e3:14:f2:93:1d:f2:2d:d5:e8:81:23:af:c0: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DB:D7:A9:B0:7D:97:70:52:C0:81:F0:9A:99:D4:CA:28:67:31:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/64e86581-a845-341c-9b18-0fe045bcfe1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb68::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:45:5e:b5:af:17:a7:3c:3c:be:75:c7:6b:66:98:1d:53:ef: 4f:6f:25:6c:95:91:97:0d:e5:cf:8c:04:3d:3c:03:79:a3:fc: 3d:8f:69:79:12:ea:ff:63:78:30:19:88:18:b2:bf:c9:5f:40: 9c:35:c4:f4:ad:56:7b:45:06:28:f1:e5:97:26:41:ea:c1:9d: 22:3e:38:de:ff:1f:05:de:18:e3:0a:87:d7:7d:41:d7:16:2d: ec:fd:b8:02:52:bc:64:45:cc:cb:e5:d1:b8:53:b1:81:97:fd: 92:b3:60:99:40:a3:ec:06:b0:c0:55:bc:27:05:2e:9b:3a:ea: f8:c1:5c:43:d7:0e:47:6a:ff:17:af:7d:f2:26:71:2c:60:41: 0a:8c:75:00:05:84:79:a0:a0:d7:f6:e5:39:13:84:f3:3a:ea: 0f:20:c3:f1:fe:70:26:11:52:59:39:9c:fb:b8:ce:0c:13:3c: 0b:bb:d8:b5:e2:88:72:53:73:1f:83:87:32:4e:0b:c7:7f:8a: 99:80:41:97:06:b8:dc:e0:de:be:67:8e:6b:e7:be:16:7c:12: 3f:c9:8a:e4:43:cc:6f:97:74:a2:fd:79:dc:4c:a6:21:39:7a: b1:50:19:f6:f4:a0:40:35:a9:8a:64:83:25:9b:88:c3:b4:29: 7b:f7:80:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMnVN8i+VibB6MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MjMwNzA1NWEtN2VlYS00MThlLThlOTgtYzM3ZDgxM2E5ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq09qBdGpYco5Orj103QUuZ2B5wn5MaGf76pS 1NH7UB5ZwfXhSZveMOdVpdryDqlfo/kgUPFJur4C5fHHj8anZ9AOfNwyO7+T0bpz x1ADdj/5L0mx1Q4zwTduFvNCwS+M6q35YwPuxz1qoTu9KGQp54U6R1CIhvRrEUUJ tFENQnVcF56+orXlZGCP7FI1vZz58czko9S1Wkqq7JkyN6M92ZhYKJKF1j0XMt8t 2YnVofTn9WtYiccY0CzW7IlfPe6TjTotnj8Lwudv7gegaorvWW5jW6DNAfjYpISD jbBwxeUkY2UAMuEd+F6LWvASWbGTwuMU8pMd8i3V6IEjr8CI6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLHb16mwfZdwUsCB8JqZ1MooZzE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvNjRlODY1ODEtYTg0NS0z NDFjLTliMTgtMGZlMDQ1YmNmZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL7aAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF1FXrWvF6c8PL51x2tmmB1T709vJWyVkZcN5c+MBD08A3mj/D2P aXkS6v9jeDAZiBiyv8lfQJw1xPStVntFBijx5ZcmQerBnSI+ON7/HwXeGOMKh9d9 QdcWLez9uAJSvGRFzMvl0bhTsYGX/ZKzYJlAo+wGsMBVvCcFLps66vjBXEPXDkdq /xevffImcSxgQQqMdQAFhHmgoNf25TkThPM66g8gw/H+cCYRUlk5nPu4zgwTPAu7 2LXiiHJTcx+DhzJOC8d/ipmAQZcGuNzg3r5njmvnvhZ8Ej/JiuRDzG+XdKL9edxM piE5erFQGfb0oEA1qYpkgyWbiMO0KXv3gJo= -----END CERTIFICATE-----Generated at Sun Nov 2 05:03:11 2025 by rpki-client