$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/222403e9-7b7e-3e09-b859-cc123c9de5f6.roa File: 222403e9-7b7e-3e09-b859-cc123c9de5f6.roa (raw, json) Hash identifier: ozLitvEzGV2O2H/BM0x5/LPqY7poSwae6dYpAgU3jdY= Subject key identifier: E2:07:67:12:CB:80:EE:89:55:CB:E3:9F:3B:0D:AB:22:27:6D:E4:DF Certificate issuer: /CN=4b3d45e3-ef41-40af-afdc-841ce5179b85 Certificate serial: 010D0C9F4328584B369ED7E1E4F6E46EC3267C80 Authority key identifier: F4:73:CA:2D:03:77:26:2D:70:74:73:E5:4A:56:B9:97:0D:F8:27:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/222403e9-7b7e-3e09-b859-cc123c9de5f6.roa Signing time: Tue 16 Sep 2025 12:01:24 +0000 ROA not before: Tue 16 Sep 2025 12:01:24 +0000 ROA not after: Mon 15 Dec 2025 13:01:24 +0000 asID: 401476 IP address blocks: 2602:f5c0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:9e:d7:e1:e4:f6:e4:6e:c3:26:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3d45e3-ef41-40af-afdc-841ce5179b85 Validity Not Before: Sep 16 12:01:24 2025 GMT Not After : Dec 15 13:01:24 2025 GMT Subject: CN=b8765f0c-9a19-49e4-be51-708a6cf2c421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:11:97:fe:90:f0:5b:43:d7:6f:1a:86:a1: 0a:6f:8c:ba:aa:19:86:43:2a:93:c9:3b:8b:de:02: fc:da:5c:f0:1f:48:28:f1:69:b8:19:5d:71:7e:3e: 50:15:05:e1:aa:08:27:75:20:0e:17:49:19:e5:49: 50:9c:fd:ed:4b:c2:12:d3:f0:0f:13:af:fe:31:85: 49:63:85:01:7d:9d:e3:81:5c:15:0e:97:43:10:e3: b5:a4:2a:35:c0:22:3d:2d:ca:9e:5b:b5:b6:cf:24: 8a:02:cc:f1:79:c4:5d:32:75:7c:76:7b:5f:21:3d: cf:07:cb:b4:af:6f:06:b3:7d:7b:68:aa:d5:af:7d: ca:4c:2d:55:98:5f:f7:0c:98:87:36:6f:17:b0:d4: a7:07:f7:ab:98:a4:cb:63:e6:bd:2c:aa:b0:8a:33: 25:c2:43:13:67:b7:58:f6:27:fd:53:58:9f:c5:6d: e0:84:0f:da:b6:2d:4b:90:7f:4e:80:84:e9:52:1c: 6d:17:4d:da:5f:a4:6a:32:a6:75:ab:74:3c:ee:50: 60:56:ae:7b:aa:85:ea:29:cc:b2:20:80:29:b6:57: d3:68:c4:52:c9:bf:15:b9:c0:0f:e1:22:a6:cf:97: dd:0e:36:2f:45:a4:c3:48:71:f4:1a:4b:97:da:27: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:07:67:12:CB:80:EE:89:55:CB:E3:9F:3B:0D:AB:22:27:6D:E4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/222403e9-7b7e-3e09-b859-cc123c9de5f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.crl X509v3 Authority Key Identifier: keyid:F4:73:CA:2D:03:77:26:2D:70:74:73:E5:4A:56:B9:97:0D:F8:27:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4a:39:57:8a:99:66:39:18:ae:fe:76:1d:5c:2a:02:38:bc: 2f:b4:3a:4a:fb:15:02:4c:08:6b:9b:a9:56:11:49:5a:15:27: aa:4d:21:5b:9e:fa:2c:8f:80:3d:eb:d9:bc:18:1d:12:b8:a3: 01:bf:ad:eb:5a:78:12:4d:0f:f4:b7:37:0c:54:0e:53:3b:f9: 75:37:98:45:14:d8:8c:f8:27:dd:a6:c8:18:7c:1e:ec:4d:bd: 9f:1a:4a:2e:74:64:0e:d4:da:3e:c9:ed:46:99:10:a0:42:8f: e5:8e:48:40:7e:ec:6f:63:5b:ea:4d:e9:62:97:20:ab:04:ba: df:b1:3a:62:8e:b7:ba:c2:06:4e:a5:be:52:ee:2a:0c:47:89: 5a:44:6b:7a:6c:a0:68:14:a5:32:a6:bc:47:aa:50:b4:b4:f6: 18:e2:bb:13:d9:98:56:77:ec:50:3f:7a:96:3e:f5:52:57:f1: d8:6f:74:1b:b7:60:f1:63:76:67:71:72:19:23:48:2f:75:02: 91:48:29:9d:8e:1c:0a:4e:c0:f9:98:7e:21:76:65:03:4e:be: 52:9c:3d:5f:a2:2e:de:eb:82:86:a5:1f:ee:59:28:56:55:4c: be:3e:9a:d3:31:14:5a:d7:1b:6b:be:8d:3e:6a:de:40:d4:5d: 2a:c7:c9:5d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs2ntfh5PbkbsMmfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIzZDQ1ZTMtZWY0MS00MGFmLWFmZGMtODQxY2U1MTc5 Yjg1MB4XDTI1MDkxNjEyMDEyNFoXDTI1MTIxNTEzMDEyNFowLzEtMCsGA1UEAxMk Yjg3NjVmMGMtOWExOS00OWU0LWJlNTEtNzA4YTZjZjJjNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkRl/6Q8FtD128ahqEKb4y6qhmGQyqTyTuL 3gL82lzwH0go8Wm4GV1xfj5QFQXhqggndSAOF0kZ5UlQnP3tS8IS0/APE6/+MYVJ Y4UBfZ3jgVwVDpdDEOO1pCo1wCI9LcqeW7W2zySKAszxecRdMnV8dntfIT3PB8u0 r28Gs317aKrVr33KTC1VmF/3DJiHNm8XsNSnB/ermKTLY+a9LKqwijMlwkMTZ7dY 9if9U1ifxW3ghA/ati1LkH9OgITpUhxtF03aX6RqMqZ1q3Q87lBgVq57qoXqKcyy IIAptlfTaMRSyb8VucAP4SKmz5fdDjYvRaTDSHH0GkuX2icoCQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOIHZxLLgO6JVcvjnzsNqyInbeTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YjNk NDVlMy1lZjQxLTQwYWYtYWZkYy04NDFjZTUxNzliODUvMjIyNDAzZTktN2I3ZS0z ZTA5LWI4NTktY2MxMjNjOWRlNWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGIzZDQ1ZTMtZWY0MS00MGFmLWFm ZGMtODQxY2U1MTc5Yjg1LzRiM2Q0NWUzLWVmNDEtNDBhZi1hZmRjLTg0MWNlNTE3 OWI4NS5jcmwwHwYDVR0jBBgwFoAU9HPKLQN3Ji1wdHPlSla5lw34Jy0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YjNkNDVlMy1lZjQxLTQwYWYtYWZkYy04NDFj ZTUxNzliODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1wAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQEo5V4qZZjkYrv52HVwqAji8L7Q6SvsVAkwIa5upVhFJWhUnqk0h W576LI+APevZvBgdErijAb+t61p4Ek0P9Lc3DFQOUzv5dTeYRRTYjPgn3abIGHwe 7E29nxpKLnRkDtTaPsntRpkQoEKP5Y5IQH7sb2Nb6k3pYpcgqwS637E6Yo63usIG TqW+Uu4qDEeJWkRremygaBSlMqa8R6pQtLT2GOK7E9mYVnfsUD96lj71Ulfx2G90 G7dg8WN2Z3FyGSNIL3UCkUgpnY4cCk7A+Zh+IXZlA06+Upw9X6Iu3uuChqUf7lko VlVMvj6a0zEUWtcba76NPmreQNRdKsfJXQ== -----END CERTIFICATE-----Generated at Fri Sep 19 16:07:40 2025 by rpki-client