$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/85a56263-c29e-38d5-839b-4858defa29b7.roa File: 85a56263-c29e-38d5-839b-4858defa29b7.roa (raw, json) Hash identifier: dnLt+KZcRIDiGQT+nD4ap6XTin6qjvZ5sDcOpvU3sjw= Subject key identifier: 87:16:E9:F3:5E:5B:C5:9B:0F:C5:E9:27:B3:FF:1F:34:BE:22:79:F6 Certificate issuer: /CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Certificate serial: 010D0C9F4328584B2CF6EB67D53F1D56863BA380 Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/85a56263-c29e-38d5-839b-4858defa29b7.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 210691 IP address blocks: 2602:fbe6:100::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:eb:67:d5:3f:1d:56:86:3b:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=a91147ac-666e-4a38-a394-cdf0654622af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:4a:ee:cf:c5:d0:d4:d0:f1:65:0e:78:d6: f2:8b:99:b3:0a:c8:77:46:94:cb:63:2a:32:f4:8a: e5:a0:64:50:31:ee:61:31:3d:63:12:c8:de:8e:f1: b9:b0:d6:df:f3:af:47:b8:7c:d8:28:e5:15:cc:1c: 57:a8:2b:27:72:94:5a:ec:06:cf:a6:05:c8:33:49: dc:69:fc:61:e8:a8:5d:7b:0f:73:f1:f1:3d:fa:53: 08:01:1e:b7:1a:9e:03:93:bb:27:e1:f9:6a:62:c2: c8:bd:4e:1a:00:27:ac:b0:55:0e:d8:b0:9b:ce:30: 05:dd:6a:58:42:f2:75:88:49:6f:85:87:60:b1:3a: df:4a:3c:31:03:91:48:fd:b1:5a:1e:04:4e:77:71: e0:6d:c2:9d:66:32:cd:4c:53:db:3e:b6:a3:d7:59: 4c:e8:16:5a:52:33:d4:e4:c5:c8:94:8f:93:36:63: 7f:c5:d1:4c:88:34:8a:1f:3e:44:66:d5:76:a9:f6: 70:0a:c1:2d:f0:33:60:a8:ab:66:08:6f:5e:b8:1a: 32:d7:11:05:55:c2:53:4f:81:7b:e5:fd:5b:8a:4c: 3c:57:57:07:4f:ca:4e:15:a6:80:65:85:04:13:b0: a7:2f:6d:b9:5b:4c:c8:ef:86:fb:37:af:b7:6b:70: 80:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:16:E9:F3:5E:5B:C5:9B:0F:C5:E9:27:B3:FF:1F:34:BE:22:79:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/85a56263-c29e-38d5-839b-4858defa29b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl X509v3 Authority Key Identifier: keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbe6:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:75:61:94:c3:c9:77:1a:51:b3:b2:1b:3d:e6:13:94:7e:bb: a8:76:e9:60:ec:4f:a1:b8:03:0f:11:1c:10:4a:2d:35:6e:c2: 20:c8:2f:0c:50:7d:ec:12:28:8a:2a:ee:1c:58:9f:c2:73:b5: 72:12:fa:2d:7f:15:aa:e9:40:cf:af:31:f4:5b:de:a4:0c:26: d6:c7:fe:98:3b:ab:a6:30:7b:cb:51:b9:8f:7a:f4:56:9d:04: 28:88:e3:0e:01:63:f7:48:39:d0:c3:4f:67:d6:ab:30:6c:a6: 4a:f6:07:af:2d:20:57:e9:48:c5:f3:03:d9:8c:2a:f1:f3:c3: 98:3c:ff:d1:85:cd:77:73:4b:7f:c1:c3:28:a2:e8:76:66:59: a5:0b:08:31:4a:72:a9:e8:63:b0:54:66:a4:0a:0e:d2:3c:34: 4c:52:ab:ea:62:13:d5:83:de:13:00:f7:2f:ce:dc:e9:44:f4: c1:ce:dd:53:57:fd:8d:c3:41:46:c0:c9:56:bb:c6:d4:52:08: 21:44:85:da:e6:1e:5e:a7:3e:21:0d:d1:e4:68:81:5e:a2:96: 79:eb:5d:03:99:a4:96:4d:b8:cc:78:84:74:f1:d4:83:6f:e5: 61:f3:20:c7:77:78:ae:5d:16:a1:dd:2a:28:a8:15:b4:63:78: 2a:52:ec:50 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEss9utn1T8dVoY7o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OWU2MDEtZmYzOC00MmMxLTliNTItMGI1YmFkOTZi OTYyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YTkxMTQ3YWMtNjY2ZS00YTM4LWEzOTQtY2RmMDY1NDYyMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBhK7s/F0NTQ8WUOeNbyi5mzCsh3RpTLYyoy 9IrloGRQMe5hMT1jEsjejvG5sNbf869HuHzYKOUVzBxXqCsncpRa7AbPpgXIM0nc afxh6Khdew9z8fE9+lMIAR63Gp4Dk7sn4flqYsLIvU4aACessFUO2LCbzjAF3WpY QvJ1iElvhYdgsTrfSjwxA5FI/bFaHgROd3HgbcKdZjLNTFPbPraj11lM6BZaUjPU 5MXIlI+TNmN/xdFMiDSKHz5EZtV2qfZwCsEt8DNgqKtmCG9euBoy1xEFVcJTT4F7 5f1bikw8V1cHT8pOFaaAZYUEE7CnL225W0zI74b7N6+3a3CAkQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIcW6fNeW8WbD8XpJ7P/HzS+Inn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5 ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjViYWQ5NmI5NjIvODVhNTYyNjMtYzI5ZS0z OGQ1LTgzOWItNDg1OGRlZmEyOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3OWU2MDEtZmYzOC00MmMxLTli NTItMGI1YmFkOTZiOTYyLzA2NzllNjAxLWZmMzgtNDJjMS05YjUyLTBiNWJhZDk2 Yjk2Mi5jcmwwHwYDVR0jBBgwFoAU/OZG/SXdIEzcQIFTZ7JzsbFaHJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjVi YWQ5NmI5NjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL75gEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPHVhlMPJdxpRs7IbPeYTlH67qHbpYOxPobgDDxEcEEotNW7CIMgv DFB97BIoiiruHFifwnO1chL6LX8VqulAz68x9FvepAwm1sf+mDurpjB7y1G5j3r0 Vp0EKIjjDgFj90g50MNPZ9arMGymSvYHry0gV+lIxfMD2Ywq8fPDmDz/0YXNd3NL f8HDKKLodmZZpQsIMUpyqehjsFRmpAoO0jw0TFKr6mIT1YPeEwD3L87c6UT0wc7d U1f9jcNBRsDJVrvG1FIIIUSF2uYeXqc+IQ3R5GiBXqKWeetdA5mklk24zHiEdPHU g2/lYfMgx3d4rl0Wod0qKKgVtGN4KlLsUA== -----END CERTIFICATE-----Generated at Tue Oct 21 03:06:32 2025 by rpki-client