$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/2b6966be-0a30-3097-a99a-d635fb439733.roa File: 2b6966be-0a30-3097-a99a-d635fb439733.roa (raw, json) Hash identifier: 5bzJWSHK2h/qm2sHRdOZl0Ry7Y4ePLFMzK5TYaVDpcs= Subject key identifier: 0B:46:ED:13:7F:90:C1:1E:0A:DA:8F:36:C7:EE:65:EB:2C:9D:BA:C9 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584ADA9BCC96ECE092868C43EE80 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/2b6966be-0a30-3097-a99a-d635fb439733.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 8075 IP address blocks: 2602:f8d5:a1::/48 maxlen: 48 2602:f8d5:a2::/48 maxlen: 48 2602:f8d5:a3::/48 maxlen: 48 2602:f8d5:a4::/48 maxlen: 48 2602:f8d5:a5::/48 maxlen: 48 2602:f8d5:a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:cc:96:ec:e0:92:86:8c:43:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=512c833b-a3dd-42e2-bef3-57052bede4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:61:39:ab:f5:7c:99:af:27:22:fe:5b:d9:d6: 7a:66:04:35:c9:f2:0d:b9:8e:f4:9e:62:b5:75:ea: c0:93:a2:8e:f8:62:73:2d:55:84:1c:95:1a:4d:22: f5:df:5f:12:81:1f:57:f3:bb:a6:db:74:92:e4:36: 65:8c:15:64:1c:d8:43:5e:10:91:b4:cf:b6:8f:21: 57:8a:62:2d:d1:38:25:4f:2c:ed:16:5b:b2:6e:93: d9:41:9a:b4:73:6d:ee:95:93:71:13:ec:65:95:9d: cc:c3:d8:0a:99:1c:ba:7b:9b:bb:dc:a8:27:64:6c: 11:32:07:0e:4c:7f:8f:72:ba:53:37:00:15:2b:b9: 57:88:00:62:ef:fe:20:47:10:87:da:b1:6b:32:87: 36:90:6f:0a:ac:86:d4:f0:dd:0f:a7:fc:42:60:2d: ad:67:18:8b:90:77:bd:20:f1:55:fa:91:b3:92:61: 71:92:8a:d8:7a:db:2f:97:46:7f:7c:1a:e6:83:5c: 88:bd:1d:50:98:60:cb:07:94:41:4a:af:aa:2f:d5: 42:02:18:e9:cb:b2:f8:0d:74:b4:31:cb:5c:ca:ee: 6f:0f:86:8a:f7:88:fb:10:f6:d0:c8:12:67:ae:08: ef:00:c6:e2:77:53:cb:84:cd:a3:78:76:c4:64:26: d1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:46:ED:13:7F:90:C1:1E:0A:DA:8F:36:C7:EE:65:EB:2C:9D:BA:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/2b6966be-0a30-3097-a99a-d635fb439733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8d5:a1::-2602:f8d5:a6:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:18:11:20:86:4c:50:01:be:00:bb:14:80:09:54:65:ee:53: 2f:ca:d7:ab:5f:9a:fc:a2:8f:99:5c:de:48:4f:27:d8:fc:94: 8a:45:d4:73:ad:41:f7:87:cc:e0:67:ab:b1:dd:f1:91:21:12: b3:a8:e9:19:40:c3:12:94:b6:3c:75:3f:44:ed:d7:28:38:9e: b8:0d:d4:c2:4c:26:72:5b:3f:77:fe:c1:35:50:ad:7f:ae:fd: c0:df:60:0f:b4:96:3a:b7:dc:8a:e9:d8:dd:81:c2:d9:76:bb: 09:3a:a8:c6:78:ae:cf:7a:23:41:e6:87:66:da:84:4e:77:59: 68:fd:5d:48:ba:5e:4d:ef:1a:4f:d5:c9:a6:d6:ac:c7:be:e6: 54:1f:30:80:96:98:f0:80:26:cf:21:00:ff:57:e6:18:a0:98: b6:de:1b:9d:f7:f3:4f:3c:e1:b5:f6:13:59:2f:2c:51:14:65: 53:a9:12:6e:b5:7e:49:f2:7d:02:0b:b2:8b:04:83:91:f9:dd: 7c:36:d6:07:88:f6:8b:01:6b:bf:d8:9a:bb:99:2d:6c:6e:57: 73:50:00:4f:90:fc:16:e0:4e:c1:76:b1:eb:85:6b:43:e9:fe: 1e:4e:61:78:00:be:35:26:8f:47:98:e2:e1:00:9b:a5:fb:7a: b9:c5:83:1e -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEram8yW7OCShoxD7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NTEyYzgzM2ItYTNkZC00MmUyLWJlZjMtNTcwNTJiZWRlNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mE5q/V8ma8nIv5b2dZ6ZgQ1yfINuY70nmK1 derAk6KO+GJzLVWEHJUaTSL1318SgR9X87um23SS5DZljBVkHNhDXhCRtM+2jyFX imIt0TglTyztFluybpPZQZq0c23ulZNxE+xllZ3Mw9gKmRy6e5u73KgnZGwRMgcO TH+PcrpTNwAVK7lXiABi7/4gRxCH2rFrMoc2kG8KrIbU8N0Pp/xCYC2tZxiLkHe9 IPFV+pGzkmFxkorYetsvl0Z/fBrmg1yIvR1QmGDLB5RBSq+qL9VCAhjpy7L4DXS0 Mctcyu5vD4aK94j7EPbQyBJnrgjvAMbid1PLhM2jeHbEZCbRoQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFAtG7RN/kMEeCtqPNsfuZessnbrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvMmI2OTY2YmUtMGEzMC0z MDk3LWE5OWEtZDYzNWZiNDM5NzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAvjV AKEDBwAmAvjVAKYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAkBgRIIZMUAG+ALsUgAlUZe5TL8rXq1+a/KKP mVzeSE8n2PyUikXUc61B94fM4Gersd3xkSESs6jpGUDDEpS2PHU/RO3XKDieuA3U wkwmcls/d/7BNVCtf679wN9gD7SWOrfciunY3YHC2Xa7CTqoxniuz3ojQeaHZtqE TndZaP1dSLpeTe8aT9XJptasx77mVB8wgJaY8IAmzyEA/1fmGKCYtt4bnffzTzzh tfYTWS8sURRlU6kSbrV+SfJ9AguyiwSDkfndfDbWB4j2iwFrv9iau5ktbG5Xc1AA T5D8FuBOwXax64VrQ+n+Hk5heAC+NSaPR5ji4QCbpft6ucWDHg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:15:01 2025 by rpki-client