$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1ea681e4-7b96-3d9b-9a8d-4cc0e8d04b70.roa File: 1ea681e4-7b96-3d9b-9a8d-4cc0e8d04b70.roa (raw, json) Hash identifier: 02yHXf6rHAgWsS76n/CDF8HiEO7KI/ovdd8SXs4Ff0M= Subject key identifier: 17:C9:A2:5F:22:CC:68:FD:31:B6:CD:86:4E:51:3E:F6:A9:5D:E4:B1 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584B73F1636A2C07E3A7D86E9E16 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1ea681e4-7b96-3d9b-9a8d-4cc0e8d04b70.roa Signing time: Wed 08 Oct 2025 11:12:02 +0000 ROA not before: Wed 08 Oct 2025 11:12:02 +0000 ROA not after: Tue 06 Jan 2026 12:12:02 +0000 asID: 400556 IP address blocks: 2602:f71e:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:f1:63:6a:2c:07:e3:a7:d8:6e:9e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Oct 8 11:12:02 2025 GMT Not After : Jan 6 12:12:02 2026 GMT Subject: CN=268ca909-07c3-4531-ab43-809193f38750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:62:cb:34:b2:cd:0c:8f:d5:17:7b:43:09: 37:13:fc:29:d2:0b:62:6f:f4:63:b1:51:13:d9:93: 70:c2:95:b3:46:0a:b8:57:15:e3:63:25:a9:37:b7: 7c:30:dc:ae:d0:0e:c2:8d:ba:12:44:5e:70:6c:75: fd:ab:83:b8:36:9f:2e:88:72:37:cc:1d:4c:16:5b: a8:74:ec:a7:21:75:3a:fd:6e:bd:b7:a3:c1:60:44: df:c5:49:a4:7d:4a:63:6d:65:a8:3f:10:a1:ce:73: e8:71:56:9e:f8:40:5b:c5:f2:06:05:db:52:2a:4f: 53:2c:fc:4b:23:f6:62:fc:70:d0:30:63:f7:13:a2: 80:10:c2:e8:b7:79:c4:53:07:8c:e7:41:71:22:f8: 60:55:7e:12:84:69:01:85:ee:46:6a:88:fc:6d:06: ac:8f:a8:97:5a:c2:12:3c:7d:b9:c0:6d:49:a7:6b: b6:75:59:79:26:94:d7:ca:72:15:b3:e9:1a:ac:41: 63:13:aa:00:07:d3:7a:db:d7:d4:bc:3e:b4:5e:90: b3:24:b7:b8:a8:20:4f:df:e2:7f:5f:cd:90:49:8d: 00:f1:cf:7d:3c:e1:84:5e:5f:54:c4:5c:38:e8:8f: b8:31:72:63:42:0b:d2:d2:35:2e:4b:94:95:5e:d4: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C9:A2:5F:22:CC:68:FD:31:B6:CD:86:4E:51:3E:F6:A9:5D:E4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1ea681e4-7b96-3d9b-9a8d-4cc0e8d04b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e:101::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:75:f6:3d:fe:63:48:51:db:ac:c2:b2:75:61:c6:ec:e6:d8: c7:ea:85:f8:bc:67:79:c3:0e:70:e3:a6:79:5c:60:bb:a4:13: 35:a4:67:3b:e0:88:fd:11:80:c2:7b:66:64:77:9e:9a:ad:af: ad:0d:0e:04:ae:7f:7d:cb:e9:10:aa:c8:51:3f:d3:7a:c8:dc: 4b:3f:6a:62:a2:8c:85:d9:31:dd:9f:74:24:15:23:2d:af:a9: ee:ab:a0:70:e4:25:93:bf:92:ed:3c:ad:0e:b9:95:6a:2d:87: a9:3d:19:60:29:0f:cd:f2:db:77:96:8f:1a:e4:9f:75:15:13: c3:01:be:3e:12:de:d1:88:9a:91:72:0f:09:c0:0c:fc:e0:df: 62:ae:e5:88:70:ea:91:9c:e5:1e:c6:e8:10:e7:bf:85:bc:42: 0c:52:16:cd:9e:38:54:33:8e:b9:79:de:e9:45:0b:90:12:9c: 2b:57:2a:d2:30:b2:0a:9d:7f:96:b6:e0:b8:2a:4f:10:4d:ad: 2e:71:40:d6:a9:09:e0:d2:14:c8:91:fe:18:04:5e:c9:0a:b1: 0a:8c:21:94:16:48:85:48:48:8b:e5:48:e0:1b:f3:9a:91:e6: 82:14:14:0c:ce:d0:8a:83:94:e4:17:f8:4b:25:79:39:7f:a7: 55:22:77:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtz8WNqLAfjp9hunhYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MTAwODExMTIwMloXDTI2MDEwNjEyMTIwMlowLzEtMCsGA1UEAxMk MjY4Y2E5MDktMDdjMy00NTMxLWFiNDMtODA5MTkzZjM4NzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsChiyzSyzQyP1Rd7Qwk3E/wp0gtib/RjsVET 2ZNwwpWzRgq4VxXjYyWpN7d8MNyu0A7CjboSRF5wbHX9q4O4Np8uiHI3zB1MFluo dOynIXU6/W69t6PBYETfxUmkfUpjbWWoPxChznPocVae+EBbxfIGBdtSKk9TLPxL I/Zi/HDQMGP3E6KAEMLot3nEUweM50FxIvhgVX4ShGkBhe5Gaoj8bQasj6iXWsIS PH25wG1Jp2u2dVl5JpTXynIVs+karEFjE6oAB9N629fUvD60XpCzJLe4qCBP3+J/ X82QSY0A8c99POGEXl9UxFw46I+4MXJjQgvS0jUuS5SVXtQ1GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBfJol8izGj9MbbNhk5RPvapXeSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvMWVhNjgxZTQtN2I5Ni0z ZDliLTlhOGQtNGNjMGU4ZDA0YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3HgEB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADh19j3+Y0hR26zCsnVhxuzm2Mfqhfi8Z3nDDnDjpnlcYLukEzWk ZzvgiP0RgMJ7ZmR3npqtr60NDgSuf33L6RCqyFE/03rI3Es/amKijIXZMd2fdCQV Iy2vqe6roHDkJZO/ku08rQ65lWoth6k9GWApD83y23eWjxrkn3UVE8MBvj4S3tGI mpFyDwnADPzg32Ku5Yhw6pGc5R7G6BDnv4W8QgxSFs2eOFQzjrl53ulFC5ASnCtX KtIwsgqdf5a24LgqTxBNrS5xQNapCeDSFMiR/hgEXskKsQqMIZQWSIVISIvlSOAb 85qR5oIUFAzO0IqDlOQX+EsleTl/p1Uid+E= -----END CERTIFICATE-----Generated at Mon Oct 20 03:43:13 2025 by rpki-client