$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/55d8d5b8-eb43-326e-8ae0-792809a43aa9.roa File: 55d8d5b8-eb43-326e-8ae0-792809a43aa9.roa (raw, json) Hash identifier: Yd46WzuheSugDo9o4Mv/Kah4pR5PjFqyuF4CnWGi/Mk= Subject key identifier: 36:78:72:84:B6:82:58:52:73:98:6D:FC:AC:1F:E1:D2:7F:CB:8D:F5 Certificate issuer: /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66 Certificate serial: 010D0C9F4328584B6BC75173B7F848E62BBCFD00 Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/55d8d5b8-eb43-326e-8ae0-792809a43aa9.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 63101 IP address blocks: 2602:f824:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:51:73:b7:f8:48:e6:2b:bc:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=2013affe-43c0-4f79-b07c-b40a048c2e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:36:17:1c:27:9c:a3:e7:6e:57:9b:a3:92: 8a:b3:fb:47:7c:9e:91:3e:2c:cd:02:4c:a0:13:8b: f3:65:5f:7e:3c:42:c9:50:54:71:51:59:2a:9e:eb: 89:a5:6f:7f:f2:f1:55:ee:3a:03:fc:e1:0e:4f:c0: 8a:bb:65:08:63:c1:69:31:9f:e2:cc:4e:aa:a3:c0: 4c:5f:16:15:ec:65:cf:e8:72:59:a0:6a:49:35:9b: e7:f2:71:7c:ed:4f:78:46:82:dd:cc:f3:22:31:81: 06:ea:a7:1b:1a:72:c6:4e:5a:3a:51:8d:51:37:87: f0:60:28:1b:a1:b4:1a:09:37:9e:ef:4b:08:3d:26: 20:ee:39:a8:bc:2e:8d:cf:10:8d:0f:ad:98:6a:f6: ef:3d:69:71:f0:5c:a5:7f:9a:ec:85:68:33:3f:0b: 44:d9:00:81:dd:ba:8c:a9:90:f8:35:d5:ec:3e:0d: f6:f3:88:6b:96:59:9d:de:bb:7d:64:4a:73:a3:c1: 32:40:95:0a:f6:16:8d:42:b7:0c:75:82:ad:4f:3f: e8:42:b5:62:43:25:b1:94:a0:67:ed:c0:10:bb:a5: 6d:03:38:51:2f:c1:02:ab:1b:37:b6:c7:cb:9d:b3: 67:1f:4d:f7:30:32:b7:68:0b:3d:dd:42:59:7b:15: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:78:72:84:B6:82:58:52:73:98:6D:FC:AC:1F:E1:D2:7F:CB:8D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/55d8d5b8-eb43-326e-8ae0-792809a43aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl X509v3 Authority Key Identifier: keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer sbgp-ipAddrBlock: critical IPv6: 2602:f824:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6c:37:fc:ce:76:a3:f1:5f:60:93:e7:7c:d0:39:1c:da:6d: 67:d1:0b:89:a9:e6:06:02:79:17:0c:d2:bf:c4:97:16:3f:fa: a2:5c:5d:6b:0a:bd:e0:13:25:bb:07:21:ec:53:09:fc:fa:a8: ef:fb:d6:cf:9a:94:d1:40:d3:34:76:01:1c:1f:0d:8c:e7:18: 51:1b:a6:51:e5:d2:43:15:92:9f:d2:1c:60:e6:5a:f2:66:8d: e9:c1:a0:45:7e:a5:2c:f7:97:03:29:03:35:c4:25:1e:0e:1d: d0:1c:d0:9a:60:75:cd:87:7d:ed:e9:63:04:69:70:b3:a2:b8: 9f:e2:2f:38:58:4b:8f:1c:03:b6:ce:2c:57:cf:5e:6e:43:cf: 03:33:60:3d:83:0f:af:08:cc:06:d1:f4:1a:b0:64:a7:a0:4e: cb:18:42:ab:13:48:e1:ad:5f:62:fa:11:ca:85:7c:d7:29:2e: ee:6b:df:47:f4:b6:0b:55:1a:bd:d0:24:f1:02:41:ff:d3:2c: cf:04:f3:5b:10:56:1a:16:a5:e8:ac:55:81:19:a6:d5:1b:8c: 58:ad:d0:9a:a1:94:84:52:65:05:85:99:2c:ef:c3:9d:7a:f1: 43:0d:1a:b3:17:bc:cb:b5:a0:ff:e7:92:02:76:cd:ff:dd:3a: 3d:13:a3:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtrx1Fzt/hI5iu8/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIzZGNlY2EtYTViNS00ZjlhLTg1MDktNDlhYzAxZjQx YzY2MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MjAxM2FmZmUtNDNjMC00Zjc5LWIwN2MtYjQwYTA0OGMyZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHI2FxwnnKPnblebo5KKs/tHfJ6RPizNAkyg E4vzZV9+PELJUFRxUVkqnuuJpW9/8vFV7joD/OEOT8CKu2UIY8FpMZ/izE6qo8BM XxYV7GXP6HJZoGpJNZvn8nF87U94RoLdzPMiMYEG6qcbGnLGTlo6UY1RN4fwYCgb obQaCTee70sIPSYg7jmovC6NzxCND62YavbvPWlx8Fylf5rshWgzPwtE2QCB3bqM qZD4NdXsPg3284hrllmd3rt9ZEpzo8EyQJUK9haNQrcMdYKtTz/oQrViQyWxlKBn 7cAQu6VtAzhRL8ECqxs3tsfLnbNnH033MDK3aAs93UJZexUfXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDZ4coS2glhSc5ht/Kwf4dJ/y431MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjNk Y2VjYS1hNWI1LTRmOWEtODUwOS00OWFjMDFmNDFjNjYvNTVkOGQ1YjgtZWI0My0z MjZlLThhZTAtNzkyODA5YTQzYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDIzZGNlY2EtYTViNS00ZjlhLTg1 MDktNDlhYzAxZjQxYzY2LzQyM2RjZWNhLWE1YjUtNGY5YS04NTA5LTQ5YWMwMWY0 MWM2Ni5jcmwwHwYDVR0jBBgwFoAU/3Vd00ovBtKid/BxEOGI+/7B1+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjNkY2VjYS1hNWI1LTRmOWEtODUwOS00OWFj MDFmNDFjNjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4JAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGhsN/zOdqPxX2CT53zQORzabWfRC4mp5gYCeRcM0r/ElxY/+qJc XWsKveATJbsHIexTCfz6qO/71s+alNFA0zR2ARwfDYznGFEbplHl0kMVkp/SHGDm WvJmjenBoEV+pSz3lwMpAzXEJR4OHdAc0Jpgdc2Hfe3pYwRpcLOiuJ/iLzhYS48c A7bOLFfPXm5DzwMzYD2DD68IzAbR9BqwZKegTssYQqsTSOGtX2L6EcqFfNcpLu5r 30f0tgtVGr3QJPECQf/TLM8E81sQVhoWpeisVYEZptUbjFit0JqhlIRSZQWFmSzv w5168UMNGrMXvMu1oP/nkgJ2zf/dOj0To2Y= -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:32 2025 by rpki-client