$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa File: 5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa (raw, json) Hash identifier: lzvvJCXR8TuO7w6TDeicqFBcA3DsmWebwt+ioe8Epoc= Subject key identifier: 98:4B:23:E2:8A:BF:3F:D0:73:5A:32:29:F9:C0:67:96:71:D7:C0:64 Certificate issuer: /CN=595941d6-63c3-448f-a1d8-89c887c32b78 Certificate serial: 010D0C9F4328584B27617D52872D456519AE8B00 Authority key identifier: B6:42:E5:7E:3E:A4:D3:23:86:80:63:9B:C8:3C:75:9E:80:B8:26:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 400797 IP address blocks: 2602:faf3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:7d:52:87:2d:45:65:19:ae:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595941d6-63c3-448f-a1d8-89c887c32b78 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=79a384eb-0b63-448d-bd18-83310be11eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:b3:b8:80:06:37:5f:27:f5:43:c9:00:c4: 7f:a9:0e:46:98:12:bb:94:23:50:15:4a:3c:b0:0d: e3:bf:45:1f:45:fb:8c:6c:d9:9b:98:0e:85:49:97: a9:2f:5c:49:70:53:c3:2f:31:0b:2a:b0:c4:1d:fe: 9a:34:dc:66:29:11:14:e4:1a:bb:b0:81:ca:38:c5: 5a:c1:17:c7:df:7f:c0:c8:9e:b3:81:b7:59:d9:44: fe:aa:12:fd:11:4b:24:a8:6e:6a:18:0a:f9:45:01: 0a:f3:d4:86:7a:44:04:6b:a0:fc:93:db:30:27:7e: d9:0b:3d:c7:a5:00:d0:0c:18:96:74:08:13:17:4b: 16:ab:38:85:18:13:f7:7c:ca:c3:65:61:e5:50:38: f8:87:3f:b7:31:35:ce:f6:78:6d:7d:43:b4:14:2d: 7e:3c:2a:e5:42:54:b6:4b:8a:f7:50:e7:4e:09:7c: 2b:f4:fe:e0:3c:d8:9b:d2:dc:1f:c7:36:b5:b5:ae: f8:86:c2:17:8e:1e:96:3f:f3:2c:7b:4d:1b:c3:5a: 42:9c:cd:a2:55:3c:96:ed:26:fc:ce:52:30:c7:08: f3:f7:50:b8:58:51:14:74:9b:c0:de:15:3f:e4:f6: 92:2e:3a:13:79:44:b5:67:e3:21:2c:90:54:90:05: 07:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4B:23:E2:8A:BF:3F:D0:73:5A:32:29:F9:C0:67:96:71:D7:C0:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.crl X509v3 Authority Key Identifier: keyid:B6:42:E5:7E:3E:A4:D3:23:86:80:63:9B:C8:3C:75:9E:80:B8:26:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer sbgp-ipAddrBlock: critical IPv6: 2602:faf3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e8:94:9c:c2:ec:52:01:24:f7:aa:da:09:55:30:11:d6:30: 2e:d4:73:d6:df:b5:1d:fb:e9:02:6a:7c:ad:14:f7:f6:22:b2: 57:77:41:f1:2b:d5:9c:62:37:b5:e9:e6:8a:7f:5b:52:51:25: 2b:f3:07:63:f9:d7:8d:8f:81:82:9f:82:f8:7f:73:4f:48:08: 5f:76:44:a5:95:87:69:63:0e:15:61:c7:ae:1b:f3:1c:9c:9f: 18:0e:f9:e3:e5:c8:93:dc:8a:f6:e1:99:c1:48:3d:b2:4d:fb: f5:bd:1b:ad:8b:fb:62:95:85:8c:8a:eb:b9:ba:5c:cc:4e:12: 2e:33:0d:4a:85:0f:27:e5:78:3c:c3:99:5f:ee:91:d1:b0:fb: 51:30:46:b1:69:a9:cf:46:56:23:d2:31:dd:21:8d:ab:ce:b2: 53:e9:1e:d0:ee:7c:13:3c:d0:67:40:57:2b:b0:0e:09:de:15: b5:7e:a0:fc:0f:db:2a:c2:07:6c:bc:23:a0:d5:8d:45:4c:c3: cf:47:23:8b:a1:66:4a:cc:c5:4c:16:9f:bd:e4:20:b4:96:cc: 38:33:ac:ed:33:c0:a1:b7:27:1a:72:b1:a1:31:ba:97:97:2b: 6f:19:39:32:3a:0b:02:d9:71:f8:33:92:eb:d5:02:48:ed:7f: 54:64:a8:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsnYX1Shy1FZRmuiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTk1OTQxZDYtNjNjMy00NDhmLWExZDgtODljODg3YzMy Yjc4MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk NzlhMzg0ZWItMGI2My00NDhkLWJkMTgtODMzMTBiZTExZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUuzuIAGN18n9UPJAMR/qQ5GmBK7lCNQFUo8 sA3jv0UfRfuMbNmbmA6FSZepL1xJcFPDLzELKrDEHf6aNNxmKREU5Bq7sIHKOMVa wRfH33/AyJ6zgbdZ2UT+qhL9EUskqG5qGAr5RQEK89SGekQEa6D8k9swJ37ZCz3H pQDQDBiWdAgTF0sWqziFGBP3fMrDZWHlUDj4hz+3MTXO9nhtfUO0FC1+PCrlQlS2 S4r3UOdOCXwr9P7gPNib0twfxza1ta74hsIXjh6WP/Mse00bw1pCnM2iVTyW7Sb8 zlIwxwjz91C4WFEUdJvA3hU/5PaSLjoTeUS1Z+MhLJBUkAUHXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJhLI+KKvz/Qc1oyKfnAZ5Zx18BkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81OTU5 NDFkNi02M2MzLTQ0OGYtYTFkOC04OWM4ODdjMzJiNzgvNWVhOGUxZmUtMmMxNS0z NTc5LWE4MWQtOGVjMWRmNmViMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTk1OTQxZDYtNjNjMy00NDhmLWEx ZDgtODljODg3YzMyYjc4LzU5NTk0MWQ2LTYzYzMtNDQ4Zi1hMWQ4LTg5Yzg4N2Mz MmI3OC5jcmwwHwYDVR0jBBgwFoAUtkLlfj6k0yOGgGObyDx1noC4Jg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81OTU5NDFkNi02M2MzLTQ0OGYtYTFkOC04OWM4 ODdjMzJiNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL68wAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABLolJzC7FIBJPeq2glVMBHWMC7Uc9bftR376QJqfK0U9/Yisld3 QfEr1ZxiN7Xp5op/W1JRJSvzB2P5142PgYKfgvh/c09ICF92RKWVh2ljDhVhx64b 8xycnxgO+ePlyJPcivbhmcFIPbJN+/W9G62L+2KVhYyK67m6XMxOEi4zDUqFDyfl eDzDmV/ukdGw+1EwRrFpqc9GViPSMd0hjavOslPpHtDufBM80GdAVyuwDgneFbV+ oPwP2yrCB2y8I6DVjUVMw89HI4uhZkrMxUwWn73kILSWzDgzrO0zwKG3JxpysaEx upeXK28ZOTI6CwLZcfgzkuvVAkjtf1RkqMo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:15 2025 by rpki-client