$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa File: 1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa (raw, json) Hash identifier: ZtbLlDOHbQf3qmVD2KrREMl0eTgOjPHPelvT9jMm+bQ= Subject key identifier: C3:E1:1A:ED:F2:1C:86:E8:3E:55:83:9F:B7:C1:D7:6E:8E:24:42:73 Certificate issuer: /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Certificate serial: 010D0C9F4328584B583C8CFA73B49D0CDA5001DD Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 401466 IP address blocks: 2602:f874:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8c:fa:73:b4:9d:0c:da:50:01:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=65d16555-6566-4a0c-aa11-121758ff0eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:43:e6:74:cb:59:46:a2:c4:88:8c:8f:9c: 1e:2a:5f:24:53:0a:39:4f:aa:65:b9:b4:54:be:4f: 6c:32:9f:79:44:72:de:33:dc:34:0f:d5:42:19:30: 7e:ce:5e:6a:32:c0:1a:0a:ec:07:1f:c6:30:c9:70: 56:0d:7b:c4:6a:01:5a:f5:ce:a8:76:87:e3:f6:7c: f3:ca:4f:ee:3b:7a:ca:40:c9:52:0b:c8:04:d7:ce: 14:41:71:70:74:d1:94:cb:27:14:fe:f8:45:5b:ad: 96:37:12:76:2c:18:1b:fb:0f:27:f7:52:6e:03:46: ce:7d:d0:c1:8a:1c:16:4b:56:32:1d:1c:df:bb:ac: 10:6e:f5:76:e8:af:80:5a:41:58:67:a8:af:e6:9e: 68:7b:20:54:f2:1e:b0:80:43:dc:b5:11:cb:2d:15: 16:86:9b:be:e5:41:b5:da:f6:5f:74:21:d0:e5:52: 27:2a:e8:e9:07:14:da:59:ff:95:5d:f8:d8:82:a2: b8:95:e1:97:52:da:ef:79:50:c3:b3:0a:f0:df:ef: 5f:02:79:a8:64:e0:37:fe:8b:b2:01:2b:c4:8c:dc: f7:aa:93:cf:38:16:db:4c:4e:f3:c6:89:1a:8d:27: 8c:e3:5b:c8:8e:1f:95:5b:7c:23:85:c0:5a:56:e6: 2a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E1:1A:ED:F2:1C:86:E8:3E:55:83:9F:B7:C1:D7:6E:8E:24:42:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl X509v3 Authority Key Identifier: keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer sbgp-ipAddrBlock: critical IPv6: 2602:f874:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:74:b1:a4:82:1c:b0:52:d1:1c:a6:60:de:bd:50:59:b5:74: aa:ab:ed:11:b0:77:58:c3:cf:11:e3:9d:d1:27:15:71:1c:cd: 08:c0:43:19:64:c6:03:ce:39:8c:13:4e:a1:ea:92:d0:ce:87: bc:3d:21:31:95:57:02:6a:b3:69:31:90:11:47:24:f9:69:c0: 06:47:9a:e2:58:15:fc:ef:7a:22:c8:70:7e:16:b8:79:95:49: 0b:44:30:e8:2c:49:aa:eb:67:7d:4c:9c:76:c9:ca:db:9f:f1: ff:23:35:5e:f8:4a:18:0c:2c:ba:ca:c3:64:6f:6c:a0:f4:96: 69:54:97:94:39:3c:d6:6c:12:e1:0f:15:8b:e9:cb:2c:9c:ee: 1a:a0:40:71:73:62:fc:50:e4:20:31:14:fc:43:b9:d1:05:0d: f1:09:44:4a:8e:ca:7b:6c:45:4d:d4:14:67:10:01:46:ae:27: ec:cb:d4:2a:d4:61:27:aa:92:af:61:ab:2b:bc:5c:6f:b9:f9: 04:17:5d:08:ea:02:ae:aa:fd:4d:bf:05:e9:5f:a0:dd:62:21: d9:24:80:6b:b4:bf:8e:77:77:42:c0:87:34:d2:a5:8d:e9:1c: 9a:78:2e:b0:86:b6:11:43:01:a0:24:6f:80:02:8f:87:72:c3: 92:20:4a:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtYPIz6c7SdDNpQAd0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZmI3ZTAtMDBhNi00NTM3LTk4ZGQtODdhNWFjYmQx MjI1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjVkMTY1NTUtNjU2Ni00YTBjLWFhMTEtMTIxNzU4ZmYwZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugND5nTLWUaixIiMj5weKl8kUwo5T6plubRU vk9sMp95RHLeM9w0D9VCGTB+zl5qMsAaCuwHH8YwyXBWDXvEagFa9c6odofj9nzz yk/uO3rKQMlSC8gE184UQXFwdNGUyycU/vhFW62WNxJ2LBgb+w8n91JuA0bOfdDB ihwWS1YyHRzfu6wQbvV26K+AWkFYZ6iv5p5oeyBU8h6wgEPctRHLLRUWhpu+5UG1 2vZfdCHQ5VInKujpBxTaWf+VXfjYgqK4leGXUtrveVDDswrw3+9fAnmoZOA3/ouy ASvEjNz3qpPPOBbbTE7zxokajSeM41vIjh+VW3wjhcBaVuYqAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMPhGu3yHIboPlWDn7fB126OJEJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdm YjdlMC0wMGE2LTQ1MzctOThkZC04N2E1YWNiZDEyMjUvMWU5ZjEzM2MtOTIzYS0z MGQxLThkZDgtYWIwMGZiNzJlYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3ZmI3ZTAtMDBhNi00NTM3LTk4 ZGQtODdhNWFjYmQxMjI1L2Q1N2ZiN2UwLTAwYTYtNDUzNy05OGRkLTg3YTVhY2Jk MTIyNS5jcmwwHwYDVR0jBBgwFoAUEp4euQeWpb0XZcnkKBFzj02ykcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdmYjdlMC0wMGE2LTQ1MzctOThkZC04N2E1 YWNiZDEyMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4dAAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFp0saSCHLBS0RymYN69UFm1dKqr7RGwd1jDzxHjndEnFXEczQjA QxlkxgPOOYwTTqHqktDOh7w9ITGVVwJqs2kxkBFHJPlpwAZHmuJYFfzveiLIcH4W uHmVSQtEMOgsSarrZ31MnHbJytuf8f8jNV74ShgMLLrKw2RvbKD0lmlUl5Q5PNZs EuEPFYvpyyyc7hqgQHFzYvxQ5CAxFPxDudEFDfEJREqOyntsRU3UFGcQAUauJ+zL 1CrUYSeqkq9hqyu8XG+5+QQXXQjqAq6q/U2/BelfoN1iIdkkgGu0v453d0LAhzTS pY3pHJp4LrCGthFDAaAkb4ACj4dyw5IgSrY= -----END CERTIFICATE-----Generated at Tue Oct 21 01:41:59 2025 by rpki-client