$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/397bcac5-75ea-3a00-a564-72a03d0baaef.roa File: 397bcac5-75ea-3a00-a564-72a03d0baaef.roa (raw, json) Hash identifier: 1afvH5YgWCF+LVLpGlO3Q7X0adhVIvbkHJiJehoMgOc= Subject key identifier: CB:9E:44:75:8A:8C:9D:A6:2A:BB:3F:05:AD:34:92:8E:C4:B1:1D:E9 Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F4328584B7409CF81C4F4DC91AD32E6C0 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/397bcac5-75ea-3a00-a564-72a03d0baaef.roa Signing time: Wed 08 Oct 2025 12:01:14 +0000 ROA not before: Wed 08 Oct 2025 12:01:14 +0000 ROA not after: Tue 06 Jan 2026 13:01:14 +0000 asID: 216056 IP address blocks: 2602:f92a:a47a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:09:cf:81:c4:f4:dc:91:ad:32:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Oct 8 12:01:14 2025 GMT Not After : Jan 6 13:01:14 2026 GMT Subject: CN=c64d2346-64d6-491d-846c-740ee99b0fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cb:6d:ea:43:ed:16:81:b5:91:d4:5e:4c:ad: f3:bd:ce:98:82:ca:28:21:b7:2c:f2:1f:b5:bf:81: 14:6c:b0:72:8a:93:9e:ee:a7:f3:a7:93:9f:9b:ae: 28:da:96:62:11:b9:66:b0:33:8d:4e:aa:34:fe:3b: e7:c2:84:00:61:a6:1c:81:d8:b0:ca:c1:e1:b8:77: 3d:05:2a:e3:11:d3:34:b1:51:9f:d1:6f:4a:19:7e: 75:f6:62:51:ad:2d:cb:7e:f0:83:32:99:09:7d:94: 4f:a7:cb:c9:23:24:87:17:8c:f0:9b:14:88:d9:e3: d4:37:f7:30:04:88:40:19:e3:da:1a:91:67:9e:de: a6:dc:60:e3:71:a8:74:50:49:1d:77:48:e0:d0:33: b4:f9:64:a3:ea:c8:b8:f2:7a:a4:24:e3:22:fe:97: 2f:bd:23:a5:9b:15:50:7c:da:db:e4:a5:36:28:7d: 22:9d:3e:ca:1e:5c:8c:35:b0:10:43:93:ad:b7:3d: 38:45:99:b4:e8:99:5c:16:bd:24:e0:2e:ee:e5:2c: c3:1d:a3:67:59:e3:bf:7e:7d:a7:71:20:13:0b:52: 24:46:64:16:10:11:c1:ac:61:9d:99:66:68:42:fa: 82:15:9e:7f:b0:cc:ab:5e:54:48:1f:3e:41:42:cf: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9E:44:75:8A:8C:9D:A6:2A:BB:3F:05:AD:34:92:8E:C4:B1:1D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/397bcac5-75ea-3a00-a564-72a03d0baaef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f92a:a47a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:26:65:98:63:3b:fe:4a:90:1d:cf:b0:e8:fe:51:69:13:f7: 8c:d2:7a:1d:33:ae:19:10:da:9a:94:d1:cd:a6:eb:a1:76:04: 0f:e0:6f:bc:2e:e7:c5:15:92:8d:cc:86:56:9b:17:60:bb:c7: 73:2a:f7:0e:d0:b8:f6:42:0f:46:43:3e:61:76:9a:70:b7:62: 1f:9e:eb:55:8f:db:94:a6:7a:7d:2a:01:8a:00:95:69:72:1b: 3c:6f:40:f2:d3:29:2a:cc:52:02:73:cb:bc:2e:f6:2b:d6:11: 97:fe:69:5b:48:29:3f:fe:57:e8:00:69:07:c2:85:56:36:3a: eb:91:b8:09:d2:d0:e8:5b:72:d4:e8:de:10:e3:02:9b:a9:31: ad:2f:e8:60:cf:b8:28:c5:f4:4f:01:44:ba:75:e6:d0:00:36: 99:7f:d0:77:71:d8:27:96:93:db:93:33:8f:6b:56:48:e4:f5: 21:42:bd:9d:1b:f5:89:62:bf:61:8b:70:8d:c2:77:55:3d:6c: fb:80:1e:3e:a1:59:13:ce:9b:5a:84:21:f2:93:c0:64:3d:6a: 7d:29:07:3a:da:76:95:02:76:56:9d:74:77:ca:d2:3e:35:b5: 7e:0b:c0:22:b9:41:d1:df:94:bb:0e:cf:3c:e4:61:5c:c2:8e: 13:47:5c:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt0Cc+BxPTcka0y5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MTAwODEyMDExNFoXDTI2MDEwNjEzMDExNFowLzEtMCsGA1UEAxMk YzY0ZDIzNDYtNjRkNi00OTFkLTg0NmMtNzQwZWU5OWIwZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhctt6kPtFoG1kdReTK3zvc6YgsooIbcs8h+1 v4EUbLByipOe7qfzp5Ofm64o2pZiEblmsDONTqo0/jvnwoQAYaYcgdiwysHhuHc9 BSrjEdM0sVGf0W9KGX519mJRrS3LfvCDMpkJfZRPp8vJIySHF4zwmxSI2ePUN/cw BIhAGePaGpFnnt6m3GDjcah0UEkdd0jg0DO0+WSj6si48nqkJOMi/pcvvSOlmxVQ fNrb5KU2KH0inT7KHlyMNbAQQ5Ottz04RZm06JlcFr0k4C7u5SzDHaNnWeO/fn2n cSATC1IkRmQWEBHBrGGdmWZoQvqCFZ5/sMyrXlRIHz5BQs9EuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMueRHWKjJ2mKrs/Ba00ko7EsR3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvMzk3YmNhYzUtNzVlYS0z YTAwLWE1NjQtNzJhMDNkMGJhYWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5KqR6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4mZZhjO/5KkB3PsOj+UWkT94zSeh0zrhkQ2pqU0c2m66F2BA/g b7wu58UVko3MhlabF2C7x3Mq9w7QuPZCD0ZDPmF2mnC3Yh+e61WP25Smen0qAYoA lWlyGzxvQPLTKSrMUgJzy7wu9ivWEZf+aVtIKT/+V+gAaQfChVY2OuuRuAnS0Ohb ctTo3hDjApupMa0v6GDPuCjF9E8BRLp15tAANpl/0Hdx2CeWk9uTM49rVkjk9SFC vZ0b9Yliv2GLcI3Cd1U9bPuAHj6hWRPOm1qEIfKTwGQ9an0pBzradpUCdladdHfK 0j41tX4LwCK5QdHflLsOzzzkYVzCjhNHXEI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:08:32 2025 by rpki-client