$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa File: 2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa (raw, json) Hash identifier: cjZNPJmQIeM9o3/X+lW2tQ7OLyhGfIX0Cv0KdsNWROQ= Subject key identifier: 7E:BA:87:86:7E:57:31:68:B8:5F:7A:2F:B4:3F:28:4E:D0:D1:02:E7 Certificate issuer: /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af Certificate serial: 010D0C9F4328584B8917711CA0CE6476D3DFC770 Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 400013 IP address blocks: 2602:80c:100b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:71:1c:a0:ce:64:76:d3:df:c7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=2e8f57da-e285-4cca-b7c7-a5dbb1324d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:93:82:d0:88:c5:33:74:2b:23:8a:9f:69: f2:7c:16:4f:5e:07:f4:73:36:0a:64:7d:f1:62:e7: 03:ba:ab:23:46:aa:cf:a4:83:69:49:d5:0c:b7:e5: 6e:8f:c3:0f:05:e4:e8:3c:33:d5:64:31:9a:ab:5d: 8b:74:90:41:d6:41:ef:cc:58:ee:10:1a:72:de:15: 66:33:8a:10:0b:45:19:5d:21:b7:e4:53:cc:f9:9a: b5:3e:14:9c:d4:7d:28:a2:04:b6:ea:0e:aa:49:47: 1a:35:0b:cf:74:97:2f:4d:e9:da:e5:de:e2:b8:f0: 9c:48:24:1c:21:1e:1b:63:e1:57:04:70:40:f4:a1: d1:76:19:24:e4:fc:fb:80:2b:95:75:8a:b2:e8:c5: 37:c9:a0:3b:d9:b6:44:55:53:b3:eb:f4:8d:6a:58: c9:4e:cd:16:87:25:60:97:ef:7b:d1:42:94:10:c0: d3:5b:a5:f2:6b:60:a3:65:1c:23:d0:f2:4c:6a:7c: f4:8c:19:92:22:09:95:6a:32:b0:75:82:c5:98:3f: cb:cf:5e:fd:46:4e:14:84:7e:5e:cd:c4:b1:48:fb: 91:0f:5a:d9:fa:20:73:b2:e3:da:11:c7:9d:5b:51: 91:1c:e0:0f:a2:b2:27:4f:7e:45:fd:6f:f8:f1:0d: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BA:87:86:7E:57:31:68:B8:5F:7A:2F:B4:3F:28:4E:D0:D1:02:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl X509v3 Authority Key Identifier: keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:100b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:cc:31:6e:fd:2d:44:c9:1d:1c:25:49:05:b7:35:7e:c3:d9: e6:17:80:8d:3d:97:a1:38:c7:21:7f:14:e2:a5:08:c2:cc:26: 6c:43:42:e3:b0:44:79:9d:ca:9d:26:fc:56:b7:02:3a:35:13: 33:5b:62:59:32:a8:c4:b8:23:57:8f:a9:c7:5c:15:99:b1:0f: 6a:df:b1:02:56:a9:ab:e7:7b:85:e6:58:55:36:a8:cb:45:0d: 20:2c:ae:08:5c:51:fc:74:f1:45:9f:72:3b:dd:bb:3c:c7:72: 0c:ac:ea:18:72:d5:e8:ee:54:0a:01:7f:64:f7:a4:9b:72:3b: 53:b6:9f:5f:d3:96:1e:23:1f:4b:d8:ba:21:0f:90:f5:47:6f: 29:79:78:73:b3:a4:b0:01:1e:15:b5:35:9a:27:18:7e:76:26: 33:cd:9e:e5:b3:d9:0b:07:ac:a0:fd:01:2e:36:1b:fe:25:80: 2a:80:cf:71:d3:84:55:bf:06:1c:c4:c5:bc:a7:05:bc:fb:2c: e8:5a:d2:99:7f:1f:00:b9:3e:9e:d9:45:09:e2:ef:cc:fa:97: 0f:23:43:cd:d4:e5:91:02:47:69:b3:16:9b:c0:25:67:f9:0e: 5b:83:e6:65:4b:05:af:82:fe:46:01:f5:4d:15:78:c5:71:db: 56:10:e2:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuJF3EcoM5kdtPfx3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI3MmMxMjMtYmFiNS00M2NiLWEzYjktYWMxNjJhM2Iz MGFmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MmU4ZjU3ZGEtZTI4NS00Y2NhLWI3YzctYTVkYmIxMzI0ZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8qTgtCIxTN0KyOKn2nyfBZPXgf0czYKZH3x YucDuqsjRqrPpINpSdUMt+Vuj8MPBeToPDPVZDGaq12LdJBB1kHvzFjuEBpy3hVm M4oQC0UZXSG35FPM+Zq1PhSc1H0oogS26g6qSUcaNQvPdJcvTena5d7iuPCcSCQc IR4bY+FXBHBA9KHRdhkk5Pz7gCuVdYqy6MU3yaA72bZEVVOz6/SNaljJTs0WhyVg l+970UKUEMDTW6Xya2CjZRwj0PJManz0jBmSIgmVajKwdYLFmD/Lz179Rk4UhH5e zcSxSPuRD1rZ+iBzsuPaEcedW1GRHOAPorInT35F/W/48Q229wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH66h4Z+VzFouF96L7Q/KE7Q0QLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Mjcy YzEyMy1iYWI1LTQzY2ItYTNiOS1hYzE2MmEzYjMwYWYvMmQyMWZmOTItYmQzZi0z ZTdkLWIwMzktNTVhMGJmODNkNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDI3MmMxMjMtYmFiNS00M2NiLWEz YjktYWMxNjJhM2IzMGFmLzQyNzJjMTIzLWJhYjUtNDNjYi1hM2I5LWFjMTYyYTNi MzBhZi5jcmwwHwYDVR0jBBgwFoAU+c5+HOgef2U0ac2apdy8hzgLZ1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MjcyYzEyMy1iYWI1LTQzY2ItYTNiOS1hYzE2 MmEzYjMwYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDBAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE/MMW79LUTJHRwlSQW3NX7D2eYXgI09l6E4xyF/FOKlCMLMJmxD QuOwRHmdyp0m/Fa3Ajo1EzNbYlkyqMS4I1ePqcdcFZmxD2rfsQJWqavne4XmWFU2 qMtFDSAsrghcUfx08UWfcjvduzzHcgys6hhy1ejuVAoBf2T3pJtyO1O2n1/Tlh4j H0vYuiEPkPVHbyl5eHOzpLABHhW1NZonGH52JjPNnuWz2QsHrKD9AS42G/4lgCqA z3HThFW/BhzExbynBbz7LOha0pl/HwC5Pp7ZRQni78z6lw8jQ83U5ZECR2mzFpvA JWf5DluD5mVLBa+C/kYB9U0VeMVx21YQ4sc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:16:24 2025 by rpki-client