$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/1d043c19-75aa-3747-a0b3-d122a5895fe4.roa File: 1d043c19-75aa-3747-a0b3-d122a5895fe4.roa (raw, json) Hash identifier: 2tlTNIZgutfOPzwnfewaLwM7OweqH/JSoXK6SprplDE= Subject key identifier: 74:FD:02:2B:C9:2C:60:B6:D3:CB:80:C6:5A:FC:CA:56:59:F5:BF:6F Certificate issuer: /CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Certificate serial: 010D0C9F4328584B8D47767697E4E70CBFCE3FD0 Authority key identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/1d043c19-75aa-3747-a0b3-d122a5895fe4.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 401185 IP address blocks: 2602:f655::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:76:76:97:e4:e7:0c:bf:ce:3f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=49b1aebd-f057-4fd1-a094-66cbda8c5185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:06:37:ed:e5:06:ec:88:ff:e9:27:f9:91: 6f:eb:c4:cc:4b:31:3b:47:95:ca:ec:56:d6:51:d1: 27:0c:3c:8d:8a:7b:3c:f6:13:3a:1d:5a:b8:64:5c: 6b:99:d1:c4:fb:fc:4e:8a:6d:d0:3d:ba:34:9d:d2: 48:99:12:db:6d:39:f1:a5:c6:8a:92:34:34:51:b8: de:d5:43:9b:63:92:dd:8c:f8:b5:ba:40:99:33:b1: 26:5e:8a:be:d0:81:4f:8b:5d:0e:c3:05:bc:cf:06: c9:af:5d:51:4e:85:33:65:c2:77:6e:05:46:a1:e3: b9:ae:53:4f:e7:a6:cc:a9:08:15:81:aa:9a:95:bc: 7f:38:ce:dc:4c:0b:73:33:c3:3c:60:ba:68:36:cc: fd:01:bd:a4:0f:6b:b0:1d:72:64:8d:4d:7f:0d:25: cd:26:da:c6:a0:8c:1c:1b:76:fa:8d:95:92:e1:df: 9c:c6:ae:c6:b6:db:f8:27:e2:28:55:8c:46:39:1d: d2:de:00:ac:32:53:d8:d7:ee:33:2e:b7:d8:21:46: 11:e2:21:3b:4e:72:8c:6f:3a:1c:2b:9f:09:9c:e8: e3:35:60:0b:12:13:b8:94:50:44:2b:ae:a3:c9:e3: d8:06:d3:a4:9b:f2:bb:8b:4b:ef:ad:be:d7:91:54: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FD:02:2B:C9:2C:60:B6:D3:CB:80:C6:5A:FC:CA:56:59:F5:BF:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/1d043c19-75aa-3747-a0b3-d122a5895fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl X509v3 Authority Key Identifier: keyid:36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f655::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3f:48:18:86:30:0e:ae:bf:8b:8e:b5:af:87:1a:fd:5a:9f: ea:1c:f8:fd:6d:9a:f2:64:05:90:42:38:58:c6:9b:b0:96:b9: 01:56:88:c9:f6:9f:22:93:6e:dc:34:62:10:97:e4:17:c2:49: ff:23:09:46:94:b3:43:dc:a1:f3:6d:fe:06:b1:98:d8:58:9d: 31:1a:8f:71:f1:41:2a:7b:90:d3:af:c6:52:39:65:24:5a:a5: 9a:a5:4a:d8:4d:d3:0b:fa:17:61:dd:62:16:4b:76:8c:eb:13: 0b:92:77:9d:98:a9:f6:82:06:6c:0d:2a:71:49:73:14:db:03: 5a:36:fa:20:34:6a:72:0b:bd:cd:90:cd:6f:7f:cf:f7:bd:fc: 05:58:f5:52:43:9f:b8:3f:a9:2f:91:24:e5:eb:7f:c0:cf:93: 7e:cf:a0:5c:11:48:7f:54:71:4c:14:a6:a3:e0:0c:39:37:56: 9e:84:cd:40:79:1e:7b:4c:9d:a8:ac:a2:4d:1c:26:cd:92:63: e3:ed:ef:c7:f6:80:fc:90:86:76:fe:ed:9b:61:57:35:40:29: a7:4b:e4:70:97:73:0f:86:93:ff:34:a4:6e:f4:1d:9a:14:b8: 29:f1:53:a1:0b:d8:37:7d:a5:b8:d9:d6:77:fc:ac:a0:32:64: fd:b2:21:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuNR3Z2l+TnDL/OP9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcxZDI1MmItOWEwZS00NDkzLWJlOTMtZTZhOGUyZmZm ZWUzMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk NDliMWFlYmQtZjA1Ny00ZmQxLWEwOTQtNjZjYmRhOGM1MTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/oGN+3lBuyI/+kn+ZFv68TMSzE7R5XK7FbW UdEnDDyNins89hM6HVq4ZFxrmdHE+/xOim3QPbo0ndJImRLbbTnxpcaKkjQ0Ubje 1UObY5LdjPi1ukCZM7EmXoq+0IFPi10OwwW8zwbJr11RToUzZcJ3bgVGoeO5rlNP 56bMqQgVgaqalbx/OM7cTAtzM8M8YLpoNsz9Ab2kD2uwHXJkjU1/DSXNJtrGoIwc G3b6jZWS4d+cxq7Gttv4J+IoVYxGOR3S3gCsMlPY1+4zLrfYIUYR4iE7TnKMbzoc K58JnOjjNWALEhO4lFBEK66jyePYBtOkm/K7i0vvrb7XkVQAawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHT9AivJLGC208uAxlr8ylZZ9b9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFk MjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJmZmZlZTMvMWQwNDNjMTktNzVhYS0z NzQ3LWEwYjMtZDEyMmE1ODk1ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjcxZDI1MmItOWEwZS00NDkzLWJl OTMtZTZhOGUyZmZmZWUzL2Y3MWQyNTJiLTlhMGUtNDQ5My1iZTkzLWU2YThlMmZm ZmVlMy5jcmwwHwYDVR0jBBgwFoAUNh6pDjEjeIjj6139eS9ePAa9iWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4 ZTJmZmZlZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL2VQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0/SBiGMA6uv4uOta+HGv1an+oc+P1tmvJkBZBCOFjGm7CWuQFW iMn2nyKTbtw0YhCX5BfCSf8jCUaUs0PcofNt/gaxmNhYnTEaj3HxQSp7kNOvxlI5 ZSRapZqlSthN0wv6F2HdYhZLdozrEwuSd52YqfaCBmwNKnFJcxTbA1o2+iA0anIL vc2QzW9/z/e9/AVY9VJDn7g/qS+RJOXrf8DPk37PoFwRSH9UcUwUpqPgDDk3Vp6E zUB5HntMnaisok0cJs2SY+Pt78f2gPyQhnb+7ZthVzVAKadL5HCXcw+Gk/80pG70 HZoUuCnxU6EL2Dd9pbjZ1nf8rKAyZP2yIZs= -----END CERTIFICATE-----Generated at Mon Oct 20 19:03:05 2025 by rpki-client