$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/ee116b9b-3843-3020-b1f5-a01cdadea43f.roa File: ee116b9b-3843-3020-b1f5-a01cdadea43f.roa (raw, json) Hash identifier: 32SH7RyBwlTgaP9pXXvgw2pV9pYoohHVFmg1uR6+iGA= Subject key identifier: 40:D6:BC:24:8F:DA:21:AF:64:01:41:5F:ED:41:C9:3B:69:5C:74:88 Certificate issuer: /CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2 Certificate serial: 010D0C9F4328584BA0D261387A0466081C4B9DE0 Authority key identifier: DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/ee116b9b-3843-3020-b1f5-a01cdadea43f.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 2602:fb2a:c0::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:61:38:7a:04:66:08:1c:4b:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=2ddb1e5b-d7b1-43c2-b528-3a0a2a46f232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:f4:cd:a4:98:e9:06:ce:69:d1:c8:82:64: b6:d8:8b:5c:59:2d:68:ab:8b:ee:84:9f:3a:80:f8: e1:2e:39:30:c8:52:74:31:36:64:b4:c2:19:96:32: c6:15:06:2c:41:66:82:be:35:bb:2e:b8:d0:83:29: 72:c2:78:50:e2:10:33:ef:8d:08:22:ea:a9:ce:06: d1:7c:5c:44:4a:89:03:95:13:14:01:0d:2c:42:d0: cb:e6:06:e6:e1:90:a7:cb:50:d2:8c:58:ff:ab:49: 6b:a2:1c:d0:5a:3d:24:4d:cd:b0:2f:a9:1e:81:90: f6:27:7d:d7:47:66:8d:2a:89:c7:a4:d0:6b:37:5d: 1b:20:f3:87:72:65:ee:de:76:c3:7b:a6:9f:ce:77: f1:b4:6b:e1:49:02:40:15:23:8e:d5:6c:73:b0:6e: 95:c3:6c:d9:5d:b6:8a:24:a3:72:4a:45:28:89:11: 18:83:51:e4:3f:51:bb:79:9e:6d:83:52:7b:0f:be: 51:bb:79:6b:73:3f:32:97:ba:95:e1:b0:6b:51:dd: b8:e9:18:6f:31:79:a4:f6:61:74:3e:7d:66:d2:95: 11:f0:94:69:bf:b3:57:51:ff:1e:bf:1c:b1:c2:13: 98:c7:58:bb:a4:bb:82:3b:36:8f:31:99:3f:b9:2d: c6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D6:BC:24:8F:DA:21:AF:64:01:41:5F:ED:41:C9:3B:69:5C:74:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/ee116b9b-3843-3020-b1f5-a01cdadea43f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl X509v3 Authority Key Identifier: keyid:DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb2a:c0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:37:99:f9:35:5c:c2:68:47:31:76:71:c3:d3:e6:ae:ef:92: 8a:ea:6e:ed:66:86:60:8b:80:dd:67:a1:fe:36:3d:34:50:19: d3:05:17:3d:fd:31:5b:33:46:7f:ec:53:37:d2:9c:2f:6c:20: 40:77:67:73:cd:fc:49:40:e8:0a:22:a6:e5:4a:a0:fe:3e:b8: 67:da:29:3b:e9:6a:6b:85:fd:6c:0f:6f:a1:ab:dc:40:5c:22: 37:e6:ff:f5:92:23:6d:80:80:d8:58:a3:6b:3a:91:bd:ab:cf: de:2a:00:85:bd:e2:c0:92:15:89:87:08:19:fa:18:d2:92:b8: ac:8e:27:65:43:26:4c:73:e2:f5:41:af:ee:e4:f8:df:b6:2e: e8:e5:d0:0b:e4:70:b4:40:55:9f:61:cf:4e:72:bc:47:d3:a5: 63:fa:be:aa:0d:60:54:86:7e:27:60:50:20:58:4b:a7:7e:07: 37:bd:ac:76:c9:68:ff:f1:e7:f5:2e:5c:3f:1c:ab:e9:ff:8c: 9a:d3:f9:b5:ec:a2:03:fd:fa:6f:03:21:52:92:7f:e1:4c:f6: 8f:ae:55:d8:65:c2:a6:16:da:19:fd:bf:08:a9:99:01:5b:18: b9:92:d5:17:3b:fe:48:e5:2f:04:2c:07:7e:b8:22:2c:6f:8e: 93:aa:3b:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEug0mE4egRmCBxLneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMzZTRmMWUtMmY5ZC00YzE1LTlmZDItOGM1NzZiN2Uw NWEyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MmRkYjFlNWItZDdiMS00M2MyLWI1MjgtM2EwYTJhNDZmMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6L0zaSY6QbOadHIgmS22ItcWS1oq4vuhJ86 gPjhLjkwyFJ0MTZktMIZljLGFQYsQWaCvjW7LrjQgylywnhQ4hAz740IIuqpzgbR fFxESokDlRMUAQ0sQtDL5gbm4ZCny1DSjFj/q0lrohzQWj0kTc2wL6kegZD2J33X R2aNKonHpNBrN10bIPOHcmXu3nbDe6afznfxtGvhSQJAFSOO1WxzsG6Vw2zZXbaK JKNySkUoiREYg1HkP1G7eZ5tg1J7D75Ru3lrcz8yl7qV4bBrUd246RhvMXmk9mF0 Pn1m0pUR8JRpv7NXUf8evxyxwhOYx1i7pLuCOzaPMZk/uS3GAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEDWvCSP2iGvZAFBX+1ByTtpXHSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYzNl NGYxZS0yZjlkLTRjMTUtOWZkMi04YzU3NmI3ZTA1YTIvZWUxMTZiOWItMzg0My0z MDIwLWIxZjUtYTAxY2RhZGVhNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmMzZTRmMWUtMmY5ZC00YzE1LTlm ZDItOGM1NzZiN2UwNWEyLzJjM2U0ZjFlLTJmOWQtNGMxNS05ZmQyLThjNTc2Yjdl MDVhMi5jcmwwHwYDVR0jBBgwFoAU20y+brPndKZm27+NB61mo9Nn1FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYzNlNGYxZS0yZjlkLTRjMTUtOWZkMi04YzU3 NmI3ZTA1YTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL7KgDA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAA3mfk1XMJoRzF2ccPT5q7vkorqbu1mhmCLgN1nof42PTRQGdMF Fz39MVszRn/sUzfSnC9sIEB3Z3PN/ElA6AoipuVKoP4+uGfaKTvpamuF/WwPb6Gr 3EBcIjfm//WSI22AgNhYo2s6kb2rz94qAIW94sCSFYmHCBn6GNKSuKyOJ2VDJkxz 4vVBr+7k+N+2Lujl0AvkcLRAVZ9hz05yvEfTpWP6vqoNYFSGfidgUCBYS6d+Bze9 rHbJaP/x5/UuXD8cq+n/jJrT+bXsogP9+m8DIVKSf+FM9o+uVdhlwqYW2hn9vwip mQFbGLmS1Rc7/kjlLwQsB364IixvjpOqO0A= -----END CERTIFICATE-----Generated at Wed Nov 5 08:54:58 2025 by rpki-client