$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa File: 1c16513b-2697-3b28-b3a6-069788e76f01.roa (raw, json) Hash identifier: 4dr3Q6FXkDVsWRnMM28hkR8lf+GZ1TJoFHLywc+aRXI= Subject key identifier: 68:77:52:68:AF:4F:13:FA:32:58:FC:A2:1D:64:3B:A1:DF:23:1A:95 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584BA6679ED9FCFF9018DE884DF0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 2600:6801:11ff:1000::/52 maxlen: 64 2600:6801:11ff:2000::/52 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:9e:d9:fc:ff:90:18:de:88:4d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=3104b842-4d3f-4b7a-9575-2f1ffe8a6ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:d5:10:d7:cc:70:0e:46:16:d7:f3:3e:bb: db:ec:15:40:52:88:00:c7:b8:c2:5b:55:2c:e4:4c: 9b:25:6b:a7:7a:cb:a3:bb:5b:25:a0:05:a3:e1:5a: 38:d7:19:b8:45:3d:82:b6:0f:83:3c:c1:f6:a5:31: 72:8f:9b:6b:ce:d3:89:d8:07:e4:53:57:29:62:69: f4:77:ed:e1:95:47:52:2c:ae:1b:6e:5d:27:30:b6: c4:c8:6d:d4:cf:38:a2:5a:a2:39:26:d1:ae:77:3f: eb:73:0b:9e:90:e2:61:bc:66:be:2f:77:30:33:e3: 41:be:72:20:d0:72:c9:ee:3a:14:b4:c6:07:6e:17: 06:ff:70:ad:57:28:6f:4d:43:85:2e:b2:83:be:10: d3:cc:c2:a7:35:a2:cb:7b:9d:c6:56:d5:a8:fd:ff: b7:a7:c5:49:42:eb:f6:04:fa:92:1d:8c:dd:48:07: 6b:d0:26:7f:a0:e3:fd:41:61:0b:4e:62:06:3b:21: 14:bb:45:82:aa:75:d1:05:0b:ba:88:3d:99:77:6a: 4c:6f:11:54:be:88:88:01:cb:a8:ef:35:ae:18:d3: bb:61:37:13:69:ad:ce:52:d5:b1:3b:05:3c:6a:ce: bd:6c:45:57:13:52:af:c7:d0:3c:c2:be:54:ef:0b: d7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:77:52:68:AF:4F:13:FA:32:58:FC:A2:1D:64:3B:A1:DF:23:1A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv6: 2600:6801:11ff:1000::-2600:6801:11ff:2fff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:de:55:73:84:8a:ec:45:fa:54:d1:e8:aa:2e:c9:e8:c2:5a: 6b:e8:c8:f3:1c:44:06:27:5e:eb:9f:3b:81:8e:ae:8d:c8:bd: 2b:83:09:fa:0e:f7:9c:e9:94:37:84:e7:ca:b9:4f:8a:f6:96: 30:5e:ee:8c:08:52:20:6e:20:cc:19:31:8d:ac:b6:76:b7:eb: 21:09:72:cc:5e:28:69:93:ac:34:8b:45:2d:77:a9:95:49:06: bc:cb:ca:c7:44:62:35:7f:04:13:da:33:74:70:70:71:64:2c: 2e:e7:55:10:39:d2:88:86:6b:e9:f5:4a:f0:af:66:ac:ae:d3: fd:91:7d:35:05:2e:9e:23:18:71:a9:af:cb:a9:b1:84:a4:d9: 99:07:99:4a:01:d1:f2:89:b3:5e:23:07:bd:40:10:cb:32:49: 86:8d:19:ff:b4:96:25:95:d1:f7:dc:40:d0:1a:df:b3:97:2c: 57:11:33:a4:c0:d5:b2:1d:d2:7a:a8:a1:82:a9:28:86:4e:bc: bc:3f:e9:a5:7e:8b:9f:28:e3:d6:07:3f:e0:20:84:60:48:4a: 11:95:98:c0:b6:6c:e7:97:8d:9c:3e:3d:67:d3:08:93:59:77: 16:ba:9f:9c:78:9d:7e:8f:01:e9:e4:b0:f4:f2:ec:11:cc:33: 09:63:62:3e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEumZ57Z/P+QGN6ITfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MzEwNGI4NDItNGQzZi00YjdhLTk1NzUtMmYxZmZlOGE2ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2nVENfMcA5GFtfzPrvb7BVAUogAx7jCW1Us 5EybJWunesuju1sloAWj4Vo41xm4RT2Ctg+DPMH2pTFyj5trztOJ2AfkU1cpYmn0 d+3hlUdSLK4bbl0nMLbEyG3UzziiWqI5JtGudz/rcwuekOJhvGa+L3cwM+NBvnIg 0HLJ7joUtMYHbhcG/3CtVyhvTUOFLrKDvhDTzMKnNaLLe53GVtWo/f+3p8VJQuv2 BPqSHYzdSAdr0CZ/oOP9QWELTmIGOyEUu0WCqnXRBQu6iD2Zd2pMbxFUvoiIAcuo 7zWuGNO7YTcTaa3OUtWxOwU8as69bEVXE1Kvx9A8wr5U7wvXMwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGh3UmivTxP6Mlj8oh1kO6HfIxqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWMxNjUxM2ItMjY5Ny0z YjI4LWIzYTYtMDY5Nzg4ZTc2ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAcBAIAAjAWMBQDCAQmAGgB Ef8QAwgEJgBoARH/IDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBe3lVzhIrsRfpU0eiqLsnowlpr6MjzHEQG J17rnzuBjq6NyL0rgwn6Dvec6ZQ3hOfKuU+K9pYwXu6MCFIgbiDMGTGNrLZ2t+sh CXLMXihpk6w0i0Utd6mVSQa8y8rHRGI1fwQT2jN0cHBxZCwu51UQOdKIhmvp9Urw r2asrtP9kX01BS6eIxhxqa/LqbGEpNmZB5lKAdHyibNeIwe9QBDLMkmGjRn/tJYl ldH33EDQGt+zlyxXETOkwNWyHdJ6qKGCqSiGTry8P+mlfoufKOPWBz/gIIRgSEoR lZjAtmznl42cPj1n0wiTWXcWup+ceJ1+jwHp5LD08uwRzDMJY2I+ -----END CERTIFICATE-----Generated at Wed Nov 5 05:28:17 2025 by rpki-client