$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/4cd6e62f-fa58-31b4-b2a2-749e59ca1299.roa File: 4cd6e62f-fa58-31b4-b2a2-749e59ca1299.roa (raw, json) Hash identifier: XTv1ZBtswuc+KoQ7nNXZzXKl5NiEaX0dO7gzqp5oIn4= Subject key identifier: A8:BB:DB:F8:9F:A6:D8:79:E3:4F:BE:05:10:9F:74:C8:6E:EB:A8:6F Certificate issuer: /CN=bce2ace0-971c-48f1-8361-962ad02d9618 Certificate serial: 010D0C9F4328584BA39D2846D39E4153FB107800 Authority key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/4cd6e62f-fa58-31b4-b2a2-749e59ca1299.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 32943 IP address blocks: 2602:f937:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:28:46:d3:9e:41:53:fb:10:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bce2ace0-971c-48f1-8361-962ad02d9618 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=9e284af4-379e-4f4d-a2b4-25d57900bcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:ba:bc:90:06:49:d3:3e:a0:85:63:28:97: e9:fa:61:7a:ac:d6:08:17:85:e3:0c:99:b4:bf:99: d2:9f:92:65:f2:3e:45:76:2a:a9:f2:2c:aa:5d:ad: ab:9e:7c:60:e4:90:ca:e9:75:28:78:78:2b:1c:a0: 76:ca:97:09:f8:00:c3:0d:64:15:87:5c:a9:a1:69: d0:8c:1d:f0:84:b0:13:4a:f1:0c:9c:0b:c0:4f:34: 91:d2:94:05:94:52:1d:a5:3a:1f:85:47:05:c4:41: 3a:84:04:4f:24:0e:1b:73:72:3b:a5:2e:2c:7d:29: 4e:c4:3e:82:95:ff:d5:6d:92:54:e3:a6:5a:89:5b: 3e:22:de:d1:28:61:c0:9f:fc:74:47:d9:2a:49:bf: fb:87:00:d9:dd:a2:a0:c4:f7:5d:1d:5c:51:4d:b5: 7f:cd:9a:2b:d5:f8:f9:a1:52:52:d0:44:2c:ce:a1: db:70:1e:45:41:71:9d:90:f2:97:cb:14:09:e0:d3: de:ae:6c:6a:f4:94:a4:64:ac:85:60:fc:8a:5c:eb: 06:f4:0b:1a:c0:8d:07:b1:6b:91:2b:76:83:9f:22: 9b:88:4c:6a:97:53:11:22:e9:76:e5:52:38:58:2f: a4:92:08:ff:f2:61:a3:a5:5d:04:65:a8:2d:61:af: 82:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BB:DB:F8:9F:A6:D8:79:E3:4F:BE:05:10:9F:74:C8:6E:EB:A8:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/4cd6e62f-fa58-31b4-b2a2-749e59ca1299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl X509v3 Authority Key Identifier: keyid:E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer sbgp-ipAddrBlock: critical IPv6: 2602:f937:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:0f:b7:fb:3e:86:83:ca:bd:44:a3:31:da:93:71:ca:5a:1f: bf:5a:9a:30:e8:de:03:33:1d:b7:60:5e:15:64:cb:cd:3f:77: 8a:23:e8:e1:19:f0:b1:40:fb:49:9c:15:bd:6b:ae:0f:1f:a4: 86:38:91:b6:4b:61:ee:64:05:ca:ff:5b:f3:bf:b2:f8:3c:a9: c2:5a:21:56:68:25:de:f7:9a:a5:1c:7f:f0:ea:34:71:0f:c7: b0:16:9b:51:e3:5b:b6:98:6a:24:10:5a:93:79:76:20:b3:99: 93:d3:ee:32:31:5d:ce:f7:3f:a0:d0:f8:08:dc:8c:22:73:9b: 0b:ab:98:64:0b:79:80:f2:11:74:1f:62:5c:92:ab:6c:ea:fd: 69:b9:f3:1f:09:3c:a9:d2:03:4e:23:be:7d:ea:76:2f:a4:c9: 16:77:36:05:94:a1:38:d6:ce:84:ca:a5:df:f9:d7:da:d6:23: 84:5f:9f:a1:38:80:cb:28:61:c3:bf:be:3c:5d:c2:a3:82:ef: 97:0f:20:d8:2f:99:46:0e:35:45:6b:22:f1:4f:75:4e:45:f0: 4b:44:e5:5d:d4:19:af:47:42:50:c7:bc:20:06:d9:57:a7:29: a4:ee:37:4f:79:cf:0b:18:e6:7b:4c:20:59:42:f2:a2:19:cb: ec:02:df:00 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEujnShG055BU/sQeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNlMmFjZTAtOTcxYy00OGYxLTgzNjEtOTYyYWQwMmQ5 NjE4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OWUyODRhZjQtMzc5ZS00ZjRkLWEyYjQtMjVkNTc5MDBiY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1em6vJAGSdM+oIVjKJfp+mF6rNYIF4XjDJm0 v5nSn5Jl8j5Fdiqp8iyqXa2rnnxg5JDK6XUoeHgrHKB2ypcJ+ADDDWQVh1ypoWnQ jB3whLATSvEMnAvATzSR0pQFlFIdpTofhUcFxEE6hARPJA4bc3I7pS4sfSlOxD6C lf/VbZJU46ZaiVs+It7RKGHAn/x0R9kqSb/7hwDZ3aKgxPddHVxRTbV/zZor1fj5 oVJS0EQszqHbcB5FQXGdkPKXyxQJ4NPermxq9JSkZKyFYPyKXOsG9AsawI0HsWuR K3aDnyKbiExql1MRIul25VI4WC+kkgj/8mGjpV0EZagtYa+CJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKi72/ifpth540++BRCfdMhu66hvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iY2Uy YWNlMC05NzFjLTQ4ZjEtODM2MS05NjJhZDAyZDk2MTgvNGNkNmU2MmYtZmE1OC0z MWI0LWIyYTItNzQ5ZTU5Y2ExMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmNlMmFjZTAtOTcxYy00OGYxLTgz NjEtOTYyYWQwMmQ5NjE4L2JjZTJhY2UwLTk3MWMtNDhmMS04MzYxLTk2MmFkMDJk OTYxOC5jcmwwHwYDVR0jBBgwFoAU4JcMaElFCKkWaQGDznYRnoOpb0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iY2UyYWNlMC05NzFjLTQ4ZjEtODM2MS05NjJh ZDAyZDk2MTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5NwEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAsg+3+z6Gg8q9RKMx2pNxylofv1qaMOjeAzMdt2BeFWTLzT93iiPo 4RnwsUD7SZwVvWuuDx+khjiRtkth7mQFyv9b87+y+DypwlohVmgl3veapRx/8Oo0 cQ/HsBabUeNbtphqJBBak3l2ILOZk9PuMjFdzvc/oND4CNyMInObC6uYZAt5gPIR dB9iXJKrbOr9abnzHwk8qdIDTiO+fep2L6TJFnc2BZShONbOhMql3/nX2tYjhF+f oTiAyyhhw7++PF3Co4Lvlw8g2C+ZRg41RWsi8U91TkXwS0TlXdQZr0dCUMe8IAbZ V6cppO43T3nPCxjme0wgWULyohnL7ALfAA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:05:06 2025 by rpki-client