$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa File: 705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa (raw, json) Hash identifier: 0Ac6RGWHSftxzp0tQjRujQ/fGCxleYbAuZ+UYGwOiM4= Subject key identifier: 33:25:6D:5D:3C:FC:59:74:7A:5F:FC:BD:D5:EC:70:8F:A8:C5:5D:60 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584BAEC7C25A79F52D37C8F4D400 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 23467 IP address blocks: 2602:816:5000::/48 maxlen: 48 2602:816:5002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c2:5a:79:f5:2d:37:c8:f4:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=90857fae-0b01-4f2c-96f2-b087a71f5ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:93:d7:cc:58:28:2f:64:12:5c:37:c1:39: bc:1a:e5:69:56:83:b5:0b:af:0b:92:d7:b1:8e:21: 84:72:1a:e5:24:ec:f1:d0:4f:31:92:d8:96:a4:9b: 5c:9c:49:a8:dc:be:9e:5b:96:4c:ce:10:a4:fc:76: f4:10:98:6b:87:58:d9:eb:2c:f6:7d:9b:1c:8e:71: 53:01:ac:ec:e6:8b:0c:76:d4:9f:4a:15:d8:a5:f6: 2b:2a:30:af:c4:55:f4:31:1c:45:16:95:d3:3a:60: 69:57:71:60:87:01:32:90:d8:20:a3:f7:3c:64:ba: c3:2b:36:79:f7:d5:89:19:12:99:25:48:9d:30:2c: dc:5b:1f:3d:7e:7c:88:cd:33:cf:b4:94:57:53:85: d1:f7:03:47:dd:03:7b:db:2d:c4:fe:d5:88:5a:b6: 40:67:20:0d:31:e9:d0:ea:34:0a:60:1d:97:f6:03: ec:85:0c:22:88:c0:64:5d:da:c7:a7:0b:6c:cd:72: 78:52:a7:a3:51:cb:ab:df:4e:fc:02:e2:9c:af:6e: 08:78:6f:ae:6a:da:37:26:c9:45:df:3b:e0:b4:f2: 4a:24:06:20:76:a8:6f:f9:b5:f1:e4:f8:fd:08:e1: c8:6a:dd:c8:58:61:8d:5a:fa:9d:b1:35:54:0b:14: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:25:6D:5D:3C:FC:59:74:7A:5F:FC:BD:D5:EC:70:8F:A8:C5:5D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:5000::/48 2602:816:5002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:bc:19:30:aa:4e:cd:45:94:b0:0f:aa:f6:af:dc:cc:1c:f9: 46:c4:67:7b:0a:65:a7:de:9a:e6:4a:5b:84:19:84:59:64:8c: d2:a2:11:8c:b5:51:3f:f3:4d:c2:e8:79:f1:f9:e6:5f:37:ea: b2:fd:e5:d3:63:5e:d0:44:27:b3:06:08:0f:29:04:8b:21:e9: f5:2c:f7:13:48:a7:60:70:36:63:1d:90:b4:39:27:15:c6:32: 25:bb:59:f1:dc:05:63:6a:40:0e:43:fe:ec:27:c5:37:69:85: 7a:47:2f:6b:a8:fc:53:3b:7e:b0:18:04:27:f0:11:49:5e:b3: 88:55:98:1a:45:3f:1b:1b:ef:e2:1b:89:09:a6:fa:da:76:3e: 2f:c4:73:18:ac:be:46:ff:5d:4d:d1:01:b5:31:5f:d6:f4:2c: c8:95:50:3f:15:1b:fc:7d:1c:a3:e1:14:74:ab:47:db:a1:3a: 65:a8:ec:78:42:1f:c9:1b:59:2d:43:0c:ca:bf:a4:9b:c8:25: c5:93:59:ec:59:34:a8:1a:19:73:ce:0c:3b:47:90:3e:00:e8: df:75:9e:19:c6:47:e5:d2:f2:b6:91:b1:f7:72:86:2f:a8:c6: c0:f7:1f:b0:27:3b:55:a5:cc:e7:f9:f2:48:a7:49:2c:28:53: 2f:b9:aa:24 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEuux8JaefUtN8j01AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk OTA4NTdmYWUtMGIwMS00ZjJjLTk2ZjItYjA4N2E3MWY1ZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnqT18xYKC9kElw3wTm8GuVpVoO1C68Lktex jiGEchrlJOzx0E8xktiWpJtcnEmo3L6eW5ZMzhCk/Hb0EJhrh1jZ6yz2fZscjnFT Aazs5osMdtSfShXYpfYrKjCvxFX0MRxFFpXTOmBpV3FghwEykNggo/c8ZLrDKzZ5 99WJGRKZJUidMCzcWx89fnyIzTPPtJRXU4XR9wNH3QN72y3E/tWIWrZAZyANMenQ 6jQKYB2X9gPshQwiiMBkXdrHpwtszXJ4UqejUcur3078AuKcr24IeG+uato3JslF 3zvgtPJKJAYgdqhv+bXx5Pj9COHIat3IWGGNWvqdsTVUCxS3MwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDMlbV08/Fl0el/8vdXscI+oxV1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNzA1YTNlZWMtYzY1Yi0z ZDAxLWJkNDEtZjEyZjhiOWZlMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgIIFlAA AwcAJgIIFlACMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHW8GTCqTs1FlLAPqvav3Mwc+UbEZ3sKZafemuZK W4QZhFlkjNKiEYy1UT/zTcLoefH55l836rL95dNjXtBEJ7MGCA8pBIsh6fUs9xNI p2BwNmMdkLQ5JxXGMiW7WfHcBWNqQA5D/uwnxTdphXpHL2uo/FM7frAYBCfwEUle s4hVmBpFPxsb7+IbiQmm+tp2Pi/Ecxisvkb/XU3RAbUxX9b0LMiVUD8VG/x9HKPh FHSrR9uhOmWo7HhCH8kbWS1DDMq/pJvIJcWTWexZNKgaGXPODDtHkD4A6N91nhnG R+XS8raRsfdyhi+oxsD3H7AnO1WlzOf58kinSSwoUy+5qiQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:33:40 2025 by rpki-client