$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/b386c0ef-a657-3e9f-b599-f301eb291560.roa File: b386c0ef-a657-3e9f-b599-f301eb291560.roa (raw, json) Hash identifier: +JQPb+7T3qanawyV0TtdB+cbUbx9e36r+cbw+/6sbr4= Subject key identifier: D5:D8:E4:D6:19:84:31:8B:FA:E7:D8:6D:5B:C5:4F:D5:FD:9D:30:7D Certificate issuer: /CN=a0ac972f-89d5-4709-bd00-5907e762ff2b Certificate serial: 010D0C9F4328584B1D9C21921586D2D5DB228C00 Authority key identifier: 0C:0B:1B:70:0A:DD:A3:AD:88:40:A2:46:07:B6:87:0F:C2:15:A1:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/b386c0ef-a657-3e9f-b599-f301eb291560.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 401264 IP address blocks: 2602:f856::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:21:92:15:86:d2:d5:db:22:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ac972f-89d5-4709-bd00-5907e762ff2b Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=34816b01-d4f3-4e10-ad92-542998a0e31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:fb:9f:31:c1:cf:4d:0a:f8:d0:f8:b4:6f: a5:0a:c0:fe:c6:f6:88:67:43:34:b8:db:2e:75:c9: 2c:e2:fe:cd:96:a9:35:81:df:29:7e:42:fa:53:02: f3:34:48:a8:d5:1a:4c:65:9a:70:7b:7e:f4:87:1c: 43:71:dc:fa:35:4b:74:e7:cb:d9:ce:8f:b3:50:b6: cc:33:eb:33:fd:63:34:60:3a:8c:f4:d0:75:47:f8: f7:25:81:f1:85:0d:9a:8f:de:8d:4d:2a:1b:81:20: f8:18:9c:4b:01:13:3b:95:73:ca:9e:1a:36:8e:82: cc:04:2c:56:12:63:d3:5b:b2:1e:d1:26:75:31:7c: 29:e4:7c:f0:7d:6c:3e:9c:9e:39:0c:84:ae:ff:d6: 57:83:be:54:47:87:d2:eb:2b:20:4c:3b:b0:2e:b0: 34:11:6a:d1:48:43:9c:d8:91:0b:cc:e1:f6:ea:31: e2:d0:d9:fe:fe:5f:43:fa:97:1f:f9:92:fc:00:01: ad:c7:a8:98:49:fb:cf:e8:78:a7:cb:19:ee:14:7d: 80:42:9b:e3:f7:0f:c2:37:0a:31:76:f3:47:83:a6: 47:d4:b1:b9:52:b7:0e:a1:34:d4:da:cf:b8:44:d0: 06:81:1b:f8:a6:f1:9a:47:36:ea:0c:26:87:16:af: 52:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D8:E4:D6:19:84:31:8B:FA:E7:D8:6D:5B:C5:4F:D5:FD:9D:30:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/b386c0ef-a657-3e9f-b599-f301eb291560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.crl X509v3 Authority Key Identifier: keyid:0C:0B:1B:70:0A:DD:A3:AD:88:40:A2:46:07:B6:87:0F:C2:15:A1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f856::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:45:60:0a:81:d4:c0:73:6a:8c:d6:9a:b2:01:0c:4a:90:2d: 37:98:fb:a0:67:5d:4e:a4:46:f1:b0:86:9a:0e:67:2a:49:36: 47:9d:6d:b7:14:79:af:3c:eb:f1:3f:5c:f0:63:dc:dc:f5:10: ad:54:a6:c6:86:7a:f5:38:f1:07:d2:dd:8d:04:5f:ae:30:da: 82:08:53:9c:9a:b4:17:59:f6:07:71:89:21:a7:dc:79:28:95: 81:8b:71:ed:c2:02:9b:47:5d:32:68:be:9d:7b:92:a6:5b:76: 6c:0c:a4:19:d8:b8:5c:d8:b7:4e:b0:af:e1:1d:4b:6e:b3:d4: 08:6d:dd:f5:44:c3:d9:33:91:41:bd:f6:89:c4:49:a7:a5:dd: 5e:28:15:ca:67:9f:0d:29:88:a1:9c:e0:50:79:13:02:a8:a6: 68:67:ef:03:42:02:7e:a8:44:12:6f:c0:96:0c:88:b3:66:d9: 7c:16:73:96:48:03:7b:31:58:9b:1b:9a:88:13:da:84:41:7f: 4e:57:78:b3:cf:ef:ad:3a:b2:d2:bd:8b:7a:92:a9:b3:82:8b: 6f:74:66:0d:cf:62:f9:52:dc:33:fb:45:c1:c8:3d:38:05:e6: a7:b1:53:61:78:d2:1a:75:88:20:dc:0f:eb:7c:91:9c:c0:34: 47:f9:2f:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsdnCGSFYbS1dsijAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBhYzk3MmYtODlkNS00NzA5LWJkMDAtNTkwN2U3NjJm ZjJiMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MzQ4MTZiMDEtZDRmMy00ZTEwLWFkOTItNTQyOTk4YTBlMzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQj7nzHBz00K+ND4tG+lCsD+xvaIZ0M0uNsu dcks4v7Nlqk1gd8pfkL6UwLzNEio1RpMZZpwe370hxxDcdz6NUt058vZzo+zULbM M+sz/WM0YDqM9NB1R/j3JYHxhQ2aj96NTSobgSD4GJxLARM7lXPKnho2joLMBCxW EmPTW7Ie0SZ1MXwp5HzwfWw+nJ45DISu/9ZXg75UR4fS6ysgTDuwLrA0EWrRSEOc 2JELzOH26jHi0Nn+/l9D+pcf+ZL8AAGtx6iYSfvP6HinyxnuFH2AQpvj9w/CNwox dvNHg6ZH1LG5UrcOoTTU2s+4RNAGgRv4pvGaRzbqDCaHFq9S8QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNXY5NYZhDGL+ufYbVvFT9X9nTB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMGFj OTcyZi04OWQ1LTQ3MDktYmQwMC01OTA3ZTc2MmZmMmIvYjM4NmMwZWYtYTY1Ny0z ZTlmLWI1OTktZjMwMWViMjkxNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTBhYzk3MmYtODlkNS00NzA5LWJk MDAtNTkwN2U3NjJmZjJiL2EwYWM5NzJmLTg5ZDUtNDcwOS1iZDAwLTU5MDdlNzYy ZmYyYi5jcmwwHwYDVR0jBBgwFoAUDAsbcArdo62IQKJGB7aHD8IVofowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMGFjOTcyZi04OWQ1LTQ3MDktYmQwMC01OTA3 ZTc2MmZmMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4VgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAT0VgCoHUwHNqjNaasgEMSpAtN5j7oGddTqRG8bCGmg5nKkk2R51t txR5rzzr8T9c8GPc3PUQrVSmxoZ69TjxB9LdjQRfrjDagghTnJq0F1n2B3GJIafc eSiVgYtx7cICm0ddMmi+nXuSplt2bAykGdi4XNi3TrCv4R1LbrPUCG3d9UTD2TOR Qb32icRJp6XdXigVymefDSmIoZzgUHkTAqimaGfvA0ICfqhEEm/AlgyIs2bZfBZz lkgDezFYmxuaiBPahEF/Tld4s8/vrTqy0r2LepKps4KLb3RmDc9i+VLcM/tFwcg9 OAXmp7FTYXjSGnWIINwP63yRnMA0R/kvcA== -----END CERTIFICATE-----Generated at Wed Nov 5 23:34:22 2025 by rpki-client