$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2507cd62-6c07-337f-94d2-c254c2006eb9.roa File: 2507cd62-6c07-337f-94d2-c254c2006eb9.roa (raw, json) Hash identifier: rkovlf+dBmE0BK4/FE+zdeRTKFpzblyaNWHM2OZhbOA= Subject key identifier: 72:5B:E9:0F:69:B1:AC:1F:4E:1F:4D:20:5E:F1:5E:5D:42:7D:C0:6E Certificate issuer: /CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082 Certificate serial: 010D0C9F4328584B7B21F66B7D316D8C640B1E80 Authority key identifier: C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2507cd62-6c07-337f-94d2-c254c2006eb9.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 40448 IP address blocks: 2602:fa83:b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f6:6b:7d:31:6d:8c:64:0b:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=f1c68cf6-90eb-4225-8d1d-2d6893d54c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6c:51:41:a4:b2:20:1f:a6:2b:ce:91:db:32: 94:24:34:97:2b:02:96:24:bd:7a:5c:b3:61:af:67: 4b:db:0e:5a:2c:9f:1a:c3:2e:e2:a8:b2:3b:0d:96: d8:3e:d7:99:c5:99:84:1b:bb:a0:8a:82:6d:ca:27: 66:d9:0d:57:e1:e0:e7:bb:92:c5:fc:69:f5:4f:db: 7a:02:f8:54:ee:7d:be:08:24:ee:85:29:71:4e:98: 31:96:ac:9d:2a:8c:06:21:ee:e0:54:df:27:b7:b3: f3:b2:a7:a6:d9:90:e2:dd:48:65:97:72:86:89:0d: 36:b7:46:3a:91:ac:72:23:03:2c:ee:b1:18:6e:55: a5:02:c4:de:86:0f:3f:fa:7d:25:7a:a2:2d:0b:6e: f9:d0:69:d2:be:ff:1d:97:8a:06:e2:6a:f8:86:d0: fe:b3:b7:ee:56:c4:62:51:28:ed:f5:aa:fb:79:67: 36:60:c1:ba:6f:7b:31:22:2b:df:6b:9f:6e:c8:58: de:1b:c5:9e:60:f3:d9:35:01:e1:54:82:e6:f1:01: f9:51:1d:7a:92:b2:d1:e2:bb:1a:2a:36:cb:5f:7a: 39:54:1e:a0:d0:6e:a6:4f:32:d9:12:52:fc:42:10: 96:1a:a4:13:3b:e9:8d:d1:a2:33:a3:7d:16:a4:51: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5B:E9:0F:69:B1:AC:1F:4E:1F:4D:20:5E:F1:5E:5D:42:7D:C0:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2507cd62-6c07-337f-94d2-c254c2006eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl X509v3 Authority Key Identifier: keyid:C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa83:b2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:00:fe:59:94:82:d6:38:fc:1d:4d:e2:43:1e:6c:40:48:b5: 30:12:c9:fe:d4:91:67:53:95:41:b5:dd:3f:23:de:04:97:b4: d3:d7:80:2d:bf:21:d7:0c:c9:07:25:0b:64:d4:97:ad:6b:68: b8:b1:e2:80:17:41:5d:98:c2:a9:47:7b:55:1c:2f:ce:f3:d1: a0:93:22:bd:cf:f4:c4:a2:c3:43:c9:2e:de:f7:2e:77:f7:a9: 84:f0:b4:c4:bc:f3:21:ab:99:28:ab:64:b7:12:9b:c5:f2:b5: b8:4b:ef:5a:f4:25:aa:61:6a:1e:71:06:b8:bc:8e:8e:e6:81: 3a:f9:26:8b:dd:89:5f:f9:90:cd:4f:29:b3:cb:e1:d0:c1:fb: 69:2e:68:6e:7c:86:70:93:ae:f8:0a:5e:ab:f4:b4:ea:7c:ff: c9:6d:5b:20:55:4e:91:6d:b5:18:39:4f:bf:e3:ba:7d:c0:37: be:91:37:73:e1:7b:d5:64:c4:14:36:0e:0e:b0:6c:62:25:ff: 39:90:dc:31:fe:b4:0e:fb:fa:c6:ad:31:71:66:48:20:f6:bb: e8:c0:b1:5c:11:d4:3d:cb:b9:d5:d9:db:f0:3f:a7:71:a0:f0: 37:dd:98:62:31:11:f1:33:14:33:d2:3a:50:87:dd:da:7c:a3: 85:e8:95:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt7IfZrfTFtjGQLHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU2ZGJmZjItZmMzZi00ZDJiLWI1MWQtNzUxZWUxNDE3 MDgyMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZjFjNjhjZjYtOTBlYi00MjI1LThkMWQtMmQ2ODkzZDU0YzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12xRQaSyIB+mK86R2zKUJDSXKwKWJL16XLNh r2dL2w5aLJ8awy7iqLI7DZbYPteZxZmEG7ugioJtyidm2Q1X4eDnu5LF/Gn1T9t6 AvhU7n2+CCTuhSlxTpgxlqydKowGIe7gVN8nt7Pzsqem2ZDi3Uhll3KGiQ02t0Y6 kaxyIwMs7rEYblWlAsTehg8/+n0leqItC2750GnSvv8dl4oG4mr4htD+s7fuVsRi USjt9ar7eWc2YMG6b3sxIivfa59uyFjeG8WeYPPZNQHhVILm8QH5UR16krLR4rsa KjbLX3o5VB6g0G6mTzLZElL8QhCWGqQTO+mN0aIzo30WpFEMiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHJb6Q9psawfTh9NIF7xXl1CfcBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNTZk YmZmMi1mYzNmLTRkMmItYjUxZC03NTFlZTE0MTcwODIvMjUwN2NkNjItNmMwNy0z MzdmLTk0ZDItYzI1NGMyMDA2ZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzU2ZGJmZjItZmMzZi00ZDJiLWI1 MWQtNzUxZWUxNDE3MDgyL2M1NmRiZmYyLWZjM2YtNGQyYi1iNTFkLTc1MWVlMTQx NzA4Mi5jcmwwHwYDVR0jBBgwFoAUwdXyjHnfRXfeReAsNgGfqqh/MrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNTZkYmZmMi1mYzNmLTRkMmItYjUxZC03NTFl ZTE0MTcwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gwCy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH8A/lmUgtY4/B1N4kMebEBItTASyf7UkWdTlUG13T8j3gSXtNPX gC2/IdcMyQclC2TUl61raLix4oAXQV2YwqlHe1UcL87z0aCTIr3P9MSiw0PJLt73 Lnf3qYTwtMS88yGrmSirZLcSm8XytbhL71r0Japhah5xBri8jo7mgTr5JovdiV/5 kM1PKbPL4dDB+2kuaG58hnCTrvgKXqv0tOp8/8ltWyBVTpFttRg5T7/jun3AN76R N3Phe9VkxBQ2Dg6wbGIl/zmQ3DH+tA77+satMXFmSCD2u+jAsVwR1D3LudXZ2/A/ p3Gg8DfdmGIxEfEzFDPSOlCH3dp8o4XoleQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:11:30 2025 by rpki-client