$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa File: 9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa (raw, json) Hash identifier: bWF8LXbFRqaKbvhw5xLKDXCb9h2ej+O1+JXnQMbXdNk= Subject key identifier: CD:51:0F:ED:DA:B2:28:4E:48:8E:1B:13:70:D2:30:DB:EB:74:EC:F0 Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F4328584B540C677125B58FEEAB663480 Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 400442 IP address blocks: 2602:fbc7::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:67:71:25:b5:8f:ee:ab:66:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=c14a91bd-b1e6-42df-8ec8-fa78d603e66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:eb:9a:04:d0:fc:8c:cc:17:c9:25:59:78:ff: f9:7e:c9:85:f8:c6:66:f0:37:6b:cd:cc:06:33:3c: c2:d3:86:b4:c5:5d:e0:df:b3:4a:eb:aa:5e:3f:de: 2c:cc:d4:0e:06:21:fc:f2:90:8e:6c:87:18:71:1c: e6:36:9f:30:10:fe:dd:b8:ec:2d:31:55:65:a4:dd: 42:9c:5d:54:4f:3b:0b:9c:33:47:3a:af:95:1d:3d: c0:e7:81:02:d5:55:06:e2:43:3f:e1:e2:45:eb:58: 71:4c:f9:ce:e8:4b:6a:fe:91:16:12:9d:80:67:e6: 3d:ee:28:30:a1:a9:cb:7f:8e:16:03:dc:ad:0e:83: 78:d2:56:ca:fd:d0:78:50:36:e0:b8:13:fa:8c:7d: fb:34:2f:1e:c9:35:1b:3a:cb:2c:e1:ce:a4:09:f0: ca:2f:50:14:76:85:de:eb:68:8c:94:d1:05:1d:be: 38:2b:f4:2c:49:aa:62:92:11:b4:e0:b5:0f:db:e3: 64:6d:db:b4:ef:1f:db:f9:83:e4:d8:60:79:02:e6: 9c:eb:c5:50:5e:34:b7:8e:6d:ad:e4:5f:d0:fd:52: 6b:ad:91:8f:01:d9:1a:4a:0c:ab:b8:05:3c:72:8a: 4c:cf:52:0a:2e:3e:9c:5b:49:ce:7f:09:ab:7b:65: 04:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:51:0F:ED:DA:B2:28:4E:48:8E:1B:13:70:D2:30:DB:EB:74:EC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbc7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:60:31:ae:48:ea:9b:f7:0d:98:db:6e:ba:87:a7:63:fa:95: cb:57:73:21:b1:ea:87:65:04:24:a1:46:35:f5:6a:ad:66:ec: 8a:1b:57:80:95:da:8d:c0:69:08:85:e9:00:54:60:a6:54:1c: 4a:ee:4a:04:09:e0:dc:8e:ae:a0:f6:0b:b8:2c:7d:91:13:ec: 86:63:7a:98:e9:13:8d:39:7c:23:a2:a8:85:83:60:b0:9f:6e: 52:32:a4:f1:1d:0b:48:e6:a6:4a:3d:1d:7d:bf:3a:b9:5f:e6: 33:8c:0d:09:04:5a:5c:d9:f3:86:9e:c8:1c:77:37:41:5f:fb: 66:1f:0e:e6:13:d4:aa:72:3c:fc:e4:51:13:9d:f7:be:a3:93: d7:ac:df:c9:5e:43:a1:dc:88:08:8c:41:84:2e:66:95:ac:01: 2e:5a:e9:eb:e0:a6:e4:6c:ae:20:2b:f4:d6:75:1d:99:1e:39: 31:2d:a4:b0:81:4c:91:4a:d6:71:ae:3f:e0:6c:f9:8d:fe:1f: 0e:3b:18:65:a3:0e:0d:9c:7f:3d:93:9f:48:ec:23:9d:1c:fc: d1:81:b9:e4:fa:38:fc:f4:ad:2d:b3:dd:a5:d8:b3:fe:d4:ac: 70:e5:0f:af:8c:d7:e5:03:48:9d:51:86:28:fa:31:cc:ce:fa: 31:36:f2:e1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtUDGdxJbWP7qtmNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YzE0YTkxYmQtYjFlNi00MmRmLThlYzgtZmE3OGQ2MDNlNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+uaBND8jMwXySVZeP/5fsmF+MZm8DdrzcwG MzzC04a0xV3g37NK66peP94szNQOBiH88pCObIcYcRzmNp8wEP7duOwtMVVlpN1C nF1UTzsLnDNHOq+VHT3A54EC1VUG4kM/4eJF61hxTPnO6Etq/pEWEp2AZ+Y97igw oanLf44WA9ytDoN40lbK/dB4UDbguBP6jH37NC8eyTUbOsss4c6kCfDKL1AUdoXe 62iMlNEFHb44K/QsSapikhG04LUP2+Nkbdu07x/b+YPk2GB5Auac68VQXjS3jm2t 5F/Q/VJrrZGPAdkaSgyruAU8copMz1IKLj6cW0nOfwmre2UEFwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM1RD+3asihOSI4bE3DSMNvrdOzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvOWIzN2JmODctNmU3My0z NDFiLTkzYzItNGEyN2UwZjZhNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7xwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAS2Axrkjqm/cNmNtuuoenY/qVy1dzIbHqh2UEJKFGNfVqrWbsihtX gJXajcBpCIXpAFRgplQcSu5KBAng3I6uoPYLuCx9kRPshmN6mOkTjTl8I6KohYNg sJ9uUjKk8R0LSOamSj0dfb86uV/mM4wNCQRaXNnzhp7IHHc3QV/7Zh8O5hPUqnI8 /ORRE533vqOT16zfyV5DodyICIxBhC5mlawBLlrp6+Cm5GyuICv01nUdmR45MS2k sIFMkUrWca4/4Gz5jf4fDjsYZaMODZx/PZOfSOwjnRz80YG55Po4/PStLbPdpdiz /tSscOUPr4zX5QNInVGGKPoxzM76MTby4Q== -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:12 2025 by rpki-client