$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/1cecd10c-e687-3ea3-9c49-6f8a1b5321fe.roa File: 1cecd10c-e687-3ea3-9c49-6f8a1b5321fe.roa (raw, json) Hash identifier: TqOHH143hc3cA+Q4+7QWJryDJx3BtxJakaYmfJxRTMU= Subject key identifier: 88:11:2C:74:8B:99:0B:9A:B4:0A:C5:EE:F1:E9:AB:9D:1A:E6:3A:58 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584B89CCB041EBB3B4970738EE80 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/1cecd10c-e687-3ea3-9c49-6f8a1b5321fe.roa Signing time: Thu 16 Oct 2025 07:05:52 +0000 ROA not before: Thu 16 Oct 2025 07:05:52 +0000 ROA not after: Wed 14 Jan 2026 08:05:52 +0000 asID: 138915 IP address blocks: 2602:fa80:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:cc:b0:41:eb:b3:b4:97:07:38:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Oct 16 07:05:52 2025 GMT Not After : Jan 14 08:05:52 2026 GMT Subject: CN=8431c927-31d5-472b-b011-0e11a10733f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:51:a9:19:7b:11:95:49:ef:c7:b3:59:5f: fd:ef:cb:eb:18:fc:81:d2:61:58:02:1a:a0:78:ec: 6a:2b:df:3b:b4:d6:1e:f1:3e:9d:4a:80:24:b9:c0: 88:44:a8:8a:35:0a:4c:8c:ef:79:48:77:a6:f3:2c: 68:21:6f:30:6c:f9:d0:9f:90:b4:03:63:23:e9:b3: b5:d3:8f:70:6b:a9:78:42:3d:09:08:9f:d1:1a:b6: 9a:06:57:15:4c:8f:a3:ff:d0:86:e4:93:93:e1:24: a6:f0:5a:62:9b:38:db:7e:91:9f:48:62:6e:46:66: 57:d9:c0:69:3f:d5:c4:56:f4:00:6e:40:cb:d0:a3: e0:48:47:fe:3b:dc:75:12:77:9d:d2:c7:ca:c6:15: dd:71:a5:11:fa:0c:33:9f:f7:2f:a3:5a:41:68:46: 9b:14:94:af:06:35:8d:09:47:a3:ed:8e:61:43:09: 8e:57:ff:a1:bc:5e:14:24:c1:22:4f:08:fa:5b:0c: 45:a3:5a:63:4b:dc:80:d9:3e:6f:1e:a7:bf:3b:78: 78:c6:1f:f4:a1:c0:23:35:5f:16:d8:bd:fb:4f:63: 1d:5c:ec:a4:e9:df:b7:43:68:bf:d3:6b:51:80:1d: 64:3d:ff:4c:4e:b7:9a:ac:5e:8d:3f:d9:78:9f:dd: fa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:11:2C:74:8B:99:0B:9A:B4:0A:C5:EE:F1:E9:AB:9D:1A:E6:3A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/1cecd10c-e687-3ea3-9c49-6f8a1b5321fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:28:b3:c8:b8:5b:d2:5e:38:4c:88:43:57:70:6c:32:b1:28: 84:dc:f0:3f:9e:44:26:16:4a:60:ec:53:df:13:f4:04:ae:0c: e3:79:94:d1:4c:60:70:9c:ee:79:fe:3d:33:34:01:bd:3b:23: db:73:ab:c8:35:6e:4b:a7:5b:76:6d:bd:98:18:ba:fd:70:d9: 6f:db:4f:bf:13:60:b9:c1:20:cb:19:6b:24:21:97:5b:34:e4: 2f:f3:17:f3:cc:dd:d8:e6:90:3a:45:9d:88:f6:38:20:e0:b5: 44:40:ec:d6:d6:8f:1f:b5:74:ec:15:81:cd:7c:6c:83:9b:51: 5f:df:9a:4f:9f:42:28:54:1b:d9:b4:a5:35:ca:14:61:60:d6: a2:6e:a8:73:95:07:14:e1:6a:03:33:91:45:2c:75:80:69:05: 14:91:72:ef:ff:5b:8e:06:3c:68:a5:44:b1:fe:6f:48:aa:dc: 13:e5:b5:67:e7:46:94:e4:10:f7:9e:18:9a:d3:dd:d3:f5:d5: 1e:b6:32:4a:26:51:a8:f9:22:13:f4:15:35:41:9a:4b:c0:ce: 2e:33:fd:3d:e1:e1:ac:c4:86:97:90:23:c0:70:22:12:19:d2: 63:ce:d5:15:4a:52:2e:14:bd:2e:52:d9:29:c3:90:bf:47:f4: 6d:47:b1:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuJzLBB67O0lwc47oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MTAxNjA3MDU1MloXDTI2MDExNDA4MDU1MlowLzEtMCsGA1UEAxMk ODQzMWM5MjctMzFkNS00NzJiLWIwMTEtMGUxMWExMDczM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYRRqRl7EZVJ78ezWV/978vrGPyB0mFYAhqg eOxqK987tNYe8T6dSoAkucCIRKiKNQpMjO95SHem8yxoIW8wbPnQn5C0A2Mj6bO1 049wa6l4Qj0JCJ/RGraaBlcVTI+j/9CG5JOT4SSm8FpimzjbfpGfSGJuRmZX2cBp P9XEVvQAbkDL0KPgSEf+O9x1Ened0sfKxhXdcaUR+gwzn/cvo1pBaEabFJSvBjWN CUej7Y5hQwmOV/+hvF4UJMEiTwj6WwxFo1pjS9yA2T5vHqe/O3h4xh/0ocAjNV8W 2L37T2MdXOyk6d+3Q2i/02tRgB1kPf9MTrearF6NP9l4n936oQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgRLHSLmQuatArF7vHpq50a5jpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvMWNlY2QxMGMtZTY4Ny0z ZWEzLTljNDktNmY4YTFiNTMyMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJkos8i4W9JeOEyIQ1dwbDKxKITc8D+eRCYWSmDsU98T9ASuDON5 lNFMYHCc7nn+PTM0Ab07I9tzq8g1bkunW3ZtvZgYuv1w2W/bT78TYLnBIMsZayQh l1s05C/zF/PM3djmkDpFnYj2OCDgtURA7NbWjx+1dOwVgc18bIObUV/fmk+fQihU G9m0pTXKFGFg1qJuqHOVBxThagMzkUUsdYBpBRSRcu//W44GPGilRLH+b0iq3BPl tWfnRpTkEPeeGJrT3dP11R62MkomUaj5IhP0FTVBmkvAzi4z/T3h4azEhpeQI8Bw IhIZ0mPO1RVKUi4UvS5S2SnDkL9H9G1HseM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:24:04 2025 by rpki-client