$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa File: 4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa (raw, json) Hash identifier: wO4jhFY4/3a2wQmmW7lUWOLtKMLNHKB78XUEXInPi1Y= Subject key identifier: 57:5D:9D:37:D7:43:82:0F:41:32:B5:83:39:4A:00:E7:69:78:AB:0A Certificate issuer: /CN=b673aad8-2248-407c-90e8-0781473d6616 Certificate serial: 010D0C9F4328584BC10BCECC4BAD22BDA5A91800 Authority key identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 19922 IP address blocks: 2602:f676::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:ce:cc:4b:ad:22:bd:a5:a9:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b673aad8-2248-407c-90e8-0781473d6616 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=13e6b5b5-e7dd-4975-b97b-d9c715178ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:81:61:fd:2b:4d:a8:15:5d:4a:c5:cf:97:49: 0b:04:65:91:bb:82:0e:b2:76:2f:68:9a:f2:77:6e: e5:be:c6:6b:01:da:4d:99:a4:df:ba:1d:bc:66:55: f7:a9:20:73:71:81:e3:f3:4d:1e:61:29:ed:00:2e: 78:5d:bd:38:0d:6d:f0:7d:02:73:af:57:68:eb:e4: d9:a8:74:be:49:a7:5e:b8:47:1c:ba:dd:e9:b9:67: 09:a8:ba:fc:7a:2e:e9:a7:00:9a:3d:03:0a:2a:37: e6:74:89:e9:3f:29:e2:27:57:52:96:3e:d9:c8:fa: b7:2e:1e:e6:95:f4:83:ae:61:29:28:d1:23:b6:24: 25:ec:9a:a3:5f:4f:12:5b:4a:db:4f:b4:9e:61:e7: ee:1c:39:a1:a3:15:38:7d:7a:00:76:5b:cb:25:6d: a0:0d:90:90:6c:73:d1:63:5d:4b:48:ae:a5:dc:85: 62:51:5b:6b:b0:09:90:83:3e:a9:03:80:d3:d7:e8: 93:d1:fd:b7:9e:43:b4:16:70:00:2f:52:05:18:cb: 3f:5c:9f:81:55:84:85:10:e7:f2:56:91:83:51:87: 81:60:20:02:1f:ed:f7:ca:e7:36:d8:78:ff:a0:dc: a5:1f:63:eb:09:8e:47:e5:13:51:c6:2a:40:f6:0a: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5D:9D:37:D7:43:82:0F:41:32:B5:83:39:4A:00:E7:69:78:AB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl X509v3 Authority Key Identifier: keyid:F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer sbgp-ipAddrBlock: critical IPv6: 2602:f676::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:74:17:c0:5f:f5:b4:46:8f:8f:1c:af:ca:52:55:fd:22:da: 30:7c:77:33:8e:84:2f:a9:a7:47:14:b2:66:36:02:34:af:a7: 81:f4:4a:f6:47:25:8f:b9:d8:73:d0:00:54:d0:4f:28:56:05: d4:f0:51:87:8a:20:3e:3e:12:0b:76:ee:c6:0c:cc:a7:81:33: 4d:50:b6:51:c9:c1:a5:46:ff:25:30:9b:f6:4a:d7:2a:36:00: c4:9e:18:6b:9e:04:df:bd:81:de:6a:02:a4:2a:dc:9d:f0:e2: 70:d4:63:b3:40:43:8c:cb:c4:e8:32:7f:d1:87:8a:4d:79:08: f3:af:b7:9a:87:bb:f6:6c:a0:05:d8:43:ee:30:f6:dd:99:de: 1b:1c:89:93:bd:03:86:00:89:6f:b1:44:57:eb:cf:c2:4e:96: d8:c5:8a:c7:a4:01:3a:cc:60:df:12:ba:a2:c1:89:23:3a:b8: f1:9c:a3:e3:c6:76:5a:37:f7:24:fe:16:0f:10:f5:de:c2:29: 3e:62:34:e8:d8:d4:a0:1b:c1:48:46:15:74:f8:01:d4:d4:b7: 0c:d1:04:43:89:2f:ca:f6:dc:c1:1d:ff:dd:80:e0:f7:0c:07: 89:0e:63:da:d2:2f:c0:1e:2f:58:27:a8:43:c5:47:a5:55:41: aa:28:9a:2e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvBC87MS60ivaWpGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY3M2FhZDgtMjI0OC00MDdjLTkwZTgtMDc4MTQ3M2Q2 NjE2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MTNlNmI1YjUtZTdkZC00OTc1LWI5N2ItZDljNzE1MTc4ZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoFh/StNqBVdSsXPl0kLBGWRu4IOsnYvaJry d27lvsZrAdpNmaTfuh28ZlX3qSBzcYHj800eYSntAC54Xb04DW3wfQJzr1do6+TZ qHS+SadeuEccut3puWcJqLr8ei7ppwCaPQMKKjfmdInpPyniJ1dSlj7ZyPq3Lh7m lfSDrmEpKNEjtiQl7JqjX08SW0rbT7SeYefuHDmhoxU4fXoAdlvLJW2gDZCQbHPR Y11LSK6l3IViUVtrsAmQgz6pA4DT1+iT0f23nkO0FnAAL1IFGMs/XJ+BVYSFEOfy VpGDUYeBYCACH+33yuc22Hj/oNylH2PrCY5H5RNRxipA9grm3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFddnTfXQ4IPQTK1gzlKAOdpeKsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iNjcz YWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgxNDczZDY2MTYvNGQ1NGJlMDYtOWNmNy0z ZmJhLWFkNjYtZTVhMTQ2ZDRhNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjY3M2FhZDgtMjI0OC00MDdjLTkw ZTgtMDc4MTQ3M2Q2NjE2L2I2NzNhYWQ4LTIyNDgtNDA3Yy05MGU4LTA3ODE0NzNk NjYxNi5jcmwwHwYDVR0jBBgwFoAU+f39vaYd7kfsQ5VBQQC2fQpoVKIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iNjczYWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgx NDczZDY2MTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2dgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIHQXwF/1tEaPjxyvylJV/SLaMHx3M46EL6mnRxSyZjYCNK+ngfRK 9kclj7nYc9AAVNBPKFYF1PBRh4ogPj4SC3buxgzMp4EzTVC2UcnBpUb/JTCb9krX KjYAxJ4Ya54E372B3moCpCrcnfDicNRjs0BDjMvE6DJ/0YeKTXkI86+3moe79myg BdhD7jD23ZneGxyJk70DhgCJb7FEV+vPwk6W2MWKx6QBOsxg3xK6osGJIzq48Zyj 48Z2Wjf3JP4WDxD13sIpPmI06NjUoBvBSEYVdPgB1NS3DNEEQ4kvyvbcwR3/3YDg 9wwHiQ5j2tIvwB4vWCeoQ8VHpVVBqiiaLg== -----END CERTIFICATE-----Generated at Wed Nov 5 16:10:42 2025 by rpki-client