$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa File: a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa (raw, json) Hash identifier: FK/bMTL1fH72hDEViZjVurZO+qy7WxPioTrnPDK9Q2U= Subject key identifier: 95:BD:03:5D:E0:2D:AC:87:AE:2D:82:8F:B2:78:C6:B1:D0:5B:0F:C1 Certificate issuer: /CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da Certificate serial: 010D0C9F4328584B2496D1B7730D7EF17738CD40 Authority key identifier: 74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 395915 IP address blocks: 2602:811:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d1:b7:73:0d:7e:f1:77:38:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=4ff5c015-1505-4e15-a95d-b8e8d4703f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1e:2d:60:84:0b:a9:67:79:34:b7:7f:5f:1f: 6f:00:4b:da:76:4e:fd:e5:99:08:9a:a8:25:4f:9e: 9d:23:c2:6c:1a:af:c8:7b:9b:76:3a:c8:19:9e:c7: 85:2d:d1:88:01:7b:79:06:cd:e0:e1:fe:c9:79:c0: d8:3f:65:40:5b:2b:82:95:27:b1:4f:89:ef:8d:a8: 78:e2:1b:fa:48:17:b0:cb:da:7a:96:48:b5:7b:3a: df:d6:ff:3d:66:cc:bd:0e:96:c4:fb:5b:ef:7f:6f: 99:34:4e:7e:9a:d4:0f:63:03:9d:99:c8:df:f0:be: 3d:6b:69:f6:85:b6:a8:af:6a:f1:37:d1:5e:ad:5e: 76:4d:f8:11:04:e2:d1:e7:02:45:a6:a5:c5:89:99: b1:23:d3:d9:f8:26:81:0a:16:aa:6b:3b:d3:06:bb: f1:75:2d:90:2b:1e:76:fa:0d:05:5a:32:66:65:1a: 60:97:a7:d3:ce:19:48:22:39:08:8a:16:0a:9e:45: d8:3f:f0:db:b0:7a:cd:9f:6b:b3:5b:18:60:ed:46: f5:b1:7e:5c:40:dc:6e:f4:81:d9:0b:d7:47:0a:cc: 9b:5f:8a:bc:bd:a2:84:c2:6e:81:1a:7d:98:ed:ed: bd:44:ff:b6:a9:e3:aa:74:9f:e6:7a:ed:36:fe:c6: cf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BD:03:5D:E0:2D:AC:87:AE:2D:82:8F:B2:78:C6:B1:D0:5B:0F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl X509v3 Authority Key Identifier: keyid:74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer sbgp-ipAddrBlock: critical IPv6: 2602:811:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0e:9b:10:df:61:f0:92:ed:00:d1:12:32:4e:97:2c:09:eb: 6e:f5:6b:0b:8e:f2:a7:58:eb:1b:e9:98:10:81:1b:46:1e:e8: 81:af:a4:b4:de:1f:b6:f1:ef:17:55:ba:9c:fb:54:90:34:50: 4e:44:7b:de:37:66:83:32:68:c5:25:61:aa:3b:26:09:ba:ed: 48:aa:37:21:86:ed:19:92:6d:ad:f2:56:95:64:dd:6d:14:8b: 25:3f:48:34:31:be:54:e8:9f:b0:92:81:0e:39:4c:09:66:c0: 23:37:6d:cf:28:c5:74:a2:84:5b:97:de:f5:f1:f3:c7:00:ac: 46:d0:e9:38:99:b0:ed:5a:ec:35:af:9c:c8:ab:93:0c:10:b7: a6:a6:42:83:64:28:ea:d9:f9:1b:a5:3c:ed:dc:8f:40:9c:3e: 75:08:88:1d:64:e6:f1:0e:43:da:a2:ad:07:de:56:86:a5:5a: 3e:6e:da:42:1f:e2:25:9f:f8:75:bc:cb:c7:37:d7:2e:ac:06: 45:68:d8:b4:67:2e:0d:12:a5:f0:08:5a:aa:f7:1f:2a:f2:cd: 24:ae:da:dd:71:e8:29:9d:d3:14:79:35:82:77:c6:a9:af:ce: f3:db:53:60:8a:d9:e2:9f:d8:ce:e4:db:4a:23:c3:8b:9b:bf: 15:8f:33:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEskltG3cw1+8Xc4zUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNmRjMjUtM2NjMy00ZjRlLWFkOTMtNmJjZjExYzg0 NGRhMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NGZmNWMwMTUtMTUwNS00ZTE1LWE5NWQtYjhlOGQ0NzAzZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h4tYIQLqWd5NLd/Xx9vAEvadk795ZkImqgl T56dI8JsGq/Ie5t2OsgZnseFLdGIAXt5Bs3g4f7JecDYP2VAWyuClSexT4nvjah4 4hv6SBewy9p6lki1ezrf1v89Zsy9DpbE+1vvf2+ZNE5+mtQPYwOdmcjf8L49a2n2 hbaor2rxN9FerV52TfgRBOLR5wJFpqXFiZmxI9PZ+CaBChaqazvTBrvxdS2QKx52 +g0FWjJmZRpgl6fTzhlIIjkIihYKnkXYP/DbsHrNn2uzWxhg7Ub1sX5cQNxu9IHZ C9dHCsybX4q8vaKEwm6BGn2Y7e29RP+2qeOqdJ/meu02/sbP+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJW9A13gLayHri2Cj7J4xrHQWw/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85N2U2 ZGMyNS0zY2MzLTRmNGUtYWQ5My02YmNmMTFjODQ0ZGEvYTMwOThlMDItZGM2ZC0z MzYwLWE0YTYtNjkxNDNkYmI0Yjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTdlNmRjMjUtM2NjMy00ZjRlLWFk OTMtNmJjZjExYzg0NGRhLzk3ZTZkYzI1LTNjYzMtNGY0ZS1hZDkzLTZiY2YxMWM4 NDRkYS5jcmwwHwYDVR0jBBgwFoAUdPOAM6U+X2gOf8Uk8rR7Kot2UrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85N2U2ZGMyNS0zY2MzLTRmNGUtYWQ5My02YmNm MTFjODQ0ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIEUAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQOmxDfYfCS7QDREjJOlywJ6271awuO8qdY6xvpmBCBG0Ye6IGv pLTeH7bx7xdVupz7VJA0UE5Ee943ZoMyaMUlYao7Jgm67UiqNyGG7RmSba3yVpVk 3W0UiyU/SDQxvlTon7CSgQ45TAlmwCM3bc8oxXSihFuX3vXx88cArEbQ6TiZsO1a 7DWvnMirkwwQt6amQoNkKOrZ+RulPO3cj0CcPnUIiB1k5vEOQ9qirQfeVoalWj5u 2kIf4iWf+HW8y8c31y6sBkVo2LRnLg0SpfAIWqr3HyryzSSu2t1x6Cmd0xR5NYJ3 xqmvzvPbU2CK2eKf2M7k20ojw4ubvxWPMzM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:00:51 2025 by rpki-client