$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa File: d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa (raw, json) Hash identifier: eadFj7n5ppxogln1yJuI/gtvI5iEBkq0Kfh+k5iLNjc= Subject key identifier: 16:C1:25:92:72:3D:5A:43:60:3C:18:B9:CE:E1:96:42:75:E7:37:67 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584B4E770DAE4F027B6B21B38207 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 2604:a940:301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0d:ae:4f:02:7b:6b:21:b3:82:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=ab5e545b-5597-4afa-aaba-542f89f86b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:94:62:78:7b:b0:49:ff:28:eb:61:d3:8d: c1:da:23:48:d2:30:89:b9:e2:bf:bb:04:2a:c1:f8: 43:ae:e6:af:2f:c2:8e:5b:49:e1:b2:8d:a2:8f:33: 77:9d:3d:ef:23:3e:bc:12:16:63:c2:6e:95:67:82: 75:93:91:b4:d0:63:36:39:a8:32:fe:9e:fd:c0:6e: ee:a8:2b:6e:6d:e4:d6:53:41:fa:04:bf:fd:0c:2e: bc:00:37:a8:e6:ca:f9:5e:e1:f6:ba:9b:57:02:51: 76:a6:4f:51:f1:ce:5a:68:d9:95:25:d6:09:37:6e: 01:c5:11:f9:27:12:6e:b6:4d:d7:a3:b4:42:1f:dc: 68:97:36:90:92:c0:48:b6:65:97:43:1f:2d:22:b7: 2c:f1:26:15:6b:2e:ac:bf:a1:6c:0b:c1:1d:06:8e: 96:6f:a6:0e:51:bf:f5:ee:e8:76:bd:46:9b:f6:bd: 54:7a:da:6a:43:85:7a:46:e4:ec:88:36:37:9a:f6: 99:df:a1:70:2e:85:36:c5:0c:65:74:59:8a:cc:05: 6f:7a:8d:58:5e:07:0a:8c:31:95:79:cc:88:cc:b3: aa:27:e3:c3:21:bb:e9:b1:ca:ce:e3:45:38:57:4b: ff:5d:02:87:52:a9:86:2a:c4:05:db:19:5a:0c:22: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C1:25:92:72:3D:5A:43:60:3C:18:B9:CE:E1:96:42:75:E7:37:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv6: 2604:a940:301::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:05:94:d6:bb:c8:5e:5b:b9:5b:93:e5:28:a3:64:e5:0c:23: 17:bd:f1:75:e8:16:04:75:70:e6:9f:e0:af:57:2c:38:d4:c2: f4:bb:a9:1e:0b:27:9f:78:e0:55:d6:32:7d:81:22:4d:07:33: f8:6c:1e:3a:fd:b2:62:56:93:bb:2e:9d:58:b1:5e:6c:2e:9f: 87:c3:c3:6b:b4:7f:bc:73:21:11:b1:40:44:f2:c2:1f:98:c8: ff:34:12:93:22:1c:18:33:bc:c6:2c:a1:70:f0:ef:f4:e5:8c: 4b:4e:b6:70:18:61:c3:a0:bb:db:95:03:f1:1c:ea:56:12:ae: 7a:37:21:4d:7b:73:22:6e:a4:4d:2a:84:bc:10:02:4d:a6:6a: f5:13:1d:91:5e:6b:ff:1b:b4:56:74:c4:76:5d:7e:56:5f:6c: 2c:7d:ad:5b:01:19:99:02:e6:98:eb:0b:fb:e2:e9:b9:12:c5: 99:b4:47:a5:e2:e2:00:b2:29:ba:16:0f:99:f6:4d:05:a1:92: 9e:36:ec:0f:80:46:26:52:c8:d1:ab:7d:ce:63:17:7e:3a:57: a4:49:1c:bf:68:d1:1d:11:49:5a:45:c9:b4:0e:d8:e4:7f:be: 55:b1:33:4e:ed:0a:0d:67:51:41:7e:71:49:98:6f:f2:32:66: ac:51:00:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtOdw2uTwJ7ayGzggcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YWI1ZTU0NWItNTU5Ny00YWZhLWFhYmEtNTQyZjg5Zjg2YjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHyUYnh7sEn/KOth043B2iNI0jCJueK/uwQq wfhDruavL8KOW0nhso2ijzN3nT3vIz68EhZjwm6VZ4J1k5G00GM2Oagy/p79wG7u qCtubeTWU0H6BL/9DC68ADeo5sr5XuH2uptXAlF2pk9R8c5aaNmVJdYJN24BxRH5 JxJutk3Xo7RCH9xolzaQksBItmWXQx8tIrcs8SYVay6sv6FsC8EdBo6Wb6YOUb/1 7uh2vUab9r1UetpqQ4V6RuTsiDY3mvaZ36FwLoU2xQxldFmKzAVveo1YXgcKjDGV ecyIzLOqJ+PDIbvpscrO40U4V0v/XQKHUqmGKsQF2xlaDCJjrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBbBJZJyPVpDYDwYuc7hlkJ15zdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvZDUzZmNhMGItOGU1Mi0z MzZjLWE4ZWMtYTZjNWYyZTFkOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSpQAMB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwFlNa7yF5buVuT5SijZOUMIxe98XXoFgR1cOaf4K9XLDjUwvS7 qR4LJ5944FXWMn2BIk0HM/hsHjr9smJWk7sunVixXmwun4fDw2u0f7xzIRGxQETy wh+YyP80EpMiHBgzvMYsoXDw7/TljEtOtnAYYcOgu9uVA/Ec6lYSrno3IU17cyJu pE0qhLwQAk2mavUTHZFea/8btFZ0xHZdflZfbCx9rVsBGZkC5pjrC/vi6bkSxZm0 R6Xi4gCyKboWD5n2TQWhkp427A+ARiZSyNGrfc5jF346V6RJHL9o0R0RSVpFybQO 2OR/vlWxM07tCg1nUUF+cUmYb/IyZqxRAIU= -----END CERTIFICATE-----Generated at Mon Oct 20 04:36:05 2025 by rpki-client