$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/86e6d33d-6a23-354c-af89-a3dd6592183c.roa File: 86e6d33d-6a23-354c-af89-a3dd6592183c.roa (raw, json) Hash identifier: g+YaqENFkcwxgNbb8t4yflk7oIdJrlJTCArZLV65uwg= Subject key identifier: A4:D5:4C:3F:CC:E9:8D:EB:88:29:F2:86:E8:3E:DE:15:D9:54:AF:C8 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B6E91F5EE9A50CF9CF2605280 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/86e6d33d-6a23-354c-af89-a3dd6592183c.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 8987 IP address blocks: 2605:4300:2c24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f5:ee:9a:50:cf:9c:f2:60:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=4cbb254b-38c9-412b-8b29-23fb9bf468d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:4c:1e:38:0b:38:4e:a0:2c:2d:60:01:54: d4:ba:d0:cb:28:30:50:1b:9f:99:bc:1a:10:26:62: de:6d:af:ac:ee:84:32:12:1d:03:b8:5e:68:db:21: 99:54:75:72:66:f4:52:64:83:1a:fd:14:dc:80:f0: 39:df:4f:c7:dc:62:e8:cb:f9:44:e3:f8:84:da:9b: 16:37:13:5e:d3:4a:29:d5:6a:c4:55:be:3e:0d:98: aa:c9:73:4f:1b:ce:68:dc:4d:35:97:a1:21:6b:86: 65:76:0e:73:f8:dc:0b:b3:2e:42:95:9a:ed:3d:73: be:9c:ff:1d:59:12:54:9f:62:21:97:df:d7:4f:00: 4c:74:64:48:47:01:54:92:76:ac:0f:6f:49:a0:fe: 77:ec:12:19:ff:77:ee:7d:85:c0:7f:60:41:dd:13: fc:82:bf:14:27:6c:3a:d0:57:0e:d0:de:9b:5f:df: ff:ef:77:4e:38:b3:15:bd:98:27:f3:3c:f1:d1:70: 44:48:63:a9:61:7c:07:e8:95:bf:e9:69:9e:19:67: d5:46:66:97:cb:65:f6:83:2e:d1:78:9c:ae:60:b7: 2e:2a:f4:97:95:fb:92:11:61:c6:76:de:64:92:bf: b0:86:14:fa:a8:c2:c6:9d:f9:f1:81:62:4f:8d:46: d3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D5:4C:3F:CC:E9:8D:EB:88:29:F2:86:E8:3E:DE:15:D9:54:AF:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/86e6d33d-6a23-354c-af89-a3dd6592183c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7e:de:dd:bd:f4:e9:32:e6:30:d0:7f:df:3a:90:27:68:b2: 2b:3d:1f:01:91:bf:92:00:2a:4a:e2:8b:dc:68:37:0e:44:ef: 64:13:a7:22:7e:4a:4a:ea:b3:d2:4c:48:e9:30:b9:a3:67:18: 18:6d:a4:cb:da:7d:98:fe:a3:ac:ab:3d:53:c4:48:72:68:fc: 1d:e0:8f:97:60:36:c9:72:94:aa:80:4d:c9:53:dd:aa:b6:44: a6:46:c1:2f:c0:84:af:2f:85:f2:40:1d:f9:8f:9d:65:f6:40: ce:93:26:bc:0e:13:78:83:ee:17:c9:89:d2:20:79:d0:bf:43: 09:0f:06:7c:33:e3:37:61:88:d7:d4:3a:7a:63:7e:cb:90:7e: b2:b6:9d:36:91:07:6c:5f:96:9c:37:51:41:80:6b:3e:13:49: b8:d0:df:43:13:1f:88:1e:98:fc:6b:fd:f1:ab:28:ed:97:69: 1a:45:57:04:e7:39:45:1b:3f:6f:2c:0f:34:ef:a6:0f:a7:9d: e3:b3:37:62:75:e5:4b:0c:25:5a:25:1e:c0:39:ee:a8:69:99: dd:26:23:73:76:5e:36:28:2a:1b:f6:e8:71:ad:36:26:30:ec: 3c:ca:f6:6d:75:f0:83:2e:92:24:cd:82:ce:1b:e7:ba:86:88: 52:d8:39:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtukfXumlDPnPJgUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk NGNiYjI1NGItMzhjOS00MTJiLThiMjktMjNmYjliZjQ2OGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp1MHjgLOE6gLC1gAVTUutDLKDBQG5+ZvBoQ JmLeba+s7oQyEh0DuF5o2yGZVHVyZvRSZIMa/RTcgPA530/H3GLoy/lE4/iE2psW NxNe00op1WrEVb4+DZiqyXNPG85o3E01l6Eha4Zldg5z+NwLsy5ClZrtPXO+nP8d WRJUn2Ihl9/XTwBMdGRIRwFUknasD29JoP537BIZ/3fufYXAf2BB3RP8gr8UJ2w6 0FcO0N6bX9//73dOOLMVvZgn8zzx0XBESGOpYXwH6JW/6WmeGWfVRmaXy2X2gy7R eJyuYLcuKvSXlfuSEWHGdt5kkr+whhT6qMLGnfnxgWJPjUbT1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKTVTD/M6Y3riCnyhug+3hXZVK/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvODZlNmQzM2QtNmEyMy0z NTRjLWFmODktYTNkZDY1OTIxODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEt+3t299Oky5jDQf986kCdosis9HwGRv5IAKkrii9xoNw5E72QT pyJ+Skrqs9JMSOkwuaNnGBhtpMvafZj+o6yrPVPESHJo/B3gj5dgNslylKqATclT 3aq2RKZGwS/AhK8vhfJAHfmPnWX2QM6TJrwOE3iD7hfJidIgedC/QwkPBnwz4zdh iNfUOnpjfsuQfrK2nTaRB2xflpw3UUGAaz4TSbjQ30MTH4gemPxr/fGrKO2XaRpF VwTnOUUbP28sDzTvpg+nneOzN2J15UsMJVolHsA57qhpmd0mI3N2XjYoKhv26HGt NiYw7DzK9m118IMukiTNgs4b57qGiFLYOaU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:05 2025 by rpki-client