$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e7df0-d9d5-343f-82df-50f9349aa927.roa File: 4d6e7df0-d9d5-343f-82df-50f9349aa927.roa (raw, json) Hash identifier: HkTMSzfAq1+yOX4nXRo/6yzb6iiLaXodxO66S30+Xvc= Subject key identifier: FC:9A:84:FD:C0:BF:66:C5:52:44:C6:D8:42:AA:2F:FA:E1:50:2C:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC21B1B0C8A13116783CC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e7df0-d9d5-343f-82df-50f9349aa927.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 2603:300a:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:1b:1b:0c:8a:13:11:67:83:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ec50863e-1ff9-42ae-a405-b4e0fe8b0a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:41:39:ac:98:84:45:73:8f:bb:cf:bc:bd:77: bf:d0:7c:b6:b8:72:73:36:25:db:d2:42:51:62:84: 79:b6:7f:7d:24:8c:3a:94:2b:91:dd:3d:7b:23:16: 7c:60:03:d1:ef:52:8e:b5:c7:4c:78:b7:9e:3a:1c: 43:6f:f8:c1:ad:89:91:7d:55:64:37:5e:44:99:df: 92:7f:e8:05:2e:40:ab:d4:39:ac:7d:3a:4c:b4:b8: be:2c:9b:8d:11:f1:9a:fc:31:0d:e7:96:d8:eb:ec: bc:fc:14:71:d0:96:b1:7a:4e:e6:72:bc:6d:e8:a0: 83:e3:a7:3a:66:d1:e9:35:35:dd:01:4d:0f:92:28: f9:17:6f:09:9e:2b:d2:ae:1c:97:a2:67:14:be:77: 1d:4f:58:81:b9:84:2d:eb:1f:83:87:8d:ea:73:67: ff:eb:d2:fd:ab:79:80:86:72:45:ff:1a:8f:71:32: 98:16:53:e7:e8:d6:eb:c1:ea:e7:b5:46:b6:d0:c3: c9:81:87:24:b5:e9:ff:bf:eb:73:45:cb:20:b5:cc: 6c:2b:ca:75:55:da:36:23:e0:e7:04:c4:77:3d:24: f4:c0:83:bd:73:2f:4c:57:8b:86:71:7b:01:7f:ab: 56:a1:6f:67:fe:67:7c:05:2a:a6:8b:50:8a:bf:31: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9A:84:FD:C0:BF:66:C5:52:44:C6:D8:42:AA:2F:FA:E1:50:2C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e7df0-d9d5-343f-82df-50f9349aa927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:300a:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:79:0c:e0:f0:8d:e2:46:1b:bf:46:05:3a:aa:8f:1a:ea:5f: 80:ab:d6:a7:bc:55:7e:b0:a3:a9:24:f9:95:1f:f9:7b:54:d7: 3c:a3:73:23:b5:37:a2:e2:d9:5b:2d:61:75:35:e8:e2:9c:bd: 28:3d:05:0b:83:d4:08:c1:53:17:f0:87:5d:cb:f4:9c:21:75: 5f:cc:54:0d:6a:d9:86:28:a8:b5:d9:75:98:60:8a:6f:bf:f3: 55:2a:60:ad:6c:c4:05:b9:f1:82:64:0b:6e:0f:6f:e8:70:de: df:8e:27:14:3f:3a:b5:e6:f5:a4:1b:be:47:22:17:d0:2b:b0: 36:06:37:25:c2:26:1a:d0:8a:30:e6:a3:b3:ed:ff:11:b3:9a: aa:ae:43:cc:f4:8e:25:4a:21:0c:18:15:a2:f8:5e:39:4c:c2: 6d:b8:3f:6a:3c:7b:cc:88:4e:e1:35:f1:39:32:3d:13:27:b6: 85:82:5e:f9:e4:b4:5e:35:3e:39:45:e6:1e:96:bf:6a:1c:38: 8e:c1:dd:95:43:1f:e3:25:44:9c:ca:5a:5b:b5:ce:f2:1a:b0: 46:60:fc:ba:ee:00:ce:cc:b5:55:c4:ae:16:0c:91:73:9c:55: 41:21:24:1a:4d:7d:fe:c7:aa:90:70:dc:4f:7e:c9:44:31:b7: 4b:4d:4f:8a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErswhsbDIoTEWeDzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZWM1MDg2M2UtMWZmOS00MmFlLWE0MDUtYjRlMGZlOGIwYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EE5rJiERXOPu8+8vXe/0Hy2uHJzNiXb0kJR YoR5tn99JIw6lCuR3T17IxZ8YAPR71KOtcdMeLeeOhxDb/jBrYmRfVVkN15Emd+S f+gFLkCr1DmsfTpMtLi+LJuNEfGa/DEN55bY6+y8/BRx0Jaxek7mcrxt6KCD46c6 ZtHpNTXdAU0Pkij5F28JnivSrhyXomcUvncdT1iBuYQt6x+Dh43qc2f/69L9q3mA hnJF/xqPcTKYFlPn6NbrwerntUa20MPJgYckten/v+tzRcsgtcxsK8p1Vdo2I+Dn BMR3PST0wIO9cy9MV4uGcXsBf6tWoW9n/md8BSqmi1CKvzFW8wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPyahP3Av2bFUkTG2EKqL/rhUCwPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQ2ZTdkZjAtZDlkNS0z NDNmLTgyZGYtNTBmOTM0OWFhOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwCgMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcHkM4PCN4kYbv0YFOqqPGupfgKvWp7xVfrCjqST5lR/5e1TXPKNz I7U3ouLZWy1hdTXo4py9KD0FC4PUCMFTF/CHXcv0nCF1X8xUDWrZhiiotdl1mGCK b7/zVSpgrWzEBbnxgmQLbg9v6HDe344nFD86teb1pBu+RyIX0CuwNgY3JcImGtCK MOajs+3/EbOaqq5DzPSOJUohDBgVovheOUzCbbg/ajx7zIhO4TXxOTI9Eye2hYJe +eS0XjU+OUXmHpa/ahw4jsHdlUMf4yVEnMpaW7XO8hqwRmD8uu4Azsy1VcSuFgyR c5xVQSEkGk19/seqkHDcT37JRDG3S01Pig== -----END CERTIFICATE-----Generated at Sat Aug 23 23:09:47 2025 by rpki-client