$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9effc2ce-f038-3fa6-b282-1b8d0c4133e8.roa File: 9effc2ce-f038-3fa6-b282-1b8d0c4133e8.roa (raw, json) Hash identifier: zhyMn0AAyU+tSn55+lHj4L5LeKKRvS1v8blEC83Zkw0= Subject key identifier: 16:A3:7F:71:62:85:C3:B1:67:B0:74:25:2A:6D:6D:DF:08:D1:A7:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9C384B120FA24B87BDF40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9effc2ce-f038-3fa6-b282-1b8d0c4133e8.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 2603:3016:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:c3:84:b1:20:fa:24:b8:7b:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=814b4c41-ce65-4918-82fd-efc05c8dc667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e6:1f:40:32:67:44:6f:50:b5:22:3b:73:fc: 89:a8:3a:cd:1c:cd:47:d7:8f:74:a4:3b:5c:82:18: d4:dd:98:4a:ab:29:42:a3:4f:e6:e1:03:d6:b0:35: f3:a1:3c:e1:a0:91:0b:ed:69:c9:e0:42:a1:0d:fd: 4b:b4:56:68:73:8a:c2:a3:49:17:ca:cb:b6:80:4c: 90:a1:e2:ec:fd:4f:1a:67:88:50:e7:e3:5d:e5:cd: 34:57:f2:dc:b0:91:3b:58:e4:1f:40:8c:9d:41:e0: 09:a6:e4:a9:44:58:b1:af:bb:89:9d:4a:a6:21:34: 1f:a0:40:53:da:6e:fd:62:68:31:03:15:e3:21:36: 14:8a:81:33:d5:11:26:73:a1:ad:85:35:85:01:8b: cd:d8:6b:c9:4b:b1:3f:f2:75:ca:ef:9b:03:f8:4e: 41:c0:b4:ee:0c:ee:a8:7b:a5:df:3e:c3:b2:aa:c8: 1e:0e:f3:74:75:58:d2:f6:ad:8b:cf:fd:b5:62:e7: be:f4:62:9d:e7:ed:2c:87:cb:87:7f:b0:d5:b3:f9: 8c:a7:f5:1a:f6:23:75:88:cb:66:d8:08:4f:2a:9a: 29:92:13:78:c0:da:41:fb:4e:78:9e:91:b7:09:05: dc:5d:a8:56:bb:68:f6:c1:24:18:5b:72:e7:df:6c: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A3:7F:71:62:85:C3:B1:67:B0:74:25:2A:6D:6D:DF:08:D1:A7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9effc2ce-f038-3fa6-b282-1b8d0c4133e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3016:700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e5:54:68:61:81:94:70:7c:37:d2:72:ab:35:3e:c8:1b:a6: 83:93:43:b4:9f:0f:91:0b:84:75:3d:90:1c:1b:cb:f2:bb:78: 01:4e:09:c5:68:3a:a6:81:df:37:da:9e:75:63:fe:81:21:69: ac:37:44:19:8c:59:62:8c:69:a6:92:d8:c3:41:be:bf:fa:44: 9d:91:22:4c:66:75:6d:7a:ec:a2:93:fd:76:1b:0c:cc:ec:27: 70:47:4d:2c:55:0e:0c:34:7b:0c:e9:fc:3f:fc:41:3d:93:e8: bb:9d:89:21:d0:13:a1:8a:77:93:14:9c:84:ae:2e:88:0f:74: 6b:24:73:c2:13:8a:2b:1c:a2:97:33:28:3a:8c:54:01:41:38: c8:1f:21:61:ce:2e:63:32:9d:e5:28:3a:df:83:80:6b:cd:b5: c4:e1:a2:a4:03:38:e0:e0:71:59:8a:02:ce:61:4f:04:c3:e7: cd:f3:29:b5:06:ff:e7:bf:15:fc:3d:c7:52:4d:8c:b6:a9:34: c2:72:07:93:f5:01:68:0b:9f:f0:ce:9c:47:30:64:72:67:47: 45:74:a4:09:74:d8:91:68:d3:58:32:d9:ad:e2:91:42:ed:6c: 13:59:58:7d:62:2d:a9:03:73:50:31:e3:75:17:6d:98:c4:3c: 10:b9:62:db -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs9ucOEsSD6JLh730AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODE0YjRjNDEtY2U2NS00OTE4LTgyZmQtZWZjMDVjOGRjNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OYfQDJnRG9QtSI7c/yJqDrNHM1H1490pDtc ghjU3ZhKqylCo0/m4QPWsDXzoTzhoJEL7WnJ4EKhDf1LtFZoc4rCo0kXysu2gEyQ oeLs/U8aZ4hQ5+Nd5c00V/LcsJE7WOQfQIydQeAJpuSpRFixr7uJnUqmITQfoEBT 2m79YmgxAxXjITYUioEz1REmc6GthTWFAYvN2GvJS7E/8nXK75sD+E5BwLTuDO6o e6XfPsOyqsgeDvN0dVjS9q2Lz/21Yue+9GKd5+0sh8uHf7DVs/mMp/Ua9iN1iMtm 2AhPKpopkhN4wNpB+054npG3CQXcXahWu2j2wSQYW3Ln32zX+wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBajf3FihcOxZ7B0JSptbd8I0aeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWVmZmMyY2UtZjAzOC0z ZmE2LWIyODItMWI4ZDBjNDEzM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFgcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZOVUaGGBlHB8N9JyqzU+yBumg5NDtJ8PkQuEdT2QHBvL8rt4AU4J xWg6poHfN9qedWP+gSFprDdEGYxZYoxpppLYw0G+v/pEnZEiTGZ1bXrsopP9dhsM zOwncEdNLFUODDR7DOn8P/xBPZPou52JIdAToYp3kxSchK4uiA90ayRzwhOKKxyi lzMoOoxUAUE4yB8hYc4uYzKd5Sg634OAa821xOGipAM44OBxWYoCzmFPBMPnzfMp tQb/578V/D3HUk2Mtqk0wnIHk/UBaAuf8M6cRzBkcmdHRXSkCXTYkWjTWDLZreKR Qu1sE1lYfWItqQNzUDHjdRdtmMQ8ELli2w== -----END CERTIFICATE-----Generated at Mon Oct 20 06:58:22 2025 by rpki-client