$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da74c5fc-9908-3727-bc9f-1da3df90023a.roa File: da74c5fc-9908-3727-bc9f-1da3df90023a.roa (raw, json) Hash identifier: J9eBRDFmBWKF6Mx9jS48Qnpu1hoYisVkbsL/saDuVHY= Subject key identifier: A4:84:70:D8:69:A0:3F:35:08:F3:C7:B0:59:7F:A9:C2:73:CC:4C:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8A2141A5AB010A0AD52C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da74c5fc-9908-3727-bc9f-1da3df90023a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 2601:40c:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:a2:14:1a:5a:b0:10:a0:ad:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2da34b8a-9ecc-4974-92c1-858a97151e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7a:ac:ce:90:2b:5b:ef:22:26:d2:cd:d3:65: 83:3b:2c:2d:3b:29:22:03:78:de:91:29:72:30:d8: 27:8f:a1:c7:8c:16:a7:d9:b6:5e:0a:64:e5:a7:d9: 14:11:99:0c:77:2b:7a:a5:17:6e:d9:0d:3c:d2:ee: 4b:25:5a:ad:b8:0a:77:4c:f6:08:c3:66:eb:82:29: c2:0a:9b:95:b2:13:fb:68:56:6d:db:d5:42:4c:9c: d0:0a:62:56:8c:35:b4:3d:46:ac:27:03:80:63:ce: 27:34:99:2f:7a:e1:a9:97:64:53:7d:06:b4:6c:fd: 89:a5:53:7b:3c:48:c8:9c:9b:6a:c7:ca:cf:a5:8c: e2:60:74:32:5e:0e:91:f7:e3:63:32:76:c8:97:3b: 7f:87:af:c0:4d:e0:2d:a4:aa:b3:56:a3:67:2d:a1: 74:a5:00:cd:7a:84:9d:4c:bc:6d:cd:f3:b2:69:8e: 82:c9:47:cc:a0:ec:16:fc:56:72:12:27:7e:8a:ab: 1e:6a:d0:9c:f5:d0:46:9d:f7:b7:1c:2e:66:c8:0b: 86:b0:85:54:a0:2d:75:10:b0:97:29:0b:f6:f6:4b: 8e:70:06:22:bb:87:5a:d1:b2:24:4f:21:84:82:7a: 8c:6b:18:a2:25:42:ff:04:1f:1d:a3:79:f7:22:2e: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:84:70:D8:69:A0:3F:35:08:F3:C7:B0:59:7F:A9:C2:73:CC:4C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da74c5fc-9908-3727-bc9f-1da3df90023a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:40c:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fe:25:47:d1:98:ef:a5:ef:5d:62:36:6f:80:3b:0f:99:f2: 5d:96:b1:ce:a6:f7:af:e4:05:73:59:14:e4:0d:93:47:73:d9: 39:7d:3d:72:8b:8b:ce:01:63:e8:54:47:6e:b2:ac:08:0a:6d: fb:6e:fb:43:c4:8e:89:9b:3a:e5:93:5e:a1:6b:a7:2f:5c:b7: ce:79:4a:d4:ea:09:91:69:a1:94:dd:f2:e0:6b:48:57:14:72: 3b:2a:7b:d9:18:4d:6b:62:5e:96:0d:f6:86:77:d5:05:05:fc: 32:1e:0b:45:67:76:08:80:9e:3d:b2:d9:0d:49:50:93:fd:0c: 4e:ec:6d:87:fe:36:a7:37:50:0d:3e:f6:00:4e:95:7f:41:d4: ba:f4:b4:04:59:43:b6:51:f7:e0:c3:47:f0:f0:82:6b:dd:3b: 40:13:0f:78:a9:8b:00:58:fe:ea:4e:59:fc:af:df:6c:51:d0: 94:b8:d8:f0:5e:19:51:dd:26:48:87:31:e9:95:f2:1e:60:cd: d6:d4:f6:b0:68:48:ed:fb:f0:d4:5d:3c:c8:b1:87:07:e6:ec: 41:f1:55:c6:fe:7e:49:18:89:9e:19:c4:09:6c:73:cd:52:73: 2a:55:09:c7:f1:df:69:b2:ad:84:a6:a6:d7:32:56:20:1f:4e: fa:c9:fb:ee -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqKIUGlqwEKCtUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MmRhMzRiOGEtOWVjYy00OTc0LTkyYzEtODU4YTk3MTUxZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnqszpArW+8iJtLN02WDOywtOykiA3jekSly MNgnj6HHjBan2bZeCmTlp9kUEZkMdyt6pRdu2Q080u5LJVqtuAp3TPYIw2brginC CpuVshP7aFZt29VCTJzQCmJWjDW0PUasJwOAY84nNJkveuGpl2RTfQa0bP2JpVN7 PEjInJtqx8rPpYziYHQyXg6R9+NjMnbIlzt/h6/ATeAtpKqzVqNnLaF0pQDNeoSd TLxtzfOyaY6CyUfMoOwW/FZyEid+iqseatCc9dBGnfe3HC5myAuGsIVUoC11ELCX KQv29kuOcAYiu4da0bIkTyGEgnqMaxiiJUL/BB8do3n3Ii6+kQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKSEcNhpoD81CPPHsFl/qcJzzEyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE3NGM1ZmMtOTkwOC0z NzI3LWJjOWYtMWRhM2RmOTAwMjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEEDEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdf4lR9GY76XvXWI2b4A7D5nyXZaxzqb3r+QFc1kU5A2TR3PZOX09 couLzgFj6FRHbrKsCApt+277Q8SOiZs65ZNeoWunL1y3znlK1OoJkWmhlN3y4GtI VxRyOyp72RhNa2Jelg32hnfVBQX8Mh4LRWd2CICePbLZDUlQk/0MTuxth/42pzdQ DT72AE6Vf0HUuvS0BFlDtlH34MNH8PCCa907QBMPeKmLAFj+6k5Z/K/fbFHQlLjY 8F4ZUd0mSIcx6ZXyHmDN1tT2sGhI7fvw1F08yLGHB+bsQfFVxv5+SRiJnhnECWxz zVJzKlUJx/HfabKthKam1zJWIB9O+sn77g== -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:38 2025 by rpki-client