$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa File: 21945cb7-acae-3edc-9a34-60c668bc2e9b.roa (raw, json) Hash identifier: ySWHMBuvIkWjFULq5C/1hR5rcHeeU/q4Y9AV8M9brjg= Subject key identifier: 70:67:0E:65:60:11:EE:1D:60:BF:EA:F9:A3:4B:8E:6D:BB:89:C5:63 Certificate issuer: /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Certificate serial: 010D0C9F4328584B84E775C0D7C993FB365C2F40 Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 395287 IP address blocks: 2620:128:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:75:c0:d7:c9:93:fb:36:5c:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=6838c0e2-0f7c-4de4-8e75-db67ebf91b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0c:eb:07:e3:43:f9:dd:21:82:d1:22:af:ed: cd:61:ea:3a:f1:6a:b0:d3:b8:6d:fd:e8:97:0e:1b: 79:c6:2b:6f:d0:c4:ca:19:fc:88:19:c0:f1:d9:9e: 98:25:23:1a:b2:1f:14:30:b7:85:58:e5:1c:7b:bb: ea:39:f8:ec:1e:84:fa:b6:0e:08:e7:47:27:1f:1e: 1a:cb:09:94:76:b4:10:a6:47:e8:9e:6a:7f:8e:6e: eb:8c:f3:ef:a5:0e:81:24:e3:43:ea:51:ee:07:74: 6f:44:6b:f0:00:e3:20:f2:54:cf:ba:1d:75:b9:04: d4:f0:fc:e8:97:3b:e2:1b:f2:b1:ef:5e:24:2f:21: ea:75:1f:ca:da:9f:31:7a:8c:a6:75:f8:93:b2:64: 38:b9:2b:b7:eb:29:ae:03:f4:50:57:17:97:96:90: 5f:37:28:87:b7:32:a7:17:32:ce:a7:1d:6b:10:62: 6c:72:f4:dc:1d:60:f9:18:03:e2:67:3c:53:2d:ff: 1f:5d:d6:43:74:5b:7b:f9:4a:c6:21:62:6f:2e:af: 4d:a2:c6:44:23:55:23:7a:13:8d:31:d6:bc:00:a7: ac:87:06:83:b5:b1:1e:9c:47:51:23:ce:86:82:35: 83:fc:d4:d9:3c:29:0e:92:be:49:f7:50:15:a6:42: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:67:0E:65:60:11:EE:1D:60:BF:EA:F9:A3:4B:8E:6D:BB:89:C5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl X509v3 Authority Key Identifier: keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer sbgp-ipAddrBlock: critical IPv6: 2620:128:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:8d:ee:fe:89:a6:30:2e:66:d2:d4:8d:65:7b:01:2c:e1:93: b3:c7:30:ea:33:c8:42:d7:47:69:9d:5f:32:85:a0:c4:1d:be: e5:a7:b4:1d:f4:d0:7e:41:a3:3f:7d:3b:3f:29:cf:e4:67:1e: 89:83:69:0d:7b:62:1b:56:b3:3e:bc:f9:e5:61:02:ce:f1:fd: 92:39:91:5f:ae:ca:07:05:12:0a:c7:22:89:78:e4:69:6f:ac: 76:78:fc:8c:f7:8d:ad:af:23:ea:93:02:13:a5:22:73:8d:91: 2e:a3:ea:8c:44:9a:ca:d3:86:26:4b:8a:c1:a9:f8:0a:cd:9d: 6c:84:3c:da:55:38:23:1e:f8:92:04:93:99:ec:22:26:72:fb: 43:49:a9:f4:80:51:3f:b5:ee:52:b3:0e:03:02:c3:22:bd:1f: 5a:18:ae:a7:d2:8f:95:04:aa:39:6a:28:31:32:9c:42:7a:ed: 76:8b:17:b7:38:5f:9e:07:9e:ec:9b:d5:c7:a6:af:13:9e:6d: 38:c2:0a:ee:ca:d3:46:1a:19:dc:09:dd:c5:51:7f:3a:be:9a: 8c:fc:0d:e4:4b:fa:fd:f5:76:90:d0:a7:9a:bb:02:b9:38:a4: 80:02:fd:2a:c4:18:53:85:f6:62:7c:f8:53:52:50:19:d6:d9: 29:ee:78:db -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuE53XA18mT+zZcL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzZGExY2EtYTMwMi00MzZhLWJkNWYtMGE1Yjc1YmFl YWRkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NjgzOGMwZTItMGY3Yy00ZGU0LThlNzUtZGI2N2ViZjkxYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwzrB+ND+d0hgtEir+3NYeo68Wqw07ht/eiX Dht5xitv0MTKGfyIGcDx2Z6YJSMash8UMLeFWOUce7vqOfjsHoT6tg4I50cnHx4a ywmUdrQQpkfonmp/jm7rjPPvpQ6BJOND6lHuB3RvRGvwAOMg8lTPuh11uQTU8Pzo lzviG/Kx714kLyHqdR/K2p8xeoymdfiTsmQ4uSu36ymuA/RQVxeXlpBfNyiHtzKn FzLOpx1rEGJscvTcHWD5GAPiZzxTLf8fXdZDdFt7+UrGIWJvLq9NosZEI1UjehON Mda8AKeshwaDtbEenEdRI86GgjWD/NTZPCkOkr5J91AVpkJmtQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHBnDmVgEe4dYL/q+aNLjm27icVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNk YTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTViNzViYWVhZGQvMjE5NDVjYjctYWNhZS0z ZWRjLTlhMzQtNjBjNjY4YmMyZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWIzZGExY2EtYTMwMi00MzZhLWJk NWYtMGE1Yjc1YmFlYWRkL2FiM2RhMWNhLWEzMDItNDM2YS1iZDVmLTBhNWI3NWJh ZWFkZC5jcmwwHwYDVR0jBBgwFoAUMV8Eih+UqKCCJUdeQgChhx+oiTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNkYTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTVi NzViYWVhZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABKCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEArY3u/ommMC5m0tSNZXsBLOGTs8cw6jPIQtdHaZ1fMoWgxB2+5ae0 HfTQfkGjP307PynP5GceiYNpDXtiG1azPrz55WECzvH9kjmRX67KBwUSCsciiXjk aW+sdnj8jPeNra8j6pMCE6Uic42RLqPqjESaytOGJkuKwan4Cs2dbIQ82lU4Ix74 kgSTmewiJnL7Q0mp9IBRP7XuUrMOAwLDIr0fWhiup9KPlQSqOWooMTKcQnrtdosX tzhfngee7JvVx6avE55tOMIK7srTRhoZ3AndxVF/Or6ajPwN5Ev6/fV2kNCnmrsC uTikgAL9KsQYU4X2Ynz4U1JQGdbZKe542w== -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:34 2025 by rpki-client