$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa File: 885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa (raw, json) Hash identifier: QvdZKwA4xTIdOflRRoY4Tnr2PASA6s+fCN6CC5WvO4U= Subject key identifier: 68:22:79:4A:13:D5:CC:E3:26:FF:3C:E6:D2:75:8D:4D:54:A0:AA:D7 Certificate issuer: /CN=acd38b39-740a-4881-b923-26d1a20ffbfe Certificate serial: 010D0C9F4328584B4081A53F3534E92FA5DE8180 Authority key identifier: E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 33724 IP address blocks: 2604:240::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a5:3f:35:34:e9:2f:a5:de:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acd38b39-740a-4881-b923-26d1a20ffbfe Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=a89e8bf8-4c7b-4d4f-a742-f99eb60f0808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:25:26:bf:fb:0c:52:ed:6d:da:63:78:f0:2a: b4:25:2d:9e:69:8f:dd:cf:27:04:43:88:37:b1:f2: e6:2f:14:5d:ec:e9:43:06:55:7f:ee:9d:17:95:ec: 65:76:5e:78:bd:68:30:d5:c9:4e:2b:03:d5:3e:ba: 1f:87:70:c8:c9:f1:7b:2c:52:b6:8a:75:2a:4c:a6: be:81:79:5f:29:27:c3:af:0d:e4:e1:06:0f:59:7c: 09:ea:9a:69:f7:41:f4:4d:a8:c6:07:60:a8:2a:84: ba:16:9d:33:85:ef:58:f6:cc:48:de:82:28:41:97: 01:95:fc:00:01:65:a3:f7:81:4a:d1:9a:16:1f:da: ad:ff:97:27:81:40:c7:46:09:4f:ed:90:78:dc:b4: 0e:51:cd:18:7f:1a:b2:da:58:f9:d0:24:f0:fd:54: ac:c4:05:c5:28:5d:ca:34:4f:d2:9e:d4:6c:c1:6e: 73:bc:e3:3e:bc:1c:a8:00:71:72:bb:96:7c:d6:33: b1:81:00:ef:00:db:3e:54:60:ee:11:58:5b:7d:a1: 9a:43:96:b4:94:ee:ee:5e:7e:cd:5e:e2:f3:aa:bf: 28:6c:4e:44:33:60:5e:60:46:d9:9c:b8:1e:d4:09: 80:d0:94:08:9a:1e:fb:33:b6:0a:06:8c:11:08:e7: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:22:79:4A:13:D5:CC:E3:26:FF:3C:E6:D2:75:8D:4D:54:A0:AA:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl X509v3 Authority Key Identifier: keyid:E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer sbgp-ipAddrBlock: critical IPv6: 2604:240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c3:c1:d8:25:ab:56:14:5b:39:ca:02:1b:07:29:d9:ca:fd: 26:4d:5d:0a:16:68:51:59:72:55:42:1c:89:38:b0:87:7a:4b: 30:c9:5b:dc:62:3a:38:04:e5:00:d7:37:27:01:20:f9:80:34: 38:37:8c:34:24:0e:95:0b:9f:ce:50:3c:78:97:fd:ee:ec:09: e7:0f:58:d2:b9:f0:f9:c0:33:e6:01:6f:e5:58:e8:9b:eb:73: 8a:52:13:43:0a:ab:7f:35:42:2e:b3:34:b1:e0:05:ba:c2:d6: 2f:b0:58:9e:de:80:51:a6:81:d3:19:33:af:9c:20:cc:90:1d: 65:8f:93:f7:9b:03:17:01:23:4c:bc:e2:2d:04:d7:f9:4a:9b: be:29:19:17:04:7f:b8:70:8c:d5:30:7a:90:bc:8b:b0:cf:a2: 3d:ab:64:c1:39:d0:f3:0e:09:5e:52:89:4d:82:04:05:4a:c0: ba:90:e1:a1:dd:9b:34:15:0a:81:80:2a:80:65:11:dc:0f:23: c4:86:d3:3f:4a:14:34:ea:5d:af:2d:c3:5c:50:2b:c5:73:82: 65:40:c8:7c:00:eb:98:8e:54:6e:f2:79:42:f8:21:04:b7:bb: b2:24:74:d7:9c:55:7d:e9:d7:f9:fb:16:ce:eb:90:8a:4f:18: b9:ba:3f:ad -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtAgaU/NTTpL6XegYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNkMzhiMzktNzQwYS00ODgxLWI5MjMtMjZkMWEyMGZm YmZlMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YTg5ZThiZjgtNGM3Yi00ZDRmLWE3NDItZjk5ZWI2MGYwODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiUmv/sMUu1t2mN48Cq0JS2eaY/dzycEQ4g3 sfLmLxRd7OlDBlV/7p0Xlexldl54vWgw1clOKwPVProfh3DIyfF7LFK2inUqTKa+ gXlfKSfDrw3k4QYPWXwJ6ppp90H0TajGB2CoKoS6Fp0zhe9Y9sxI3oIoQZcBlfwA AWWj94FK0ZoWH9qt/5cngUDHRglP7ZB43LQOUc0Yfxqy2lj50CTw/VSsxAXFKF3K NE/SntRswW5zvOM+vByoAHFyu5Z81jOxgQDvANs+VGDuEVhbfaGaQ5a0lO7uXn7N XuLzqr8obE5EM2BeYEbZnLge1AmA0JQImh77M7YKBowRCOdvLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGgieUoT1czjJv885tJ1jU1UoKrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hY2Qz OGIzOS03NDBhLTQ4ODEtYjkyMy0yNmQxYTIwZmZiZmUvODg1YWZkOWEtOGQ4OC0z OGRjLWI2MDgtOWYwMzkyZjRiOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWNkMzhiMzktNzQwYS00ODgxLWI5 MjMtMjZkMWEyMGZmYmZlL2FjZDM4YjM5LTc0MGEtNDg4MS1iOTIzLTI2ZDFhMjBm ZmJmZS5jcmwwHwYDVR0jBBgwFoAU6Q0P7Uf9egfuRa9jApRKORG1u2IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hY2QzOGIzOS03NDBhLTQ4ODEtYjkyMy0yNmQx YTIwZmZiZmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQCQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6w8HYJatWFFs5ygIbBynZyv0mTV0KFmhRWXJVQhyJOLCHekswyVvc Yjo4BOUA1zcnASD5gDQ4N4w0JA6VC5/OUDx4l/3u7AnnD1jSufD5wDPmAW/lWOib 63OKUhNDCqt/NUIuszSx4AW6wtYvsFie3oBRpoHTGTOvnCDMkB1lj5P3mwMXASNM vOItBNf5Spu+KRkXBH+4cIzVMHqQvIuwz6I9q2TBOdDzDgleUolNggQFSsC6kOGh 3Zs0FQqBgCqAZRHcDyPEhtM/ShQ06l2vLcNcUCvFc4JlQMh8AOuYjlRu8nlC+CEE t7uyJHTXnFV96df5+xbO65CKTxi5uj+t -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:20 2025 by rpki-client