$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa File: 1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa (raw, json) Hash identifier: XvTCknqIevwFB8wweDRhNOsdJrFrDzoTVCK/TRP1bDI= Subject key identifier: 96:BC:34:2F:DC:85:50:7C:2E:0D:D9:ED:8C:52:6B:CC:65:D7:41:13 Certificate issuer: /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2 Certificate serial: 010D0C9F4328584B1AD18BD3A6E74EEF22BFC420 Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2604:640:108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:8b:d3:a6:e7:4e:ef:22:bf:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=707bdb15-798a-4ca3-8b44-8abdae0f1aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:11:1e:36:4e:bb:f0:4e:d0:87:1f:c3:64:18: 2a:c8:2e:d7:95:48:aa:ac:d6:e6:9a:11:d3:7e:b0: 5d:4a:5a:0e:77:bb:a5:8e:e6:bf:69:33:f4:8b:67: ab:28:70:c7:a1:4f:bc:33:dc:8d:b6:f1:79:be:5e: 72:d7:a0:ce:df:9b:05:7c:da:3f:94:85:d8:d7:76: b8:b9:42:ad:76:5b:25:62:28:b2:ae:01:38:b8:5a: d8:e6:dc:50:9f:84:2b:57:5d:5e:fd:91:62:26:cb: 5c:37:73:48:24:4e:50:fc:7b:00:02:cd:55:d3:90: 96:08:6f:36:72:a9:7e:0c:f6:a9:2a:13:9a:58:4b: 70:d1:8e:5d:2a:6b:b6:ab:84:fa:64:be:c2:98:4a: 21:7f:c5:16:fa:6d:b7:df:80:40:b2:ec:7a:09:77: b7:08:ef:10:06:51:53:6d:29:f5:58:96:c4:ce:fd: 9f:14:76:e5:6b:54:1f:63:1a:77:c0:4b:16:50:01: cb:bb:47:88:f1:2d:4e:cd:7a:c3:4b:35:92:c8:1a: f7:17:7b:74:9c:a8:61:f8:b4:d6:54:1d:9e:59:bf: da:7d:bd:b7:de:94:b9:b9:15:16:5c:fd:4d:c9:eb: 28:ea:ea:e9:fb:9f:35:7b:e0:10:2b:c3:cb:22:d0: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BC:34:2F:DC:85:50:7C:2E:0D:D9:ED:8C:52:6B:CC:65:D7:41:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl X509v3 Authority Key Identifier: keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer sbgp-ipAddrBlock: critical IPv6: 2604:640:108::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:80:9e:85:0b:3c:66:f5:ec:9b:7c:b7:76:90:15:3b:da:58: 6e:08:6b:f0:b7:9b:45:5a:c7:2a:1f:d9:bf:7b:1c:3e:f2:f3: 20:1b:32:6c:9e:f7:60:08:7a:b1:38:11:5a:5a:19:a8:c9:10: 4c:e3:37:27:62:50:ca:09:71:b3:06:b6:c2:8c:67:10:8f:87: 53:17:47:cc:61:df:53:df:bf:a1:7b:5e:e5:5c:ad:cd:fd:4e: f2:3c:34:0f:32:c5:b3:e4:ab:c2:fd:b4:09:fb:fa:d0:2c:b5: c9:54:31:dd:79:d7:94:c7:e3:6b:77:25:56:4b:e0:f8:92:2c: fc:85:d4:03:a6:83:de:34:c0:5b:08:97:fd:d5:4d:9d:f6:3b: 8f:c2:4d:d2:0d:91:50:72:24:1d:2e:da:d4:5c:12:3e:e6:fa: a1:ed:f1:6d:0b:e7:9e:3e:eb:16:51:5e:5e:9a:a5:c3:a3:ea: 73:6f:49:ea:f9:23:a7:de:71:63:36:4e:27:75:05:f7:dd:d7: 81:25:62:d4:6b:f0:a7:84:95:bc:22:06:b5:56:75:49:54:92: f8:7d:6f:de:c5:30:6c:61:21:35:df:18:bb:ef:10:87:04:bc: b0:af:3f:59:58:66:82:23:48:25:68:27:f4:9a:21:86:fa:75: 8f:0e:1b:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0YvTpudO7yK/xCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y5NTc2ZTAtMjBlMS00YzIyLWJmZWItZjUwZWE4ZGUy Y2UyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NzA3YmRiMTUtNzk4YS00Y2EzLThiNDQtOGFiZGFlMGYxYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBEeNk678E7Qhx/DZBgqyC7XlUiqrNbmmhHT frBdSloOd7uljua/aTP0i2erKHDHoU+8M9yNtvF5vl5y16DO35sFfNo/lIXY13a4 uUKtdlslYiiyrgE4uFrY5txQn4QrV11e/ZFiJstcN3NIJE5Q/HsAAs1V05CWCG82 cql+DPapKhOaWEtw0Y5dKmu2q4T6ZL7CmEohf8UW+m2334BAsux6CXe3CO8QBlFT bSn1WJbEzv2fFHbla1QfYxp3wEsWUAHLu0eI8S1OzXrDSzWSyBr3F3t0nKhh+LTW VB2eWb/afb233pS5uRUWXP1Nyeso6urp+581e+AQK8PLItAL+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJa8NC/chVB8Lg3Z7YxSa8xl10ETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjk1 NzZlMC0yMGUxLTRjMjItYmZlYi1mNTBlYThkZTJjZTIvMWM0NjAyY2QtZWE5MS0z NDdlLWFjZTctNGUzMzJkMGZlMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y5NTc2ZTAtMjBlMS00YzIyLWJm ZWItZjUwZWE4ZGUyY2UyL2NmOTU3NmUwLTIwZTEtNGMyMi1iZmViLWY1MGVhOGRl MmNlMi5jcmwwHwYDVR0jBBgwFoAUZpd9pB/GFxsKX+73esfcVN617lQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjk1NzZlMC0yMGUxLTRjMjItYmZlYi1mNTBl YThkZTJjZTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQGQAEI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEyAnoULPGb17Jt8t3aQFTvaWG4Ia/C3m0Vaxyof2b97HD7y8yAb Mmye92AIerE4EVpaGajJEEzjNydiUMoJcbMGtsKMZxCPh1MXR8xh31Pfv6F7XuVc rc39TvI8NA8yxbPkq8L9tAn7+tAstclUMd1515TH42t3JVZL4PiSLPyF1AOmg940 wFsIl/3VTZ32O4/CTdINkVByJB0u2tRcEj7m+qHt8W0L554+6xZRXl6apcOj6nNv Ser5I6fecWM2Tid1Bffd14ElYtRr8KeElbwiBrVWdUlUkvh9b97FMGxhITXfGLvv EIcEvLCvP1lYZoIjSCVoJ/SaIYb6dY8OGwU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:55:45 2025 by rpki-client