$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/98dd0139-139c-32dd-9592-7f9932a66fc0.roa File: 98dd0139-139c-32dd-9592-7f9932a66fc0.roa (raw, json) Hash identifier: C2YaYTbKCXkP/6V2OEb+7uFY+C4hLtsOmV4kT5ilVlg= Subject key identifier: F0:96:59:8F:50:3E:3E:96:11:DB:00:33:2B:FC:85:37:7D:00:C4:D8 Certificate issuer: /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2 Certificate serial: 010D0C9F4328584B1AD18BE7B4C4F22453B7A020 Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/98dd0139-139c-32dd-9592-7f9932a66fc0.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 2604:640:108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:8b:e7:b4:c4:f2:24:53:b7:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=6841b9ff-ecc5-40f4-ab7f-80ae41b6c7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:2d:26:89:f3:b8:75:9c:54:a5:15:71:a9: ee:bb:ad:07:f8:a5:5a:d7:4c:af:d9:75:37:4c:1d: 2c:da:5c:83:16:cc:c9:f7:b3:46:2b:0d:9e:9d:c5: 9d:8d:a2:37:6c:13:f9:88:96:56:33:f0:aa:10:dc: a2:57:2d:13:5f:1f:9d:46:f4:09:6d:31:4c:9d:6b: ac:0f:51:f1:48:40:64:07:63:dd:2d:73:a5:44:c0: fc:e0:9a:a9:0b:9a:cf:ea:a2:2a:ca:a1:4d:fe:cc: 44:65:3d:b2:7c:9f:33:34:0a:6a:f3:fe:c7:b4:ad: 71:0d:67:44:90:0e:22:53:8b:2b:e6:6e:27:b5:0d: a8:1a:3a:4a:cf:a8:de:7e:03:16:fc:4c:e7:b9:1d: 60:2e:7c:d7:69:b4:65:06:fc:37:d8:5f:42:2c:df: ad:3e:82:00:5f:31:72:01:7f:13:d1:88:d9:f8:09: a2:47:8d:44:49:c3:e1:94:b3:57:b7:1e:5a:b9:8e: 3c:49:29:d3:ef:c4:8e:2d:66:1c:bf:88:c9:0d:d1: a2:c5:26:db:20:1e:1b:c9:16:db:23:b9:9e:05:33: 39:5d:8a:54:1d:72:28:a8:dc:57:e9:e9:c2:0f:57: 0f:af:63:d8:b4:08:b5:f4:86:2b:50:99:9c:0a:d6: dc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:96:59:8F:50:3E:3E:96:11:DB:00:33:2B:FC:85:37:7D:00:C4:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/98dd0139-139c-32dd-9592-7f9932a66fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl X509v3 Authority Key Identifier: keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer sbgp-ipAddrBlock: critical IPv6: 2604:640:108::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:2e:d4:4e:a4:86:33:92:3f:5d:bd:a4:23:e0:a9:50:ab:ac: 98:13:8a:fa:8b:31:73:92:99:bf:eb:e5:cf:9d:e7:bf:b5:7a: e6:eb:76:f4:62:22:c7:d8:94:89:9a:c1:9b:44:dd:7d:c6:e9: 10:ea:62:3d:39:04:7a:26:a2:fc:90:1d:03:0a:b4:13:e0:54: 14:ff:30:be:0e:8b:3e:e0:74:e7:57:21:6b:9e:10:ee:99:29: 88:12:ab:27:bf:53:82:58:86:a2:3f:1b:de:de:1b:0f:81:5a: 92:2b:30:74:ad:b8:5d:e8:78:66:76:17:cb:ed:20:76:a5:27: e7:83:7f:b5:55:4e:e3:c1:12:43:69:01:7c:0c:b0:5b:b0:59: 7f:8b:3c:bd:eb:12:5e:70:47:b7:d5:5a:a9:04:2d:86:29:63: e1:7b:36:bb:c6:3c:58:a3:5f:53:9e:bf:1f:46:4f:73:60:55: 99:e0:02:ad:ee:14:90:58:7a:ce:0f:b1:4c:cf:43:64:3b:4b: e8:3b:f4:d6:ab:8d:41:89:6f:f7:3b:25:9e:31:95:9b:d9:0d: 85:14:6d:fb:74:45:7e:a7:f6:d3:77:dc:bc:b2:50:55:e0:31: 90:6f:d3:62:69:0a:d7:26:7a:30:10:c5:b5:83:d5:82:95:f5: 50:89:c1:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0YvntMTyJFO3oCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y5NTc2ZTAtMjBlMS00YzIyLWJmZWItZjUwZWE4ZGUy Y2UyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Njg0MWI5ZmYtZWNjNS00MGY0LWFiN2YtODBhZTQxYjZjN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxEtJonzuHWcVKUVcanuu60H+KVa10yv2XU3 TB0s2lyDFszJ97NGKw2encWdjaI3bBP5iJZWM/CqENyiVy0TXx+dRvQJbTFMnWus D1HxSEBkB2PdLXOlRMD84JqpC5rP6qIqyqFN/sxEZT2yfJ8zNApq8/7HtK1xDWdE kA4iU4sr5m4ntQ2oGjpKz6jefgMW/EznuR1gLnzXabRlBvw32F9CLN+tPoIAXzFy AX8T0YjZ+AmiR41EScPhlLNXtx5auY48SSnT78SOLWYcv4jJDdGixSbbIB4byRbb I7meBTM5XYpUHXIoqNxX6enCD1cPr2PYtAi19IYrUJmcCtbc/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPCWWY9QPj6WEdsAMyv8hTd9AMTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjk1 NzZlMC0yMGUxLTRjMjItYmZlYi1mNTBlYThkZTJjZTIvOThkZDAxMzktMTM5Yy0z MmRkLTk1OTItN2Y5OTMyYTY2ZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y5NTc2ZTAtMjBlMS00YzIyLWJm ZWItZjUwZWE4ZGUyY2UyL2NmOTU3NmUwLTIwZTEtNGMyMi1iZmViLWY1MGVhOGRl MmNlMi5jcmwwHwYDVR0jBBgwFoAUZpd9pB/GFxsKX+73esfcVN617lQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjk1NzZlMC0yMGUxLTRjMjItYmZlYi1mNTBl YThkZTJjZTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQGQAEI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJsu1E6khjOSP129pCPgqVCrrJgTivqLMXOSmb/r5c+d57+1eubr dvRiIsfYlImawZtE3X3G6RDqYj05BHomovyQHQMKtBPgVBT/ML4Oiz7gdOdXIWue EO6ZKYgSqye/U4JYhqI/G97eGw+BWpIrMHStuF3oeGZ2F8vtIHalJ+eDf7VVTuPB EkNpAXwMsFuwWX+LPL3rEl5wR7fVWqkELYYpY+F7NrvGPFijX1Oevx9GT3NgVZng Aq3uFJBYes4PsUzPQ2Q7S+g79NarjUGJb/c7JZ4xlZvZDYUUbft0RX6n9tN33Lyy UFXgMZBv02JpCtcmejAQxbWD1YKV9VCJwb4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:30:52 2025 by rpki-client