$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/353cd56e-846c-3567-b16b-b7323fe728cd.roa File: 353cd56e-846c-3567-b16b-b7323fe728cd.roa (raw, json) Hash identifier: 6ZpYxe8ccyCnHme/9qIT/l2vVfYttUuxCtVQmt36CwU= Subject key identifier: 4F:6D:25:43:97:4A:C2:7A:C3:D3:4D:3F:15:29:8A:38:6B:34:1D:93 Certificate issuer: /CN=cfdd40eb-4c1a-4ba5-8446-676f83258a67 Certificate serial: 010D0C9F4328584B80B76523783B47D3C7DD3280 Authority key identifier: 6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/353cd56e-846c-3567-b16b-b7323fe728cd.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 35960 IP address blocks: 2620:a1:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:65:23:78:3b:47:d3:c7:dd:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdd40eb-4c1a-4ba5-8446-676f83258a67 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=289ff2a7-4daa-447d-8261-b867f62bae7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:d8:ec:88:7c:7f:51:ae:60:03:68:74:da: 46:0d:da:d4:03:f0:17:e7:ab:68:77:de:a8:e8:fc: 36:66:ac:e3:ac:9e:f9:4f:11:b1:5f:71:38:fa:82: a8:01:1e:f3:c4:20:e0:82:71:5c:a1:7e:fd:54:b8: 88:2c:ff:eb:3b:96:0f:6a:ba:b6:2f:9d:60:95:bb: 19:a2:01:42:c7:2e:3c:20:9a:70:c0:a5:37:a7:05: c1:d7:38:05:73:50:13:e1:58:50:33:37:90:1e:9a: a5:d7:97:86:fd:4e:0b:14:23:d1:8b:a9:b4:4c:01: 27:52:14:8c:0f:ac:5a:0b:08:ed:79:95:0e:35:c3: 56:8f:dc:dc:7b:b7:74:b8:64:67:ff:16:a4:93:13: be:dc:2c:5d:ec:79:f1:5f:2d:b0:6f:4b:23:32:a5: 8d:09:25:8d:16:b4:42:29:79:02:82:86:a1:f7:8a: 22:e6:e3:a2:ca:34:58:53:22:62:b9:ce:44:2d:ae: 7a:0a:cb:65:0e:d5:e3:d3:33:ad:bb:ea:a1:38:ce: 68:53:c1:ca:76:87:96:04:73:42:6a:56:b4:40:5e: fa:6f:a2:50:e5:fb:7e:bc:9e:e7:ed:2a:4b:19:f9: 46:1a:27:20:e2:3f:26:ba:2b:a0:a8:a6:5e:11:53: 3b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6D:25:43:97:4A:C2:7A:C3:D3:4D:3F:15:29:8A:38:6B:34:1D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/353cd56e-846c-3567-b16b-b7323fe728cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.crl X509v3 Authority Key Identifier: keyid:6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer sbgp-ipAddrBlock: critical IPv6: 2620:a1:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c3:e5:3f:73:e5:97:ee:51:24:c8:eb:e6:f0:93:bb:dd:51: 15:62:82:c1:11:35:cb:6e:29:e0:48:f4:87:27:db:23:51:7c: 1b:4d:2e:f0:1e:9f:15:01:5a:e9:23:31:3c:2e:52:2e:71:53: b3:86:f8:8a:a4:67:81:d3:f7:70:eb:21:ae:a9:75:10:19:3b: ee:1a:d9:25:73:de:29:22:cf:92:6a:5e:e6:69:9d:00:64:51: d4:86:d3:88:4e:01:1f:a4:1c:1f:bf:4f:3e:a7:94:8d:8c:5b: eb:79:18:18:f2:ef:5d:8a:26:61:17:77:d5:05:55:83:09:0d: 4e:98:40:56:75:a2:01:9e:9e:fb:ad:60:c5:86:28:54:23:aa: 9b:83:84:9a:47:f2:60:24:60:d4:31:10:14:92:a7:a6:d7:e3: 84:00:b1:96:2a:a4:e4:f6:5f:ad:ed:87:3c:f9:0b:b8:bd:e8: e5:4d:e1:46:dc:6b:9a:08:2d:c4:ce:15:95:f0:c7:8a:84:eb: f2:f2:2a:ee:87:89:24:60:2e:a5:f2:e2:38:e4:37:3e:14:7d: 7c:26:34:a0:f1:c4:92:c5:fb:1f:d4:1a:66:25:07:c0:fc:5b: 7b:62:71:54:76:a9:57:b4:ed:5d:7a:ab:28:bf:05:d4:01:2e: 1e:ca:11:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuAt2UjeDtH08fdMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZkZDQwZWItNGMxYS00YmE1LTg0NDYtNjc2ZjgzMjU4 YTY3MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk Mjg5ZmYyYTctNGRhYS00NDdkLTgyNjEtYjg2N2Y2MmJhZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVLY7Ih8f1GuYANodNpGDdrUA/AX56tod96o 6Pw2ZqzjrJ75TxGxX3E4+oKoAR7zxCDggnFcoX79VLiILP/rO5YParq2L51glbsZ ogFCxy48IJpwwKU3pwXB1zgFc1AT4VhQMzeQHpql15eG/U4LFCPRi6m0TAEnUhSM D6xaCwjteZUONcNWj9zce7d0uGRn/xakkxO+3Cxd7HnxXy2wb0sjMqWNCSWNFrRC KXkCgoah94oi5uOiyjRYUyJiuc5ELa56CstlDtXj0zOtu+qhOM5oU8HKdoeWBHNC ala0QF76b6JQ5ft+vJ7n7SpLGflGGicg4j8muiugqKZeEVM7OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE9tJUOXSsJ6w9NNPxUpijhrNB2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmRk NDBlYi00YzFhLTRiYTUtODQ0Ni02NzZmODMyNThhNjcvMzUzY2Q1NmUtODQ2Yy0z NTY3LWIxNmItYjczMjNmZTcyOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZkZDQwZWItNGMxYS00YmE1LTg0 NDYtNjc2ZjgzMjU4YTY3L2NmZGQ0MGViLTRjMWEtNGJhNS04NDQ2LTY3NmY4MzI1 OGE2Ny5jcmwwHwYDVR0jBBgwFoAUbVUCXygOc8i9Ujq76fYO5mgiXn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmRkNDBlYi00YzFhLTRiYTUtODQ0Ni02NzZm ODMyNThhNjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAocAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3D5T9z5ZfuUSTI6+bwk7vdURVigsERNctuKeBI9Icn2yNRfBtN LvAenxUBWukjMTwuUi5xU7OG+IqkZ4HT93DrIa6pdRAZO+4a2SVz3ikiz5JqXuZp nQBkUdSG04hOAR+kHB+/Tz6nlI2MW+t5GBjy712KJmEXd9UFVYMJDU6YQFZ1ogGe nvutYMWGKFQjqpuDhJpH8mAkYNQxEBSSp6bX44QAsZYqpOT2X63thzz5C7i96OVN 4Ubca5oILcTOFZXwx4qE6/LyKu6HiSRgLqXy4jjkNz4UfXwmNKDxxJLF+x/UGmYl B8D8W3ticVR2qVe07V16qyi/BdQBLh7KEaI= -----END CERTIFICATE-----Generated at Tue Oct 21 09:08:33 2025 by rpki-client