$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa File: 297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa (raw, json) Hash identifier: fohKZgp1rIxgJjZxGz7a9c81YgY4ZRizGlq9Z7R4I+w= Subject key identifier: AC:F4:08:91:33:F8:02:73:64:05:92:03:9F:F7:C9:CD:B1:7D:0E:59 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B4A472039F4ABBBE6E14689F8 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 62651 IP address blocks: 2604:fc80:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:20:39:f4:ab:bb:e6:e1:46:89:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=bd98f39b-a6c4-4620-a3d6-0f75d22924ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:03:d4:d3:1a:40:45:f0:4d:56:71:52:27:50: f9:9a:bb:32:8c:a1:8c:7e:59:2d:59:fa:bc:37:50: 96:69:c9:33:78:70:9c:47:67:04:8a:78:01:f9:59: 6b:66:90:19:0b:b5:0e:15:55:57:8a:fb:20:74:fa: 80:eb:6a:59:73:d7:fc:ac:49:cf:cd:3f:e8:7b:c1: a7:3c:c8:68:bf:8e:de:45:49:73:51:68:81:51:cd: 44:9b:b0:59:4f:60:e6:69:a4:a1:dc:cb:3e:f1:b5: b3:5f:4f:64:e7:4e:22:7e:49:20:cc:45:09:dc:78: e1:91:29:3c:fa:1f:8f:eb:d6:f3:2e:f0:74:59:51: 4e:9f:9a:ae:ab:72:a3:5f:3e:a3:bd:65:cc:97:0d: 71:ff:a8:57:b3:0d:bd:4b:fb:28:83:7c:e6:2a:a9: cd:b7:1e:75:9f:ee:65:cc:cc:f3:cc:2f:2d:8e:c1: 0d:1e:c7:ab:79:b4:d8:96:75:76:ec:68:c4:70:ed: 2b:52:15:95:53:62:95:1a:52:05:a0:a9:55:6a:d2: 97:11:e4:d5:95:d4:7f:c6:13:f6:e7:40:ad:a6:d5: d3:7c:a3:4d:ac:97:26:39:9e:e9:dc:9c:e3:28:62: af:f7:c4:c9:e8:ad:d9:8e:20:c9:61:17:aa:05:40: 8d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F4:08:91:33:F8:02:73:64:05:92:03:9F:F7:C9:CD:B1:7D:0E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:fc80:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8d:57:34:58:2d:dc:4a:58:18:00:00:c4:51:b1:ec:cb:bf: 9d:f0:b7:4f:e2:12:e2:9c:8f:91:93:02:7e:4a:de:5e:70:6d: dd:af:07:c3:0a:37:6f:5e:fd:23:56:f9:cc:85:de:00:b7:9a: c5:b3:bb:e0:a6:64:e6:f3:59:06:cb:9c:51:23:fb:2c:46:7b: c3:59:2e:26:88:2f:dc:02:9c:79:20:bf:6f:bb:b1:be:5e:1b: ac:ff:dc:ca:92:df:23:1d:a9:33:b1:a7:78:2d:f3:c8:6c:6a: ac:d3:5b:78:75:a1:97:db:e8:ce:0a:66:72:83:cc:9e:52:d7: 51:18:70:53:48:58:24:64:c3:83:b5:74:56:1f:44:b8:db:2d: fe:77:f3:d7:82:29:f1:46:a1:a9:4e:95:06:65:67:13:a9:2f: 94:fd:ea:61:7e:ce:c0:3f:88:6c:f1:28:2f:e2:e8:92:28:99: 4e:cf:8c:d6:71:1b:38:9b:4b:7f:bc:65:2c:70:81:02:68:0a: f1:6e:ff:df:c3:82:f9:5b:b0:80:3d:e9:40:f1:ef:28:51:1c: 68:97:3b:58:91:10:44:27:07:e5:c1:6f:4e:88:6f:b6:52:a1: ae:b8:27:bc:2a:22:60:d8:08:de:5c:ea:1b:7e:7d:04:b1:b0: d8:f4:55:da -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtKRyA59Ku75uFGifgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YmQ5OGYzOWItYTZjNC00NjIwLWEzZDYtMGY3NWQyMjkyNGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwPU0xpARfBNVnFSJ1D5mrsyjKGMflktWfq8 N1CWackzeHCcR2cEingB+VlrZpAZC7UOFVVXivsgdPqA62pZc9f8rEnPzT/oe8Gn PMhov47eRUlzUWiBUc1Em7BZT2DmaaSh3Ms+8bWzX09k504ifkkgzEUJ3HjhkSk8 +h+P69bzLvB0WVFOn5quq3KjXz6jvWXMlw1x/6hXsw29S/sog3zmKqnNtx51n+5l zMzzzC8tjsENHserebTYlnV27GjEcO0rUhWVU2KVGlIFoKlVatKXEeTVldR/xhP2 50CtptXTfKNNrJcmOZ7p3JzjKGKv98TJ6K3ZjiDJYReqBUCNnwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKz0CJEz+AJzZAWSA5/3yc2xfQ5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjk3NzY4ZTgtOWE0MS0z NmI0LWJmYTQtY2JkMzNkZGM5YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT8gBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAb41XNFgt3EpYGAAAxFGx7Mu/nfC3T+IS4pyPkZMCfkreXnBt3a8H wwo3b179I1b5zIXeALeaxbO74KZk5vNZBsucUSP7LEZ7w1kuJogv3AKceSC/b7ux vl4brP/cypLfIx2pM7GneC3zyGxqrNNbeHWhl9vozgpmcoPMnlLXURhwU0hYJGTD g7V0Vh9EuNst/nfz14Ip8UahqU6VBmVnE6kvlP3qYX7OwD+IbPEoL+LokiiZTs+M 1nEbOJtLf7xlLHCBAmgK8W7/38OC+VuwgD3pQPHvKFEcaJc7WJEQRCcH5cFvTohv tlKhrrgnvCoiYNgI3lzqG359BLGw2PRV2g== -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:50 2025 by rpki-client