$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/a15bb8f9-5f58-3dde-b836-b44822b3323f.roa File: a15bb8f9-5f58-3dde-b836-b44822b3323f.roa (raw, json) Hash identifier: LI1gcyLUVLyvQuVyiWOU7SGA7xFJmxmIgkcaSR9q0YM= Subject key identifier: A4:B1:DB:A3:67:02:C5:89:35:AF:C0:F9:BF:22:8E:04:69:DA:17:49 Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Certificate serial: 010D0C9F4328584B62020D011731366AEB617DE0 Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/a15bb8f9-5f58-3dde-b836-b44822b3323f.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 49791 IP address blocks: 2606:2040:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:0d:01:17:31:36:6a:eb:61:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9ccf7647-6cfe-46c5-aa3e-a49df59d8811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:11:64:c9:d6:52:bb:e7:90:49:6f:fc:a2: 1f:be:da:d7:77:64:f4:55:69:cf:16:88:75:9f:83: 3a:4b:e7:5e:37:e8:11:5c:5e:b4:fd:ac:16:41:0d: 1a:f3:82:3c:da:d6:fa:e0:1f:3d:a6:1f:5e:1d:7f: af:a7:83:3e:86:5e:95:36:a7:73:4f:90:a0:d2:96: 82:b6:7e:50:14:57:94:ea:3b:ae:4c:7a:4e:fb:09: cc:44:9e:28:0b:fd:83:55:57:ae:30:7a:77:c9:3a: 83:e7:72:77:3a:cf:0e:1d:6d:cf:ca:9a:8e:8a:f2: ed:cc:95:3f:97:6d:67:af:77:6a:95:eb:0f:09:ac: 30:8d:e9:30:98:34:78:f0:c4:42:0c:1d:4a:60:77: 98:8b:94:18:1e:ec:05:00:49:f1:c4:5f:7e:cd:f2: 3c:99:65:bb:42:bf:3f:5b:2d:63:d4:15:76:f1:dc: 3a:44:20:92:28:c7:a1:8d:83:9a:49:7b:73:1a:06: 57:54:9f:ca:77:4e:4c:09:76:00:cc:09:d6:c4:67: 6f:c2:ff:12:82:5e:47:28:42:58:cf:b2:44:86:86: 1e:99:01:93:c3:c7:e1:19:3d:a2:e0:a2:62:25:27: b8:b6:d8:17:77:04:cd:55:2a:ee:20:3b:86:c5:17: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B1:DB:A3:67:02:C5:89:35:AF:C0:F9:BF:22:8E:04:69:DA:17:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/a15bb8f9-5f58-3dde-b836-b44822b3323f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl X509v3 Authority Key Identifier: keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer sbgp-ipAddrBlock: critical IPv6: 2606:2040:2000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:24:72:34:1b:ce:d6:ec:a4:dd:b2:c6:90:ce:6a:67:1c:34: dd:9a:28:fd:a5:4f:2c:e3:34:0b:0c:0b:25:db:65:fb:e1:b3: e1:a9:54:3d:99:b1:58:fd:1c:0a:f5:86:01:44:48:93:c1:47: 4f:79:fc:24:39:16:52:36:68:ff:5b:2f:1e:dc:84:72:10:8d: bf:9a:0c:10:f8:eb:9a:0b:10:aa:f0:da:4c:b9:06:43:41:78: 53:1e:92:f9:f5:11:a6:1d:d2:57:b4:99:46:2d:5b:20:82:bf: 3a:04:12:a7:19:fb:78:5a:71:7a:ee:e4:e3:5a:7d:2a:6a:a6: 9a:31:ba:7e:11:8c:17:9f:a7:5a:f1:d1:7b:ec:2a:ed:03:a2: 98:a9:18:7a:bf:42:26:a1:76:43:b6:84:b7:ab:d7:8b:7d:c9: 83:c2:cc:16:fd:fa:b8:b7:df:16:f9:64:15:b7:fb:49:83:91: c8:f8:e1:c9:06:2b:33:03:d2:1a:d9:77:60:46:9a:72:be:8e: 21:89:7d:ad:3e:c9:a6:b2:d8:73:e1:d5:8c:5a:fb:34:69:ff: 5b:d2:ca:fc:10:fc:e9:3c:70:ba:86:f1:25:fc:dc:94:26:8b: e1:6e:34:4c:39:d2:fc:df:be:bd:29:86:6b:69:63:bf:77:95: fe:27:ce:0e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtiAg0BFzE2authfeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1 ODU0MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWNjZjc2NDctNmNmZS00NmM1LWFhM2UtYTQ5ZGY1OWQ4ODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQMRZMnWUrvnkElv/KIfvtrXd2T0VWnPFoh1 n4M6S+deN+gRXF60/awWQQ0a84I82tb64B89ph9eHX+vp4M+hl6VNqdzT5Cg0paC tn5QFFeU6juuTHpO+wnMRJ4oC/2DVVeuMHp3yTqD53J3Os8OHW3PypqOivLtzJU/ l21nr3dqlesPCawwjekwmDR48MRCDB1KYHeYi5QYHuwFAEnxxF9+zfI8mWW7Qr8/ Wy1j1BV28dw6RCCSKMehjYOaSXtzGgZXVJ/Kd05MCXYAzAnWxGdvwv8Sgl5HKEJY z7JEhoYemQGTw8fhGT2i4KJiJSe4ttgXdwTNVSruIDuGxRfV/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKSx26NnAsWJNa/A+b8ijgRp2hdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvYTE1YmI4ZjktNWY1OC0z ZGRlLWI4MzYtYjQ0ODIyYjMzMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3 NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3 MmFkNzU4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgYgQCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKiRyNBvO1uyk3bLGkM5qZxw03Zoo/aVPLOM0CwwLJdtl++Gz4alU PZmxWP0cCvWGAURIk8FHT3n8JDkWUjZo/1svHtyEchCNv5oMEPjrmgsQqvDaTLkG Q0F4Ux6S+fURph3SV7SZRi1bIIK/OgQSpxn7eFpxeu7k41p9KmqmmjG6fhGMF5+n WvHRe+wq7QOimKkYer9CJqF2Q7aEt6vXi33Jg8LMFv36uLffFvlkFbf7SYORyPjh yQYrMwPSGtl3YEaacr6OIYl9rT7JprLYc+HVjFr7NGn/W9LK/BD86TxwuobxJfzc lCaL4W40TDnS/N++vSmGa2ljv3eV/ifODg== -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:54 2025 by rpki-client