$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a9102b45-5600-3fb3-be81-4b0ef613577c.roa File: a9102b45-5600-3fb3-be81-4b0ef613577c.roa (raw, json) Hash identifier: Y/W/eU1PVC1rVguSu9ARBQvAHO1+anzQHjdBc0xQtPo= Subject key identifier: C3:80:9E:F1:B6:59:C5:05:ED:70:EE:BC:1A:DC:B7:94:0E:34:D8:74 Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34 Certificate serial: 010D0C9F4328584B2496D7A66C7C4ED8FAA5CC40 Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a9102b45-5600-3fb3-be81-4b0ef613577c.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 16787 IP address blocks: 2605:1c00:50f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d7:a6:6c:7c:4e:d8:fa:a5:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=44aea794-a4bd-493c-ae13-d6962aa45c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e8:8c:8b:f5:62:7f:d6:82:7b:87:ec:26:b7: ef:aa:9d:73:d1:ab:50:53:6a:59:91:02:9d:76:e0: 13:55:e7:7d:34:e4:de:da:5d:41:2c:03:51:81:d7: 19:5d:12:ea:39:71:bc:2e:0e:a3:7f:24:34:de:a9: 1d:f0:5b:38:e2:f8:0b:52:58:a1:e2:81:a2:b9:2f: cf:e5:ac:00:93:98:e9:1f:b1:f0:20:18:4b:47:8d: 6c:e4:4e:9d:04:67:32:96:12:3d:a2:ac:16:3a:55: fb:a5:a2:55:91:cd:33:e9:16:db:84:e3:ba:49:40: c5:cc:f9:aa:7a:15:c8:34:f5:5a:ee:13:bd:85:9f: 83:e0:8c:0b:83:25:bf:eb:75:0b:c6:66:a9:4c:4d: 72:bd:f4:71:af:95:a7:42:e1:44:07:7f:d0:75:f7: 04:be:4a:ba:db:39:e4:04:62:a2:47:9a:9f:b1:a4: 2b:3e:52:3b:0e:84:8a:3e:93:e4:1d:39:f1:c9:07: 41:63:4f:28:9d:0f:09:3f:66:fb:80:18:05:bd:ed: fa:ce:62:f0:1e:29:2d:18:47:05:6a:c0:93:e1:99: 73:9c:58:8b:8a:8c:85:ec:eb:03:c9:61:e9:7a:e8: ec:04:54:51:f6:6f:94:c5:98:7d:06:7d:eb:27:0f: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:80:9E:F1:B6:59:C5:05:ED:70:EE:BC:1A:DC:B7:94:0E:34:D8:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a9102b45-5600-3fb3-be81-4b0ef613577c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl X509v3 Authority Key Identifier: keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer sbgp-ipAddrBlock: critical IPv6: 2605:1c00:50f0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d2:58:13:31:e8:f2:0e:41:61:64:a5:6b:de:81:99:22:1c: f0:dd:4b:21:1c:e1:0d:5a:48:cb:3b:a6:75:4e:e2:d8:b3:98: 60:71:6d:f9:1f:08:ba:5f:c2:38:bb:c0:97:74:90:98:ed:45: eb:76:5b:96:c0:c0:3b:dc:57:6d:9f:55:5f:00:3d:f0:73:49: 44:f9:be:a1:96:7b:8b:02:35:e0:c7:99:25:1c:6d:85:79:cb: 90:f6:38:e7:a5:ca:81:c0:61:96:e0:06:98:c7:f3:91:7a:f3: 63:48:c7:19:46:60:c8:72:79:7e:97:df:a1:0f:1e:9c:1b:e7: 18:94:65:15:68:ea:44:a7:a3:53:8b:ee:f2:9a:9b:da:e6:da: 47:4c:05:01:3a:fe:77:62:ff:23:76:3c:17:a9:b2:7b:77:9f: c5:d9:97:26:9e:3a:98:fa:cc:8b:20:24:d8:20:50:97:ef:52: b3:bf:43:35:07:22:d8:32:54:9c:5d:45:41:2e:c9:88:ce:e2: b6:50:2b:bd:9b:91:4c:2c:a3:e4:55:5c:00:25:2b:85:6e:e1: ba:e2:08:2f:1c:02:72:96:ea:7a:bb:f8:24:58:aa:44:5e:67: 33:0e:25:ff:af:57:59:ce:77:2a:f6:29:57:50:96:10:11:b3: 87:4a:72:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEskltembHxO2PqlzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5ODMxOGEtNzA1OS00MmJlLTliNjAtMjM0YWVkYmE1 ZTM0MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NDRhZWE3OTQtYTRiZC00OTNjLWFlMTMtZDY5NjJhYTQ1YzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeiMi/Vif9aCe4fsJrfvqp1z0atQU2pZkQKd duATVed9NOTe2l1BLANRgdcZXRLqOXG8Lg6jfyQ03qkd8Fs44vgLUlih4oGiuS/P 5awAk5jpH7HwIBhLR41s5E6dBGcylhI9oqwWOlX7paJVkc0z6RbbhOO6SUDFzPmq ehXINPVa7hO9hZ+D4IwLgyW/63ULxmapTE1yvfRxr5WnQuFEB3/QdfcEvkq62znk BGKiR5qfsaQrPlI7DoSKPpPkHTnxyQdBY08onQ8JP2b7gBgFve36zmLwHiktGEcF asCT4ZlznFiLioyF7OsDyWHpeujsBFRR9m+UxZh9Bn3rJw9tnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMOAnvG2WcUF7XDuvBrct5QONNh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4 MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRhZWRiYTVlMzQvYTkxMDJiNDUtNTYwMC0z ZmIzLWJlODEtNGIwZWY2MTM1NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5ODMxOGEtNzA1OS00MmJlLTli NjAtMjM0YWVkYmE1ZTM0L2Q0OTgzMThhLTcwNTktNDJiZS05YjYwLTIzNGFlZGJh NWUzNC5jcmwwHwYDVR0jBBgwFoAUG1izrEgJ1ISdOmbgXwic0hDBEWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRh ZWRiYTVlMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgUcAFDw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHSWBMx6PIOQWFkpWvegZkiHPDdSyEc4Q1aSMs7pnVO4tizmGBx bfkfCLpfwji7wJd0kJjtRet2W5bAwDvcV22fVV8APfBzSUT5vqGWe4sCNeDHmSUc bYV5y5D2OOelyoHAYZbgBpjH85F682NIxxlGYMhyeX6X36EPHpwb5xiUZRVo6kSn o1OL7vKam9rm2kdMBQE6/ndi/yN2PBepsnt3n8XZlyaeOpj6zIsgJNggUJfvUrO/ QzUHItgyVJxdRUEuyYjO4rZQK72bkUwso+RVXAAlK4Vu4briCC8cAnKW6nq7+CRY qkReZzMOJf+vV1nOdyr2KVdQlhARs4dKcr4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:46 2025 by rpki-client