$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa File: ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa (raw, json) Hash identifier: SR2mVcr0ZqS37faKHLzH/hySWuXfLLFQuq9LAhYCBug= Subject key identifier: E2:BD:FC:84:B5:46:14:E8:DA:37:3A:95:A1:2D:D2:EF:F9:04:CC:A6 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584AFC1BF2D5DB652D27D1C08380 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 62856 IP address blocks: 2620:130:f000::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f2:d5:db:65:2d:27:d1:c0:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=295f8b18-c2a3-4884-a571-835157734d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:87:e2:9f:80:d7:4f:bc:54:8c:28:c4:61: 8f:29:65:d1:b8:79:5b:e5:f4:19:87:96:fd:71:28: bf:6c:1c:02:9d:33:b7:23:3d:a4:a6:cc:64:ae:c6: 73:6b:4b:56:7a:98:52:60:c4:c7:2f:af:e9:27:99: a0:29:17:87:08:11:94:4c:b5:f4:26:2b:69:c9:21: dc:6c:33:0c:3e:7c:b5:b1:bb:22:a8:9a:df:c8:33: 78:50:d9:a5:c6:87:7f:15:e0:cd:28:f2:f7:1d:9c: 81:18:5f:e9:a6:5e:8b:c1:c8:75:eb:21:85:4c:0e: c6:be:fa:d1:f3:68:fe:99:02:7a:d8:11:85:61:83: 9f:37:f0:d8:f2:9c:32:97:ed:b7:5e:0a:cd:b3:2b: ff:d8:59:6a:d0:4b:83:70:39:71:3f:8a:8b:97:10: 35:11:16:9b:6d:71:7d:37:99:0f:0a:6a:28:93:90: be:47:3a:96:72:b3:0b:2e:cb:56:9d:ab:a1:cc:42: 75:45:06:cb:a7:61:1a:ec:b5:98:a8:09:56:e1:bf: a2:93:c3:4d:e8:e0:a4:5e:89:f7:0e:ce:34:4f:a1: d4:eb:00:5e:89:84:57:4c:7b:2d:31:50:4d:a5:cf: b7:c3:f8:19:90:17:33:8e:62:59:e4:b4:c1:17:bd: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BD:FC:84:B5:46:14:E8:DA:37:3A:95:A1:2D:D2:EF:F9:04:CC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv6: 2620:130:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:65:3a:08:14:03:63:20:e9:89:b4:2e:10:5e:4d:cd:02:b3: 75:4b:60:78:c8:65:9b:78:3f:62:1c:26:32:89:57:cb:92:ec: e2:28:b1:71:b9:05:a3:3f:70:59:84:f9:29:84:6b:67:df:e8: bc:5c:27:4c:e0:5d:4d:b4:48:1e:57:dc:21:c2:98:e0:a6:c7: c7:b6:23:52:24:f8:87:b3:07:d3:65:83:59:38:a2:8f:1e:60: 83:ef:6a:30:0a:76:04:d6:e9:eb:c2:17:0b:a2:05:0a:5c:35: fa:a5:0b:8f:b2:42:9f:84:68:55:0e:73:5b:67:56:ff:20:ac: 04:a7:45:2a:74:7b:ce:d0:ae:7d:11:a2:3f:bd:36:c2:a4:c0: d4:38:39:41:75:77:93:dd:36:f0:4f:14:cc:65:eb:8d:e4:3c: 75:c4:aa:a0:dd:93:43:0e:9f:94:a2:a9:04:58:23:51:0b:d3: 85:18:46:a3:51:20:62:12:7b:ba:ed:64:9d:78:a3:60:ec:d5: bb:c0:8e:04:2d:1d:ea:ab:ea:2d:0e:22:83:af:f3:d8:09:6e: e2:82:0e:ca:84:b1:b5:13:21:25:fa:32:70:f9:2c:6e:86:92: 6a:ab:de:2a:98:aa:f5:db:59:6b:ae:3a:68:1f:a2:c9:79:08: cc:e4:61:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8G/LV22UtJ9HAg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk Mjk1ZjhiMTgtYzJhMy00ODg0LWE1NzEtODM1MTU3NzM0ZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSuH4p+A10+8VIwoxGGPKWXRuHlb5fQZh5b9 cSi/bBwCnTO3Iz2kpsxkrsZza0tWephSYMTHL6/pJ5mgKReHCBGUTLX0JitpySHc bDMMPny1sbsiqJrfyDN4UNmlxod/FeDNKPL3HZyBGF/ppl6Lwch16yGFTA7GvvrR 82j+mQJ62BGFYYOfN/DY8pwyl+23XgrNsyv/2Flq0EuDcDlxP4qLlxA1ERabbXF9 N5kPCmook5C+RzqWcrMLLstWnauhzEJ1RQbLp2Ea7LWYqAlW4b+ik8NN6OCkXon3 Ds40T6HU6wBeiYRXTHstMVBNpc+3w/gZkBczjmJZ5LTBF70O3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOK9/IS1RhTo2jc6laEt0u/5BMymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvYWQ4YjQwZTUtZjNmNC0z MmI2LWI2ZDktZWFmNDViMTM3MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABMPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVlOggUA2Mg6Ym0LhBeTc0Cs3VLYHjIZZt4P2IcJjKJV8uS7OIo sXG5BaM/cFmE+SmEa2ff6LxcJ0zgXU20SB5X3CHCmOCmx8e2I1Ik+IezB9Nlg1k4 oo8eYIPvajAKdgTW6evCFwuiBQpcNfqlC4+yQp+EaFUOc1tnVv8grASnRSp0e87Q rn0Roj+9NsKkwNQ4OUF1d5PdNvBPFMxl643kPHXEqqDdk0MOn5SiqQRYI1EL04UY RqNRIGISe7rtZJ14o2Ds1bvAjgQtHeqr6i0OIoOv89gJbuKCDsqEsbUTISX6MnD5 LG6Gkmqr3iqYqvXbWWuuOmgfosl5CMzkYfE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:49 2025 by rpki-client