$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa File: d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa (raw, json) Hash identifier: IjBOqRHVl0osI2xUsWR6oD572WynnJsZ+ecakoiapbE= Subject key identifier: 76:E0:D1:BA:9A:8E:BF:19:33:E7:D6:2F:5B:05:23:5F:BE:FC:4E:2E Certificate issuer: /CN=1a319486-03d5-4fb1-997e-228350330847 Certificate serial: 010D0C9F4328584B3556F09453D41A91C9C01A40 Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2602:815:3003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f0:94:53:d4:1a:91:c9:c0:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a319486-03d5-4fb1-997e-228350330847 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=a311804f-2e20-4c17-867f-388fd4565713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:cd:00:b9:8f:d9:a4:bf:97:91:32:7b:62: 22:06:6a:a9:5f:26:c8:d6:f1:c8:ff:42:d7:5b:24: bb:10:33:cc:08:76:bf:1c:fa:50:ab:73:e9:f7:29: 14:e5:3e:7e:01:3a:58:e5:c5:53:e1:de:7d:93:c6: bd:b2:3e:45:11:19:88:11:72:c3:fd:af:9d:79:01: e5:41:b9:7d:6c:07:90:93:d5:c4:6f:63:f6:ff:a1: be:7f:e7:5b:a3:51:a6:8d:18:b9:99:70:e2:a0:a4: 9b:83:28:c2:7a:83:80:86:a3:4f:15:fb:be:41:a8: 07:75:7f:2c:0f:57:ac:3c:d8:08:47:03:ea:d1:87: 18:eb:30:14:e9:d1:b2:65:76:e6:84:ff:5f:b0:7b: de:d3:43:27:94:91:a4:17:4f:0f:33:db:91:ba:ab: 1a:99:d6:bb:9c:f9:ab:8a:b2:c4:7f:aa:5c:9f:30: 48:b6:61:92:09:1d:17:ea:5e:fa:10:d0:7a:47:ce: b1:47:2b:7e:e6:10:81:01:5b:05:7c:c4:4e:5d:f7: 3e:d2:19:e7:76:35:22:62:85:e5:0a:30:45:ce:2d: 18:ad:04:77:0c:42:24:52:db:54:99:35:0b:ad:43: cc:06:51:0d:40:22:cf:6e:a8:6f:8d:a1:09:7d:ac: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E0:D1:BA:9A:8E:BF:19:33:E7:D6:2F:5B:05:23:5F:BE:FC:4E:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl X509v3 Authority Key Identifier: keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer sbgp-ipAddrBlock: critical IPv6: 2602:815:3003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b7:13:47:53:98:69:32:66:94:51:92:e4:f0:46:23:98:b8: 7d:1b:9c:dc:c9:6e:a9:eb:88:54:41:02:09:27:56:0a:f4:21: ba:65:9f:fe:da:70:53:2f:6a:5b:d7:2e:a5:71:6d:5b:51:89: 5b:23:29:3c:74:d9:76:4f:80:95:fc:fb:4f:50:f7:d3:fa:49: 18:07:a7:78:54:68:2f:4d:18:5a:f1:36:ee:81:7c:01:31:7b: 78:b8:cd:08:25:58:54:fc:08:74:41:8c:19:71:e3:ce:4e:20: 01:1a:37:f7:d0:8a:c0:13:a4:16:83:85:3f:f8:28:b4:bc:29: f7:2c:3b:c7:64:c8:d3:aa:e7:f2:48:e9:33:35:fd:2c:4d:9d: d9:aa:37:b1:0f:93:53:cb:ca:20:ac:c6:8a:77:fc:3e:69:0b: 96:64:3b:63:70:ae:33:10:1e:62:21:49:fd:8b:0b:d8:c5:7b: 98:03:f0:ab:dd:41:26:33:c0:6b:af:8b:58:86:45:83:17:33: aa:f6:47:2f:86:4f:79:5f:95:23:e9:d5:0a:a0:a6:43:71:08: e5:79:9c:4c:68:bd:1e:5f:08:14:95:c6:fa:1b:70:26:eb:da: 29:68:4d:ca:e0:45:03:f0:71:f7:be:dc:7b:44:6f:54:62:c4: e6:59:9e:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs1VvCUU9QakcnAGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEzMTk0ODYtMDNkNS00ZmIxLTk5N2UtMjI4MzUwMzMw ODQ3MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YTMxMTgwNGYtMmUyMC00YzE3LTg2N2YtMzg4ZmQ0NTY1NzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSbNALmP2aS/l5Eye2IiBmqpXybI1vHI/0LX WyS7EDPMCHa/HPpQq3Pp9ykU5T5+ATpY5cVT4d59k8a9sj5FERmIEXLD/a+deQHl Qbl9bAeQk9XEb2P2/6G+f+dbo1GmjRi5mXDioKSbgyjCeoOAhqNPFfu+QagHdX8s D1esPNgIRwPq0YcY6zAU6dGyZXbmhP9fsHve00MnlJGkF08PM9uRuqsamda7nPmr irLEf6pcnzBItmGSCR0X6l76ENB6R86xRyt+5hCBAVsFfMROXfc+0hnndjUiYoXl CjBFzi0YrQR3DEIkUttUmTULrUPMBlENQCLPbqhvjaEJfawe3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHbg0bqajr8ZM+fWL1sFI1++/E4uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMx OTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgzNTAzMzA4NDcvZDM4OWU3ZjQtYmEwNS0z ZDJlLTkyM2EtYjJhNjY4N2QzZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWEzMTk0ODYtMDNkNS00ZmIxLTk5 N2UtMjI4MzUwMzMwODQ3LzFhMzE5NDg2LTAzZDUtNGZiMS05OTdlLTIyODM1MDMz MDg0Ny5jcmwwHwYDVR0jBBgwFoAUojoUY2Szy8/8gGpP64Xxl3Adxp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMxOTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgz NTAzMzA4NDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFTAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABS3E0dTmGkyZpRRkuTwRiOYuH0bnNzJbqnriFRBAgknVgr0Ibpl n/7acFMvalvXLqVxbVtRiVsjKTx02XZPgJX8+09Q99P6SRgHp3hUaC9NGFrxNu6B fAExe3i4zQglWFT8CHRBjBlx485OIAEaN/fQisATpBaDhT/4KLS8KfcsO8dkyNOq 5/JI6TM1/SxNndmqN7EPk1PLyiCsxop3/D5pC5ZkO2NwrjMQHmIhSf2LC9jFe5gD 8KvdQSYzwGuvi1iGRYMXM6r2Ry+GT3lflSPp1QqgpkNxCOV5nExovR5fCBSVxvob cCbr2iloTcrgRQPwcfe+3HtEb1RixOZZnv4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:33 2025 by rpki-client