$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa File: 3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa (raw, json) Hash identifier: fimtSSYbe1L/FYkrCTnpLxihqd5XL6FevE7+SpOiQ8M= Subject key identifier: 04:9C:82:7E:E1:3B:E6:75:AB:C2:8F:67:EE:09:EB:F9:DE:63:25:8E Certificate issuer: /CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8 Certificate serial: 010D0C9F4328584B047C09577310A51D73D69300 Authority key identifier: 0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 63178 IP address blocks: 2607:6840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:09:57:73:10:a5:1d:73:d6:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=c99faabf-084f-4923-b0f7-969c08f84795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:78:ec:27:82:ce:6e:32:cb:ba:41:c1:ca: 4b:2f:6b:82:c1:25:bf:37:95:e3:d8:4d:0e:a1:09: 5b:55:6b:8a:3e:cd:39:5f:07:4b:1f:19:1f:2f:e5: 6c:e9:97:61:cc:db:fa:35:fc:31:bc:09:aa:93:96: f9:17:80:f1:f4:6e:1c:04:2c:71:d8:63:0c:2c:76: ae:b1:45:77:c8:91:2d:5f:88:02:41:a8:df:aa:6c: 19:48:89:af:9d:e9:89:c2:55:54:58:2d:fc:c5:21: fe:21:dd:6b:0a:4f:48:3b:54:d7:46:95:81:e9:39: 8e:74:87:e3:6f:ac:2e:4e:56:6d:16:86:d5:3c:ec: 5a:73:38:8f:8f:5f:14:da:d3:46:3c:53:6c:7e:27: 8f:af:03:ca:42:39:a7:36:21:ea:8b:b8:98:58:01: 39:ef:16:37:b3:01:2c:74:47:d7:66:58:d1:4b:4c: ce:60:e9:ab:fc:49:0e:25:f3:24:af:0d:27:77:be: bf:70:6f:69:04:1b:bf:70:1b:ad:0f:73:19:61:99: da:63:4c:ac:5b:85:9d:b9:1f:c8:8e:0a:7b:a4:1c: e7:16:5d:49:82:21:3e:04:51:41:d6:dd:86:82:ba: 46:88:95:dc:58:2e:33:19:3b:65:46:2e:6c:52:78: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9C:82:7E:E1:3B:E6:75:AB:C2:8F:67:EE:09:EB:F9:DE:63:25:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl X509v3 Authority Key Identifier: keyid:0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer sbgp-ipAddrBlock: critical IPv6: 2607:6840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:69:40:d7:03:14:38:4a:4b:9b:0b:80:39:89:cc:04:94:9e: 89:98:b2:09:03:92:5f:91:9e:e9:7b:81:85:c2:14:12:02:a7: d9:e1:42:6a:1d:97:c6:ee:5c:2c:2d:a5:e1:01:61:cc:a8:6c: 99:fc:ee:00:06:43:4e:72:f9:5e:46:54:09:40:b8:11:20:bc: 3f:a3:90:cd:49:70:49:b2:4f:2c:c7:42:fa:dd:fe:a0:c8:d3: 5a:2d:c7:84:f5:25:23:2e:69:b5:e2:27:b8:5f:a6:5b:eb:20: 76:b0:69:67:af:d4:a8:0a:e9:eb:61:e5:41:6e:13:88:bb:8d: af:fa:f6:d0:46:ce:73:6f:d3:4c:81:a4:5d:ad:93:0b:a0:18: 8c:29:ad:f8:47:9b:af:5e:93:41:ee:77:19:f6:f1:b6:13:e3: 6b:7a:7f:98:1f:b9:ce:b7:90:e2:82:48:ba:c9:ce:dc:91:cd: 3f:ac:f5:a9:9c:b6:9c:05:61:39:bc:11:92:bb:2e:5f:03:2e: 96:5d:2a:a1:cc:f2:fc:ce:28:73:e7:73:05:ed:a5:40:d8:6c: 97:7a:53:e4:ae:36:a2:42:a7:d7:c2:ac:b8:f5:56:2b:cd:4c: d0:4d:aa:28:4d:5b:9b:7f:2a:0a:64:cc:35:c0:f1:df:1a:66: a8:18:6a:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsEfAlXcxClHXPWkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzZTY2NDYtN2M5OS00OWMwLTljYjAtNTRiOGU0NTc4 OGI4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk Yzk5ZmFhYmYtMDg0Zi00OTIzLWIwZjctOTY5YzA4Zjg0Nzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNp47CeCzm4yy7pBwcpLL2uCwSW/N5Xj2E0O oQlbVWuKPs05XwdLHxkfL+Vs6ZdhzNv6NfwxvAmqk5b5F4Dx9G4cBCxx2GMMLHau sUV3yJEtX4gCQajfqmwZSImvnemJwlVUWC38xSH+Id1rCk9IO1TXRpWB6TmOdIfj b6wuTlZtFobVPOxacziPj18U2tNGPFNsfiePrwPKQjmnNiHqi7iYWAE57xY3swEs dEfXZljRS0zOYOmr/EkOJfMkrw0nd76/cG9pBBu/cButD3MZYZnaY0ysW4WduR/I jgp7pBznFl1JgiE+BFFB1t2GgrpGiJXcWC4zGTtlRi5sUnhO2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAScgn7hO+Z1q8KPZ+4J6/neYyWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZTNl NjY0Ni03Yzk5LTQ5YzAtOWNiMC01NGI4ZTQ1Nzg4YjgvM2IzYWY3ZTItMTFjMy0z ZTEzLTkyY2QtMTljMmQyOTFiNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmUzZTY2NDYtN2M5OS00OWMwLTlj YjAtNTRiOGU0NTc4OGI4LzJlM2U2NjQ2LTdjOTktNDljMC05Y2IwLTU0YjhlNDU3 ODhiOC5jcmwwHwYDVR0jBBgwFoAUDMaPYFMxrylXqe3x1gkGXUdmhO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZTNlNjY0Ni03Yzk5LTQ5YzAtOWNiMC01NGI4 ZTQ1Nzg4YjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdoQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZaUDXAxQ4SkubC4A5icwElJ6JmLIJA5JfkZ7pe4GFwhQSAqfZ4UJq HZfG7lwsLaXhAWHMqGyZ/O4ABkNOcvleRlQJQLgRILw/o5DNSXBJsk8sx0L63f6g yNNaLceE9SUjLmm14ie4X6Zb6yB2sGlnr9SoCunrYeVBbhOIu42v+vbQRs5zb9NM gaRdrZMLoBiMKa34R5uvXpNB7ncZ9vG2E+Nren+YH7nOt5Digki6yc7ckc0/rPWp nLacBWE5vBGSuy5fAy6WXSqhzPL8zihz53MF7aVA2GyXelPkrjaiQqfXwqy49VYr zUzQTaooTVubfyoKZMw1wPHfGmaoGGoY -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:57 2025 by rpki-client