$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa File: cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa (raw, json) Hash identifier: qPcVd+79inHiC5egZSnCxXnq8N9+8rF3i9MjP1XV3uo= Subject key identifier: 02:51:9A:97:F7:B2:03:6A:2B:D8:D9:D5:09:9E:4B:B6:0B:9F:17:43 Certificate issuer: /CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Certificate serial: 010D0C9F4328584B2066D5A83A4D22E811579600 Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 19229 IP address blocks: 2604:97c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:d5:a8:3a:4d:22:e8:11:57:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=2ae48cd8-3a64-45ad-86ea-3b6a2f6456c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:54:be:3e:5e:5a:17:75:4f:96:36:d6:0c: 6c:a1:5a:db:cb:57:ee:b1:78:cc:4a:5f:c4:16:89: a7:57:3b:59:0d:40:85:a1:af:d6:c4:fa:49:a0:5f: ab:fa:3f:a1:b0:f0:63:9f:9e:e5:8b:4f:d8:ee:f7: 9f:e1:f8:e5:61:63:22:35:18:bd:de:84:fb:82:74: a4:a1:4f:2b:d3:db:83:73:64:79:66:7e:58:94:14: 5b:e3:bb:85:af:75:9f:12:f1:63:f1:75:39:6f:89: fb:15:ff:93:38:41:4b:61:e2:4b:33:72:d6:80:97: 6b:7b:f3:1b:a3:ec:2a:79:f9:22:44:22:39:da:c1: 2e:e2:5d:18:e2:31:2e:83:79:ab:06:ec:76:d1:6a: 63:17:f4:fa:81:3f:df:4a:2f:23:19:ae:80:8e:3c: 2a:51:8c:82:e6:f7:20:4a:0e:05:1e:94:74:27:18: 77:c8:21:af:a8:6d:79:dd:d1:04:8b:c8:1c:39:cf: 01:d3:d3:5d:c7:dc:20:dd:6e:0f:2c:7f:2d:6e:3d: 54:34:84:aa:23:3f:93:e4:25:83:9f:9e:d7:62:d5: 39:71:d9:20:a3:f9:83:07:30:8c:b1:78:cb:62:97: 6b:b6:71:13:98:92:1d:59:48:f4:3d:79:ff:9b:e2: 9a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:51:9A:97:F7:B2:03:6A:2B:D8:D9:D5:09:9E:4B:B6:0B:9F:17:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl X509v3 Authority Key Identifier: keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer sbgp-ipAddrBlock: critical IPv6: 2604:97c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:bc:a7:4b:e4:9e:7f:af:f2:8b:c3:a7:28:dc:1c:df:9d:ba: 2a:af:ce:00:0a:31:d1:9b:a7:a2:cb:a8:e1:a2:71:f6:c7:07: 32:c6:0f:b8:90:36:08:b2:37:ca:8e:ec:32:68:11:94:9c:fc: f7:16:ff:27:71:cb:8c:09:3b:32:4c:ef:56:f2:73:6f:69:cf: 6f:97:30:c7:fd:eb:0a:5e:a8:bd:5f:ef:78:16:03:b8:aa:1a: e4:00:b2:bb:57:95:0d:c6:85:db:23:55:21:29:c8:eb:78:7d: 6a:dc:01:d4:eb:55:0c:d3:1d:58:dd:d6:49:d9:7a:da:06:67: 51:ca:b5:34:2d:74:c6:0f:f8:cb:7d:a3:71:7e:85:6b:ea:8c: cc:16:b3:c4:25:5f:69:7d:4c:3f:28:40:2f:9b:de:60:e4:a8: 4b:3f:d7:08:3e:46:1c:87:4c:e4:d5:da:15:f5:08:6b:d4:8a: b5:16:7d:b8:af:3e:76:42:a9:68:ee:e1:4a:0d:e4:eb:20:f7: 67:b8:68:fd:09:b3:31:46:9a:3f:94:a8:1f:9e:0b:4b:90:ca: d9:1e:23:85:b4:9c:6b:20:80:ab:3e:13:2a:bf:f7:20:ae:0e: b5:3a:cb:d6:3c:d2:4d:05:a8:83:e7:01:4f:3c:a2:10:de:4f: 98:53:34:f7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsgZtWoOk0i6BFXlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmMTQyZGYtNmRlMi00N2RjLWJlNGYtYmYwOWJkZWMw NTUxMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MmFlNDhjZDgtM2E2NC00NWFkLTg2ZWEtM2I2YTJmNjQ1NmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI9Uvj5eWhd1T5Y21gxsoVrby1fusXjMSl/E FomnVztZDUCFoa/WxPpJoF+r+j+hsPBjn57li0/Y7vef4fjlYWMiNRi93oT7gnSk oU8r09uDc2R5Zn5YlBRb47uFr3WfEvFj8XU5b4n7Ff+TOEFLYeJLM3LWgJdre/Mb o+wqefkiRCI52sEu4l0Y4jEug3mrBux20WpjF/T6gT/fSi8jGa6AjjwqUYyC5vcg Sg4FHpR0Jxh3yCGvqG153dEEi8gcOc8B09Ndx9wg3W4PLH8tbj1UNISqIz+T5CWD n57XYtU5cdkgo/mDBzCMsXjLYpdrtnETmJIdWUj0PXn/m+KaawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAJRmpf3sgNqK9jZ1QmeS7YLnxdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYx NDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5YmRlYzA1NTEvY2ZiMzFiOGYtYTVmYi0z N2Y3LWExNjEtOWM5ZjYzNjE4MGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWRmMTQyZGYtNmRlMi00N2RjLWJl NGYtYmYwOWJkZWMwNTUxLzlkZjE0MmRmLTZkZTItNDdkYy1iZTRmLWJmMDliZGVj MDU1MS5jcmwwHwYDVR0jBBgwFoAU9p1ZPdpWapm9hqkVZ8a+YNfZvIcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYxNDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5 YmRlYzA1NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSXwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAMvKdL5J5/r/KLw6co3Bzfnboqr84ACjHRm6eiy6jhonH2xwcyxg+4 kDYIsjfKjuwyaBGUnPz3Fv8nccuMCTsyTO9W8nNvac9vlzDH/esKXqi9X+94FgO4 qhrkALK7V5UNxoXbI1UhKcjreH1q3AHU61UM0x1Y3dZJ2XraBmdRyrU0LXTGD/jL faNxfoVr6ozMFrPEJV9pfUw/KEAvm95g5KhLP9cIPkYch0zk1doV9Qhr1Iq1Fn24 rz52Qqlo7uFKDeTrIPdnuGj9CbMxRpo/lKgfngtLkMrZHiOFtJxrIICrPhMqv/cg rg61OsvWPNJNBaiD5wFPPKIQ3k+YUzT3 -----END CERTIFICATE-----Generated at Mon Oct 20 08:08:14 2025 by rpki-client