$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e165d621-9060-3e34-b9e8-9129d9c6f607.roa File: e165d621-9060-3e34-b9e8-9129d9c6f607.roa (raw, json) Hash identifier: +ZUPqvpHC0OGAHr+iIrpDGmz6gmyGbizzoS43ftNlmc= Subject key identifier: 7E:5D:3A:8D:17:02:3C:0A:CB:27:71:FB:5D:14:A1:5B:44:E5:6B:A1 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B64CE3666D573AD2E9D765A00 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e165d621-9060-3e34-b9e8-9129d9c6f607.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36492 IP address blocks: 2604:ca00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:36:66:d5:73:ad:2e:9d:76:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=de73acaf-cca6-498a-a85d-028c5716e3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5b:3b:78:da:c7:b8:67:54:bc:57:8f:fb:01: d3:3c:65:53:44:d9:b9:85:f2:35:f1:1d:95:21:c1: b9:34:46:d6:29:c0:85:2e:1a:4d:96:c1:ea:9d:9b: ab:9c:86:77:23:9e:3e:5d:04:d5:ec:90:c1:50:2c: f4:dc:93:a4:5b:51:dc:f4:57:a5:6b:ab:2c:bf:21: d3:ef:4c:bb:ef:bd:ce:2e:d1:0a:2e:e9:0f:cd:6d: 47:c7:f4:3e:8b:da:97:5e:5c:e3:38:88:d4:d6:1e: a8:01:67:2f:a4:21:f2:7b:2d:06:6c:23:41:9c:d5: 46:b9:60:c0:0e:6e:05:b6:9b:90:11:b4:60:1a:68: 00:01:90:73:19:f7:f1:f5:c4:5f:30:c9:dc:4e:fb: 14:08:5a:d8:ee:3b:a8:13:3c:dd:72:d5:69:42:9d: 0b:44:0b:0b:d3:39:d5:ef:ae:b8:84:ec:ff:de:93: 26:87:cd:f9:cc:6b:55:e4:54:53:16:1f:76:df:27: 93:a5:1e:a3:81:3d:4b:be:76:74:fd:4b:aa:10:59: bc:05:9b:6a:1d:cb:cc:2d:c5:0d:23:09:92:32:cb: 28:5e:9a:60:aa:6d:34:ea:5c:92:48:ab:42:58:df: 8b:2c:9a:aa:2f:69:e0:d4:90:0c:ed:ac:78:7a:97: 36:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5D:3A:8D:17:02:3C:0A:CB:27:71:FB:5D:14:A1:5B:44:E5:6B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e165d621-9060-3e34-b9e8-9129d9c6f607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv6: 2604:ca00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:44:e9:88:c6:17:b3:98:c5:b0:da:7a:8a:46:51:c5:dd:91: 77:1d:61:06:b1:41:27:5f:65:9f:ef:eb:ad:ab:19:92:ce:39: 9c:e6:c8:30:4e:74:3b:e5:c1:c5:33:1d:c4:5f:39:d9:42:a6: cc:20:b4:39:5c:4f:75:b8:4f:f9:37:cb:49:e9:0e:39:9d:66: 2a:42:24:f2:8d:27:d9:3b:8d:93:51:b6:c9:92:b2:91:a9:a4: 43:36:65:35:b1:a1:16:ea:98:ba:a4:0b:4c:3a:bc:8a:21:93: de:9e:b9:cc:29:ea:da:c8:74:89:c1:c8:b3:52:48:3b:5c:1a: a0:f7:1f:ed:eb:4b:89:05:42:20:1a:21:32:ed:54:5e:2e:c0: 9e:62:29:36:32:77:f5:25:99:a6:cb:dd:70:cd:3f:a1:06:ca: 0e:26:3b:4c:8b:12:f9:9a:fd:c4:03:1c:fc:66:f8:63:5b:81: de:54:86:95:de:a9:c9:ef:66:f9:18:91:7c:37:08:99:69:0a: 74:a0:d7:b3:14:da:a1:04:6a:06:cf:ad:c8:fa:4e:4a:72:ae: be:51:1a:4c:0a:80:00:3d:19:0a:28:51:05:18:00:fd:a4:83: 70:8f:79:bc:56:23:46:16:b2:59:db:bc:09:3a:0c:65:f2:a6: 8b:68:ec:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtkzjZm1XOtLp12WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGU3M2FjYWYtY2NhNi00OThhLWE4NWQtMDI4YzU3MTZlM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVs7eNrHuGdUvFeP+wHTPGVTRNm5hfI18R2V IcG5NEbWKcCFLhpNlsHqnZurnIZ3I54+XQTV7JDBUCz03JOkW1Hc9Fela6ssvyHT 70y7773OLtEKLukPzW1Hx/Q+i9qXXlzjOIjU1h6oAWcvpCHyey0GbCNBnNVGuWDA Dm4FtpuQEbRgGmgAAZBzGffx9cRfMMncTvsUCFrY7juoEzzdctVpQp0LRAsL0znV 7664hOz/3pMmh835zGtV5FRTFh923yeTpR6jgT1LvnZ0/UuqEFm8BZtqHcvMLcUN IwmSMssoXppgqm006lySSKtCWN+LLJqqL2ng1JAM7ax4epc2LwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH5dOo0XAjwKyydx+10UoVtE5WuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZTE2NWQ2MjEtOTA2MC0z ZTM0LWI5ZTgtOTEyOWQ5YzZmNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTKADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaROmIxhezmMWw2nqKRlHF3ZF3HWEGsUEnX2Wf7+utqxmSzjmc5sgw TnQ75cHFMx3EXznZQqbMILQ5XE91uE/5N8tJ6Q45nWYqQiTyjSfZO42TUbbJkrKR qaRDNmU1saEW6pi6pAtMOryKIZPenrnMKerayHSJwcizUkg7XBqg9x/t60uJBUIg GiEy7VReLsCeYik2Mnf1JZmmy91wzT+hBsoOJjtMixL5mv3EAxz8ZvhjW4HeVIaV 3qnJ72b5GJF8NwiZaQp0oNezFNqhBGoGz63I+k5Kcq6+URpMCoAAPRkKKFEFGAD9 pINwj3m8ViNGFrJZ27wJOgxl8qaLaOy4 -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:35 2025 by rpki-client