$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/e53bee3d-7e95-3d21-9b67-0a49a2b5464d.roa File: e53bee3d-7e95-3d21-9b67-0a49a2b5464d.roa (raw, json) Hash identifier: ridQLzvCWQGh7YGUu+ZM1a3N8zjSz7g29jiX23JpHTQ= Subject key identifier: 5C:42:3E:2C:1E:E1:27:74:1F:87:5D:54:6F:2C:69:00:55:D0:A7:13 Certificate issuer: /CN=d106a247-9308-46e9-9d88-ae987a6bdace Certificate serial: 010D0C9F4328584B609C8F8DD855BD8059847600 Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/e53bee3d-7e95-3d21-9b67-0a49a2b5464d.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 50131 IP address blocks: 2604:9cc0:2000::/38 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8f:8d:d8:55:bd:80:59:84:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=9f598cac-e03e-4c96-87c3-86da9bf4a633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:76:99:e0:f1:df:38:88:4c:33:a5:0e:f1: c3:08:3d:51:dd:38:d7:21:bf:46:8a:10:1d:70:28: e9:4b:ff:4e:af:c1:3a:91:c2:7c:bb:b8:83:da:b9: 3f:e1:7f:9e:e8:9d:74:ec:c2:3c:18:5c:79:7a:c0: 2c:43:9c:15:72:95:5b:60:8f:7a:66:9d:16:1d:7d: b2:a2:75:ec:68:e1:dd:4f:58:bc:e6:7b:40:74:3c: 0f:95:d3:6a:81:c0:26:09:be:27:d3:fa:eb:86:09: 08:e0:c7:7d:47:fd:76:93:53:73:7d:3c:ed:83:25: 37:cf:27:51:60:92:77:87:ba:82:57:78:bc:98:be: 67:18:72:dd:eb:f7:f8:b7:fc:49:38:8e:7f:4d:6a: ec:00:96:f3:23:3a:14:94:02:0f:2b:59:97:84:f5: 6f:34:52:f5:65:13:17:fa:8d:4b:75:ce:7c:02:d3: af:cb:3e:bc:32:e6:5e:39:cb:85:d7:6d:1b:ef:6a: 51:63:e9:21:f2:1f:b1:ee:c9:35:82:11:a1:a9:88: bf:11:4b:42:60:99:97:17:c1:06:13:9b:c7:7d:67: fc:78:36:5d:c8:f6:98:5d:e9:dc:ae:23:37:1d:04: 05:5b:af:2a:63:4f:cb:b4:f8:f8:0e:49:8d:41:3d: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:42:3E:2C:1E:E1:27:74:1F:87:5D:54:6F:2C:69:00:55:D0:A7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/e53bee3d-7e95-3d21-9b67-0a49a2b5464d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl X509v3 Authority Key Identifier: keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer sbgp-ipAddrBlock: critical IPv6: 2604:9cc0:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:bf:98:77:45:43:ee:11:90:1a:aa:47:8a:5f:09:fd:d4:b6: 57:93:1a:59:3a:3a:98:c5:a8:98:0d:8c:cb:52:9e:05:32:a6: 5a:2e:90:f6:86:27:7b:48:57:61:63:1b:40:c4:9d:3e:0f:bc: 40:c3:48:c9:1c:8c:57:94:1b:eb:78:20:1b:a7:34:bb:96:55: 54:c3:ec:e4:52:aa:62:55:23:28:df:4e:2f:0c:bd:e3:d9:95: 1d:06:14:fa:51:74:da:80:81:31:2b:fb:b8:7a:3f:ca:d4:f8: 10:e0:98:f3:e6:b5:25:99:c0:28:b5:97:21:87:c2:dc:51:76: 67:8f:8a:bf:ac:bc:db:aa:3b:2e:ec:db:7b:64:5d:39:fc:3d: ad:46:b8:c2:6b:2c:c3:3c:9f:ef:03:79:ff:20:54:25:c1:c6: 4e:6b:cf:4b:99:d8:3f:d5:41:aa:55:80:1f:80:d0:2e:0c:44: dc:50:a7:f4:97:35:5d:98:c0:1f:e4:4d:43:8b:d5:ba:32:11: 1c:4d:1b:d9:3f:80:f9:bf:d5:9b:6c:69:ef:3b:85:b6:8d:51: 80:27:2f:a6:86:c1:c8:1c:d2:1b:b8:a5:18:1b:c4:22:fd:25: 5b:a8:bf:33:f6:4f:ef:78:33:a3:a8:86:05:db:5a:7b:5b:28: 0a:d4:57:26 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtgnI+N2FW9gFmEdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEwNmEyNDctOTMwOC00NmU5LTlkODgtYWU5ODdhNmJk YWNlMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk OWY1OThjYWMtZTAzZS00Yzk2LTg3YzMtODZkYTliZjRhNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+d2meDx3ziITDOlDvHDCD1R3TjXIb9GihAd cCjpS/9Or8E6kcJ8u7iD2rk/4X+e6J107MI8GFx5esAsQ5wVcpVbYI96Zp0WHX2y onXsaOHdT1i85ntAdDwPldNqgcAmCb4n0/rrhgkI4Md9R/12k1NzfTztgyU3zydR YJJ3h7qCV3i8mL5nGHLd6/f4t/xJOI5/TWrsAJbzIzoUlAIPK1mXhPVvNFL1ZRMX +o1Ldc58AtOvyz68MuZeOcuF120b72pRY+kh8h+x7sk1ghGhqYi/EUtCYJmXF8EG E5vHfWf8eDZdyPaYXencriM3HQQFW68qY0/LtPj4DkmNQT0efQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFxCPiwe4Sd0H4ddVG8saQBV0KcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTA2 YTI0Ny05MzA4LTQ2ZTktOWQ4OC1hZTk4N2E2YmRhY2UvZTUzYmVlM2QtN2U5NS0z ZDIxLTliNjctMGE0OWEyYjU0NjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDEwNmEyNDctOTMwOC00NmU5LTlk ODgtYWU5ODdhNmJkYWNlL2QxMDZhMjQ3LTkzMDgtNDZlOS05ZDg4LWFlOTg3YTZi ZGFjZS5jcmwwHwYDVR0jBBgwFoAU59w75Vb/HV/fyvRlHD0ubP3+gjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTA2YTI0Ny05MzA4LTQ2ZTktOWQ4OC1hZTk4 N2E2YmRhY2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgScwCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARr+Yd0VD7hGQGqpHil8J/dS2V5MaWTo6mMWomA2My1KeBTKmWi6Q 9oYne0hXYWMbQMSdPg+8QMNIyRyMV5Qb63ggG6c0u5ZVVMPs5FKqYlUjKN9OLwy9 49mVHQYU+lF02oCBMSv7uHo/ytT4EOCY8+a1JZnAKLWXIYfC3FF2Z4+Kv6y826o7 Luzbe2RdOfw9rUa4wmsswzyf7wN5/yBUJcHGTmvPS5nYP9VBqlWAH4DQLgxE3FCn 9Jc1XZjAH+RNQ4vVujIRHE0b2T+A+b/Vm2xp7zuFto1RgCcvpobByBzSG7ilGBvE Iv0lW6i/M/ZP73gzo6iGBdtae1soCtRXJg== -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:14 2025 by rpki-client