$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa File: b640e40a-1d4d-3423-99a0-815a476ab16e.roa (raw, json) Hash identifier: nVF080ReID8AGuJBBN77e7dmUIwIchravv3WrfnUVRI= Subject key identifier: C4:70:93:20:34:FA:D5:2B:F5:8C:6F:F8:96:A8:CE:19:9B:0C:14:F4 Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584B434C57F2419384ECC6BD7C60 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 14230 IP address blocks: 2604:9b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:57:f2:41:93:84:ec:c6:bd:7c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=2d9a59eb-e222-4b8d-8ec6-10af01ceb7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:77:13:e6:4f:a1:f8:7b:35:c6:a6:34:4f: 34:d3:fd:e7:61:a1:93:0f:df:07:5d:32:f1:b7:17: 47:fa:77:68:e6:c2:aa:24:fd:a0:83:fb:2d:66:05: f1:56:e7:d9:62:97:a0:cf:d6:34:59:6b:be:0c:7c: 27:7e:71:2a:5d:1a:c0:54:bd:81:23:ca:56:d7:82: 1e:e2:de:17:d7:1e:f6:fe:2e:18:72:7f:b9:46:a7: 1c:d9:22:f4:6d:43:e1:ac:49:fa:7b:58:a2:7d:22: 82:04:c2:59:95:5e:2c:3d:7e:68:4a:98:81:43:72: 39:24:a9:63:da:d7:55:4a:fa:e5:92:47:c3:d4:bd: e9:fa:67:98:43:72:52:39:9b:8e:53:22:73:8b:51: fb:15:f6:ca:38:9c:be:7b:0a:86:f9:0f:d5:3a:b8: 24:e6:fb:f2:f4:18:ab:b8:2e:c9:03:27:0a:95:b1: 19:25:dc:ad:c2:08:a5:c0:f7:62:73:dc:61:89:80: b5:60:25:d4:40:17:ab:34:bd:e6:ab:2d:a2:01:cf: c4:db:8d:75:de:10:8a:ea:d4:18:39:a4:96:dc:36: 71:f9:b6:12:72:27:7a:8f:62:64:95:ed:85:63:98: ea:c0:5f:c9:57:73:19:e9:d4:bd:59:8b:a8:1b:7e: be:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:70:93:20:34:FA:D5:2B:F5:8C:6F:F8:96:A8:CE:19:9B:0C:14:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv6: 2604:9b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d9:03:ad:00:ed:81:93:bc:83:d6:69:80:71:93:81:92:b4: ba:6f:f5:53:82:89:9b:37:ab:23:8d:55:ff:13:63:87:ce:44: b0:af:38:95:1e:f0:21:0a:8a:40:d8:ef:f1:3a:1a:50:c9:da: bb:b3:21:ec:b3:46:65:1f:2e:fd:26:5d:04:fa:57:81:a9:80: 19:41:b9:92:5b:34:36:ab:72:52:de:1f:da:0e:87:e5:84:8a: f6:56:72:dc:a9:93:27:1e:30:f4:be:ce:e3:c6:26:56:bf:a9: d6:98:ac:3b:af:c7:b5:97:06:da:30:a6:3d:f2:01:f8:29:4c: 0c:09:67:03:b1:fa:78:7a:68:c2:a7:5b:94:db:ce:a3:97:49: 16:7f:0b:1f:67:2e:12:b8:20:41:b8:09:d0:96:b9:94:34:ed: 5c:90:fa:5b:79:cb:0a:43:01:1f:54:0c:5a:37:48:fc:b1:fb: 5f:f0:ae:32:41:5b:fb:c3:0b:8a:ea:63:dc:ec:62:61:15:08: df:6b:e7:24:aa:22:04:e2:c2:0c:84:05:20:04:b0:2c:b4:55: b9:ad:90:81:51:de:b0:8a:77:16:f5:83:a9:b1:85:f3:b7:55: 51:9a:e7:15:b3:3a:ab:af:02:d1:28:2a:7b:dd:ad:44:1a:51: 62:8a:14:41 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtDTFfyQZOE7Ma9fGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MmQ5YTU5ZWItZTIyMi00YjhkLThlYzYtMTBhZjAxY2ViN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlJ3E+ZPofh7NcamNE800/3nYaGTD98HXTLx txdH+ndo5sKqJP2gg/stZgXxVufZYpegz9Y0WWu+DHwnfnEqXRrAVL2BI8pW14Ie 4t4X1x72/i4Ycn+5Rqcc2SL0bUPhrEn6e1iifSKCBMJZlV4sPX5oSpiBQ3I5JKlj 2tdVSvrlkkfD1L3p+meYQ3JSOZuOUyJzi1H7FfbKOJy+ewqG+Q/VOrgk5vvy9Bir uC7JAycKlbEZJdytwgilwPdic9xhiYC1YCXUQBerNL3mqy2iAc/E24113hCK6tQY OaSW3DZx+bYScid6j2Jkle2FY5jqwF/JV3MZ6dS9WYuoG36+NwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMRwkyA0+tUr9Yxv+JaozhmbDBT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvYjY0MGU0MGEtMWQ0ZC0z NDIzLTk5YTAtODE1YTQ3NmFiMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSbADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAK2QOtAO2Bk7yD1mmAcZOBkrS6b/VTgombN6sjjVX/E2OHzkSwrziV HvAhCopA2O/xOhpQydq7syHss0ZlHy79Jl0E+leBqYAZQbmSWzQ2q3JS3h/aDofl hIr2VnLcqZMnHjD0vs7jxiZWv6nWmKw7r8e1lwbaMKY98gH4KUwMCWcDsfp4emjC p1uU286jl0kWfwsfZy4SuCBBuAnQlrmUNO1ckPpbecsKQwEfVAxaN0j8sftf8K4y QVv7wwuK6mPc7GJhFQjfa+ckqiIE4sIMhAUgBLAstFW5rZCBUd6wincW9YOpsYXz t1VRmucVszqrrwLRKCp73a1EGlFiihRB -----END CERTIFICATE-----Generated at Tue Oct 21 07:25:46 2025 by rpki-client