$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa File: 063be228-15cd-3792-9587-8ed8a9cb0646.roa (raw, json) Hash identifier: RhIKBGlJKPpHP0pFx7et6YyUgO91QUrTQtzp9OUAbZE= Subject key identifier: 23:99:EC:F4:13:A7:B4:AF:A2:11:41:55:05:09:0B:D0:18:76:A9:DA Certificate issuer: /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Certificate serial: 010D0C9F4328584B583C82521608D05E9CAD36C0 Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 21922 IP address blocks: 2604:c040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:82:52:16:08:d0:5e:9c:ad:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=451182b6-a9e6-4b47-b4ad-aad420a45033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:3c:b3:a7:c5:73:42:e6:64:25:9b:d1:6a: e9:4c:65:f0:75:ce:c0:42:72:f2:96:ae:66:ae:b4: 97:19:ce:a0:72:eb:08:92:e7:ff:c8:21:cf:7f:6c: 8b:c4:9f:0a:9f:16:00:58:5b:ff:86:95:d5:cc:a1: 87:ba:93:c4:36:6a:0c:0c:f8:3a:00:b3:25:70:ec: 17:6f:e6:da:c0:5e:bb:b4:2e:0b:84:fc:df:f6:4b: 68:76:34:b6:ac:37:5e:8c:2b:21:d1:4b:86:e9:dd: 2d:0c:86:c7:6d:49:33:9b:a0:21:0d:42:84:32:e2: 33:df:90:31:79:42:d1:84:68:29:a3:76:ec:04:44: 51:b7:92:41:f4:bf:ef:eb:b5:d3:b3:66:58:ce:35: 08:c0:8c:bd:f9:f3:3b:35:54:9b:0f:be:52:df:ec: d1:93:78:60:d0:f9:6c:0d:57:99:a9:ec:01:6d:64: 09:93:40:43:c7:08:b9:59:d1:a1:5f:14:e7:04:f4: 6a:d0:13:d4:3b:63:9c:d9:ad:21:37:32:cb:e2:64: b9:a8:49:02:28:ad:8f:e6:01:75:9b:fd:e5:16:79: d3:89:b1:2e:48:6d:87:a6:a3:0e:64:96:a6:59:76: 9d:40:98:49:15:39:c8:6b:3e:7d:ee:2c:78:59:8f: 6b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:99:EC:F4:13:A7:B4:AF:A2:11:41:55:05:09:0B:D0:18:76:A9:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl X509v3 Authority Key Identifier: keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer sbgp-ipAddrBlock: critical IPv6: 2604:c040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:14:21:c1:2e:8b:a0:23:34:3b:eb:67:2c:6b:eb:07:6e:3d: be:38:74:58:76:fd:47:14:da:0d:cf:a7:9a:f4:ed:67:af:44: 7c:03:51:2d:bc:db:7c:1e:94:e1:28:98:7f:d8:0f:d1:49:5b: 65:e2:56:14:08:8b:db:38:e2:4b:6c:13:14:70:37:47:9d:9e: a2:1c:eb:78:82:0f:f8:d8:12:13:41:94:90:66:d8:b5:47:b3: 87:82:b4:27:86:4f:ca:d4:9c:a4:18:a6:da:c3:9d:bd:6f:bb: 2a:d4:76:71:56:3d:7e:87:b4:c9:a5:80:ea:d2:1c:da:e7:c9: 84:67:a6:49:b3:8a:4e:76:c8:5b:ec:d2:fd:b5:b7:55:10:d8: 80:e1:69:ab:3b:f2:2a:2c:af:83:17:25:e8:fa:e6:b2:31:8c: 4e:fd:9c:ae:d5:09:63:44:0d:15:32:c6:82:2f:25:28:15:7b: 89:b3:b2:0b:5a:0d:68:15:fd:9e:52:09:0b:a6:80:5a:f4:7c: f7:2e:12:b8:b3:1e:20:74:59:6b:4e:d9:d4:f5:f6:1e:d0:1f: 88:4b:f7:3d:a3:45:0b:c5:9f:e2:98:ab:e2:bd:6d:bb:9f:18: 2e:3e:1e:1e:1d:1c:0c:c2:b4:0e:92:64:3c:c4:89:28:72:74: ca:f3:9a:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtYPIJSFgjQXpytNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMyYTQ5YTMtZjA4My00YmMxLWI0MDItYzVkMmQyMzdi MTc3MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NDUxMTgyYjYtYTllNi00YjQ3LWI0YWQtYWFkNDIwYTQ1MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXQ8s6fFc0LmZCWb0WrpTGXwdc7AQnLylq5m rrSXGc6gcusIkuf/yCHPf2yLxJ8KnxYAWFv/hpXVzKGHupPENmoMDPg6ALMlcOwX b+bawF67tC4LhPzf9ktodjS2rDdejCsh0UuG6d0tDIbHbUkzm6AhDUKEMuIz35Ax eULRhGgpo3bsBERRt5JB9L/v67XTs2ZYzjUIwIy9+fM7NVSbD75S3+zRk3hg0Pls DVeZqewBbWQJk0BDxwi5WdGhXxTnBPRq0BPUO2Oc2a0hNzLL4mS5qEkCKK2P5gF1 m/3lFnnTibEuSG2HpqMOZJamWXadQJhJFTnIaz597ix4WY9rjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCOZ7PQTp7SvohFBVQUJC9AYdqnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YzJh NDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQyZDIzN2IxNzcvMDYzYmUyMjgtMTVjZC0z NzkyLTk1ODctOGVkOGE5Y2IwNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGMyYTQ5YTMtZjA4My00YmMxLWI0 MDItYzVkMmQyMzdiMTc3LzRjMmE0OWEzLWYwODMtNGJjMS1iNDAyLWM1ZDJkMjM3 YjE3Ny5jcmwwHwYDVR0jBBgwFoAU61QzOVkxiBz9ljWpgvf/9DHLyeowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YzJhNDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQy ZDIzN2IxNzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTAQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUFCHBLougIzQ762csa+sHbj2+OHRYdv1HFNoNz6ea9O1nr0R8A1Et vNt8HpThKJh/2A/RSVtl4lYUCIvbOOJLbBMUcDdHnZ6iHOt4gg/42BITQZSQZti1 R7OHgrQnhk/K1JykGKbaw529b7sq1HZxVj1+h7TJpYDq0hza58mEZ6ZJs4pOdshb 7NL9tbdVENiA4WmrO/IqLK+DFyXo+uayMYxO/Zyu1QljRA0VMsaCLyUoFXuJs7IL Wg1oFf2eUgkLpoBa9Hz3LhK4sx4gdFlrTtnU9fYe0B+IS/c9o0ULxZ/imKvivW27 nxguPh4eHRwMwrQOkmQ8xIkocnTK85pt -----END CERTIFICATE-----Generated at Tue Oct 21 18:02:55 2025 by rpki-client