$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa File: 85bba22a-31d7-3277-9d23-3f253e7d429a.roa (raw, json) Hash identifier: VTvp3HmtiG//pkwSZ6Ju2HefwWBtL+EJoxjz7TUCJNk= Subject key identifier: CF:4A:20:F3:60:0D:13:C7:81:1F:97:07:DC:6F:C0:A2:8B:89:BA:BF Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F4328584B80B75392B5A6E4C66717F5A0 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 6653 IP address blocks: 2604:280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:53:92:b5:a6:e4:c6:67:17:f5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=59231995-e3c2-4d4e-9692-c5f219055360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:34:5a:3e:32:56:d6:5d:bf:1f:2c:57:c3: 45:6d:93:23:8a:88:6f:7f:9b:98:6d:7b:bc:27:a9: 05:0b:ac:66:c9:5d:ea:58:27:76:5d:71:4f:c8:7e: 7a:a5:6a:04:69:58:e2:5c:f7:f6:4b:a8:85:49:9f: 8c:9d:1e:d8:73:86:66:6c:e7:67:5b:34:7e:1d:83: 1f:b8:dc:e4:4c:5a:95:72:fc:c3:2d:9f:04:f7:67: 12:bf:d1:d3:45:69:ef:0f:cb:9c:9c:c8:69:8c:c3: ad:ac:68:ed:3d:fd:2b:db:56:8c:8e:6b:5a:76:7b: 00:92:b6:6e:15:65:84:8a:d9:55:3b:a5:c6:24:b1: 22:41:5d:dc:45:d7:a6:78:ee:63:16:a8:6d:c3:3f: ff:42:b0:f0:ac:a1:3d:bd:0a:3a:22:6c:1f:28:66: 70:72:dd:4a:a5:5b:66:df:46:96:75:74:d4:2d:93: 9d:7b:2a:42:90:11:bc:89:f2:c8:66:e2:f5:a6:f8: 75:e1:9b:e8:27:c9:3d:e7:0e:42:7b:8f:14:bf:75: cf:6d:e0:f2:e3:53:11:16:80:e4:ff:5c:12:52:0c: aa:8f:d2:66:c1:a3:80:f5:98:ec:9b:7c:fa:97:49: d2:20:dc:10:4a:d5:07:47:98:9c:e4:6b:29:8d:b7: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4A:20:F3:60:0D:13:C7:81:1F:97:07:DC:6F:C0:A2:8B:89:BA:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv6: 2604:280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:df:af:e5:35:25:24:83:18:38:b8:4e:5a:67:2f:a7:f5:8b: a2:ff:84:95:d3:f3:8e:43:b2:88:97:83:72:da:7c:5a:85:de: 69:77:66:f3:33:9e:3b:0c:7c:9b:0a:76:98:9d:40:45:eb:de: ba:ac:7d:cc:2c:81:e6:b8:9c:af:4a:07:e4:ac:42:46:f5:f5: 93:77:90:be:25:a8:10:bf:ae:e3:87:1b:eb:ca:f5:ce:8c:76: 64:78:d8:d5:56:fd:9e:80:d1:87:c8:56:99:cd:bf:52:d9:b4: 21:1b:b6:c4:74:11:bd:f3:1b:8f:99:0f:4c:e7:7f:a3:95:6f: 8d:1e:6d:5d:dc:40:b7:4f:97:d9:06:f8:b4:2d:6b:be:d5:a1: ef:d9:43:c9:98:c0:40:59:3f:fc:54:e5:31:4d:18:62:7d:99: 04:bf:d7:7a:05:c8:f6:eb:84:76:48:dd:66:1f:8e:a2:4b:ba: c2:23:e4:b1:1e:87:9b:18:14:99:4f:9e:5d:99:66:ab:d4:31: b7:f0:e0:16:a3:04:c6:ce:49:32:ed:e6:df:fc:96:05:9c:79: f8:e2:52:7d:2b:71:c9:ff:bc:2e:68:3b:04:dc:dd:d1:92:a2: 23:6a:f3:6d:40:e1:80:52:49:b3:18:a0:86:d8:53:54:6b:92: a9:8e:ce:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt1OStabkxmcX9aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NTkyMzE5OTUtZTNjMi00ZDRlLTk2OTItYzVmMjE5MDU1MzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwY0Wj4yVtZdvx8sV8NFbZMjiohvf5uYbXu8 J6kFC6xmyV3qWCd2XXFPyH56pWoEaVjiXPf2S6iFSZ+MnR7Yc4ZmbOdnWzR+HYMf uNzkTFqVcvzDLZ8E92cSv9HTRWnvD8ucnMhpjMOtrGjtPf0r21aMjmtadnsAkrZu FWWEitlVO6XGJLEiQV3cRdemeO5jFqhtwz//QrDwrKE9vQo6ImwfKGZwct1KpVtm 30aWdXTULZOdeypCkBG8ifLIZuL1pvh14ZvoJ8k95w5Ce48Uv3XPbeDy41MRFoDk /1wSUgyqj9JmwaOA9Zjsm3z6l0nSINwQStUHR5ic5GspjbdymQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM9KIPNgDRPHgR+XB9xvwKKLibq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvODViYmEyMmEtMzFkNy0z Mjc3LTlkMjMtM2YyNTNlN2Q0MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAK36/lNSUkgxg4uE5aZy+n9Yui/4SV0/OOQ7KIl4Ny2nxahd5pd2bz M547DHybCnaYnUBF6966rH3MLIHmuJyvSgfkrEJG9fWTd5C+JagQv67jhxvryvXO jHZkeNjVVv2egNGHyFaZzb9S2bQhG7bEdBG98xuPmQ9M53+jlW+NHm1d3EC3T5fZ Bvi0LWu+1aHv2UPJmMBAWT/8VOUxTRhifZkEv9d6Bcj264R2SN1mH46iS7rCI+Sx HoebGBSZT55dmWar1DG38OAWowTGzkky7ebf/JYFnHn44lJ9K3HJ/7wuaDsE3N3R kqIjavNtQOGAUkmzGKCG2FNUa5Kpjs4Y -----END CERTIFICATE-----Generated at Tue Oct 21 06:52:19 2025 by rpki-client