$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/4323deba-a529-3d72-a497-da826cd7d95c.roa File: 4323deba-a529-3d72-a497-da826cd7d95c.roa (raw, json) Hash identifier: IRNPDZjVIXyAvFvRh99uzXLuj9yXrBdWV+rKrO9Xzi0= Subject key identifier: 3C:4B:ED:C5:98:A8:BB:3E:A1:1C:E0:9C:4C:AC:23:22:F4:31:C4:25 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584B2496CDEF4A7253CF2FBE9E80 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/4323deba-a529-3d72-a497-da826cd7d95c.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 198949 IP address blocks: 2607:cc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:cd:ef:4a:72:53:cf:2f:be:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=89278a3f-8b68-4ba3-af32-7a9d531e58f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:fc:df:80:d9:a3:7c:d2:75:22:b3:92:36: cd:8e:92:50:9a:5e:8b:0d:b4:5b:02:93:ef:c6:c5: d4:73:52:37:73:07:3b:6f:ee:92:d5:4a:5d:b5:1f: 7c:98:84:c4:fe:38:c2:14:e9:be:89:d7:3c:c4:c4: 07:d5:87:f8:3b:f5:85:6d:e0:a4:f1:da:96:d2:72: f7:98:84:d6:22:94:21:e4:a8:8b:f4:94:a5:cb:34: 67:0f:85:50:07:ab:b6:54:ad:20:20:1b:cf:5a:6b: 4e:3d:9b:77:63:ed:93:7c:1f:76:4b:37:25:4e:68: fe:e3:67:17:c3:60:2f:c5:39:fd:85:2b:a5:16:8b: fa:a5:1f:84:5d:cc:da:60:23:9e:6c:2b:91:6e:d6: e9:8d:6d:66:a0:78:69:c0:4f:1b:7c:18:40:0c:f7: cb:f5:7c:a5:4e:24:8d:8c:cb:ef:0a:c2:37:26:16: ef:d2:e1:bd:7e:e5:91:21:09:37:05:2d:4f:1c:b5: 19:8d:98:ed:e5:c5:57:06:74:84:de:8e:69:73:ae: 1a:dc:4a:e7:f2:68:98:3a:6c:17:ce:40:6a:25:50: e1:2e:58:b2:6f:a9:ad:bc:10:fd:ba:94:65:a9:ec: 28:4e:87:26:65:18:e7:16:71:0e:35:cd:56:6c:07: c5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4B:ED:C5:98:A8:BB:3E:A1:1C:E0:9C:4C:AC:23:22:F4:31:C4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/4323deba-a529-3d72-a497-da826cd7d95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ca:4b:10:e3:b3:81:25:ec:5f:7e:ad:f4:e5:7a:17:ab:ac: 19:76:36:93:c9:85:33:7d:92:9e:6f:34:37:7c:2d:4b:0c:db: d7:c1:0c:e1:1d:fd:1e:86:d1:e1:d0:7d:73:00:ee:9b:be:57: ae:4b:47:0e:49:48:25:44:6b:fc:cc:ef:27:ca:23:05:f7:64: eb:ee:61:9b:11:13:bc:87:b7:d6:5b:b3:e9:9b:c7:eb:6a:8c: d8:94:1c:7f:9c:a0:3b:ca:7f:42:67:ae:94:9b:35:cc:1e:38: 40:be:3e:a2:fb:00:41:bf:f2:f2:c7:84:40:f4:24:c7:05:2d: 49:6e:a5:ca:f1:03:7d:5e:77:3d:ab:79:53:6e:c3:34:5c:f6: 8a:cb:6a:a3:ba:3f:67:a2:e1:14:87:7d:33:41:1b:f6:fe:d8: 62:1d:c7:e3:74:86:1c:f5:d8:b4:5e:4a:f0:0b:1b:dd:b2:f1: 4d:f8:6d:50:af:c6:d1:f2:4a:f8:0c:6f:77:6f:5b:f4:08:41: a3:09:65:7c:62:d9:b4:5a:1d:ff:3a:e8:85:77:3a:a2:82:bc: 5d:fe:02:63:91:f7:dd:ac:c0:da:34:29:cf:cc:8f:ee:40:77: f4:5b:a5:58:84:44:f3:b4:df:c8:18:ae:53:bc:7a:60:2e:8b: 7a:96:26:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEskls3vSnJTzy++noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ODkyNzhhM2YtOGI2OC00YmEzLWFmMzItN2E5ZDUzMWU1OGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ/834DZo3zSdSKzkjbNjpJQml6LDbRbApPv xsXUc1I3cwc7b+6S1UpdtR98mITE/jjCFOm+idc8xMQH1Yf4O/WFbeCk8dqW0nL3 mITWIpQh5KiL9JSlyzRnD4VQB6u2VK0gIBvPWmtOPZt3Y+2TfB92SzclTmj+42cX w2AvxTn9hSulFov6pR+EXczaYCOebCuRbtbpjW1moHhpwE8bfBhADPfL9XylTiSN jMvvCsI3Jhbv0uG9fuWRIQk3BS1PHLUZjZjt5cVXBnSE3o5pc64a3Ern8miYOmwX zkBqJVDhLliyb6mtvBD9upRlqewoTocmZRjnFnEONc1WbAfFGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDxL7cWYqLs+oRzgnEysIyL0McQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvNDMyM2RlYmEtYTUyOS0z ZDcyLWE0OTctZGE4MjZjZDdkOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC7KSxDjs4El7F9+rfTleherrBl2NpPJhTN9kp5vNDd8LUsM29fB DOEd/R6G0eHQfXMA7pu+V65LRw5JSCVEa/zM7yfKIwX3ZOvuYZsRE7yHt9Zbs+mb x+tqjNiUHH+coDvKf0JnrpSbNcweOEC+PqL7AEG/8vLHhED0JMcFLUlupcrxA31e dz2reVNuwzRc9orLaqO6P2ei4RSHfTNBG/b+2GIdx+N0hhz12LReSvALG92y8U34 bVCvxtHySvgMb3dvW/QIQaMJZXxi2bRaHf866IV3OqKCvF3+AmOR992swNo0Kc/M j+5Ad/RbpViERPO038gYrlO8emAui3qWJpk= -----END CERTIFICATE-----Generated at Sun Oct 19 23:49:48 2025 by rpki-client