$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa File: ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa (raw, json) Hash identifier: c7ktYm04PkA1EBeHvqcBi0zYQqWcYT9lE3SQr96igEU= Subject key identifier: 76:DA:64:89:B3:40:82:5A:C6:0B:17:41:6D:01:FB:9C:C5:4F:BB:93 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584B25FC3CD5BE967319C58DAB88 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 6208 IP address blocks: 2604:fcc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3c:d5:be:96:73:19:c5:8d:ab:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=5c64dd87-d5de-49e2-9ffb-f7382ce88a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:94:bd:38:07:74:a5:f9:27:76:8f:cb:04:e3: 26:2f:7e:2f:58:d0:ea:e5:01:d8:57:81:9b:d3:a7: b9:ba:15:8f:b8:a4:6b:ed:7c:98:bd:6c:08:04:8c: fa:6a:56:8a:0e:d2:ec:33:c9:69:91:4a:0c:5b:f9: 63:79:0a:99:01:8a:10:5b:a6:a2:97:ea:94:8c:ed: 99:9f:a7:06:86:20:f5:84:52:3a:0e:56:f3:fd:65: 22:56:40:b5:ff:3d:7b:7e:8e:a0:9b:ec:c4:2d:7a: bf:83:6e:5f:bb:82:e0:85:ef:0f:2e:0f:4c:01:52: 77:86:f4:31:cd:e7:2a:df:7a:0c:88:8e:25:22:de: 9a:c3:79:d0:11:b8:07:7d:5a:aa:1a:68:9e:6a:f6: 17:be:51:0c:cb:f5:b3:bf:28:47:85:b6:ef:10:79: 26:91:cf:3c:5b:74:b2:5a:4e:1a:63:97:42:e0:37: 6f:ee:68:18:e8:cc:20:fa:35:b0:9e:3f:92:f4:77: fd:c4:53:8f:ec:d6:18:23:68:5d:0c:31:b5:b3:55: 01:2c:36:2c:96:76:64:1a:f5:c8:c3:81:d2:fb:88: b3:f8:a1:4f:06:56:ff:ce:b5:3c:8e:8a:f7:b7:46: 64:fa:7f:21:e5:db:7a:41:19:f3:22:7f:9f:81:d1: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DA:64:89:B3:40:82:5A:C6:0B:17:41:6D:01:FB:9C:C5:4F:BB:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv6: 2604:fcc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:bd:e2:04:08:55:c2:3b:6b:79:a2:2a:cc:ed:ca:76:53:99: d1:a0:35:02:27:86:6d:19:b6:bd:6d:8f:54:7c:da:a2:39:1b: 1a:89:86:05:db:2b:0c:30:e5:df:60:0b:f7:43:f4:25:ca:54: ef:6a:27:30:3b:69:ce:72:c2:f5:b6:5e:a0:f6:62:58:a8:cd: d4:d3:4f:ab:b6:ef:94:02:47:8b:75:e9:ad:30:d1:b6:03:75: bb:c1:e0:bb:a3:ab:45:75:7f:13:af:52:d7:13:72:5d:33:ce: 72:39:6f:d3:36:0d:90:eb:50:c4:7d:64:21:6f:19:55:ec:6d: 54:81:c1:a7:16:82:bd:9b:ec:58:ee:79:b9:9e:2f:4f:cb:b3: 5a:76:1b:25:75:8f:54:62:39:3d:17:15:6e:5c:e0:26:81:d1: ec:eb:df:bf:d3:29:d7:33:b5:9f:97:61:db:8d:7b:3a:f2:cd: a7:da:5b:c7:79:10:53:35:2a:69:00:21:61:60:fd:d5:02:5b: 7e:42:ec:6d:7c:61:57:a6:61:c6:cd:90:5b:8a:88:7f:35:63: b6:a8:68:59:96:84:2b:b1:0b:af:9f:3c:95:08:f8:4c:0a:aa: 44:a9:36:e0:15:6a:38:f2:e0:5f:90:e1:a5:e2:1b:d2:11:f3: ad:dd:d5:b3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsl/DzVvpZzGcWNq4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NWM2NGRkODctZDVkZS00OWUyLTlmZmItZjczODJjZTg4YTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJS9OAd0pfkndo/LBOMmL34vWNDq5QHYV4Gb 06e5uhWPuKRr7XyYvWwIBIz6alaKDtLsM8lpkUoMW/ljeQqZAYoQW6ail+qUjO2Z n6cGhiD1hFI6Dlbz/WUiVkC1/z17fo6gm+zELXq/g25fu4Lghe8PLg9MAVJ3hvQx zecq33oMiI4lIt6aw3nQEbgHfVqqGmieavYXvlEMy/WzvyhHhbbvEHkmkc88W3Sy Wk4aY5dC4Ddv7mgY6Mwg+jWwnj+S9Hf9xFOP7NYYI2hdDDG1s1UBLDYslnZkGvXI w4HS+4iz+KFPBlb/zrU8jor3t0Zk+n8h5dt6QRnzIn+fgdHNMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHbaZImzQIJaxgsXQW0B+5zFT7uTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZmYxM2Y4ZjctM2ZkMS0z OThiLWFkMzItNjllOTUxYWU4YTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT8wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDveIECFXCO2t5oirM7cp2U5nRoDUCJ4ZtGba9bY9UfNqiORsaiYYF 2ysMMOXfYAv3Q/QlylTvaicwO2nOcsL1tl6g9mJYqM3U00+rtu+UAkeLdemtMNG2 A3W7weC7o6tFdX8Tr1LXE3JdM85yOW/TNg2Q61DEfWQhbxlV7G1UgcGnFoK9m+xY 7nm5ni9Py7NadhsldY9UYjk9FxVuXOAmgdHs69+/0ynXM7Wfl2HbjXs68s2n2lvH eRBTNSppACFhYP3VAlt+QuxtfGFXpmHGzZBbioh/NWO2qGhZloQrsQuvnzyVCPhM CqpEqTbgFWo48uBfkOGl4hvSEfOt3dWz -----END CERTIFICATE-----Generated at Tue Oct 21 18:01:41 2025 by rpki-client