$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/405c2316-0dd1-3f20-910a-5ecd9a1d0049.roa File: 405c2316-0dd1-3f20-910a-5ecd9a1d0049.roa (raw, json) Hash identifier: NzRdtAmlXY9FQEapSUlOEqEDwTalcb/up36qoxH3jHY= Subject key identifier: 29:76:19:3A:E2:1B:49:55:77:20:A2:C7:EF:BB:09:80:1B:CC:95:58 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584B110C050BC11580E9FD2C6200 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/405c2316-0dd1-3f20-910a-5ecd9a1d0049.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 21559 IP address blocks: 2604:1cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:05:0b:c1:15:80:e9:fd:2c:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=1d216dbd-98ea-4b28-9cb9-7ad96978aaf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:68:02:ab:fc:a6:9e:30:ce:a6:a8:9f:04: 7f:0d:37:91:cf:d1:e5:58:cf:18:1e:e4:64:84:b1: 59:c7:8f:bb:b2:3a:71:e3:c1:a5:a5:3a:de:01:96: 4b:78:1a:9e:4f:26:a3:71:1a:7b:b0:db:e3:2b:b8: c8:a5:3f:3d:e7:10:11:56:aa:68:7d:38:c1:f6:e5: 0d:15:ce:7e:f9:27:fb:17:e2:be:98:4e:0a:c5:d5: 91:94:ce:76:32:43:85:9e:28:c0:77:3c:4a:9d:8e: f6:9c:e0:95:03:2a:5d:6a:a2:53:c9:b7:e2:6a:b8: 71:3a:6f:30:41:3c:92:09:72:e8:e7:10:60:e0:ce: 6e:8b:92:fc:e9:57:fe:03:d2:6f:e9:20:cc:06:de: 5c:1f:59:32:26:46:0e:a7:d5:71:a3:d0:77:95:77: 00:2b:aa:83:61:74:d7:a3:0b:8e:5f:f2:5c:4d:7d: 99:92:ea:4d:dc:e2:ae:92:97:c4:5b:07:68:a0:59: 4a:f3:ae:22:63:70:7d:e3:be:7c:92:e9:24:5f:f5: 99:08:9a:cf:ba:f4:23:04:1e:ce:f9:19:47:06:cb: 8b:ef:2d:a1:cf:c7:b8:07:8e:2a:7e:de:fc:de:cf: 97:05:05:25:e2:52:6c:76:ce:a5:40:df:1c:cd:45: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:76:19:3A:E2:1B:49:55:77:20:A2:C7:EF:BB:09:80:1B:CC:95:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/405c2316-0dd1-3f20-910a-5ecd9a1d0049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv6: 2604:1cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2d:98:54:07:1c:2c:25:fa:4e:1b:ed:26:d7:37:2a:2b:70: db:47:49:26:c6:1f:5e:86:3a:51:8f:a1:95:c6:2d:14:2f:09: ed:45:12:5b:ff:27:ec:e3:55:16:a2:8f:75:d9:5c:92:2f:d8: 83:67:6b:8b:6c:38:5a:78:e9:9c:e2:13:34:cb:cd:a7:3f:d8: 82:a7:e5:03:5d:84:7d:43:3d:84:6b:33:ee:bc:70:76:50:66: 26:3f:ba:15:eb:45:87:f5:ad:e7:18:4e:90:30:68:94:3e:bb: 71:b0:c1:c5:3d:89:3c:0d:5d:bd:b1:4c:9a:9d:cf:72:96:a5: 72:89:6e:a0:aa:09:6f:c0:95:00:91:4b:38:f2:77:c3:d2:77: d6:5d:8c:da:ba:53:94:2a:77:0d:f5:41:b4:1b:75:6e:8f:f9: 68:a5:53:26:e2:74:f9:86:c1:20:1a:f0:a7:a3:32:b4:1e:fc: 0a:31:45:86:25:16:9c:f7:0b:4a:6f:54:5e:91:dc:c5:b6:f8: d3:42:ce:c1:16:5b:25:89:bd:8d:c5:91:57:10:de:db:65:0c: 84:48:51:3b:c0:23:ee:9d:6b:bb:9d:ca:eb:b5:48:87:1f:0e: e6:2c:57:a6:22:63:74:37:00:ae:d4:86:5b:76:b2:b7:2e:c6: 84:68:1f:fb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsRDAULwRWA6f0sYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWQyMTZkYmQtOThlYS00YjI4LTljYjktN2FkOTY5NzhhYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUBoAqv8pp4wzqaonwR/DTeRz9HlWM8YHuRk hLFZx4+7sjpx48GlpTreAZZLeBqeTyajcRp7sNvjK7jIpT895xARVqpofTjB9uUN Fc5++Sf7F+K+mE4KxdWRlM52MkOFnijAdzxKnY72nOCVAypdaqJTybfiarhxOm8w QTySCXLo5xBg4M5ui5L86Vf+A9Jv6SDMBt5cH1kyJkYOp9Vxo9B3lXcAK6qDYXTX owuOX/JcTX2ZkupN3OKukpfEWwdooFlK864iY3B94758kukkX/WZCJrPuvQjBB7O +RlHBsuL7y2hz8e4B44qft783s+XBQUl4lJsds6lQN8czUXXWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCl2GTriG0lVdyCix++7CYAbzJVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNDA1YzIzMTYtMGRkMS0z ZjIwLTkxMGEtNWVjZDlhMWQwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQcwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANLZhUBxwsJfpOG+0m1zcqK3DbR0kmxh9ehjpRj6GVxi0ULwntRRJb /yfs41UWoo912VySL9iDZ2uLbDhaeOmc4hM0y82nP9iCp+UDXYR9Qz2EazPuvHB2 UGYmP7oV60WH9a3nGE6QMGiUPrtxsMHFPYk8DV29sUyanc9ylqVyiW6gqglvwJUA kUs48nfD0nfWXYzaulOUKncN9UG0G3Vuj/lopVMm4nT5hsEgGvCnozK0HvwKMUWG JRac9wtKb1RekdzFtvjTQs7BFlslib2NxZFXEN7bZQyESFE7wCPunWu7ncrrtUiH Hw7mLFemImN0NwCu1IZbdrK3LsaEaB/7 -----END CERTIFICATE-----Generated at Tue Oct 21 22:25:35 2025 by rpki-client