$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa File: 953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa (raw, json) Hash identifier: EemNWTInHN3+5vZZCaTuef7OOfIL3ofIifPLtc33x1E= Subject key identifier: AE:B5:CA:3F:1D:04:7A:7B:95:8F:67:AA:99:71:2E:53:68:1C:C8:F1 Certificate issuer: /CN=2123fd68-596c-4806-bd9e-91167a6dc6d4 Certificate serial: 010D0C9F4328584B21CC41844252746982655120 Authority key identifier: 98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 401442 IP address blocks: 2604:ba0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:41:84:42:52:74:69:82:65:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2123fd68-596c-4806-bd9e-91167a6dc6d4 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=103f978f-f865-4be5-830b-17ce97f0fcfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:da:58:a2:75:a0:8a:cf:5c:26:80:18:fa: b0:64:2e:24:b8:73:ec:3d:47:72:fc:4d:cf:71:e4: 37:7a:31:4d:c0:3f:d3:77:5a:71:f6:98:78:02:6b: 16:78:cb:c4:58:b4:9a:e1:4e:39:67:a7:9a:45:1c: 2f:1c:e8:a6:d6:19:68:93:5b:86:ab:31:30:90:83: d5:2c:94:d6:6c:77:da:98:71:d5:eb:b7:2c:89:d7: 69:84:81:fd:0c:ec:f8:71:7d:99:b8:41:98:f2:91: b4:94:2f:56:06:b9:f8:4b:2c:25:c5:38:47:3c:3c: ec:f0:3e:36:75:61:ae:e8:f0:68:ef:e4:9f:85:ec: a8:4d:40:8a:04:74:64:f1:12:bd:fd:d6:21:15:ba: 71:37:c1:26:ab:c0:cd:c9:04:de:a1:56:8c:22:31: 51:75:46:fb:d0:27:d4:36:0e:f1:be:d7:0d:28:40: 7a:cd:e4:6d:2c:b2:e3:67:f1:ce:30:93:71:64:3b: 7d:e3:49:79:20:15:00:60:72:2f:f2:25:5e:a4:0f: 1e:29:31:b7:b7:dd:fb:f7:36:29:6e:e3:5c:de:f3: b9:b1:9d:6a:2a:eb:79:56:13:4b:69:e7:b7:b5:0c: 11:e2:6c:cd:46:29:d0:a7:54:e5:09:48:75:c2:12: 20:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B5:CA:3F:1D:04:7A:7B:95:8F:67:AA:99:71:2E:53:68:1C:C8:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl X509v3 Authority Key Identifier: keyid:98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer sbgp-ipAddrBlock: critical IPv6: 2604:ba0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:3f:91:81:f0:6c:73:be:39:3a:8c:e8:e6:e8:da:99:d6:b7: 82:10:d7:ea:50:9d:d2:7a:2a:80:c0:e9:31:1e:02:f7:34:07: ca:da:93:e4:63:f7:aa:32:4a:f0:ef:14:ca:4e:d0:30:04:6c: fa:6a:a1:89:df:d1:07:dc:f3:3e:14:dc:fe:9f:14:ea:45:29: 7c:f2:a0:73:8b:62:c1:a1:49:7f:c3:eb:4e:f5:86:12:73:8a: d8:1e:33:e1:9e:8e:21:6f:71:df:b1:51:e1:17:06:10:2e:4f: a8:fc:b2:bc:0a:1c:e3:8c:ea:49:87:8b:e0:ef:8a:6e:0a:8f: 7c:04:c8:ee:5f:d1:19:80:1e:61:68:07:74:c6:b8:1f:83:a5: ba:ec:d6:94:97:8a:35:37:7f:3e:f6:f4:ef:21:e7:3f:84:7f: 85:a4:92:c8:52:1b:33:30:5e:ed:13:98:a1:5a:51:64:a8:d0: 51:e5:52:1d:89:24:ea:13:21:99:30:ac:58:d1:09:f6:4e:d0: c2:f5:1a:6d:35:04:2c:d4:99:31:89:25:70:ae:3b:60:a9:bf: ba:7f:7c:ad:af:41:d3:65:25:5b:c9:14:e5:77:fb:bd:a3:fe: 06:cf:bc:cd:81:e4:40:83:6d:d9:e8:1b:d1:6b:57:c8:38:9a: 2e:0e:aa:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEshzEGEQlJ0aYJlUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEyM2ZkNjgtNTk2Yy00ODA2LWJkOWUtOTExNjdhNmRj NmQ0MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MTAzZjk3OGYtZjg2NS00YmU1LTgzMGItMTdjZTk3ZjBmY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzzaWKJ1oIrPXCaAGPqwZC4kuHPsPUdy/E3P ceQ3ejFNwD/Td1px9ph4AmsWeMvEWLSa4U45Z6eaRRwvHOim1hlok1uGqzEwkIPV LJTWbHfamHHV67csiddphIH9DOz4cX2ZuEGY8pG0lC9WBrn4SywlxThHPDzs8D42 dWGu6PBo7+SfheyoTUCKBHRk8RK9/dYhFbpxN8Emq8DNyQTeoVaMIjFRdUb70CfU Ng7xvtcNKEB6zeRtLLLjZ/HOMJNxZDt940l5IBUAYHIv8iVepA8eKTG3t9379zYp buNc3vO5sZ1qKut5VhNLaee3tQwR4mzNRinQp1TlCUh1whIgYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK61yj8dBHp7lY9nqplxLlNoHMjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTIz ZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2N2E2ZGM2ZDQvOTUzZDg3ZjItZTBiMy0z NWY2LWE5OGUtOWI4YzgwOGQxMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjEyM2ZkNjgtNTk2Yy00ODA2LWJk OWUtOTExNjdhNmRjNmQ0LzIxMjNmZDY4LTU5NmMtNDgwNi1iZDllLTkxMTY3YTZk YzZkNC5jcmwwHwYDVR0jBBgwFoAUmE78+x0R5FCBKsfpNazGGkn2gYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTIzZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2 N2E2ZGM2ZDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQLoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWP5GB8Gxzvjk6jOjm6NqZ1reCENfqUJ3SeiqAwOkxHgL3NAfK2pPk Y/eqMkrw7xTKTtAwBGz6aqGJ39EH3PM+FNz+nxTqRSl88qBzi2LBoUl/w+tO9YYS c4rYHjPhno4hb3HfsVHhFwYQLk+o/LK8ChzjjOpJh4vg74puCo98BMjuX9EZgB5h aAd0xrgfg6W67NaUl4o1N38+9vTvIec/hH+FpJLIUhszMF7tE5ihWlFkqNBR5VId iSTqEyGZMKxY0Qn2TtDC9RptNQQs1JkxiSVwrjtgqb+6f3ytr0HTZSVbyRTld/u9 o/4Gz7zNgeRAg23Z6BvRa1fIOJouDqrJ -----END CERTIFICATE-----Generated at Mon Oct 20 08:21:19 2025 by rpki-client