$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa File: 2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa (raw, json) Hash identifier: Ezo+r90CnPcsRxWmIAFiL8u0eJwwN6qTsBVqkPnGadY= Subject key identifier: DC:DF:25:89:EC:32:6A:1B:49:97:D1:BB:50:EF:69:7E:3E:9D:B2:D5 Certificate issuer: /CN=4a595a80-2106-455a-be91-2aa623280126 Certificate serial: 010D0C9F4328584B8D478054CBC1FDF12511B380 Authority key identifier: 52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 2604:11a0:1000::/40 maxlen: 48 2604:11a0:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:80:54:cb:c1:fd:f1:25:11:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a595a80-2106-455a-be91-2aa623280126 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=30d0d4ae-b232-40bc-b2d7-4c46e44bb540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:14:65:d7:1a:4a:69:fd:21:62:7b:49:0b: 9a:ea:4b:2b:80:a4:29:c7:b3:4f:e1:3b:53:b0:f0: 42:cd:79:dc:c0:cc:38:7d:50:f8:5b:b9:f8:c2:a8: a5:00:3b:ab:50:bd:29:bd:b0:37:f8:aa:41:fc:8d: 49:73:b1:58:44:c7:69:41:c2:99:ba:a6:4e:c5:e0: f7:30:ea:0d:09:e3:82:d4:ef:36:45:7a:59:51:09: 21:0a:48:1f:88:88:cb:e2:aa:22:b4:79:7d:56:d8: 3a:6a:71:d6:e6:03:ee:98:20:62:a4:f6:a9:25:78: 8b:c8:fa:53:fd:ce:28:e0:b9:78:2f:87:48:10:c7: b4:15:77:ac:8a:58:9e:f7:65:b8:68:f2:66:be:16: 5e:c0:4e:6a:47:69:b4:b0:8a:0c:c0:80:fb:5e:fd: e9:fb:3b:16:1b:ed:a7:78:79:d9:4f:6e:76:eb:c9: c0:e9:ac:a8:ce:dc:ae:cb:80:24:bc:08:be:3f:05: 8a:cf:10:7a:df:53:fc:58:6b:ff:3f:d0:97:cb:b5: 37:b8:5a:7a:0d:08:e9:52:42:82:2d:1f:20:ba:f2: a9:6e:a5:ec:b8:c0:be:49:8f:e4:c4:ee:3b:c9:cb: b6:0a:6a:50:70:a7:a9:0e:17:be:18:3f:ba:93:3e: e2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DF:25:89:EC:32:6A:1B:49:97:D1:BB:50:EF:69:7E:3E:9D:B2:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl X509v3 Authority Key Identifier: keyid:52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer sbgp-ipAddrBlock: critical IPv6: 2604:11a0:1000::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8b:25:4f:bd:0f:5b:32:2e:c8:15:ca:6c:4d:5f:d5:38:2f: c7:fb:fe:38:a5:b7:71:b1:7b:61:55:fc:f0:29:3b:0c:67:2f: fa:ae:30:08:7f:85:5e:1d:eb:50:79:55:19:77:77:ba:cf:37: a4:e1:38:73:e0:a3:1e:19:f2:f7:3f:2a:7c:e5:e7:cf:b7:4d: 3f:5d:a8:26:80:d4:6d:87:c0:4b:f4:b7:9a:36:a0:e0:57:aa: 13:49:ad:45:0f:c1:6a:38:3d:e2:76:82:61:13:18:7b:6c:37: f6:64:78:ac:4d:bf:7d:43:69:b1:a7:98:f8:7a:72:46:9c:4e: cd:dc:3b:e8:13:dd:35:a8:60:66:52:d6:5b:b6:b1:52:5e:20: f7:44:ad:b2:4e:79:e9:af:3b:7d:49:e4:2e:f5:62:55:3c:1a: ae:77:32:8c:b8:ae:cf:26:36:d0:66:e8:42:69:f1:aa:0b:83: 46:a9:74:9d:3f:17:fa:75:c9:99:f3:1a:5f:70:52:30:8b:47: 3d:86:f0:ca:d8:40:43:29:d6:a1:e1:fd:db:0c:2b:75:a4:83: 1f:ba:5f:6a:99:a0:c6:55:39:4f:a6:3f:56:0d:e1:af:a2:55: 2f:45:fe:84:e4:93:fa:a5:ba:14:dd:22:2a:63:a1:a1:83:44: 2a:50:8f:d5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuNR4BUy8H98SURs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE1OTVhODAtMjEwNi00NTVhLWJlOTEtMmFhNjIzMjgw MTI2MB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk MzBkMGQ0YWUtYjIzMi00MGJjLWIyZDctNGM0NmU0NGJiNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh8UZdcaSmn9IWJ7SQua6ksrgKQpx7NP4TtT sPBCzXncwMw4fVD4W7n4wqilADurUL0pvbA3+KpB/I1Jc7FYRMdpQcKZuqZOxeD3 MOoNCeOC1O82RXpZUQkhCkgfiIjL4qoitHl9Vtg6anHW5gPumCBipPapJXiLyPpT /c4o4Ll4L4dIEMe0FXesilie92W4aPJmvhZewE5qR2m0sIoMwID7Xv3p+zsWG+2n eHnZT25268nA6ayoztyuy4AkvAi+PwWKzxB631P8WGv/P9CXy7U3uFp6DQjpUkKC LR8guvKpbqXsuMC+SY/kxO47ycu2CmpQcKepDhe+GD+6kz7irQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNzfJYnsMmobSZfRu1DvaX4+nbLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YTU5 NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2MjMyODAxMjYvMmE0YWRiYzYtYzk5Ny0z ZDJmLWJlOGQtMTMxNGU4YTQ0NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGE1OTVhODAtMjEwNi00NTVhLWJl OTEtMmFhNjIzMjgwMTI2LzRhNTk1YTgwLTIxMDYtNDU1YS1iZTkxLTJhYTYyMzI4 MDEyNi5jcmwwHwYDVR0jBBgwFoAUUtbV5rISIADa5K6P/GUha7XbT7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YTU5NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2 MjMyODAxMjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgQRoBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMIslT70PWzIuyBXKbE1f1Tgvx/v+OKW3cbF7YVX88Ck7DGcv+q4w CH+FXh3rUHlVGXd3us83pOE4c+CjHhny9z8qfOXnz7dNP12oJoDUbYfAS/S3mjag 4FeqE0mtRQ/Bajg94naCYRMYe2w39mR4rE2/fUNpsaeY+HpyRpxOzdw76BPdNahg ZlLWW7axUl4g90Stsk556a87fUnkLvViVTwarncyjLiuzyY20GboQmnxqguDRql0 nT8X+nXJmfMaX3BSMItHPYbwythAQynWoeH92wwrdaSDH7pfapmgxlU5T6Y/Vg3h r6JVL0X+hOST+qW6FN0iKmOhoYNEKlCP1Q== -----END CERTIFICATE-----Generated at Mon Oct 20 15:24:59 2025 by rpki-client