$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa File: acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa (raw, json) Hash identifier: 0xCOfzLhDN9OiaQ1tcWVnfvDtlekrdyyvB4PSMxtL+0= Subject key identifier: 49:82:1F:04:62:B7:D9:D0:B1:9A:4F:8E:72:77:6C:1B:0F:6A:3A:F0 Certificate issuer: /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a Certificate serial: 010D0C9F4328584B2A2C32BA626621C854EE3240 Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 209453 IP address blocks: 2604:3400:dc3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:32:ba:62:66:21:c8:54:ee:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=7b389969-92f1-459a-8571-f5f7c6f73879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a6:3b:ad:03:34:20:de:02:ad:81:6e:d5:19: 4f:55:89:7e:bf:8d:cb:17:4e:16:cf:ac:21:d5:52: df:91:e1:fc:b3:bc:04:c1:db:a6:46:15:91:cb:7e: 03:e0:d6:75:4a:02:29:fd:80:58:8b:6d:f9:28:ac: 98:77:71:fd:85:33:7f:ed:af:4a:87:62:f0:7b:6b: e9:36:63:ed:39:dc:b8:10:94:16:66:e8:aa:fb:e7: e1:ca:2d:8c:01:e5:d7:12:fc:d5:fe:47:6f:f6:22: 84:0a:04:c1:1a:a5:b8:ec:17:8b:9d:98:c4:43:48: d7:aa:26:4a:89:46:90:4b:cb:7c:05:60:19:05:c0: 2c:e8:77:25:58:7b:2c:39:70:27:ab:fb:d0:cb:64: 57:40:28:1c:44:63:a2:6b:8a:49:bc:9b:af:b8:90: af:03:90:63:70:a7:01:82:b6:cc:c4:a9:80:52:45: 29:d1:49:c4:e6:f7:f5:32:ba:06:b4:77:a9:38:dd: 65:20:3e:19:e4:61:82:65:dd:9e:a6:3e:b4:2c:4b: 80:48:5c:8c:49:4b:be:47:6b:cd:8d:59:9a:3e:9b: 52:fe:3a:28:51:e3:cb:15:08:43:4b:e1:92:6e:06: 89:71:48:a3:8d:4a:e3:25:f9:89:1d:17:4a:bc:57: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:82:1F:04:62:B7:D9:D0:B1:9A:4F:8E:72:77:6C:1B:0F:6A:3A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl X509v3 Authority Key Identifier: keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer sbgp-ipAddrBlock: critical IPv6: 2604:3400:dc3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:00:55:a7:f4:3d:f3:0d:78:d4:a0:da:b7:36:e4:ac:7b:fe: f6:dd:50:07:e4:77:19:ad:51:5d:b5:26:ae:ba:14:c3:ee:8e: 31:fa:b8:d6:a1:d6:06:8b:80:19:b1:7a:bb:56:00:2a:8c:e9: e6:2f:9c:cf:76:3c:8b:17:5e:89:87:9c:8e:37:de:25:e7:93: ca:fd:02:85:bf:b2:1d:29:81:28:f9:16:a1:57:ae:ca:e7:9a: 9b:48:0e:22:93:5b:73:8b:23:03:84:49:de:d2:ec:3b:2f:8e: f7:44:6f:73:77:5f:3d:fe:47:4b:8b:ef:16:91:0f:ff:51:dc: 89:75:d1:8d:9d:eb:48:13:a2:a8:83:c9:85:53:7c:1f:0b:54: 98:99:86:33:a7:f5:c2:d3:7e:2d:1e:bb:fc:8d:d9:fc:ac:03: 26:7b:8c:64:07:68:4b:e9:ad:18:33:bd:2b:4d:97:12:d2:61: f1:da:96:5a:98:6d:a1:3d:3d:e2:bb:83:fb:72:ea:d1:f2:af: ea:fe:b5:aa:16:ab:28:fd:74:b7:a6:9b:d3:c0:df:19:33:87: b1:9b:64:e5:94:fe:33:8b:f6:f6:aa:a9:83:81:64:bb:ef:cc: 38:dc:df:bc:8f:06:db:3c:aa:29:c4:2b:3e:29:e3:cd:28:40: 67:bc:78:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsqLDK6YmYhyFTuMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRlZTMyOWYtNmE5Ni00NGNiLThjYzUtMjIyZTBmZWM4 YzNhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk N2IzODk5NjktOTJmMS00NTlhLTg1NzEtZjVmN2M2ZjczODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKY7rQM0IN4CrYFu1RlPVYl+v43LF04Wz6wh 1VLfkeH8s7wEwdumRhWRy34D4NZ1SgIp/YBYi235KKyYd3H9hTN/7a9Kh2Lwe2vp NmPtOdy4EJQWZuiq++fhyi2MAeXXEvzV/kdv9iKECgTBGqW47BeLnZjEQ0jXqiZK iUaQS8t8BWAZBcAs6HclWHssOXAnq/vQy2RXQCgcRGOia4pJvJuvuJCvA5BjcKcB grbMxKmAUkUp0UnE5vf1MroGtHepON1lID4Z5GGCZd2epj60LEuASFyMSUu+R2vN jVmaPptS/jooUePLFQhDS+GSbgaJcUijjUrjJfmJHRdKvFc9VQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEmCHwRit9nQsZpPjnJ3bBsPajrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNGVl MzI5Zi02YTk2LTQ0Y2ItOGNjNS0yMjJlMGZlYzhjM2EvYWNmZTkzYzEtMGY4MS0z YzUyLWJiNmYtYjljZTdhMDllMWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTRlZTMyOWYtNmE5Ni00NGNiLThj YzUtMjIyZTBmZWM4YzNhLzE0ZWUzMjlmLTZhOTYtNDRjYi04Y2M1LTIyMmUwZmVj OGMzYS5jcmwwHwYDVR0jBBgwFoAUrkgj+aHqwwoeetBYqtTqeK/B7BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNGVlMzI5Zi02YTk2LTQ0Y2ItOGNjNS0yMjJl MGZlYzhjM2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ0AA3D MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4AVaf0PfMNeNSg2rc25Kx7/vbdUAfkdxmtUV21Jq66FMPujjH6 uNah1gaLgBmxertWACqM6eYvnM92PIsXXomHnI433iXnk8r9AoW/sh0pgSj5FqFX rsrnmptIDiKTW3OLIwOESd7S7DsvjvdEb3N3Xz3+R0uL7xaRD/9R3Il10Y2d60gT oqiDyYVTfB8LVJiZhjOn9cLTfi0eu/yN2fysAyZ7jGQHaEvprRgzvStNlxLSYfHa llqYbaE9PeK7g/ty6tHyr+r+taoWqyj9dLemm9PA3xkzh7GbZOWU/jOL9vaqqYOB ZLvvzDjc37yPBts8qinEKz4p480oQGe8ePo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:51:56 2025 by rpki-client