$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa File: 95f415e9-f520-3499-9401-200ef544c860.roa (raw, json) Hash identifier: d8AZGeR2UjuvfkGrs0fcudC42vru3UYXCBf3rXiiwjg= Subject key identifier: 98:54:BA:9A:B6:E8:5E:B2:0D:6D:9F:E9:B0:FA:E6:5E:90:3C:82:EF Certificate issuer: /CN=e13a5b98-c410-4224-be84-d8a01047fa5b Certificate serial: 010D0C9F4328584B2FC1854C3AB3DCF553308C00 Authority key identifier: 07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 14041 IP address blocks: 2620:123:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:85:4c:3a:b3:dc:f5:53:30:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13a5b98-c410-4224-be84-d8a01047fa5b Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=2fe18940-9bb1-4756-b2f6-a3e8a9a55b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:a9:e6:e7:4c:08:bd:65:bc:e2:1e:63:20: 31:d9:3a:d7:1f:c9:b2:86:67:ab:74:ce:34:0e:cd: 70:2f:f2:3c:33:ba:95:79:3d:f2:2a:2d:5e:55:84: 40:e7:09:c1:3b:1c:82:b9:ec:f8:13:51:4f:bc:d7: 28:d9:c2:ba:ef:e0:f7:01:54:f1:87:f3:9b:d0:e5: 60:8b:8e:d9:54:1c:da:0c:0a:f8:39:1c:d9:b6:0a: 46:70:76:45:bc:aa:49:5c:a9:3a:31:3c:d7:d0:7a: a4:a0:74:06:50:a0:48:4a:b5:52:81:04:43:3c:f6: e6:5f:6f:2c:a8:f7:71:30:a9:18:2a:3b:2a:86:22: cb:ca:40:97:e1:57:8e:c0:48:52:12:bb:7e:39:05: c0:1c:d4:19:1b:ef:b9:25:54:5a:53:04:da:ab:1f: db:91:0b:50:51:8d:c5:aa:98:2b:aa:49:0d:a2:55: 87:90:29:32:ea:83:aa:61:e1:53:f0:2a:95:db:5c: ad:8c:e6:f3:25:1e:d3:b2:cb:30:67:75:d0:69:6f: 81:67:67:eb:f7:5b:fb:43:ff:70:c1:6e:3a:59:3c: 54:0d:fd:59:e4:4c:cb:d3:3c:3a:ad:f3:37:a9:af: d6:c1:0a:64:64:bd:5c:dd:88:64:d3:f0:64:df:d0: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:54:BA:9A:B6:E8:5E:B2:0D:6D:9F:E9:B0:FA:E6:5E:90:3C:82:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl X509v3 Authority Key Identifier: keyid:07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1d:47:79:ce:82:57:b0:f0:c3:de:e2:0a:21:3e:46:2c:28: 29:bb:25:b1:32:03:c2:f4:39:00:8b:b9:c4:77:10:a3:f5:95: e2:d5:66:0a:96:63:56:24:e8:ed:d6:a9:03:4e:f4:32:f0:0e: d1:f6:46:b9:2e:b4:ad:3e:ab:e1:ee:1a:4c:0c:c1:06:e0:9a: a2:de:ba:af:d3:66:33:65:d3:b0:3b:20:c6:07:d9:67:48:7e: e0:79:23:96:1c:69:f6:ba:90:6c:ac:6d:9a:c3:4b:ae:11:bd: 48:a0:91:a8:44:55:e9:2b:c2:4c:e6:fa:76:57:fe:f1:ed:aa: 77:cc:43:60:57:30:1a:a5:48:ba:9e:0e:4a:d1:c1:1f:2d:eb: 3d:b0:73:4f:7b:ba:61:2a:2c:01:4b:b9:1c:ed:39:04:c2:10: b9:32:b6:3c:e2:6b:00:10:51:d0:f0:8f:bd:b5:6d:bc:dc:25: cc:79:c9:41:a0:61:d5:e5:72:bd:45:c3:d3:b4:59:29:34:ce: ec:1e:f6:a3:86:2b:17:6a:91:96:a1:b7:2e:bd:b3:16:08:c8: 62:b0:89:49:40:d7:f0:ae:d5:09:71:c1:a2:8a:ac:c7:39:1d: bd:e0:cf:dc:27:da:b5:06:c6:1d:af:77:4a:20:31:d3:04:61: a8:34:2d:1c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsvwYVMOrPc9VMwjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTEzYTViOTgtYzQxMC00MjI0LWJlODQtZDhhMDEwNDdm YTViMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MmZlMTg5NDAtOWJiMS00NzU2LWIyZjYtYTNlOGE5YTU1YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Op5udMCL1lvOIeYyAx2TrXH8myhmerdM40 Ds1wL/I8M7qVeT3yKi1eVYRA5wnBOxyCuez4E1FPvNco2cK67+D3AVTxh/Ob0OVg i47ZVBzaDAr4ORzZtgpGcHZFvKpJXKk6MTzX0HqkoHQGUKBISrVSgQRDPPbmX28s qPdxMKkYKjsqhiLLykCX4VeOwEhSErt+OQXAHNQZG++5JVRaUwTaqx/bkQtQUY3F qpgrqkkNolWHkCky6oOqYeFT8CqV21ytjObzJR7TssswZ3XQaW+BZ2fr91v7Q/9w wW46WTxUDf1Z5EzL0zw6rfM3qa/WwQpkZL1c3Yhk0/Bk39C3fwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJhUupq26F6yDW2f6bD65l6QPILvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMTNh NWI5OC1jNDEwLTQyMjQtYmU4NC1kOGEwMTA0N2ZhNWIvOTVmNDE1ZTktZjUyMC0z NDk5LTk0MDEtMjAwZWY1NDRjODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTEzYTViOTgtYzQxMC00MjI0LWJl ODQtZDhhMDEwNDdmYTViL2UxM2E1Yjk4LWM0MTAtNDIyNC1iZTg0LWQ4YTAxMDQ3 ZmE1Yi5jcmwwHwYDVR0jBBgwFoAUBzT8cMlD4r8n1KXf9GQ5fSh+ZXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMTNhNWI5OC1jNDEwLTQyMjQtYmU4NC1kOGEw MTA0N2ZhNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABI1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfB1Hec6CV7Dww97iCiE+RiwoKbslsTIDwvQ5AIu5xHcQo/WV4tVm CpZjViTo7dapA070MvAO0fZGuS60rT6r4e4aTAzBBuCaot66r9NmM2XTsDsgxgfZ Z0h+4Hkjlhxp9rqQbKxtmsNLrhG9SKCRqERV6SvCTOb6dlf+8e2qd8xDYFcwGqVI up4OStHBHy3rPbBzT3u6YSosAUu5HO05BMIQuTK2POJrABBR0PCPvbVtvNwlzHnJ QaBh1eVyvUXD07RZKTTO7B72o4YrF2qRlqG3Lr2zFgjIYrCJSUDX8K7VCXHBooqs xzkdveDP3CfatQbGHa93SiAx0wRhqDQtHA== -----END CERTIFICATE-----Generated at Sat Oct 11 07:34:11 2025 by rpki-client