$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/74acb797-d55a-3c16-8cd6-b06d7b903689.roa File: 74acb797-d55a-3c16-8cd6-b06d7b903689.roa (raw, json) Hash identifier: 72aDJhbYHX2CcfSEQF/jrfK5qZ5vDA0k2Bag5N7AUjE= Subject key identifier: 0C:11:A8:E9:C5:0E:1B:1E:E8:DD:EA:03:75:08:0B:89:3D:B7:E9:4E Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F4328584B0B76A71C7BDAD834595EFF80 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/74acb797-d55a-3c16-8cd6-b06d7b903689.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 237 IP address blocks: 2001:48a8:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a7:1c:7b:da:d8:34:59:5e:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=ae528fa7-6169-4160-afc5-c106fa687149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ed:b4:b8:2b:45:34:34:e9:dc:03:11:2f:73: 9d:a0:51:11:d0:00:00:d2:92:12:fd:53:c9:b0:2e: 88:66:30:a9:a7:5a:32:8f:3d:bb:8d:08:bb:a7:6b: fa:14:8d:47:80:b4:7f:e5:70:25:58:1e:74:3a:86: 0b:1c:28:6c:0b:e6:c0:c3:f3:12:90:57:7a:a0:48: 86:48:c3:56:3c:47:27:ff:19:71:e1:8d:89:0b:30: 98:db:b0:12:65:55:ac:19:3f:f1:d5:37:e1:f2:60: 41:e9:5f:1c:23:d3:db:29:14:75:7f:c2:66:55:6a: bc:f0:c5:e9:4d:6f:4c:b3:4a:95:a9:a6:f6:5c:3c: f7:d7:51:30:14:a7:07:f4:e0:9b:29:13:99:dd:50: 94:8d:bf:8c:3d:09:c1:32:c6:ce:58:b3:44:70:a9: 25:2d:34:f2:35:1b:05:a7:3a:e5:5c:c6:7a:15:bb: e0:61:70:3e:e3:4c:a1:19:8b:22:1c:50:f7:7f:0d: e4:3b:b4:3d:38:e1:2c:35:a9:1a:dd:70:73:9c:44: 9d:eb:a1:5b:6c:fb:29:d0:fd:d5:60:de:1f:ca:7e: f7:83:1c:41:a0:e8:be:12:1b:70:83:da:0e:50:0c: 6b:28:92:10:b4:f1:17:a2:c8:51:12:68:9c:4f:48: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:11:A8:E9:C5:0E:1B:1E:E8:DD:EA:03:75:08:0B:89:3D:B7:E9:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/74acb797-d55a-3c16-8cd6-b06d7b903689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b3:8a:3e:52:c6:79:09:a9:4e:0c:2e:8c:a0:03:9e:76:d0: 41:d2:16:85:50:0e:63:7e:66:2e:a0:d9:f6:c4:f6:d7:e0:46: 7b:78:fa:6f:b7:65:77:98:c4:d5:d0:e7:9a:37:e4:b7:5f:8c: 7b:3b:bf:6e:ef:cd:75:7c:49:a2:29:9e:3c:4b:e6:80:ca:a4: 8f:b6:62:30:be:21:2d:b4:73:69:d6:7e:c3:06:c8:7f:0e:4d: 14:15:0b:9b:17:8d:40:27:5f:22:ec:73:d0:eb:80:9a:18:91: 0c:98:3b:ab:f7:bb:7a:50:ab:1f:6e:28:95:2b:db:b5:cb:a0: 33:b8:ee:a2:62:ba:91:a0:0f:e3:45:c3:8a:ba:bf:d5:b6:50: ea:f8:07:70:fa:4d:82:4b:16:30:39:4a:f7:4a:87:e6:60:1b: 6c:62:0d:d8:da:84:e8:e0:e8:ce:e3:35:b0:82:4d:93:2b:f3: 6e:9f:2e:b6:48:cc:08:df:24:d4:05:f8:b0:11:25:b1:8e:ef: 59:cd:f0:c4:7f:26:b7:b1:a5:bd:76:f9:32:6d:c8:92:00:1d: 85:55:b0:56:b0:bc:cb:35:e7:40:bd:a9:b3:aa:c1:d8:61:56: 9b:87:c6:c2:b9:51:df:44:cc:6b:ea:f0:40:5e:d3:49:f4:86: 4f:5a:f2:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsLdqcce9rYNFle/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YWU1MjhmYTctNjE2OS00MTYwLWFmYzUtYzEwNmZhNjg3MTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie20uCtFNDTp3AMRL3OdoFER0AAA0pIS/VPJ sC6IZjCpp1oyjz27jQi7p2v6FI1HgLR/5XAlWB50OoYLHChsC+bAw/MSkFd6oEiG SMNWPEcn/xlx4Y2JCzCY27ASZVWsGT/x1Tfh8mBB6V8cI9PbKRR1f8JmVWq88MXp TW9Ms0qVqab2XDz311EwFKcH9OCbKROZ3VCUjb+MPQnBMsbOWLNEcKklLTTyNRsF pzrlXMZ6FbvgYXA+40yhGYsiHFD3fw3kO7Q9OOEsNaka3XBznESd66FbbPsp0P3V YN4fyn73gxxBoOi+Ehtwg9oOUAxrKJIQtPEXoshREmicT0iXvwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAwRqOnFDhse6N3qA3UIC4k9t+lOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvNzRhY2I3OTctZDU1YS0z YzE2LThjZDYtYjA2ZDdiOTAzNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAFIqAgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAerOKPlLGeQmpTgwujKADnnbQQdIWhVAOY35mLqDZ9sT21+BGe3j6 b7dld5jE1dDnmjfkt1+Mezu/bu/NdXxJoimePEvmgMqkj7ZiML4hLbRzadZ+wwbI fw5NFBULmxeNQCdfIuxz0OuAmhiRDJg7q/e7elCrH24olSvbtcugM7juomK6kaAP 40XDirq/1bZQ6vgHcPpNgksWMDlK90qH5mAbbGIN2NqE6ODozuM1sIJNkyvzbp8u tkjMCN8k1AX4sBElsY7vWc3wxH8mt7GlvXb5Mm3IkgAdhVWwVrC8yzXnQL2ps6rB 2GFWm4fGwrlR30TMa+rwQF7TSfSGT1ryFA== -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:46 2025 by rpki-client