$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa File: a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa (raw, json) Hash identifier: UZSE7kfUKQ4o+Rj0221VEpY1lXnq3yAWHr4MnP/hQvE= Subject key identifier: 9C:F5:81:B2:B4:C7:E5:F2:D3:FC:9A:7B:79:A7:C1:92:14:49:5A:12 Certificate issuer: /CN=13fecd24-0da7-4140-9636-71a72de851ec Certificate serial: 010D0C9F4328584B48E1C5E2B68766E0446E0B40 Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 2604:d0c0:ae00::/40 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c5:e2:b6:87:66:e0:44:6e:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4d62b5ab-63e7-4cdc-ac4f-0f91b7e30968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1a:71:a3:03:84:59:7d:33:95:3f:14:98:a0: ee:7b:36:5b:34:36:0e:b0:4e:bb:4e:8b:a1:80:62: 17:d1:21:d7:34:a1:7c:0f:5d:92:42:ad:c2:b0:ec: 3f:20:1c:78:0f:eb:db:5c:37:9d:df:ae:0b:0e:d5: 0f:15:a9:bb:1f:0c:ac:e5:d8:15:45:39:9a:60:7b: 8a:7c:b0:a3:41:5a:38:5c:73:fb:96:be:da:f0:5c: c5:d6:f1:14:39:3d:2c:12:3b:9d:4a:e1:81:da:9b: 41:27:ec:5c:e9:fb:be:12:78:b1:ba:bb:72:5f:59: 14:33:d7:4b:82:d8:c2:96:b9:8f:a7:15:6f:43:5b: 5f:25:e0:cd:9e:c3:ec:b3:85:37:10:44:55:3a:0b: 50:2d:a1:1f:58:1d:78:12:6a:e7:99:25:34:c0:db: e0:45:96:6f:b4:95:c1:41:1d:cf:5d:c5:68:48:b7: 8e:2f:5d:a0:19:18:c8:7d:2d:7b:de:60:b3:bf:81: d6:8b:b0:78:70:cf:cd:a8:8b:af:8a:67:3e:70:48: af:f9:b8:ef:ed:0d:60:54:24:62:14:32:d7:80:e6: fd:8d:11:a6:c3:9c:eb:82:41:86:02:96:d7:0e:22: 49:83:62:f8:3a:d7:97:b7:1a:59:29:1b:bf:a1:af: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F5:81:B2:B4:C7:E5:F2:D3:FC:9A:7B:79:A7:C1:92:14:49:5A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl X509v3 Authority Key Identifier: keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer sbgp-ipAddrBlock: critical IPv6: 2604:d0c0:ae00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d6:69:02:84:c5:29:93:0c:36:99:e0:71:24:07:0e:29:92: 44:94:bc:40:d7:ab:e1:be:38:33:11:13:93:22:c4:d2:35:a6: 07:99:0d:bc:fb:5c:ef:8c:c1:ef:93:da:cc:7a:4d:e1:2d:95: 1f:27:0b:25:98:be:ea:a1:45:d3:6e:09:0a:09:82:5f:5a:57: 85:05:9d:ff:d2:e9:03:c3:56:69:ba:d4:60:a3:17:04:99:b6: 14:9a:f8:8e:1c:93:8b:97:2c:34:0f:88:15:03:c4:60:a6:b9: 40:b5:eb:44:07:01:46:50:2b:47:f9:c3:03:34:3d:d9:fc:86: ab:ad:b2:7d:3d:3e:5f:e9:94:34:60:1e:08:1b:9a:99:df:63: fe:14:ac:ae:e2:02:91:b0:ef:d0:f0:80:88:0c:c8:68:ef:c1: c4:ea:8f:51:aa:ca:1d:5d:1b:06:a4:b1:81:7a:95:ca:e2:4b: 58:36:9d:49:74:18:db:7b:e5:62:f3:18:3a:48:66:ce:bf:20: 1c:2f:c0:84:ac:7a:7c:6e:af:f5:bd:4b:91:9a:a9:cf:df:7c: 36:98:09:6d:a3:8f:56:5e:66:f2:39:0d:d2:a0:71:7a:45:1d: 76:06:bd:14:e2:52:80:ac:ac:7f:d8:30:59:e0:a2:4e:7d:29: ae:3d:0c:36 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtI4cXitodm4ERuC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1 MWVjMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NGQ2MmI1YWItNjNlNy00Y2RjLWFjNGYtMGY5MWI3ZTMwOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghpxowOEWX0zlT8UmKDuezZbNDYOsE67Touh gGIX0SHXNKF8D12SQq3CsOw/IBx4D+vbXDed364LDtUPFam7Hwys5dgVRTmaYHuK fLCjQVo4XHP7lr7a8FzF1vEUOT0sEjudSuGB2ptBJ+xc6fu+EnixurtyX1kUM9dL gtjClrmPpxVvQ1tfJeDNnsPss4U3EERVOgtQLaEfWB14EmrnmSU0wNvgRZZvtJXB QR3PXcVoSLeOL12gGRjIfS173mCzv4HWi7B4cM/NqIuvimc+cEiv+bjv7Q1gVCRi FDLXgOb9jRGmw5zrgkGGApbXDiJJg2L4OteXtxpZKRu/oa+6NQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJz1gbK0x+Xy0/yae3mnwZIUSVoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xM2Zl Y2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvYTJjY2EzMmYtZDMxMC0z ZDVjLTlkZWItYjg5YjRkOTI1M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTNmZWNkMjQtMGRhNy00MTQwLTk2 MzYtNzFhNzJkZTg1MWVjLzEzZmVjZDI0LTBkYTctNDE0MC05NjM2LTcxYTcyZGU4 NTFlYy5jcmwwHwYDVR0jBBgwFoAUcfsH7Jbduh5RSiTnSMg1VDbRFH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3 MmRlODUxZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTQwK4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATtZpAoTFKZMMNpngcSQHDimSRJS8QNer4b44MxETkyLE0jWmB5kN vPtc74zB75PazHpN4S2VHycLJZi+6qFF024JCgmCX1pXhQWd/9LpA8NWabrUYKMX BJm2FJr4jhyTi5csNA+IFQPEYKa5QLXrRAcBRlArR/nDAzQ92fyGq62yfT0+X+mU NGAeCBuamd9j/hSsruICkbDv0PCAiAzIaO/BxOqPUarKHV0bBqSxgXqVyuJLWDad SXQY23vlYvMYOkhmzr8gHC/AhKx6fG6v9b1LkZqpz998NpgJbaOPVl5m8jkN0qBx ekUddga9FOJSgKysf9gwWeCiTn0prj0MNg== -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:58 2025 by rpki-client