$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/43d67fc8-2e35-348a-af72-a429da333501.roa File: 43d67fc8-2e35-348a-af72-a429da333501.roa (raw, json) Hash identifier: UySeKugYLBPkR//KlL+cnJpaPjzgQMdrtcvad5jgAQ0= Subject key identifier: 0C:8E:A3:1F:73:A5:7A:96:27:19:48:C5:A4:79:4C:96:2E:E8:B1:F7 Certificate issuer: /CN=cdcd237b-8c52-4d20-808c-c916ddbd962f Certificate serial: 010D0C9F4328584B3C51ADB66D3157467CAD7A40 Authority key identifier: 49:56:C4:C7:34:EE:62:CF:ED:7F:76:92:74:A9:78:8A:BC:8E:9F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/43d67fc8-2e35-348a-af72-a429da333501.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2620:c3:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:ad:b6:6d:31:57:46:7c:ad:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdcd237b-8c52-4d20-808c-c916ddbd962f Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=aada0bc0-2def-4a7c-8090-cd8ae8c39a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a1:44:7b:86:c9:bf:8f:d9:6f:da:49:76:ee: fd:74:be:0a:cd:b8:9a:83:0d:5a:75:53:bf:64:cf: 6e:28:cb:20:d0:8b:f9:86:a1:12:fd:50:a0:b6:0e: 74:54:dd:fe:c5:ca:49:8f:11:6e:25:a7:aa:f9:b1: 1a:cf:4b:29:20:49:44:ac:24:4a:b4:6b:25:1c:d1: a1:d7:ce:6c:fb:0c:92:d7:a0:26:6e:ed:5a:7d:b2: f8:93:06:5a:b0:38:cc:e3:46:1b:ae:d7:5b:98:34: 73:af:ba:e0:bb:ef:cf:51:ea:9b:bd:74:32:24:d6: 03:c7:7e:78:09:2d:70:98:1a:9e:10:7b:e7:a8:fa: 5e:c4:71:40:e4:6d:fe:70:42:06:2b:aa:75:c0:de: 21:61:fd:09:0b:93:3c:73:3b:4b:1f:5d:52:2a:be: 3f:42:e3:34:1d:78:9e:84:22:21:d3:40:0a:8b:84: 2a:86:4d:f4:8e:ac:c0:0f:97:0c:4b:2e:35:0b:5f: 12:52:70:70:26:97:89:bb:94:37:72:c5:43:f6:be: e6:37:6e:e7:92:64:87:a5:a7:07:4a:75:2a:4f:05: e3:60:77:8c:1f:55:b0:58:10:73:41:13:50:c3:eb: c6:d4:bc:30:21:7a:07:ac:7e:80:3e:13:45:8f:ff: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8E:A3:1F:73:A5:7A:96:27:19:48:C5:A4:79:4C:96:2E:E8:B1:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/43d67fc8-2e35-348a-af72-a429da333501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.crl X509v3 Authority Key Identifier: keyid:49:56:C4:C7:34:EE:62:CF:ED:7F:76:92:74:A9:78:8A:BC:8E:9F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer sbgp-ipAddrBlock: critical IPv6: 2620:c3:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:98:0e:83:94:76:b2:8d:1e:e0:0a:dd:bc:9c:55:c9:47:60: ee:53:20:4d:99:92:fb:39:5d:4f:b2:56:44:5c:21:be:00:cf: 8f:4a:c1:32:53:c0:3a:39:6d:33:12:2c:41:70:52:33:d3:c9: 05:c6:fb:1d:eb:0c:ea:23:6a:16:da:1d:0e:b2:f7:31:47:f5: cd:30:64:d6:ee:fd:42:c6:19:e6:55:75:b9:c7:54:aa:4b:c1: db:a2:1b:bc:44:34:57:c7:54:85:25:51:1b:7b:0a:93:4d:47: 38:aa:5c:0d:f6:c8:35:83:56:9a:bc:7f:6d:a0:6d:3e:4f:d9: 41:b0:ac:28:23:eb:ae:df:25:0f:b9:05:e8:0d:58:19:56:ec: 9f:53:d0:ef:7c:9e:eb:f3:83:bd:28:f5:af:25:4e:b4:dc:28: 9c:ad:1a:f0:33:49:1c:e6:02:0e:78:85:a0:63:f7:01:9c:f1: a3:52:50:20:6d:96:06:96:c5:dc:7f:3e:70:7c:34:63:cc:bb: 17:82:d5:c7:83:77:a1:64:f4:7a:45:86:35:32:ce:9f:33:af: 25:1f:02:65:8e:07:d9:3c:ef:fc:68:4e:ef:94:b8:0b:d9:89: 06:29:8b:54:e5:33:32:6d:9c:c5:9a:6d:44:7b:cb:d2:73:9d: 42:1b:c3:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs8Ua22bTFXRnytekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RjZDIzN2ItOGM1Mi00ZDIwLTgwOGMtYzkxNmRkYmQ5 NjJmMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk YWFkYTBiYzAtMmRlZi00YTdjLTgwOTAtY2Q4YWU4YzM5YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKFEe4bJv4/Zb9pJdu79dL4Kzbiagw1adVO/ ZM9uKMsg0Iv5hqES/VCgtg50VN3+xcpJjxFuJaeq+bEaz0spIElErCRKtGslHNGh 185s+wyS16Ambu1afbL4kwZasDjM40YbrtdbmDRzr7rgu+/PUeqbvXQyJNYDx354 CS1wmBqeEHvnqPpexHFA5G3+cEIGK6p1wN4hYf0JC5M8cztLH11SKr4/QuM0HXie hCIh00AKi4Qqhk30jqzAD5cMSy41C18SUnBwJpeJu5Q3csVD9r7mN27nkmSHpacH SnUqTwXjYHeMH1WwWBBzQRNQw+vG1LwwIXoHrH6APhNFj/8ZDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAyOox9zpXqWJxlIxaR5TJYu6LH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZGNk MjM3Yi04YzUyLTRkMjAtODA4Yy1jOTE2ZGRiZDk2MmYvNDNkNjdmYzgtMmUzNS0z NDhhLWFmNzItYTQyOWRhMzMzNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2RjZDIzN2ItOGM1Mi00ZDIwLTgw OGMtYzkxNmRkYmQ5NjJmL2NkY2QyMzdiLThjNTItNGQyMC04MDhjLWM5MTZkZGJk OTYyZi5jcmwwHwYDVR0jBBgwFoAUSVbExzTuYs/tf3aSdKl4iryOnx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZGNkMjM3Yi04YzUyLTRkMjAtODA4Yy1jOTE2 ZGRiZDk2MmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAw2AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6YDoOUdrKNHuAK3bycVclHYO5TIE2Zkvs5XU+yVkRcIb4Az49K wTJTwDo5bTMSLEFwUjPTyQXG+x3rDOojahbaHQ6y9zFH9c0wZNbu/ULGGeZVdbnH VKpLwduiG7xENFfHVIUlURt7CpNNRziqXA32yDWDVpq8f22gbT5P2UGwrCgj667f JQ+5BegNWBlW7J9T0O98nuvzg70o9a8lTrTcKJytGvAzSRzmAg54haBj9wGc8aNS UCBtlgaWxdx/PnB8NGPMuxeC1ceDd6Fk9HpFhjUyzp8zryUfAmWOB9k87/xoTu+U uAvZiQYpi1TlMzJtnMWabUR7y9JznUIbw9c= -----END CERTIFICATE-----Generated at Thu Oct 9 03:43:29 2025 by rpki-client