$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa File: cd63a45e-2751-3074-836a-cb6f05c00e47.roa (raw, json) Hash identifier: ZswajGDtDg7exP6mrEabsb33BCHyeq8GXp1G3nVMIiU= Subject key identifier: AE:33:4A:2A:63:0C:F2:D5:D7:3F:AF:B0:84:69:7F:9B:4F:93:70:93 Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F4328584B4E7714DDAFC83CCB68A372C0 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 30144 IP address blocks: 2604:9b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:14:dd:af:c8:3c:cb:68:a3:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=e8f8aa63-7db9-4c38-8c10-89e81e014bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:78:c2:0d:98:02:43:c0:94:ef:92:68:5f: e6:43:fb:36:9c:c2:62:ff:f5:bc:e8:0a:48:26:6e: 2e:2d:2d:6d:89:ff:f6:5e:ac:bf:d6:05:ee:08:7f: 17:d4:57:38:2c:3c:06:d0:b1:bc:f9:a6:3a:76:93: b7:98:b9:35:8c:6b:f0:53:66:55:d6:ac:77:13:d0: 5c:94:77:6d:53:1e:ed:b0:83:23:76:80:8c:11:d9: 14:47:7a:cf:2c:90:e8:41:1d:01:d4:22:62:f3:50: 8c:31:40:2c:e7:a0:92:37:e4:0c:ba:9d:46:ba:aa: 8a:fa:32:98:a5:27:b7:17:00:3a:a4:6a:3d:13:a0: f0:23:d7:67:8c:57:6e:ce:5c:4c:de:7e:f4:49:90: c9:84:2b:41:b7:f9:51:c0:da:59:e2:3e:e2:3f:39: f2:2f:32:ac:d6:d9:f8:dc:30:59:d7:7c:19:07:07: 46:fd:dd:d7:49:c2:89:98:f3:22:48:33:bf:37:f2: 1d:f7:1a:fc:fc:4a:40:27:90:27:24:d9:17:e0:61: 9e:df:09:74:a0:f9:3e:e2:f4:e6:eb:50:db:90:22: a9:6d:c6:20:5e:4a:cb:f9:bd:ce:73:0d:76:c0:f2: c9:b3:40:d9:f6:e0:7c:55:94:eb:8c:9a:99:99:e0: 07:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:33:4A:2A:63:0C:F2:D5:D7:3F:AF:B0:84:69:7F:9B:4F:93:70:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv6: 2604:9b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:07:e5:da:61:06:6a:80:d8:58:b1:a8:bd:15:43:9c:81:f6: fc:13:b2:52:a3:8c:50:e5:db:4a:48:da:aa:93:84:11:8b:80: d1:3d:04:09:11:16:db:15:16:fd:b3:57:49:fa:79:ed:c9:97: a8:f4:ea:3e:4e:a9:97:0d:95:5a:51:06:06:d4:6e:cd:87:1a: e9:cd:8c:3f:85:e4:a2:08:81:38:36:15:6f:b8:79:1f:af:49: 69:7d:65:42:9a:ba:4f:e7:b8:3b:6d:20:e1:6f:e6:43:97:93: 9a:1c:0c:43:40:cc:ad:c6:76:13:dc:6a:a7:31:34:da:10:4f: 20:c7:bd:aa:0d:ee:18:86:a3:79:7d:53:08:0f:3b:27:c4:6d: 13:53:9c:fa:fc:77:c2:35:94:71:64:a0:76:ee:20:41:04:fe: bf:08:5b:75:3a:84:32:25:03:b1:01:7c:68:53:93:f6:8d:76: 4a:39:3c:14:39:64:86:0f:46:7d:79:ee:fd:a2:c0:b4:ee:a6: 20:fc:cd:6a:ef:3d:05:33:5a:4d:af:af:57:0d:80:1b:cd:df: 76:ff:de:37:10:88:f6:b5:9c:6d:b1:ac:07:4b:9a:78:e2:a4: f0:3a:ba:fd:ae:89:1a:90:3c:aa:b9:89:09:ae:5a:b1:bc:58: db:6a:b4:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtOdxTdr8g8y2ijcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZThmOGFhNjMtN2RiOS00YzM4LThjMTAtODllODFlMDE0YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+54wg2YAkPAlO+SaF/mQ/s2nMJi//W86ApI Jm4uLS1tif/2Xqy/1gXuCH8X1Fc4LDwG0LG8+aY6dpO3mLk1jGvwU2ZV1qx3E9Bc lHdtUx7tsIMjdoCMEdkUR3rPLJDoQR0B1CJi81CMMUAs56CSN+QMup1GuqqK+jKY pSe3FwA6pGo9E6DwI9dnjFduzlxM3n70SZDJhCtBt/lRwNpZ4j7iPznyLzKs1tn4 3DBZ13wZBwdG/d3XScKJmPMiSDO/N/Id9xr8/EpAJ5AnJNkX4GGe3wl0oPk+4vTm 61DbkCKpbcYgXkrL+b3Ocw12wPLJs0DZ9uB8VZTrjJqZmeAHpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK4zSipjDPLV1z+vsIRpf5tPk3CTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvY2Q2M2E0NWUtMjc1MS0z MDc0LTgzNmEtY2I2ZjA1YzAwZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSbgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmB+XaYQZqgNhYsai9FUOcgfb8E7JSo4xQ5dtKSNqqk4QRi4DRPQQJ ERbbFRb9s1dJ+nntyZeo9Oo+TqmXDZVaUQYG1G7NhxrpzYw/heSiCIE4NhVvuHkf r0lpfWVCmrpP57g7bSDhb+ZDl5OaHAxDQMytxnYT3GqnMTTaEE8gx72qDe4YhqN5 fVMIDzsnxG0TU5z6/HfCNZRxZKB27iBBBP6/CFt1OoQyJQOxAXxoU5P2jXZKOTwU OWSGD0Z9ee79osC07qYg/M1q7z0FM1pNr69XDYAbzd92/943EIj2tZxtsawHS5p4 4qTwOrr9rokakDyquYkJrlqxvFjbarTn -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:19 2025 by rpki-client