$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa File: 9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa (raw, json) Hash identifier: BskO5JXhl8RCJ2QmR/Xrom0nE+aj51NJ8jSGARSa5A8= Subject key identifier: CB:45:AC:18:74:B0:E0:4E:37:02:B5:9E:F1:54:FE:5F:35:F6:5C:92 Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F4328584B758C91C172484EBB08C4DD00 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 393732 IP address blocks: 2620:11d:500c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:91:c1:72:48:4e:bb:08:c4:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=7ad975a7-2927-4838-a3c4-930504fa1328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:9f:72:95:50:ab:b0:4b:ac:8e:50:c2:04: b8:bb:4c:e4:af:a1:c4:ef:32:eb:11:62:47:f2:c6: 3b:6a:9f:e6:73:66:ea:32:15:00:93:55:4d:63:98: 9b:09:d9:69:bf:87:c7:f6:36:67:86:ae:de:84:a5: 96:f4:93:18:e6:ef:0f:fc:8a:32:c6:a9:6e:d8:9f: 4a:93:15:45:cd:9c:21:5e:18:20:42:d1:bf:cb:77: 0e:de:8b:3d:a0:6b:8a:be:84:7a:4e:9e:cd:83:e4: 36:62:43:65:cf:55:f5:dc:b2:93:f0:74:23:a6:e0: 24:f0:45:da:db:e6:f2:5b:a1:6a:29:53:4a:56:46: da:92:eb:3e:79:33:f7:36:6c:b8:19:a6:3c:aa:4d: 9d:e4:8f:3b:97:8d:b7:f7:68:12:39:fc:37:1a:e5: 42:d3:ea:f7:aa:38:d9:f9:f4:2c:9d:4b:00:0f:6f: 7a:01:71:f4:f1:1f:a6:b7:5d:42:1c:36:c4:a2:5b: 1c:66:d2:e4:60:bd:72:45:32:b4:10:e2:b4:d6:54: be:28:a5:8d:68:89:26:7f:ae:ce:89:c1:6e:f7:09: ee:3c:ee:82:c9:64:9a:5a:bb:a6:03:e1:18:8d:ea: e9:7b:5b:56:62:56:1d:87:f8:61:7d:a9:bf:a4:a8: 87:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:45:AC:18:74:B0:E0:4E:37:02:B5:9E:F1:54:FE:5F:35:F6:5C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:500c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:df:5a:fa:00:10:68:46:32:ed:c6:95:0d:71:8f:58:07:02: 27:16:de:05:5e:dd:a0:8d:8b:74:af:d8:99:70:9d:92:2e:1d: cb:a8:2b:53:a7:77:ce:71:37:74:48:a1:25:14:af:c1:01:bf: b8:6a:8e:23:e9:42:f0:cc:b2:c1:f7:5c:44:ba:d2:91:38:24: 1f:35:bc:7d:70:3f:51:91:a4:cd:e4:e9:fd:49:b5:87:bd:0f: 96:3e:73:0c:94:06:e7:5f:03:c0:9b:e7:25:b2:2a:60:a8:d2: a1:3e:e4:31:61:60:e9:40:23:92:d2:9a:7f:e7:91:3f:c8:da: da:d1:52:8e:e0:33:91:9c:73:04:38:84:56:10:5b:15:65:51: 63:aa:f9:34:00:39:af:6a:90:87:fe:88:a1:9e:d1:22:bd:d5: f1:08:cc:b8:bd:2f:a0:a8:30:a9:8b:6b:48:e7:eb:a6:17:2b: bc:79:b0:8e:d0:e3:31:78:03:a6:30:bd:4a:35:3c:d1:31:85: e1:e6:42:74:c6:41:4f:f9:c5:0a:4f:8e:90:4b:0c:7c:fa:6d: bc:60:8f:28:28:4c:56:1c:24:2f:d9:fe:35:28:b9:5c:3d:66: ee:88:93:da:9b:05:69:fc:7f:9a:6c:3c:9c:66:76:9a:51:b6: a3:30:32:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt1jJHBckhOuwjE3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk N2FkOTc1YTctMjkyNy00ODM4LWEzYzQtOTMwNTA0ZmExMzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1SfcpVQq7BLrI5QwgS4u0zkr6HE7zLrEWJH 8sY7ap/mc2bqMhUAk1VNY5ibCdlpv4fH9jZnhq7ehKWW9JMY5u8P/Ioyxqlu2J9K kxVFzZwhXhggQtG/y3cO3os9oGuKvoR6Tp7Ng+Q2YkNlz1X13LKT8HQjpuAk8EXa 2+byW6FqKVNKVkbakus+eTP3Nmy4GaY8qk2d5I87l42392gSOfw3GuVC0+r3qjjZ +fQsnUsAD296AXH08R+mt11CHDbEolscZtLkYL1yRTK0EOK01lS+KKWNaIkmf67O icFu9wnuPO6CyWSaWrumA+EYjerpe1tWYlYdh/hhfam/pKiHAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMtFrBh0sOBONwK1nvFU/l819lySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvOWNhNWVkMDQtMzc1My0z MWVhLWExZTctMjU3Y2JjN2ZiMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiABHVAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACffWvoAEGhGMu3GlQ1xj1gHAicW3gVe3aCNi3Sv2JlwnZIuHcuo K1Ond85xN3RIoSUUr8EBv7hqjiPpQvDMssH3XES60pE4JB81vH1wP1GRpM3k6f1J tYe9D5Y+cwyUBudfA8Cb5yWyKmCo0qE+5DFhYOlAI5LSmn/nkT/I2trRUo7gM5Gc cwQ4hFYQWxVlUWOq+TQAOa9qkIf+iKGe0SK91fEIzLi9L6CoMKmLa0jn66YXK7x5 sI7Q4zF4A6YwvUo1PNExheHmQnTGQU/5xQpPjpBLDHz6bbxgjygoTFYcJC/Z/jUo uVw9Zu6Ik9qbBWn8f5psPJxmdppRtqMwMkg= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:47 2025 by rpki-client