$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa File: a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa (raw, json) Hash identifier: +agUOuh9gKrg45kMyWqY7fF/ow27IKxl7ZD3w3NIAiM= Subject key identifier: AC:51:81:7A:0E:A1:AE:8D:AD:D0:3C:62:63:3F:B9:97:80:7C:F3:F2 Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F4328584B64CC9F574775B97FB7B58500 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 393732 IP address blocks: 2620:11d:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:9f:57:47:75:b9:7f:b7:b5:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=56a9f8b3-4bcf-413e-a6e0-54b4a0d4630f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:4f:25:e8:f4:7d:f5:85:ed:84:a0:f7:e4: a9:96:fe:06:0a:ef:a5:8c:3b:bb:d3:b7:6f:d9:a1: a5:bb:c1:a5:4d:03:19:ef:f5:30:a6:b9:e3:d1:7e: 5a:0a:4e:03:bd:bd:79:40:36:5e:31:b6:c5:e1:4b: b5:4a:ec:e9:e1:c8:d4:46:02:43:8b:66:a7:7b:d2: 44:49:9e:b7:7a:05:d5:54:81:11:e9:7a:b3:87:da: 19:39:a4:30:f1:f5:74:ef:80:4e:5b:9f:c0:16:cb: 12:83:32:b9:16:98:88:a2:de:c5:91:33:64:4f:90: 78:f0:ca:e6:8e:50:10:3a:90:b1:08:22:a4:b2:3e: eb:1d:de:32:c1:33:5f:0e:f4:40:c8:14:9f:97:fd: c1:54:d3:c3:9d:af:ea:3e:ed:59:c4:96:33:c7:3e: a5:d8:26:1e:b0:0c:94:ac:49:d2:ae:6f:9a:21:95: 6e:bb:f0:75:21:02:59:df:06:e1:57:c8:d9:87:84: 13:76:7c:4f:1c:14:80:21:8b:16:45:61:5f:5f:0c: b3:8b:d7:b3:0d:91:c1:a9:3d:23:10:46:ea:1a:e4: 38:78:27:73:91:c3:62:cb:77:59:94:b0:4b:49:08: 21:3f:22:b9:f8:24:95:e2:8b:a8:66:3b:6f:e0:a1: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:51:81:7A:0E:A1:AE:8D:AD:D0:3C:62:63:3F:B9:97:80:7C:F3:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:0e:38:04:7e:15:51:82:4f:d3:3a:8a:da:62:e4:b7:4a:8b: 2b:0a:86:74:7c:2f:e8:2f:ac:a8:50:a3:49:ee:01:6c:4a:1b: 20:93:90:e6:7e:09:7e:83:84:dc:89:64:9c:01:e5:62:f7:5b: c1:fd:1f:c3:35:7e:90:18:7f:eb:1a:30:b2:38:c6:de:fc:02: 5f:6d:c7:3d:eb:7f:57:5e:ed:49:60:81:22:94:ac:aa:8f:58: e1:97:e2:af:57:0b:0b:f9:50:79:43:c9:7f:3d:20:39:ad:ff: a1:50:f7:65:8d:b3:32:b4:ae:06:4a:51:73:1a:a0:1c:19:c1: e4:38:ec:e5:39:ff:46:30:37:24:c4:3f:7f:5e:ca:54:26:5f: 19:5b:0f:33:dc:dc:0d:c0:8e:42:df:82:e7:29:94:75:fa:59: af:41:33:e5:f3:89:f7:f1:92:df:c1:2e:eb:f1:dc:49:36:37: 3a:a9:0e:eb:ec:25:64:d6:2d:a1:32:d5:b4:c1:2b:84:10:fb: 41:e3:7d:71:d8:22:b3:2a:c5:f3:a5:0b:3b:19:29:d9:98:91: 3f:1b:74:91:10:37:a9:29:f0:1c:d2:64:6b:e8:8d:70:b1:dc: 74:c7:85:03:68:4d:9d:20:bb:d7:f9:fd:6a:71:af:de:6a:2c: 3f:88:18:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzJ9XR3W5f7e1hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTZhOWY4YjMtNGJjZi00MTNlLWE2ZTAtNTRiNGEwZDQ2MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0tPJej0ffWF7YSg9+Splv4GCu+ljDu707dv 2aGlu8GlTQMZ7/Uwprnj0X5aCk4Dvb15QDZeMbbF4Uu1Suzp4cjURgJDi2ane9JE SZ63egXVVIER6Xqzh9oZOaQw8fV074BOW5/AFssSgzK5FpiIot7FkTNkT5B48Mrm jlAQOpCxCCKksj7rHd4ywTNfDvRAyBSfl/3BVNPDna/qPu1ZxJYzxz6l2CYesAyU rEnSrm+aIZVuu/B1IQJZ3wbhV8jZh4QTdnxPHBSAIYsWRWFfXwyzi9ezDZHBqT0j EEbqGuQ4eCdzkcNiy3dZlLBLSQghPyK5+CSV4ouoZjtv4KGi1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKxRgXoOoa6NrdA8YmM/uZeAfPPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvYTA2OWJhOTgtZWMwZi0z MTM1LWEwYWQtMWU4ZTgxZTljMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMEOOAR+FVGCT9M6itpi5LdKiysKhnR8L+gvrKhQo0nuAWxKGyCT kOZ+CX6DhNyJZJwB5WL3W8H9H8M1fpAYf+saMLI4xt78Al9txz3rf1de7UlggSKU rKqPWOGX4q9XCwv5UHlDyX89IDmt/6FQ92WNszK0rgZKUXMaoBwZweQ47OU5/0Yw NyTEP39eylQmXxlbDzPc3A3AjkLfgucplHX6Wa9BM+Xziffxkt/BLuvx3Ek2Nzqp DuvsJWTWLaEy1bTBK4QQ+0HjfXHYIrMqxfOlCzsZKdmYkT8bdJEQN6kp8BzSZGvo jXCx3HTHhQNoTZ0gu9f5/Wpxr95qLD+IGE0= -----END CERTIFICATE-----Generated at Fri Oct 10 23:29:06 2025 by rpki-client