$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa File: 1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa (raw, json) Hash identifier: W3oppdPIETdGdti1HbtrO1/urrOdbDd2OgscTAKh3Go= Subject key identifier: 23:F4:FD:99:AE:32:6E:D3:F4:F0:BD:88:FC:F5:40:DB:CC:B7:4C:0F Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D290689C9ABDB6F53000 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 2605:1f80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d2:90:68:9c:9a:bd:b6:f5:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=37ac9de4-fa9b-4b4c-bcc2-b28be5840ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:92:ee:d1:2e:dc:f6:9c:1f:0d:fc:e4:2b: 18:d8:f8:c7:9e:c5:b2:c4:7c:f0:b0:a9:e7:25:7a: b4:86:09:bd:c7:e9:99:2c:21:b6:d2:5e:c0:63:aa: 60:50:87:ba:2d:06:11:3f:a2:2a:07:ab:fe:55:3d: 43:a5:35:db:b1:42:47:27:86:9c:75:6d:a8:88:65: d2:f7:1f:c6:89:a8:30:1c:1e:c3:2d:d7:e7:d3:58: 22:cc:08:89:46:27:29:be:2e:26:fb:c4:75:96:43: 8b:92:66:ec:75:bd:be:81:ef:46:63:32:68:65:9a: 05:5d:a2:aa:e4:78:9c:0d:27:69:5d:7b:49:0c:2b: ff:3a:37:58:98:8f:53:c3:63:38:43:e6:0d:6a:64: db:2f:59:4c:e0:a3:46:94:4e:cf:1f:14:49:a3:41: 5e:56:5b:19:76:93:d2:18:cd:26:46:c5:ce:d7:b5: 50:0c:f7:01:0d:9e:b7:e0:6d:18:70:cb:9f:03:31: a4:83:28:8f:31:79:19:ea:83:d6:7d:5c:8f:ed:d1: 99:a2:96:0b:3d:fd:be:6f:c9:c8:91:04:b3:52:09: 47:3a:b6:e7:ab:c4:6f:a5:8a:de:22:c6:2d:69:39: f8:75:5f:b4:0b:72:72:2a:26:77:c4:22:79:7d:01: 5d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F4:FD:99:AE:32:6E:D3:F4:F0:BD:88:FC:F5:40:DB:CC:B7:4C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2605:1f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:05:1f:4f:4d:a9:a9:d4:61:85:9c:40:34:0e:68:0e:32:0f: 5a:35:f6:db:07:ae:be:cd:01:e0:6c:a1:7c:50:82:32:7c:7e: 0e:b9:aa:1d:29:75:ab:a2:b5:8f:b6:38:f7:9b:56:73:07:95: 8c:27:3d:fb:f8:3c:23:f5:3a:fa:01:dd:71:63:84:8b:31:46: 4b:b2:72:03:57:0d:9d:e3:73:92:80:e7:7a:4e:13:4a:f4:1d: 9e:bd:57:f4:48:da:dc:8b:69:ec:ee:a7:76:fe:8c:4b:49:c6: 4c:c5:8d:75:9d:86:c0:62:26:70:d5:97:91:62:a2:7f:d5:ef: 84:b4:e1:d4:34:7b:e5:b4:d2:4d:6d:4a:55:95:a0:b4:05:9e: 2e:03:dd:b0:e1:45:d6:82:c1:c3:9b:6b:ab:3e:30:f9:64:fc: 55:c5:44:b3:7b:47:44:e8:15:5e:b9:c7:10:a1:56:2e:33:15: a2:87:81:45:21:8d:70:59:10:86:78:15:b5:68:99:61:7b:b7: 66:a4:87:2b:f8:a7:49:79:88:2e:56:63:97:d3:da:1a:8f:2c: f0:7c:c5:f0:4c:cd:64:ad:8d:cf:7a:56:d4:f4:84:d5:f2:42: 73:a9:fc:83:f2:55:ac:be:0b:4a:d7:0e:cb:d4:b6:1a:95:c1: fb:8f:5b:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLdtKQaJyavbb1MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MzdhYzlkZTQtZmE5Yi00YjRjLWJjYzItYjI4YmU1ODQwYWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oCS7tEu3PacHw385CsY2PjHnsWyxHzwsKnn JXq0hgm9x+mZLCG20l7AY6pgUIe6LQYRP6IqB6v+VT1DpTXbsUJHJ4acdW2oiGXS 9x/GiagwHB7DLdfn01gizAiJRicpvi4m+8R1lkOLkmbsdb2+ge9GYzJoZZoFXaKq 5HicDSdpXXtJDCv/OjdYmI9Tw2M4Q+YNamTbL1lM4KNGlE7PHxRJo0FeVlsZdpPS GM0mRsXO17VQDPcBDZ634G0YcMufAzGkgyiPMXkZ6oPWfVyP7dGZopYLPf2+b8nI kQSzUglHOrbnq8RvpYreIsYtaTn4dV+0C3JyKiZ3xCJ5fQFd7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCP0/ZmuMm7T9PC9iPz1QNvMt0wPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMWUwN2E5NjItMzQ5MS0z ZGRiLWJhYTAtMTRkMGRhNmUzYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUfgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFBR9PTamp1GGFnEA0DmgOMg9aNfbbB66+zQHgbKF8UIIyfH4Ouaod KXWrorWPtjj3m1ZzB5WMJz37+Dwj9Tr6Ad1xY4SLMUZLsnIDVw2d43OSgOd6ThNK 9B2evVf0SNrci2ns7qd2/oxLScZMxY11nYbAYiZw1ZeRYqJ/1e+EtOHUNHvltNJN bUpVlaC0BZ4uA92w4UXWgsHDm2urPjD5ZPxVxUSze0dE6BVeuccQoVYuMxWih4FF IY1wWRCGeBW1aJlhe7dmpIcr+KdJeYguVmOX09oajyzwfMXwTM1krY3PelbU9ITV 8kJzqfyD8lWsvgtK1w7L1LYalcH7j1tM -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:36 2025 by rpki-client