$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/017f82d2-8fcc-3ffe-917e-340f3336d850.roa File: 017f82d2-8fcc-3ffe-917e-340f3336d850.roa (raw, json) Hash identifier: Y6MVD7psg+D14sNvAvJ6NQvM0DtnS3xgn0pbwtUbWWo= Subject key identifier: 1A:88:FD:EA:53:5A:2F:D7:B7:E2:6C:5D:73:96:7E:E8:0E:07:F8:29 Certificate issuer: /CN=2da00291-9798-4c46-adc8-0fe85d9e6c31 Certificate serial: 010D0C9F4328584B82B7AE3BB9CA6443CF634900 Authority key identifier: A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/017f82d2-8fcc-3ffe-917e-340f3336d850.roa Signing time: Mon 13 Oct 2025 18:12:53 +0000 ROA not before: Mon 13 Oct 2025 18:12:53 +0000 ROA not after: Sun 11 Jan 2026 19:12:53 +0000 asID: 16509 IP address blocks: 2604:1fe0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:b7:ae:3b:b9:ca:64:43:cf:63:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da00291-9798-4c46-adc8-0fe85d9e6c31 Validity Not Before: Oct 13 18:12:53 2025 GMT Not After : Jan 11 19:12:53 2026 GMT Subject: CN=2d0e42f5-7aa1-4dc3-983a-a3c1ffa09541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:87:11:69:13:cc:55:10:1a:e0:3e:24:76: 2d:da:d8:32:cf:35:18:38:e7:13:d2:e3:56:0e:2f: 4e:d9:db:47:68:38:dd:5d:e8:5c:96:0a:24:5b:0d: 58:58:af:a8:5b:4d:89:7c:74:c3:0d:21:91:b9:75: 34:29:e7:fc:cd:42:62:18:33:07:6d:6d:ca:3a:4d: 1a:b6:dc:38:f7:21:37:c4:e8:e4:65:b3:ab:a3:96: 4b:75:b0:f6:ce:d5:b0:74:59:e6:22:10:2f:d1:ca: 40:46:48:de:fe:fa:0f:ba:17:fb:05:6f:45:6d:a2: e6:21:9b:71:27:02:ad:e1:d4:04:e1:f1:39:83:fb: 77:66:87:f9:8c:52:19:70:92:64:db:9d:05:0c:b3: 34:b6:22:6b:c4:ed:b6:46:84:32:2d:45:bf:35:54: fa:f0:04:69:bd:af:b7:44:0a:e7:10:1b:ce:e7:87: 39:48:5e:21:f6:18:93:c0:87:c1:d5:85:3f:0a:7f: c7:f1:5d:3b:4e:ad:b5:59:27:d3:ac:75:63:eb:93: d4:91:40:6f:66:8a:15:2b:ba:f8:e8:8d:c2:5e:3f: 0a:07:b0:42:67:db:bd:37:01:b3:9a:1d:ec:f7:7c: 71:ba:a4:d3:2b:d7:b0:bc:1c:a2:76:7d:a5:81:b4: 1d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:88:FD:EA:53:5A:2F:D7:B7:E2:6C:5D:73:96:7E:E8:0E:07:F8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/017f82d2-8fcc-3ffe-917e-340f3336d850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl X509v3 Authority Key Identifier: keyid:A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer sbgp-ipAddrBlock: critical IPv6: 2604:1fe0:ffff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b6:55:52:e5:75:e9:3a:bf:b0:01:6b:a4:2e:db:85:fd:fd: 4d:8f:4a:f5:05:00:c2:9f:d4:57:1a:6e:84:4b:f8:ef:46:d3: 00:e2:e8:5d:04:17:1e:55:3b:6c:1a:10:d5:90:38:f6:97:45: 1f:fa:67:0c:ec:70:4f:98:3d:ec:36:98:9e:84:74:52:7c:db: c3:66:e3:88:25:1b:b6:84:2a:4a:e0:08:e3:8e:cc:e7:59:10: 52:92:58:d7:c3:fa:09:98:35:e2:1a:b1:bf:59:a1:68:c6:f2: 63:2a:e5:96:b7:d5:42:1d:c9:9c:ab:f9:c6:0f:6e:64:e6:02: cf:99:92:00:ea:68:62:ed:d5:e0:a3:55:5a:de:4c:a0:bc:fb: 82:9f:ad:f7:7c:ef:f8:63:39:7a:03:64:f6:ef:c6:86:0b:53: a4:1e:e3:cc:da:c9:ea:16:d3:8e:2a:c9:d6:02:12:fc:13:2e: 6e:80:d5:9d:ba:a2:58:d0:c6:2f:2a:b6:f7:d0:b9:a5:8e:e3: 1a:0d:a8:5d:bb:1c:fa:71:a7:e4:88:e5:c0:b5:35:98:42:de: 6c:7d:cc:a3:b0:ee:e2:13:7e:d8:ed:d0:fd:04:56:07:7a:3e: f5:74:f9:d0:f0:83:a7:b3:dd:4c:a7:e5:45:da:ca:e9:04:c4: 3f:76:ef:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCt647ucpkQ89jSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhMDAyOTEtOTc5OC00YzQ2LWFkYzgtMGZlODVkOWU2 YzMxMB4XDTI1MTAxMzE4MTI1M1oXDTI2MDExMTE5MTI1M1owLzEtMCsGA1UEAxMk MmQwZTQyZjUtN2FhMS00ZGMzLTk4M2EtYTNjMWZmYTA5NTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2aHEWkTzFUQGuA+JHYt2tgyzzUYOOcT0uNW Di9O2dtHaDjdXehclgokWw1YWK+oW02JfHTDDSGRuXU0Kef8zUJiGDMHbW3KOk0a ttw49yE3xOjkZbOro5ZLdbD2ztWwdFnmIhAv0cpARkje/voPuhf7BW9FbaLmIZtx JwKt4dQE4fE5g/t3Zof5jFIZcJJk250FDLM0tiJrxO22RoQyLUW/NVT68ARpva+3 RArnEBvO54c5SF4h9hiTwIfB1YU/Cn/H8V07Tq21WSfTrHVj65PUkUBvZooVK7r4 6I3CXj8KB7BCZ9u9NwGzmh3s93xxuqTTK9ewvByidn2lgbQdhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBqI/epTWi/Xt+JsXXOWfugOB/gpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yZGEw MDI5MS05Nzk4LTRjNDYtYWRjOC0wZmU4NWQ5ZTZjMzEvMDE3ZjgyZDItOGZjYy0z ZmZlLTkxN2UtMzQwZjMzMzZkODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmRhMDAyOTEtOTc5OC00YzQ2LWFk YzgtMGZlODVkOWU2YzMxLzJkYTAwMjkxLTk3OTgtNGM0Ni1hZGM4LTBmZTg1ZDll NmMzMS5jcmwwHwYDVR0jBBgwFoAUpFg/KBRXul6NiGzj2f/Jnoj9Z80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yZGEwMDI5MS05Nzk4LTRjNDYtYWRjOC0wZmU4 NWQ5ZTZjMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQf4P// MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEe2VVLldek6v7ABa6Qu24X9/U2PSvUFAMKf1FcaboRL+O9G0wDi 6F0EFx5VO2waENWQOPaXRR/6ZwzscE+YPew2mJ6EdFJ828Nm44glG7aEKkrgCOOO zOdZEFKSWNfD+gmYNeIasb9ZoWjG8mMq5Za31UIdyZyr+cYPbmTmAs+ZkgDqaGLt 1eCjVVreTKC8+4Kfrfd87/hjOXoDZPbvxoYLU6Qe48zayeoW044qydYCEvwTLm6A 1Z26oljQxi8qtvfQuaWO4xoNqF27HPpxp+SI5cC1NZhC3mx9zKOw7uITftjt0P0E Vgd6PvV0+dDwg6ez3Uyn5UXayukExD9270g= -----END CERTIFICATE-----Generated at Tue Oct 14 08:27:40 2025 by rpki-client