$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa File: 9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa (raw, json) Hash identifier: fG0IC36z8nuLRhPbB1rPl6/jFFMTW0GKOfrjw4s0QeI= Subject key identifier: 72:62:2E:0B:C4:34:52:F2:C2:B0:BF:3B:BA:1D:19:78:DC:FE:0A:39 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584B5DD1EC6E6AA36F27275F0D80 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 11067 IP address blocks: 2605:d800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:ec:6e:6a:a3:6f:27:27:5f:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=73176b5f-f4cf-434a-8647-fda86248df77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:59:bb:08:aa:f5:5e:b2:47:92:e8:0c:98: cd:57:01:a7:30:89:e0:f9:60:63:63:a8:45:0a:71: 72:4b:50:0b:52:22:c3:f7:34:c2:fa:69:ed:bc:3d: 1f:7f:50:5d:68:37:ce:5e:fc:2e:f0:3d:8c:b8:fc: 1e:e3:e2:a1:3e:46:71:ef:eb:2b:ed:77:98:a5:4e: 99:bb:29:01:a2:37:aa:cc:f0:87:8e:45:c4:5d:6d: 1b:77:83:5f:a0:fa:db:b3:af:21:e7:09:40:47:c0: 7a:61:e4:19:c9:9a:10:60:17:6b:fb:2f:6e:ce:c2: 25:de:1c:52:1e:dd:b1:1d:94:87:50:e5:b8:fb:e9: 7d:94:4b:90:57:3f:50:9a:4c:cf:cb:1b:38:7a:82: b6:33:9f:60:3d:bc:2f:c4:43:11:7c:a3:f2:ee:50: 58:38:dc:2d:d7:0f:d0:6f:75:8c:db:db:63:dc:e5: 9a:98:d6:1f:c8:4c:f5:c6:b4:ed:89:cb:fc:43:f9: 0b:31:46:38:08:23:bd:23:7f:4d:30:00:b8:9e:c0: 75:46:f4:ad:47:9d:9d:f2:a2:7e:be:db:c7:3c:ad: bc:e7:94:9f:fe:47:1f:e8:db:c6:49:95:75:61:66: 32:dd:e7:f0:d6:15:c7:d2:49:97:b5:26:6d:5f:75: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:2E:0B:C4:34:52:F2:C2:B0:BF:3B:BA:1D:19:78:DC:FE:0A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:d800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f0:30:a1:0d:de:74:e6:34:51:f7:56:2c:8c:72:78:53:80: ab:d9:09:3c:06:cb:ea:b0:4a:49:43:ed:fb:b4:78:47:81:da: 98:62:eb:7d:f0:26:a3:6a:ba:97:4f:31:5f:b0:c1:34:78:56: 71:0e:44:54:0b:61:f0:6b:0d:ed:ba:78:b3:50:61:18:71:c2: da:16:c4:bf:36:1a:67:00:29:9b:42:7a:0a:e9:88:97:74:d0: c9:f1:8c:50:8f:a6:92:83:85:9f:9a:9d:48:a3:3d:f7:0c:06: 1e:36:33:eb:26:98:b9:b4:f9:0c:d7:ea:48:83:11:ed:e4:54: 0e:c1:99:dd:22:15:29:89:37:42:7b:4e:4b:9c:ca:75:76:f9: d4:1b:1e:55:21:6a:6b:cd:c5:81:6d:d7:18:05:4b:8b:cb:8e: 80:00:e0:e5:50:41:bf:85:4d:52:48:a4:ba:93:e2:17:08:f3: a4:83:25:1a:a2:9f:45:0f:3b:b1:e7:16:eb:19:cb:5e:66:c6: d4:3c:6d:28:c2:31:e1:90:8c:14:84:6b:1a:b2:b3:7c:98:4d: cd:a4:51:ad:dd:a9:10:c7:71:d5:fc:57:f2:8f:1a:e1:c4:89: 89:fd:d1:59:48:ab:de:5b:0a:80:e4:d5:57:b5:aa:38:ba:97: ea:20:95:07 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtd0exuaqNvJydfDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NzMxNzZiNWYtZjRjZi00MzRhLTg2NDctZmRhODYyNDhkZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwylZuwiq9V6yR5LoDJjNVwGnMIng+WBjY6hF CnFyS1ALUiLD9zTC+mntvD0ff1BdaDfOXvwu8D2MuPwe4+KhPkZx7+sr7XeYpU6Z uykBojeqzPCHjkXEXW0bd4NfoPrbs68h5wlAR8B6YeQZyZoQYBdr+y9uzsIl3hxS Ht2xHZSHUOW4++l9lEuQVz9QmkzPyxs4eoK2M59gPbwvxEMRfKPy7lBYONwt1w/Q b3WM29tj3OWamNYfyEz1xrTticv8Q/kLMUY4CCO9I39NMAC4nsB1RvStR52d8qJ+ vtvHPK2855Sf/kcf6NvGSZV1YWYy3efw1hXH0kmXtSZtX3WoDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHJiLgvENFLywrC/O7odGXjc/go5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvOWRhNWFmNGUtZGFlNi0z YTEwLTk2ZTMtZTgzZWE0YzkwNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBI8DChDd505jRR91YsjHJ4U4Cr2Qk8BsvqsEpJQ+37tHhHgdqYYut9 8CajarqXTzFfsME0eFZxDkRUC2Hwaw3tunizUGEYccLaFsS/NhpnACmbQnoK6YiX dNDJ8YxQj6aSg4Wfmp1Ioz33DAYeNjPrJpi5tPkM1+pIgxHt5FQOwZndIhUpiTdC e05LnMp1dvnUGx5VIWprzcWBbdcYBUuLy46AAODlUEG/hU1SSKS6k+IXCPOkgyUa op9FDzux5xbrGcteZsbUPG0owjHhkIwUhGsasrN8mE3NpFGt3akQx3HV/Ffyjxrh xImJ/dFZSKveWwqA5NVXtao4upfqIJUH -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:54 2025 by rpki-client