$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa File: d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa (raw, json) Hash identifier: D0ORzIrcHSW+Icii59RYmv4Rb+FbdttpudRI0jb6DIM= Subject key identifier: 3E:A6:D6:6A:A7:E4:50:95:C5:CE:D4:99:FA:36:8E:7F:DD:C3:FB:F8 Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F4328584B620209B95FC32FB408B18980 Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 11913 IP address blocks: 2602:816:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:09:b9:5f:c3:2f:b4:08:b1:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=1730f7c0-1135-4404-af4b-4058bd3d2446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:04:d3:c3:9e:f9:ef:d9:27:16:93:01:1c: 03:c0:52:2c:87:2e:eb:46:88:e9:ee:61:f5:d3:3f: 88:3d:01:0d:b5:44:c8:8e:24:20:f1:2b:60:10:a6: 81:aa:fd:fd:ef:70:dc:c1:0c:70:5e:b8:30:7a:c4: 4b:f2:e4:06:06:00:fd:79:22:65:22:f6:d1:d2:23: 79:40:f6:95:3d:9c:ef:d8:3b:dd:98:c2:dc:2d:4b: 14:2c:3a:ff:22:22:5b:b4:d5:8c:b0:7a:f6:4a:7a: b6:f1:26:6a:1a:13:ad:51:54:4f:bf:f4:b9:32:eb: 29:5f:4b:bb:b8:49:11:e5:ce:ae:16:07:ee:58:4c: 50:b6:80:38:d5:f6:60:c9:df:c6:d9:b2:1c:d2:a6: 86:81:4b:53:8b:13:7f:c5:7b:b3:f0:41:2a:8b:12: fb:56:0e:cd:78:c8:73:91:38:35:c1:fd:de:00:78: 11:1f:9e:05:1d:88:d7:86:fd:d5:8a:ff:0c:7e:fc: 68:8a:ea:ae:bb:8c:fe:d7:43:a3:7f:d0:86:fe:e5: 60:d0:7b:91:97:e8:99:3f:58:9c:9d:26:d9:b9:44: 76:7d:b8:d4:14:76:4f:3e:6d:7d:c1:5f:d8:0d:28: 6f:e4:ef:30:89:2a:95:e7:52:6b:b8:8a:60:85:96: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A6:D6:6A:A7:E4:50:95:C5:CE:D4:99:FA:36:8E:7F:DD:C3:FB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f7:cf:7f:41:0c:81:90:be:ff:5b:d3:31:db:c1:a6:98:5c: 90:1a:19:20:d3:82:4b:3e:4b:47:5d:2c:e8:0e:04:7b:79:38: fb:3f:e8:af:bd:f4:b5:94:0a:b5:91:6a:5e:b7:5b:4a:66:95: a2:11:7d:8a:fa:63:d5:57:a1:c8:d2:c6:6b:e8:df:25:d2:f1: d1:2e:51:d5:51:ab:65:3c:bb:17:16:e7:88:6a:69:00:9f:89: 32:38:c0:fd:c2:6a:dc:46:81:95:74:d8:82:e5:54:88:6e:2b: 23:8d:94:c6:0d:0b:23:c5:e5:26:70:74:53:8c:64:01:f2:9a: f0:38:80:dc:77:8d:16:2d:77:47:8e:a1:2e:a4:85:80:90:86: 81:7f:bd:c5:55:3a:53:c4:32:61:3e:7f:4e:ec:1d:0f:b1:87: cf:ef:86:d1:f8:b2:91:c6:b9:28:d6:52:8b:bd:d9:25:54:98: 1d:92:28:4b:10:28:67:3a:de:aa:aa:0a:44:62:09:5f:a8:1c: 0b:69:a7:3f:72:3b:c7:00:ca:7f:8f:6a:a5:d9:b3:8a:c8:be: 97:e0:3c:a3:df:ba:09:a7:2c:56:2e:dc:b2:78:95:df:e9:6b: 45:6d:42:6e:7b:a2:73:f5:16:f4:7a:3d:02:27:87:7b:4d:c0: 6f:43:ea:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAgm5X8MvtAixiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MTczMGY3YzAtMTEzNS00NDA0LWFmNGItNDA1OGJkM2QyNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXoE08Oe+e/ZJxaTARwDwFIshy7rRojp7mH1 0z+IPQENtUTIjiQg8StgEKaBqv3973DcwQxwXrgwesRL8uQGBgD9eSJlIvbR0iN5 QPaVPZzv2DvdmMLcLUsULDr/IiJbtNWMsHr2Snq28SZqGhOtUVRPv/S5MuspX0u7 uEkR5c6uFgfuWExQtoA41fZgyd/G2bIc0qaGgUtTixN/xXuz8EEqixL7Vg7NeMhz kTg1wf3eAHgRH54FHYjXhv3Viv8Mfvxoiuquu4z+10Ojf9CG/uVg0HuRl+iZP1ic nSbZuUR2fbjUFHZPPm19wV/YDShv5O8wiSqV51JruIpghZbZDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD6m1mqn5FCVxc7Umfo2jn/dw/v4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvZDlmOWFjYzktYzMyNC0z NzNlLWEyYzQtZTQ2MDRmNTZkNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFjAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF73z39BDIGQvv9b0zHbwaaYXJAaGSDTgks+S0ddLOgOBHt5OPs/ 6K+99LWUCrWRal63W0pmlaIRfYr6Y9VXocjSxmvo3yXS8dEuUdVRq2U8uxcW54hq aQCfiTI4wP3CatxGgZV02ILlVIhuKyONlMYNCyPF5SZwdFOMZAHymvA4gNx3jRYt d0eOoS6khYCQhoF/vcVVOlPEMmE+f07sHQ+xh8/vhtH4spHGuSjWUou92SVUmB2S KEsQKGc63qqqCkRiCV+oHAtppz9yO8cAyn+PaqXZs4rIvpfgPKPfugmnLFYu3LJ4 ld/pa0VtQm57onP1FvR6PQInh3tNwG9D6ig= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:37 2025 by rpki-client