$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/374f4f62-4a83-3f53-9021-7cbf0de83fe9.roa File: 374f4f62-4a83-3f53-9021-7cbf0de83fe9.roa (raw, json) Hash identifier: 5c0IYSQ7M1ua9IjuNlkyaCQb4C4Q/Ii3LHxD/cfW+Qg= Subject key identifier: 92:FE:4F:59:7B:60:66:5F:84:D0:AC:C2:B7:F4:6A:D2:7D:D3:49:1D Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6D84C927303B61C793780 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/374f4f62-4a83-3f53-9021-7cbf0de83fe9.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 2620:11a:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:d8:4c:92:73:03:b6:1c:79:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=b66ef87e-96ef-4b6c-a072-57c301336fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:10:5e:9f:ae:2a:11:01:cf:83:56:ff:f4:f9: 98:28:8a:84:8e:71:5d:25:fb:7c:81:0e:1d:ee:5e: f9:90:35:7f:1b:47:3b:40:2d:7e:6c:b0:17:c8:e2: c7:54:e5:cb:7a:1a:11:98:d1:7b:71:2e:b2:fb:cd: 54:94:e4:be:35:f2:e9:0a:34:ef:91:ed:cf:85:a9: d0:46:ec:a7:5f:bb:5b:40:e7:94:56:6c:2c:42:99: 80:23:11:3c:17:a2:82:3b:a5:b2:02:f6:26:19:58: dc:68:8a:da:6a:8f:97:b0:f4:ef:40:3a:0a:de:96: 97:f9:da:f6:db:35:5e:ba:26:0e:bb:6b:a6:ef:f4: 44:65:b8:11:b2:90:b8:1f:13:5e:23:70:b5:f1:a5: 95:c8:d0:e6:f7:00:83:01:94:e9:39:a2:1f:53:77: 3a:d4:7d:42:51:21:33:49:09:67:2b:bf:2b:21:10: 71:f7:b2:c9:67:08:3d:c7:b6:41:ce:93:78:0c:bd: 1e:4a:1e:0f:02:d7:b0:4a:34:b2:d4:e5:96:f7:ce: 26:e5:b0:1c:fd:b3:2b:d1:93:d2:c9:36:ab:d2:62: 1e:8c:66:ba:63:f1:30:f9:b5:8d:09:f6:13:bd:76: 7e:fc:8b:e9:fd:c1:0d:a3:ae:cc:6e:c5:34:94:34: f4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FE:4F:59:7B:60:66:5F:84:D0:AC:C2:B7:F4:6A:D2:7D:D3:49:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/374f4f62-4a83-3f53-9021-7cbf0de83fe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:c020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:50:2b:f4:3c:14:fa:94:5a:2b:4c:fa:7d:79:31:1c:1f:db: 55:cf:e2:18:e3:d4:45:b0:8f:84:36:71:da:96:bc:4c:99:a1: 5f:2f:15:fc:55:c4:af:7e:49:73:f1:9f:36:a2:6c:ec:37:f9: 43:91:0b:04:95:3c:74:e7:23:eb:10:04:35:c6:79:58:dc:0c: ad:fb:2b:ff:45:63:9e:95:0e:6a:fc:c3:d5:fe:65:6a:08:67: 3c:14:3f:a1:4a:d9:e6:83:d4:76:e2:51:58:f5:45:62:3f:f1: 0e:87:59:65:76:b0:c4:82:13:5e:cd:fb:7a:4a:04:fe:d0:79: 36:db:e8:6c:73:11:c8:2c:f4:ac:7c:f1:69:63:5e:14:82:79: ee:03:a5:36:dd:b6:87:55:ad:ac:54:56:5f:41:17:34:e3:45: 32:04:cf:72:3f:d9:6b:3d:81:4b:03:0b:0e:e4:fe:3e:46:cd: e9:8d:df:bf:16:8e:b4:cb:6e:5a:c2:74:22:2d:79:d5:49:7d: 75:d2:b2:19:fc:97:d6:70:c7:4f:f7:19:26:bb:d6:b8:1a:d3: 45:94:ef:a9:ce:7b:52:a6:b1:3b:47:97:21:59:4b:c1:3a:f9: c3:ad:8b:0a:d9:5d:1a:8e:28:dd:30:7e:2f:fc:ee:89:ca:b1: 2e:3a:34:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsT1thMknMDthx5N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YjY2ZWY4N2UtOTZlZi00YjZjLWEwNzItNTdjMzAxMzM2ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRBen64qEQHPg1b/9PmYKIqEjnFdJft8gQ4d 7l75kDV/G0c7QC1+bLAXyOLHVOXLehoRmNF7cS6y+81UlOS+NfLpCjTvke3PhanQ RuynX7tbQOeUVmwsQpmAIxE8F6KCO6WyAvYmGVjcaIraao+XsPTvQDoK3paX+dr2 2zVeuiYOu2um7/REZbgRspC4HxNeI3C18aWVyNDm9wCDAZTpOaIfU3c61H1CUSEz SQlnK78rIRBx97LJZwg9x7ZBzpN4DL0eSh4PAtewSjSy1OWW984m5bAc/bMr0ZPS yTar0mIejGa6Y/Ew+bWNCfYTvXZ+/Ivp/cENo67MbsU0lDT0lQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJL+T1l7YGZfhNCswrf0atJ900kdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMzc0ZjRmNjItNGE4My0z ZjUzLTkwMjEtN2NiZjBkZTgzZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGsAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKxQK/Q8FPqUWitM+n15MRwf21XP4hjj1EWwj4Q2cdqWvEyZoV8v FfxVxK9+SXPxnzaibOw3+UORCwSVPHTnI+sQBDXGeVjcDK37K/9FY56VDmr8w9X+ ZWoIZzwUP6FK2eaD1HbiUVj1RWI/8Q6HWWV2sMSCE17N+3pKBP7QeTbb6GxzEcgs 9Kx88WljXhSCee4DpTbdtodVraxUVl9BFzTjRTIEz3I/2Ws9gUsDCw7k/j5GzemN 378WjrTLblrCdCItedVJfXXSshn8l9Zwx0/3GSa71rga00WU76nOe1KmsTtHlyFZ S8E6+cOtiwrZXRqOKN0wfi/87onKsS46NME= -----END CERTIFICATE-----Generated at Thu Oct 9 05:46:56 2025 by rpki-client