$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa File: fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa (raw, json) Hash identifier: 6Uxtmi9AZu8VDxaeYSq9MM0w8FHiyzd/rA+LTkMacDQ= Subject key identifier: B2:A0:7A:4B:DE:09:3F:6B:D2:BB:BB:36:82:D5:A9:4A:B1:2D:1C:4F Certificate issuer: /CN=348d3713-8fd7-4568-b353-ff9d07414f1a Certificate serial: 010D0C9F4328584B48E1B8F871BF685A2B0AA060 Authority key identifier: 83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 400025 IP address blocks: 2620:12b:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b8:f8:71:bf:68:5a:2b:0a:a0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348d3713-8fd7-4568-b353-ff9d07414f1a Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=b7d14852-0d0a-422b-ae8a-4d52c600d180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:86:86:ea:55:60:cb:c3:23:c1:60:89:77: 18:5a:a8:f0:9f:e1:e7:0c:db:91:62:ea:04:78:04: 98:f0:c0:7b:14:e3:4e:39:a4:00:1a:f0:5c:c4:54: 97:25:bc:d8:1b:99:74:de:4c:fd:4f:c7:99:cf:76: fe:d3:ec:0c:73:ae:7f:5e:af:44:cc:e3:fc:95:2b: 23:82:6d:10:1e:ea:22:b1:02:08:72:6b:31:4f:41: 75:7d:52:1b:8e:d4:41:76:8a:b7:cc:b2:fe:54:71: c5:94:c7:a7:be:c1:12:90:0a:8e:5a:a1:97:1f:aa: d4:c0:41:9e:06:59:8e:91:30:1f:bf:c9:e2:18:3c: c6:e8:fd:57:3e:7e:7b:3b:64:c6:16:d1:df:9f:3a: bc:53:57:96:65:0d:e7:32:c2:fc:9c:db:99:56:39: cc:d5:3e:0e:33:12:06:f9:c8:a2:46:9e:2f:02:39: f3:be:0e:8b:e5:27:39:51:78:77:04:fa:32:dc:8b: 45:2e:c8:5b:7e:b7:0d:51:28:d6:f0:a4:3c:55:05: 29:fa:d2:c5:35:8d:7b:bd:98:bc:a4:5f:6e:c7:70: ee:af:f4:db:4a:0d:47:42:6e:ef:ee:78:c6:bf:74: 1c:a1:75:c1:82:4b:9b:32:04:75:c9:9e:d6:15:71: 78:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A0:7A:4B:DE:09:3F:6B:D2:BB:BB:36:82:D5:A9:4A:B1:2D:1C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.crl X509v3 Authority Key Identifier: keyid:83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer sbgp-ipAddrBlock: critical IPv6: 2620:12b:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f5:6b:5e:0c:fd:92:f0:f2:a5:86:1c:ad:74:ff:d6:1e:4f: c9:f7:b5:2a:af:45:f7:2f:70:c2:72:f1:67:84:6b:f6:bf:28: a9:65:ff:1d:c0:28:81:4c:fc:42:03:7c:35:98:97:98:a5:3b: 2a:49:6d:3a:a3:9a:44:9e:8a:de:0a:f4:24:c6:27:f6:2c:08: 13:36:4c:b6:0d:73:44:6e:ac:55:f1:b3:43:31:a5:88:a9:7b: 1e:db:9b:4b:ac:ff:1e:13:ce:61:ae:ed:f1:9c:fe:b7:ad:c4: e3:ca:0f:50:80:45:e6:42:e0:0c:e2:e9:bb:4d:4b:f4:d7:77: 4d:46:5b:50:2d:10:59:ba:37:7d:cb:54:05:d6:da:8c:2c:b3: 85:19:65:c1:0c:98:80:a3:46:8d:fb:b3:b4:7c:08:79:4b:04: 79:76:ec:4e:e1:8d:a0:b0:70:ec:0f:39:7b:99:cb:c6:9e:c9: d6:4b:91:5b:59:8f:bb:25:40:a3:83:9f:db:06:25:13:9c:3b: f6:49:09:95:87:44:a7:bd:67:b1:50:5f:1b:2d:9e:cb:ed:c8: c7:b2:0c:91:47:0a:36:b9:a6:24:a2:5c:bb:f2:72:ff:07:59: 92:b9:f4:07:73:5c:a5:a8:cd:bf:83:45:79:c8:7f:77:05:5e: 6f:d5:d3:ca -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtI4bj4cb9oWisKoGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ4ZDM3MTMtOGZkNy00NTY4LWIzNTMtZmY5ZDA3NDE0 ZjFhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjdkMTQ4NTItMGQwYS00MjJiLWFlOGEtNGQ1MmM2MDBkMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQyGhupVYMvDI8FgiXcYWqjwn+HnDNuRYuoE eASY8MB7FONOOaQAGvBcxFSXJbzYG5l03kz9T8eZz3b+0+wMc65/Xq9EzOP8lSsj gm0QHuoisQIIcmsxT0F1fVIbjtRBdoq3zLL+VHHFlMenvsESkAqOWqGXH6rUwEGe BlmOkTAfv8niGDzG6P1XPn57O2TGFtHfnzq8U1eWZQ3nMsL8nNuZVjnM1T4OMxIG +ciiRp4vAjnzvg6L5Sc5UXh3BPoy3ItFLshbfrcNUSjW8KQ8VQUp+tLFNY17vZi8 pF9ux3Dur/TbSg1HQm7v7njGv3QcoXXBgkubMgR1yZ7WFXF4LQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLKgekveCT9r0ru7NoLVqUqxLRxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNDhk MzcxMy04ZmQ3LTQ1NjgtYjM1My1mZjlkMDc0MTRmMWEvZmIxYTFmMDItNjI3Ny0z ODNiLTg2MWMtNTI5YjhlNmNiY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzQ4ZDM3MTMtOGZkNy00NTY4LWIz NTMtZmY5ZDA3NDE0ZjFhLzM0OGQzNzEzLThmZDctNDU2OC1iMzUzLWZmOWQwNzQx NGYxYS5jcmwwHwYDVR0jBBgwFoAUg9AXkHtv73YYw+8D7OmoNF4UjeQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNDhkMzcxMy04ZmQ3LTQ1NjgtYjM1My1mZjlk MDc0MTRmMWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABK+Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgfVrXgz9kvDypYYcrXT/1h5Pyfe1Kq9F9y9wwnLxZ4Rr9r8oqWX/ HcAogUz8QgN8NZiXmKU7KkltOqOaRJ6K3gr0JMYn9iwIEzZMtg1zRG6sVfGzQzGl iKl7HtubS6z/HhPOYa7t8Zz+t63E48oPUIBF5kLgDOLpu01L9Nd3TUZbUC0QWbo3 fctUBdbajCyzhRllwQyYgKNGjfuztHwIeUsEeXbsTuGNoLBw7A85e5nLxp7J1kuR W1mPuyVAo4Of2wYlE5w79kkJlYdEp71nsVBfGy2ey+3Ix7IMkUcKNrmmJKJcu/Jy /wdZkrn0B3NcpajNv4NFech/dwVeb9XTyg== -----END CERTIFICATE-----Generated at Sat Oct 11 10:10:00 2025 by rpki-client