$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa File: b7a020da-0d7e-3b24-9670-acd6fe134da5.roa (raw, json) Hash identifier: n/QecXrRYJRuDEhge2tk7MdnE96GzYpJhHPXM8a3J7U= Subject key identifier: 43:F3:E6:8F:00:49:8E:06:EA:72:F6:90:BF:67:34:16:E6:5B:C8:C5 Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Certificate serial: 010D0C9F4328584AFC1BFF014A9DA49AC6579E00 Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 22251 IP address blocks: 2604:5ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ff:01:4a:9d:a4:9a:c6:57:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=a08f3dd0-3ecf-4c73-b589-e723a8872d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:e7:15:b5:14:45:cb:03:b3:f4:1f:2f:78: d5:5d:27:46:58:b9:45:a9:f7:ad:43:b4:db:89:83: ce:ce:ea:73:75:19:02:9b:24:17:22:c3:5a:55:00: f3:b5:63:75:2a:ca:5b:ad:3c:e6:f5:ad:29:fc:61: 63:da:ae:23:f8:16:9f:c6:9a:b4:05:d9:df:8a:f5: 2a:9f:d0:4a:4d:5b:85:a2:8e:a2:2c:d0:95:b0:78: d5:b8:fd:93:dd:0d:e9:ef:c6:9a:fa:59:1d:88:f1: 2a:b1:ed:7e:bd:ee:03:6b:4e:31:48:64:99:93:68: 86:d3:94:01:5c:1a:7a:64:d0:b1:e5:f8:c8:2a:cd: 52:57:5c:fb:6d:8e:c9:b3:b1:46:e0:66:ae:b8:04: 25:3a:01:07:4a:08:66:e9:00:77:6e:4f:a7:3f:b3: b2:47:28:a7:86:44:74:88:a4:be:b7:26:e7:ce:c5: 4c:b5:7e:99:9e:60:2c:8c:77:db:bd:9a:2d:be:29: 32:06:00:df:c6:5c:95:37:ea:89:61:c6:c1:08:b2: 2b:a7:45:d9:56:81:ca:8b:84:bb:4e:07:f4:2c:23: 50:37:8f:65:2f:99:20:7e:1e:ac:74:62:56:b0:88: 79:48:63:9f:db:9a:78:a9:86:33:54:be:81:95:90: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F3:E6:8F:00:49:8E:06:EA:72:F6:90:BF:67:34:16:E6:5B:C8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl X509v3 Authority Key Identifier: keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer sbgp-ipAddrBlock: critical IPv6: 2604:5ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:66:c6:12:95:1a:54:34:f8:65:f3:0d:6b:22:46:85:f2:39: d9:45:95:cd:76:a6:d4:aa:f6:ec:17:86:c5:38:fd:5a:08:61: 5a:da:ee:d8:b3:60:3c:c7:16:aa:9a:c3:63:7a:e2:34:c9:b8: ba:b9:35:ca:cb:8e:6e:c3:45:35:4f:ba:0e:71:e0:cd:84:2b: 13:cc:a6:6f:3e:64:35:07:a1:53:6b:b1:6b:ca:db:3b:b1:89: 03:c7:2b:04:f8:1f:d3:9f:ac:78:4a:68:81:44:65:55:96:81: 46:13:b9:c0:72:b0:65:0f:66:9f:88:a4:5f:c0:6f:4f:8e:e5: f1:65:fc:76:76:8c:88:21:61:08:35:d7:27:57:76:08:9a:b4: 67:ee:50:9a:2d:25:e8:b0:58:cf:6f:01:f1:42:c8:ff:99:b6: 75:f7:fb:6d:04:d5:c1:77:cb:4c:0b:a9:84:0c:93:ae:a9:16: 37:49:5f:6a:af:f7:db:93:3d:0d:2b:4a:58:16:2e:5d:fb:f1: d7:94:4f:08:47:7b:b8:56:c4:42:4d:44:e1:49:d1:e0:8e:f8: 13:58:d5:bb:07:82:65:28:53:0a:1b:df:b5:ad:ab:d0:77:2a: ec:c1:c6:93:5a:d8:49:bc:59:2a:99:be:9a:aa:9b:cb:b2:2d: 41:58:53:de -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr8G/8BSp2kmsZXngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4 M2IxMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YTA4ZjNkZDAtM2VjZi00YzczLWI1ODktZTcyM2E4ODcyZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW/nFbUURcsDs/QfL3jVXSdGWLlFqfetQ7Tb iYPOzupzdRkCmyQXIsNaVQDztWN1KspbrTzm9a0p/GFj2q4j+Bafxpq0BdnfivUq n9BKTVuFoo6iLNCVsHjVuP2T3Q3p78aa+lkdiPEqse1+ve4Da04xSGSZk2iG05QB XBp6ZNCx5fjIKs1SV1z7bY7Js7FG4GauuAQlOgEHSghm6QB3bk+nP7OyRyinhkR0 iKS+tybnzsVMtX6ZnmAsjHfbvZotvikyBgDfxlyVN+qJYcbBCLIrp0XZVoHKi4S7 Tgf0LCNQN49lL5kgfh6sdGJWsIh5SGOf25p4qYYzVL6BlZALXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEPz5o8ASY4G6nL2kL9nNBbmW8jFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4 ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvYjdhMDIwZGEtMGQ3ZS0z YjI0LTk2NzAtYWNkNmZlMTM0ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0 MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3 MmQ2MjgzYjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRawDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJZsYSlRpUNPhl8w1rIkaF8jnZRZXNdqbUqvbsF4bFOP1aCGFa2u7Y s2A8xxaqmsNjeuI0ybi6uTXKy45uw0U1T7oOceDNhCsTzKZvPmQ1B6FTa7Fryts7 sYkDxysE+B/Tn6x4SmiBRGVVloFGE7nAcrBlD2afiKRfwG9PjuXxZfx2doyIIWEI NdcnV3YImrRn7lCaLSXosFjPbwHxQsj/mbZ19/ttBNXBd8tMC6mEDJOuqRY3SV9q r/fbkz0NK0pYFi5d+/HXlE8IR3u4VsRCTUThSdHgjvgTWNW7B4JlKFMKG9+1ravQ dyrswcaTWthJvFkqmb6aqpvLsi1BWFPe -----END CERTIFICATE-----Generated at Sat Oct 11 10:27:19 2025 by rpki-client