$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa File: 9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa (raw, json) Hash identifier: D3SS1KLMANXDXD3FmnDmKCvbm0hAtwYJXdgqQ51eSc4= Subject key identifier: 44:C5:A3:46:4F:CE:A5:42:5E:FF:1A:D4:EE:62:6A:E5:3A:04:2B:6B Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F4328584B5B0733211765D88F8425E880 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 14464 IP address blocks: 2604:a700::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:33:21:17:65:d8:8f:84:25:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=ab912a60-b299-4dec-a895-54eac599a8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:8c:f8:60:ea:65:49:f7:81:1a:61:f0:64: 94:ba:39:2f:f5:45:7d:6b:a6:8f:01:18:a0:b9:de: 1d:30:f9:fe:0f:95:da:2c:da:7e:08:b0:1c:5e:83: 6e:8d:52:1b:e3:62:df:8d:6d:f8:2a:5a:ce:1e:57: 81:e3:9f:5c:5b:af:1d:7a:0f:c2:13:d1:8f:0b:49: 9d:30:83:d0:af:a6:93:73:88:33:e3:85:c5:70:a2: 39:c0:6b:5a:f9:f6:02:00:de:aa:fb:f6:5c:f9:98: 25:14:07:3f:e7:2e:c0:c4:44:17:18:b7:84:52:a2: fe:52:56:ba:60:d8:45:87:9b:69:c4:d3:2b:7b:cd: 73:70:91:ef:36:3a:5f:d3:92:31:bd:d8:f2:7d:a7: f5:33:05:4a:69:c3:5f:10:f9:a0:55:ed:c9:af:4d: 9a:1e:e3:53:ec:a7:1c:a9:14:a5:ed:fa:f6:43:69: 44:33:f3:2b:ad:fd:d0:78:67:ec:f6:11:a9:14:0a: d1:c0:83:b7:7e:d1:36:a5:57:74:f5:0d:ef:00:67: 5b:96:e7:b5:20:a1:b8:e0:0b:8f:36:65:7f:3f:a1: 33:ba:01:58:4b:46:2a:5f:9b:24:af:e2:52:5b:31: 92:34:5c:1b:fa:b4:a7:42:a2:ee:c2:d9:d9:0d:3f: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C5:A3:46:4F:CE:A5:42:5E:FF:1A:D4:EE:62:6A:E5:3A:04:2B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv6: 2604:a700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a5:7f:7d:9a:fd:19:ca:1c:1f:25:d1:1b:24:f0:09:cb:fa: 1d:e4:1b:3e:bf:5a:a8:19:1f:0c:ba:a0:ea:55:ee:34:84:a1: af:c5:f8:44:e0:e4:bc:e7:9f:1c:6e:cd:2e:18:01:08:7e:37: 2d:27:42:b5:44:bc:55:5c:06:dc:10:02:90:2c:1e:6f:25:da: 5c:2e:3e:d6:dc:21:34:21:cb:22:22:37:40:67:6b:be:26:4d: f5:63:6e:cf:46:e8:37:71:97:04:d7:34:7b:6a:66:81:dd:a9: a0:12:de:57:58:41:90:87:b3:d6:7f:81:45:21:ab:1a:5a:d8: d8:db:c5:b6:c4:99:13:17:f8:17:87:c5:fd:3c:d3:e2:c6:4f: 09:40:ba:6a:3b:b6:b0:b8:18:90:7b:66:9a:bf:ee:3a:62:1e: 8d:97:1c:16:28:d5:38:58:c8:62:56:31:51:07:4b:5d:fc:11: 07:01:fc:f8:bf:ea:81:17:1d:f7:38:d5:e0:33:96:8c:ed:52: 90:06:72:35:1d:6a:b2:38:3e:52:e9:b9:ba:64:a4:17:94:1d: ae:1d:f3:e1:0c:11:e3:96:9e:7c:bf:58:eb:46:ed:c5:f1:f8: c9:e8:2d:c8:ec:c2:e9:6b:08:06:39:01:2d:19:dc:8b:80:7c: fd:9b:d0:a0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtbBzMhF2XYj4Ql6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YWI5MTJhNjAtYjI5OS00ZGVjLWE4OTUtNTRlYWM1OTlhOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFmM+GDqZUn3gRph8GSUujkv9UV9a6aPARig ud4dMPn+D5XaLNp+CLAcXoNujVIb42LfjW34KlrOHleB459cW68deg/CE9GPC0md MIPQr6aTc4gz44XFcKI5wGta+fYCAN6q+/Zc+ZglFAc/5y7AxEQXGLeEUqL+Ula6 YNhFh5tpxNMre81zcJHvNjpf05Ixvdjyfaf1MwVKacNfEPmgVe3Jr02aHuNT7Kcc qRSl7fr2Q2lEM/Mrrf3QeGfs9hGpFArRwIO3ftE2pVd09Q3vAGdblue1IKG44AuP NmV/P6EzugFYS0YqX5skr+JSWzGSNFwb+rSnQqLuwtnZDT8FywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFETFo0ZPzqVCXv8a1O5iauU6BCtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvOWJhOGE4MmMtMTFmZS0z NGNiLWFlZmYtMDk5YzI4YmQ1MDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCnpX99mv0ZyhwfJdEbJPAJy/od5Bs+v1qoGR8MuqDqVe40hKGvxfhE 4OS8558cbs0uGAEIfjctJ0K1RLxVXAbcEAKQLB5vJdpcLj7W3CE0IcsiIjdAZ2u+ Jk31Y27PRug3cZcE1zR7amaB3amgEt5XWEGQh7PWf4FFIasaWtjY28W2xJkTF/gX h8X9PNPixk8JQLpqO7awuBiQe2aav+46Yh6NlxwWKNU4WMhiVjFRB0td/BEHAfz4 v+qBFx33ONXgM5aM7VKQBnI1HWqyOD5S6bm6ZKQXlB2uHfPhDBHjlp58v1jrRu3F 8fjJ6C3I7MLpawgGOQEtGdyLgHz9m9Cg -----END CERTIFICATE-----Generated at Sat Oct 11 14:56:34 2025 by rpki-client