$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/99d9220f-d777-3314-a61f-f30f5e9c3026.roa File: 99d9220f-d777-3314-a61f-f30f5e9c3026.roa (raw, json) Hash identifier: mSpfxCS7ROBWcA21mpIlUhRrokFJAKHTGDwqGxCw5rE= Subject key identifier: E7:FC:95:60:8E:F4:F5:4D:48:D5:0C:1E:2B:97:13:07:37:B8:37:BC Certificate issuer: /CN=17321389-82c8-40ad-969d-f355a789f579 Certificate serial: 010D0C9F4328584BCD9B277D17CBE492A1539E00 Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/99d9220f-d777-3314-a61f-f30f5e9c3026.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 16509 IP address blocks: 2604:4f00:feed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:27:7d:17:cb:e4:92:a1:53:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17321389-82c8-40ad-969d-f355a789f579 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=15266b44-5c63-4b7c-864d-22819378f50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:88:0a:0d:ff:63:32:91:d4:ad:08:7a:f4: ae:f8:ee:5e:e2:bb:63:ea:9e:9c:1f:f5:77:6a:19: 6a:75:75:0c:aa:2c:0f:96:a5:f4:69:46:75:d1:73: f2:7a:41:d9:e2:0f:ea:2a:27:8d:cf:be:7e:a8:85: 47:a8:c1:2c:a5:bc:71:ed:6e:ae:1c:81:6d:20:b8: a4:c0:0a:20:39:59:f6:6f:da:57:13:51:66:0a:88: b0:44:27:a1:d0:09:9a:e9:2a:bb:98:5c:61:3e:92: 07:21:47:7b:35:bb:f6:7e:aa:5d:de:96:ba:d2:2f: 59:f2:34:de:0e:e4:d4:1a:3a:6a:8d:63:21:49:51: 62:47:9d:ba:8e:00:d0:73:4e:30:07:5a:d6:0d:71: d0:89:49:46:93:77:31:2b:67:3d:db:5f:49:4e:7b: 08:28:05:85:4b:53:d1:ef:7d:82:31:49:1f:32:0f: 8e:8f:44:9d:63:79:99:8f:7d:ba:14:a3:56:fe:da: 04:f0:6b:8a:ae:a5:65:8e:2d:a7:c2:de:90:62:f1: 00:14:4e:9d:3e:2b:35:77:0f:93:51:28:ce:7a:df: 42:3b:ac:5b:d6:ba:e3:3b:af:18:93:f7:4d:14:4e: 54:ba:17:44:a7:69:51:cb:c0:70:f6:c8:ab:41:0a: d6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FC:95:60:8E:F4:F5:4D:48:D5:0C:1E:2B:97:13:07:37:B8:37:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/99d9220f-d777-3314-a61f-f30f5e9c3026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl X509v3 Authority Key Identifier: keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer sbgp-ipAddrBlock: critical IPv6: 2604:4f00:feed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:60:bd:46:34:16:4f:cd:48:f3:72:1f:29:0d:0a:21:db:8d: 52:94:56:5e:e8:d4:fa:40:aa:bc:1d:b7:7e:84:ee:ba:1a:20: 3d:01:ba:19:a5:ae:34:56:9c:05:73:00:38:f6:da:3c:c8:5a: 59:5b:4b:e6:1c:d1:09:d6:9d:80:41:76:83:89:09:26:33:74: e5:ec:f2:7c:8e:59:65:d8:07:ac:2c:25:f5:4f:3f:59:1b:0c: 6b:e4:cb:68:33:15:c4:07:33:20:97:0c:28:58:4c:b5:20:01: 4a:e6:42:99:ff:54:0a:f4:46:9f:92:ae:dc:03:81:2d:8c:7b: a4:39:d1:ee:be:04:ae:3c:07:65:da:54:0f:43:da:30:0a:13: b4:70:39:7e:73:a7:10:f5:27:3c:ca:53:02:e8:4d:ac:dd:d6: bd:69:13:e1:0f:5a:15:da:e3:f5:80:e1:37:ec:64:90:ae:ba: 41:10:9f:9e:80:ae:25:2d:1c:09:d7:4e:d2:4a:d3:11:47:74: b6:98:08:78:37:08:cb:d8:1f:0d:e7:8b:9d:b1:47:5f:89:ec: 66:5a:8b:ba:5a:16:03:3d:eb:7b:e4:cb:26:fd:86:ac:c1:a3: ed:9d:03:6b:91:76:c5:80:62:d5:2f:dd:0f:b4:df:76:41:85: 65:c2:d6:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvNmyd9F8vkkqFTngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTczMjEzODktODJjOC00MGFkLTk2OWQtZjM1NWE3ODlm NTc5MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTUyNjZiNDQtNWM2My00YjdjLTg2NGQtMjI4MTkzNzhmNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCSICg3/YzKR1K0IevSu+O5e4rtj6p6cH/V3 ahlqdXUMqiwPlqX0aUZ10XPyekHZ4g/qKieNz75+qIVHqMEspbxx7W6uHIFtILik wAogOVn2b9pXE1FmCoiwRCeh0Ama6Sq7mFxhPpIHIUd7Nbv2fqpd3pa60i9Z8jTe DuTUGjpqjWMhSVFiR526jgDQc04wB1rWDXHQiUlGk3cxK2c9219JTnsIKAWFS1PR 732CMUkfMg+Oj0SdY3mZj326FKNW/toE8GuKrqVlji2nwt6QYvEAFE6dPis1dw+T USjOet9CO6xb1rrjO68Yk/dNFE5UuhdEp2lRy8Bw9sirQQrWZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOf8lWCO9PVNSNUMHiuXEwc3uDe8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMy MTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1YTc4OWY1NzkvOTlkOTIyMGYtZDc3Ny0z MzE0LWE2MWYtZjMwZjVlOWMzMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTczMjEzODktODJjOC00MGFkLTk2 OWQtZjM1NWE3ODlmNTc5LzE3MzIxMzg5LTgyYzgtNDBhZC05NjlkLWYzNTVhNzg5 ZjU3OS5jcmwwHwYDVR0jBBgwFoAU8geygR3uIKMb0ocE2pwdgM76tF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMyMTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1 YTc4OWY1NzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRPAP7t MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABlgvUY0Fk/NSPNyHykNCiHbjVKUVl7o1PpAqrwdt36E7roaID0B uhmlrjRWnAVzADj22jzIWllbS+Yc0QnWnYBBdoOJCSYzdOXs8nyOWWXYB6wsJfVP P1kbDGvky2gzFcQHMyCXDChYTLUgAUrmQpn/VAr0Rp+SrtwDgS2Me6Q50e6+BK48 B2XaVA9D2jAKE7RwOX5zpxD1JzzKUwLoTazd1r1pE+EPWhXa4/WA4TfsZJCuukEQ n56AriUtHAnXTtJK0xFHdLaYCHg3CMvYHw3ni52xR1+J7GZai7paFgM963vkyyb9 hqzBo+2dA2uRdsWAYtUv3Q+033ZBhWXC1kM= -----END CERTIFICATE-----Generated at Tue Nov 18 09:37:00 2025 by rpki-client