$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa File: 058e8951-6243-3e09-9ea4-9c5f828671a1.roa (raw, json) Hash identifier: 2g9pTEij2+EPsYcLu5trpjMqt5FHvjLi80GeaJV7tv0= Subject key identifier: 14:D8:D4:2C:56:72:BE:FD:9F:A6:6F:87:B3:E2:C7:FB:C0:B7:7B:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE3488213538AD4343ECC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2001:4860:4820::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:34:88:21:35:38:ad:43:43:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=06d9728f-473b-40ed-91e1-002b098efa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:1c:2f:39:8b:e2:1f:f7:ac:ba:3b:7b:90: 77:42:36:c4:a5:60:07:e7:e5:76:9f:77:45:89:7c: dc:e3:c6:3b:69:74:97:cb:82:d1:7c:f8:72:b2:c9: 13:b7:58:52:3f:3a:5d:c0:58:fa:99:4c:a7:41:c9: 53:d2:4d:49:db:0f:cf:a0:19:90:4b:dc:69:3c:d8: a8:8a:9a:f1:c8:c8:b4:b0:57:09:61:d7:2f:97:7e: fa:54:31:55:8e:6f:63:6a:9a:30:37:08:56:32:cb: 5e:b1:6e:44:1e:13:47:09:9e:50:76:9e:d8:64:95: c4:0b:c9:e3:62:77:cb:48:b4:6f:e6:c4:b7:2f:77: f2:8f:98:48:50:b2:37:32:7f:cc:49:66:b1:39:c8: e2:19:41:54:ec:db:54:bc:fd:c1:a4:5e:41:e6:b8: 4c:9e:45:b3:b6:8a:77:04:99:bd:1d:7b:2d:a3:aa: 97:a2:9a:9e:2b:b3:dc:c7:cd:b9:4e:d9:5c:8c:94: f8:66:fb:8f:93:46:5e:42:ae:8b:73:7f:ac:a4:d3: 47:e6:d1:b6:94:54:1d:a0:c5:b8:02:92:aa:3b:8e: d9:c0:70:a1:66:56:d1:b2:05:98:a4:05:3f:68:64: b6:59:7d:bb:ec:d2:0b:8c:da:b3:5d:02:9b:f7:aa: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D8:D4:2C:56:72:BE:FD:9F:A6:6F:87:B3:E2:C7:FB:C0:B7:7B:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4820::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:45:84:cd:e5:01:46:7a:83:28:3a:47:fb:40:11:3e:98:76: b9:a8:7c:68:b4:5f:7d:5f:3e:7e:8c:89:a6:a0:99:54:7d:2a: 5a:2b:ef:fc:ae:d2:86:41:a1:49:f8:b6:96:c8:20:3c:a0:6f: 61:54:7e:a3:c3:81:e4:77:fb:f3:76:e2:8c:83:17:c6:d0:c8: 2f:a6:dc:eb:e1:31:e7:18:14:4c:78:30:4e:f7:12:bf:a7:89: 5c:25:25:96:ab:b9:c0:2b:42:d6:b0:16:77:39:9c:60:c8:43: fc:ab:d5:23:8d:30:70:79:4a:38:91:07:30:bc:e5:2b:f9:9a: c5:d9:cc:ae:b3:f2:ef:8a:2a:e8:64:d4:91:02:92:60:54:22: 3a:31:b5:d3:18:ce:69:55:dd:81:05:14:c6:0b:03:0b:50:51: 2d:cd:53:d1:a1:00:16:2f:a2:79:94:60:7d:b3:c8:36:fe:19: 46:e5:d3:08:75:3a:21:07:7c:86:85:f8:e4:f5:eb:65:c6:6f: 0f:68:b5:04:c9:1c:d4:bf:40:62:4a:f2:1b:f9:9c:08:33:cb: 00:c3:8a:b3:37:83:2f:85:3c:00:c0:d8:6e:c1:b9:ed:85:f9: 87:67:c1:3a:42:68:ff:fb:80:d3:e8:09:36:94:4a:5b:74:c1: 92:4c:7b:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzjSIITU4rUND7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDZkOTcyOGYtNDczYi00MGVkLTkxZTEtMDAyYjA5OGVmYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpIcLzmL4h/3rLo7e5B3QjbEpWAH5+V2n3dF iXzc48Y7aXSXy4LRfPhysskTt1hSPzpdwFj6mUynQclT0k1J2w/PoBmQS9xpPNio iprxyMi0sFcJYdcvl376VDFVjm9japowNwhWMstesW5EHhNHCZ5Qdp7YZJXEC8nj YnfLSLRv5sS3L3fyj5hIULI3Mn/MSWaxOcjiGUFU7NtUvP3BpF5B5rhMnkWztop3 BJm9HXsto6qXopqeK7Pcx825TtlcjJT4ZvuPk0ZeQq6Lc3+spNNH5tG2lFQdoMW4 ApKqO47ZwHChZlbRsgWYpAU/aGS2WX277NILjNqzXQKb96pT8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBTY1CxWcr79n6Zvh7Pix/vAt3v9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDU4ZTg5NTEtNjI0My0z ZTA5LTllYTQtOWM1ZjgyODY3MWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFVFhM3lAUZ6gyg6R/tAET6YdrmofGi0X31fPn6MiaagmVR9Klor 7/yu0oZBoUn4tpbIIDygb2FUfqPDgeR3+/N24oyDF8bQyC+m3OvhMecYFEx4ME73 Er+niVwlJZarucArQtawFnc5nGDIQ/yr1SONMHB5SjiRBzC85Sv5msXZzK6z8u+K Kuhk1JECkmBUIjoxtdMYzmlV3YEFFMYLAwtQUS3NU9GhABYvonmUYH2zyDb+GUbl 0wh1OiEHfIaF+OT162XGbw9otQTJHNS/QGJK8hv5nAgzywDDirM3gy+FPADA2G7B ue2F+YdnwTpCaP/7gNPoCTaUSlt0wZJMexA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:43 2025 by rpki-client