$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa File: 3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa (raw, json) Hash identifier: ArbLEC2+gD88EEArg98beATu4tfpl6WTyFtpQhOiikY= Subject key identifier: F9:40:DD:AD:43:D8:FD:55:6D:01:B8:1E:68:1D:8B:BF:4F:F7:77:89 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE341D5143D38FAD864CA8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2001:4860:4831::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:34:1d:51:43:d3:8f:ad:86:4c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b8387de1-e43e-4229-a547-4d8700546756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:8f:0e:96:2b:64:48:34:ec:b7:98:00:85: f2:82:d4:78:5f:79:06:8f:0e:93:90:e5:53:e9:ac: 3c:5b:ee:88:8d:bd:4b:1e:fd:ea:8e:87:10:85:64: 50:73:27:8a:5a:61:63:d0:ff:60:8e:ae:1b:6c:16: c5:3c:6c:a1:c8:27:aa:7d:dd:be:ce:cc:dc:47:54: b2:d9:d3:ee:d8:70:3e:ae:c4:27:ac:79:e1:a3:96: da:aa:02:e8:81:b4:18:36:5b:cc:48:ac:27:e0:e3: 85:4e:71:0e:77:e0:34:8e:f4:89:ee:17:c2:74:fe: c5:1f:4a:88:56:a8:4f:e5:2f:22:7b:c0:19:75:9b: 4d:34:44:76:57:a6:7a:b3:f5:d6:44:2b:d2:60:fe: 0d:d5:2d:01:1f:df:f2:11:9d:20:b8:d4:ff:35:db: 64:d3:6f:91:82:4e:ab:a5:dd:ba:f9:4e:28:64:51: b8:d5:fc:2e:2e:5a:09:64:46:3b:ba:a9:7a:d4:38: 35:80:dc:ac:06:46:c1:b8:36:f2:68:70:6b:68:87: fb:11:f8:6c:c7:77:6a:4d:63:b3:50:e9:68:d7:95: 0a:a2:1e:b3:72:2c:64:79:f2:63:9c:68:c0:c2:b5: 28:9c:fe:ba:ca:5a:55:ec:af:00:f0:0b:42:52:8c: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:40:DD:AD:43:D8:FD:55:6D:01:B8:1E:68:1D:8B:BF:4F:F7:77:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4831::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:19:9c:58:79:31:d4:04:02:83:bb:93:fb:7a:f5:2b:b1:0a: 8f:04:91:bf:32:2a:74:5c:24:91:38:bc:fb:7d:66:16:08:d6: 5a:68:59:db:b7:37:98:08:f7:85:39:cb:2c:ab:67:c6:61:21: a1:5c:b0:4c:ae:61:dc:cd:83:cf:0e:bd:9c:f8:54:be:be:48: 04:b2:ed:0a:f2:d8:11:a4:15:73:be:ce:8e:03:ae:64:1f:2e: fc:f0:4e:8c:f1:b3:ec:12:b6:13:b7:c0:73:85:59:19:ef:69: c0:b8:6a:25:b0:95:54:2d:98:c0:af:0e:bf:fa:6f:5a:a4:ae: c5:e2:25:a8:a5:b7:f6:d5:82:db:8d:80:d8:34:40:e6:77:71: 8f:9b:8b:87:df:48:54:78:c8:8a:a6:59:f8:10:b7:22:18:dd: c3:01:b8:7d:a3:df:5d:1f:70:53:e0:1e:ba:40:78:f7:83:86: 67:e4:2e:7d:20:b4:b4:ac:82:6d:e5:5d:0f:a4:f9:20:2b:4b: 9f:2c:d8:43:9c:b0:fb:15:42:49:cf:6b:b4:dd:49:2a:33:7b: 6d:13:fa:31:6e:3d:56:26:e4:dd:e4:f2:6c:dc:4e:1a:f1:d1: 10:f2:eb:aa:ea:3c:d9:42:2d:94:d0:7e:fd:9b:15:93:2a:ad: 65:cc:8b:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzjQdUUPTj62GTKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjgzODdkZTEtZTQzZS00MjI5LWE1NDctNGQ4NzAwNTQ2NzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurWPDpYrZEg07LeYAIXygtR4X3kGjw6TkOVT 6aw8W+6Ijb1LHv3qjocQhWRQcyeKWmFj0P9gjq4bbBbFPGyhyCeqfd2+zszcR1Sy 2dPu2HA+rsQnrHnho5baqgLogbQYNlvMSKwn4OOFTnEOd+A0jvSJ7hfCdP7FH0qI VqhP5S8ie8AZdZtNNER2V6Z6s/XWRCvSYP4N1S0BH9/yEZ0guNT/Ndtk02+Rgk6r pd26+U4oZFG41fwuLloJZEY7uql61Dg1gNysBkbBuDbyaHBraIf7Efhsx3dqTWOz UOlo15UKoh6zcixkefJjnGjAwrUonP66ylpV7K8A8AtCUoymCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPlA3a1D2P1VbQG4Hmgdi79P93eJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2ZmMmMwZWMtM2U1ZS0z MGFkLWFjNWUtOTEwYjBiNGIzNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABMZnFh5MdQEAoO7k/t69SuxCo8Ekb8yKnRcJJE4vPt9ZhYI1lpo Wdu3N5gI94U5yyyrZ8ZhIaFcsEyuYdzNg88OvZz4VL6+SASy7Qry2BGkFXO+zo4D rmQfLvzwTozxs+wSthO3wHOFWRnvacC4aiWwlVQtmMCvDr/6b1qkrsXiJailt/bV gtuNgNg0QOZ3cY+bi4ffSFR4yIqmWfgQtyIY3cMBuH2j310fcFPgHrpAePeDhmfk Ln0gtLSsgm3lXQ+k+SArS58s2EOcsPsVQknPa7TdSSoze20T+jFuPVYm5N3k8mzc Thrx0RDy66rqPNlCLZTQfv2bFZMqrWXMi9w= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:06 2025 by rpki-client