$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa File: 5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa (raw, json) Hash identifier: igoeuMg80Wg40MMv1FoIlAKGZsQQaRJ1ZxFYP+xhnc0= Subject key identifier: 09:90:11:4D:57:72:B7:5A:0E:29:89:20:B9:ED:E6:DB:3A:7F:35:71 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE353A7C742EA2CD491C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 32381 IP address blocks: 2001:4860:1025::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:35:3a:7c:74:2e:a2:cd:49:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d494f862-698e-400a-98ce-4eeda8b387df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b1:9f:02:81:4c:df:23:de:35:15:73:d8:03: 8a:73:7c:db:c9:32:fc:82:41:df:8d:04:aa:36:98: ba:ee:a2:04:c8:d5:9c:e6:a2:b0:d2:a5:fd:e1:39: f9:b1:f6:8b:8e:21:2d:74:50:20:99:19:0a:46:c7: ad:d2:33:76:e6:bf:ac:ca:39:be:c7:90:d6:db:dd: 0e:4f:3b:3d:62:6f:42:23:3c:9c:18:c1:a9:63:12: 3f:2e:8b:1b:37:77:a5:0f:6b:4b:e3:19:7f:25:1c: f6:5d:ee:97:f7:d2:7d:3c:4a:81:03:65:19:e8:6c: f1:15:1c:5a:22:5f:9a:02:8c:a8:58:63:98:21:3b: 27:07:18:0d:51:e8:f6:e8:a6:14:f9:a2:d7:af:cd: 6f:7b:20:40:c1:af:cf:21:c1:bd:54:30:cf:12:9c: 91:ac:6b:bf:c0:71:f8:4a:98:79:29:5a:e9:73:33: b1:14:54:c9:10:65:6d:a2:2e:13:74:70:69:fc:0e: 7b:9c:39:09:9e:5c:a4:45:ad:44:ec:81:c0:9c:94: c6:b8:36:b2:4c:fb:61:0e:fc:ad:e9:ca:07:cc:d8: e4:99:97:9a:28:3e:43:02:a5:a1:cc:eb:ed:18:1b: 66:a2:0b:12:76:ac:ae:72:9a:20:16:a2:38:2d:d1: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:90:11:4D:57:72:B7:5A:0E:29:89:20:B9:ED:E6:DB:3A:7F:35:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:1025::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a6:e5:0d:af:1f:a6:09:e2:59:65:6b:64:ca:16:32:b0:c2: d8:c3:91:9f:95:1f:38:cc:27:8a:60:43:28:14:17:e3:46:1a: bd:ec:a1:94:55:6a:46:ad:3a:44:97:ee:84:60:f9:d3:d1:bf: 11:69:1c:52:ab:38:3f:41:ee:00:53:49:f5:fe:24:b3:ab:dc: 86:f5:d4:75:db:df:43:c6:3c:4a:5b:9f:24:28:6a:32:5b:3b: 20:49:e8:f1:6d:10:d9:c0:c9:3b:f6:4e:2b:90:e1:ea:8f:15: 51:eb:f0:fd:6a:a4:d8:48:3e:0e:81:b8:ad:4e:15:b5:31:9c: e0:0c:35:aa:15:96:6c:21:c5:54:6b:f2:5f:73:96:37:5e:9c: 8b:ab:3b:dd:a1:14:66:dd:b3:7a:85:06:e1:32:fc:ec:f5:48: 67:e6:d2:2b:c2:16:51:5b:12:db:5a:33:a5:e8:ec:66:00:02: 65:16:47:21:2a:27:b0:74:7c:cf:f2:37:d6:14:b1:38:d0:a1: 5b:17:4b:38:99:ad:e2:1e:88:0b:b5:27:e1:74:58:cd:51:0c: 10:0a:14:dd:ef:a9:30:0e:21:09:e3:e0:55:4c:03:9b:7f:bc: eb:e9:e8:a4:72:b3:93:71:ef:f7:01:b7:6a:ca:32:d7:ba:c6: 4a:88:3c:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzjU6fHQuos1JHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDQ5NGY4NjItNjk4ZS00MDBhLTk4Y2UtNGVlZGE4YjM4N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbGfAoFM3yPeNRVz2AOKc3zbyTL8gkHfjQSq Npi67qIEyNWc5qKw0qX94Tn5sfaLjiEtdFAgmRkKRset0jN25r+syjm+x5DW290O Tzs9Ym9CIzycGMGpYxI/LosbN3elD2tL4xl/JRz2Xe6X99J9PEqBA2UZ6GzxFRxa Il+aAoyoWGOYITsnBxgNUej26KYU+aLXr81veyBAwa/PIcG9VDDPEpyRrGu/wHH4 Sph5KVrpczOxFFTJEGVtoi4TdHBp/A57nDkJnlykRa1E7IHAnJTGuDayTPthDvyt 6coHzNjkmZeaKD5DAqWhzOvtGBtmogsSdqyucpogFqI4LdHlPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAmQEU1XcrdaDimJILnt5ts6fzVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWZmZGE1NGUtZDYzZC0z NDA4LTkwMzMtM2U1M2ZiZGJlOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYBAl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFWm5Q2vH6YJ4llla2TKFjKwwtjDkZ+VHzjMJ4pgQygUF+NGGr3s oZRVakatOkSX7oRg+dPRvxFpHFKrOD9B7gBTSfX+JLOr3Ib11HXb30PGPEpbnyQo ajJbOyBJ6PFtENnAyTv2TiuQ4eqPFVHr8P1qpNhIPg6BuK1OFbUxnOAMNaoVlmwh xVRr8l9zljdenIurO92hFGbds3qFBuEy/Oz1SGfm0ivCFlFbEttaM6Xo7GYAAmUW RyEqJ7B0fM/yN9YUsTjQoVsXSziZreIeiAu1J+F0WM1RDBAKFN3vqTAOIQnj4FVM A5t/vOvp6KRys5Nx7/cBt2rKMte6xkqIPEk= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:31 2025 by rpki-client