$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa File: a250beff-0df5-3a60-afe1-77574f30a281.roa (raw, json) Hash identifier: ApCzEkBOo1we6l+bIDgdGUY/oVKMEWXnCcINnFb2bVY= Subject key identifier: 40:4C:65:81:EA:AB:96:A9:AF:B2:BA:24:44:F0:E1:5D:65:5C:81:DF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD77F8BD927E1AFF9903C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2607:f8b0:4009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:77:f8:bd:92:7e:1a:ff:99:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=6258aba7-8344-4eaa-ab0f-8ce20b1679a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bf:db:73:eb:b6:11:16:a1:80:88:03:ee:96: 36:db:19:3a:97:f7:14:72:99:f3:2e:71:ba:fc:4f: be:f4:3d:22:df:d0:5e:d4:ec:29:fd:89:47:b1:1c: 0d:a6:d7:a1:2b:f0:c6:b6:9f:f6:88:c0:05:5b:ff: 21:15:f1:9a:06:b2:cc:f4:45:c0:3c:d6:80:d3:d1: 52:29:97:c1:98:1c:ab:d3:1a:d4:fc:12:c4:34:94: d6:e3:e7:1d:a8:67:9f:30:4f:c5:74:38:62:cf:88: b4:0e:4c:8e:09:83:39:37:75:59:37:76:ef:55:1f: 2d:2c:9f:ff:31:50:eb:6d:8d:41:7f:f0:7a:64:4f: cb:64:80:53:6c:a1:9e:20:63:c9:e5:ec:74:f2:02: c6:24:72:c3:2b:3c:a8:ad:bb:4f:e3:8e:1d:81:fb: ae:8a:89:c2:46:9d:27:05:0b:1c:84:9e:8e:d7:13: b1:21:99:15:78:cd:3b:5f:bb:d3:ab:2d:93:58:8c: f9:96:8d:82:ab:ca:a9:1d:32:93:81:73:39:ad:da: 0e:90:06:8a:63:eb:0f:b9:f4:16:7f:26:7a:99:70: bc:f4:80:85:64:c1:7b:9e:e8:2b:34:f3:c8:19:2b: 31:ba:68:65:bf:23:76:7b:50:5e:ba:49:93:3e:a6: 17:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4C:65:81:EA:AB:96:A9:AF:B2:BA:24:44:F0:E1:5D:65:5C:81:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ff:be:9a:a1:3b:52:83:ad:58:12:39:89:ad:bf:77:79:13: 02:b5:29:a4:5d:15:c5:ed:43:5b:9c:36:5d:04:63:79:99:1f: bd:02:22:1c:2c:24:bc:53:6c:d6:2b:a5:8b:c5:ef:29:85:c0: da:3c:20:2e:30:7a:50:21:4b:08:1a:9e:81:d9:11:d9:aa:4e: 93:3c:05:78:0b:5a:e7:6a:40:dd:f5:b6:87:5c:9c:f9:a3:b8: ea:88:01:2c:c7:5e:79:cb:d9:a1:e3:e6:11:90:42:9c:91:23: dd:92:8e:60:a6:e2:cf:a5:e5:d7:29:8c:b0:13:37:5f:8a:32: 3b:bf:46:65:16:0b:13:82:ba:71:9b:c5:0d:c6:87:ab:fe:91: 3e:bd:27:d4:e5:63:bb:b9:5c:01:48:3d:81:26:89:71:ff:2c: 3d:bc:44:0f:77:4e:49:41:04:17:41:77:fc:2a:82:e2:69:9e: 25:8e:f1:4f:f8:24:4c:b3:79:9a:52:27:1c:0c:81:1e:b8:c7: b5:2b:d0:67:cf:f3:69:1d:8d:45:5f:a8:16:db:40:c5:4a:23: af:ef:81:21:ea:f3:76:69:2c:3f:eb:1e:8e:e3:30:71:0e:cb: 85:51:ab:7b:70:01:8d:75:b6:38:29:94:b3:3d:65:0f:20:0e: a4:58:9c:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzXf4vZJ+Gv+ZA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjI1OGFiYTctODM0NC00ZWFhLWFiMGYtOGNlMjBiMTY3OWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L/bc+u2ERahgIgD7pY22xk6l/cUcpnzLnG6 /E++9D0i39Be1Owp/YlHsRwNptehK/DGtp/2iMAFW/8hFfGaBrLM9EXAPNaA09FS KZfBmByr0xrU/BLENJTW4+cdqGefME/FdDhiz4i0DkyOCYM5N3VZN3bvVR8tLJ// MVDrbY1Bf/B6ZE/LZIBTbKGeIGPJ5ex08gLGJHLDKzyorbtP444dgfuuionCRp0n BQschJ6O1xOxIZkVeM07X7vTqy2TWIz5lo2Cq8qpHTKTgXM5rdoOkAaKY+sPufQW fyZ6mXC89ICFZMF7nugrNPPIGSsxumhlvyN2e1BeukmTPqYXaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEBMZYHqq5apr7K6JETw4V1lXIHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTI1MGJlZmYtMGRmNS0z YTYwLWFmZTEtNzc1NzRmMzBhMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKX/vpqhO1KDrVgSOYmtv3d5EwK1KaRdFcXtQ1ucNl0EY3mZH70C IhwsJLxTbNYrpYvF7ymFwNo8IC4welAhSwganoHZEdmqTpM8BXgLWudqQN31todc nPmjuOqIASzHXnnL2aHj5hGQQpyRI92SjmCm4s+l5dcpjLATN1+KMju/RmUWCxOC unGbxQ3Gh6v+kT69J9TlY7u5XAFIPYEmiXH/LD28RA93TklBBBdBd/wqguJpniWO 8U/4JEyzeZpSJxwMgR64x7Ur0GfP82kdjUVfqBbbQMVKI6/vgSHq83ZpLD/rHo7j MHEOy4VRq3twAY11tjgplLM9ZQ8gDqRYnMo= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:07 2025 by rpki-client