$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa File: 3af3cf4a-452f-3c16-a0c5-87928368d443.roa (raw, json) Hash identifier: qPOsqznKKbexHIsymyIWorU820qTjTHOItg6pxdXCuk= Subject key identifier: 70:1B:49:92:4F:02:86:0D:9B:A4:EB:42:66:7D:F6:5A:20:0E:D8:92 Certificate issuer: /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5 Certificate serial: 010D0C9F4328584AF5212D2C29A8ED0419B6FE80 Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2605:32c0:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2d:2c:29:a8:ed:04:19:b6:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=8d0f7fb5-af6c-47f1-8d61-a117c3523143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ec:36:01:23:a1:30:c2:0e:79:3c:9e:c4:b9: 78:44:0b:ce:a8:e3:8c:9e:05:2f:04:f1:f8:40:ba: f5:b1:24:0a:c4:3d:6f:3b:0e:fa:82:24:4d:f5:4d: ff:98:77:d7:08:ff:b1:f8:60:b4:e7:7f:c5:07:2c: 52:72:1a:0d:06:fb:16:ed:c7:51:05:19:b4:a6:c5: e5:72:ed:55:cc:c2:db:48:15:b7:56:ce:c7:d4:a1: 5b:c3:d3:9d:25:40:df:5b:22:d7:af:5c:7f:f4:2d: b3:32:6b:74:20:a7:da:71:71:f7:3b:80:48:e5:e9: 13:91:40:ba:4e:42:df:3c:9d:a8:1b:4d:d9:13:5c: cf:bc:73:15:09:ae:b4:75:3d:78:38:55:af:8f:c3: 9a:ce:a3:35:21:b5:0d:6a:05:81:3a:2f:19:33:2f: 1e:b2:e6:50:56:6f:32:1c:5d:c1:99:40:da:f1:95: ba:9d:c5:c3:1d:ea:23:ae:92:1c:d5:3b:d9:83:ec: 79:3c:a6:53:93:74:92:2a:c8:1d:1a:af:29:59:a2: 91:ec:2d:64:60:d4:13:3a:d2:64:c5:3e:38:ac:00: 22:c3:e2:69:2f:37:58:19:11:bc:42:c0:07:a7:bf: ab:4d:c2:26:f9:0f:8e:3a:05:58:05:ac:9b:7b:82: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1B:49:92:4F:02:86:0D:9B:A4:EB:42:66:7D:F6:5A:20:0E:D8:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl X509v3 Authority Key Identifier: keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer sbgp-ipAddrBlock: critical IPv6: 2605:32c0:a000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ae:f3:6b:b9:ab:12:d3:ca:99:54:97:0d:72:26:ac:b0:8e: b6:e4:b6:fc:c9:32:58:cc:f1:12:1e:c7:ef:99:62:d0:d3:1b: 58:2c:2e:7c:55:35:fe:bc:1d:91:92:2b:31:39:d1:6c:0d:dd: 8d:61:14:7d:0d:d5:3a:30:bc:32:54:9e:35:69:74:16:8d:5d: 46:3f:a9:b6:a1:98:40:60:b3:74:68:e8:a4:4e:df:32:e3:ea: aa:bb:18:68:28:9f:78:bc:81:7e:d7:69:b9:c3:36:26:93:e0: ac:2d:16:82:e6:00:7e:03:57:f7:04:06:76:8c:b0:3b:49:3e: 26:3b:0e:ea:54:dd:dd:f2:6e:b8:5b:03:46:96:30:84:dd:95: 23:9e:b1:f9:f0:31:bd:3d:94:6e:6e:2a:d5:a8:81:a0:66:78: a8:6c:41:0a:58:51:a7:6b:b3:a4:ac:93:c8:c5:c3:15:f6:55: 8b:b9:59:3a:50:18:3d:1e:ab:80:19:d3:10:e2:11:fe:24:9e: c3:7d:52:35:3a:6a:5b:e6:1c:20:15:83:de:e2:af:a3:0b:a3: 02:10:93:c4:1d:45:dc:33:26:20:e6:24:2d:d1:3d:8c:b7:2e: 43:c2:29:e3:2f:82:b2:5d:40:d0:1a:57:d5:05:f6:26:5c:03: 5b:9e:91:c2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr1IS0sKajtBBm2/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjMmZjYjUtODIyNC00MGFhLWJhY2UtMjMwZmNkZWZi YWE1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGQwZjdmYjUtYWY2Yy00N2YxLThkNjEtYTExN2MzNTIzMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uw2ASOhMMIOeTyexLl4RAvOqOOMngUvBPH4 QLr1sSQKxD1vOw76giRN9U3/mHfXCP+x+GC053/FByxSchoNBvsW7cdRBRm0psXl cu1VzMLbSBW3Vs7H1KFbw9OdJUDfWyLXr1x/9C2zMmt0IKfacXH3O4BI5ekTkUC6 TkLfPJ2oG03ZE1zPvHMVCa60dT14OFWvj8OazqM1IbUNagWBOi8ZMy8esuZQVm8y HF3BmUDa8ZW6ncXDHeojrpIc1TvZg+x5PKZTk3SSKsgdGq8pWaKR7C1kYNQTOtJk xT44rAAiw+JpLzdYGRG8QsAHp7+rTcIm+Q+OOgVYBaybe4InYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHAbSZJPAoYNm6TrQmZ99logDtiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMWMy ZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBmY2RlZmJhYTUvM2FmM2NmNGEtNDUyZi0z YzE2LWEwYzUtODc5MjgzNjhkNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzFjMmZjYjUtODIyNC00MGFhLWJh Y2UtMjMwZmNkZWZiYWE1L2MxYzJmY2I1LTgyMjQtNDBhYS1iYWNlLTIzMGZjZGVm YmFhNS5jcmwwHwYDVR0jBBgwFoAUsyEefqI73O8Sc7jmR075Z0ZYYLEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMWMyZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBm Y2RlZmJhYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgUywKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKK7za7mrEtPKmVSXDXImrLCOtuS2/MkyWMzxEh7H75li0NMbWCwu fFU1/rwdkZIrMTnRbA3djWEUfQ3VOjC8MlSeNWl0Fo1dRj+ptqGYQGCzdGjopE7f MuPqqrsYaCifeLyBftdpucM2JpPgrC0WguYAfgNX9wQGdoywO0k+JjsO6lTd3fJu uFsDRpYwhN2VI56x+fAxvT2Ubm4q1aiBoGZ4qGxBClhRp2uzpKyTyMXDFfZVi7lZ OlAYPR6rgBnTEOIR/iSew31SNTpqW+YcIBWD3uKvowujAhCTxB1F3DMmIOYkLdE9 jLcuQ8Ip4y+Csl1A0BpX1QX2JlwDW56Rwg== -----END CERTIFICATE-----Generated at Thu Oct 9 03:51:16 2025 by rpki-client