$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/882d159c-de0a-3f49-8cc7-75226c1dc327.roa File: 882d159c-de0a-3f49-8cc7-75226c1dc327.roa (raw, json) Hash identifier: W92d10WUxY3Dwlbrb5occrUAAGgT/OU6k+koR131RPo= Subject key identifier: A2:A4:72:BA:E4:F8:E1:27:B1:A0:9E:96:0D:3D:9F:32:E5:A0:C1:DC Certificate issuer: /CN=5524759a-2f0a-478f-8eb1-41f1b86353f9 Certificate serial: 010D0C9F4328584AF9D05AF375DF2BA9C0EA2780 Authority key identifier: D3:89:58:66:39:44:CC:1D:B3:FE:EF:3D:F6:9E:37:BC:76:45:B2:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/882d159c-de0a-3f49-8cc7-75226c1dc327.roa Signing time: Mon 25 Aug 2025 17:16:51 +0000 ROA not before: Mon 25 Aug 2025 17:16:51 +0000 ROA not after: Sun 23 Nov 2025 18:16:51 +0000 asID: 399881 IP address blocks: 2606:4cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:d0:5a:f3:75:df:2b:a9:c0:ea:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5524759a-2f0a-478f-8eb1-41f1b86353f9 Validity Not Before: Aug 25 17:16:51 2025 GMT Not After : Nov 23 18:16:51 2025 GMT Subject: CN=bc565ec7-3604-41bc-838a-8ce4f60f0826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:13:69:65:71:7c:f6:b4:bb:cb:e9:f9:6b: b9:40:8f:c8:1d:7b:64:9d:6f:bf:c9:43:ec:77:1b: c6:38:2b:a4:f2:31:e0:a3:8a:ce:c5:5f:bb:51:bc: 77:b6:7a:29:60:96:df:2b:e1:0a:3b:ea:60:ca:07: 0a:15:5b:07:5b:2a:d8:ac:24:58:2c:46:c9:09:df: e6:89:10:71:cc:fb:48:1f:29:8b:46:8a:af:43:84: 42:7b:5e:a1:b1:26:d2:fe:04:67:9d:17:3d:f9:cd: 68:75:05:81:52:e3:15:31:04:40:44:2b:e8:95:2e: 36:6b:f5:b8:54:b6:1b:29:ba:6f:32:b4:d5:f9:cf: c9:8a:58:ea:2b:05:d0:c7:00:13:dd:f5:e5:b4:fb: e1:67:3b:ff:2b:cb:b0:0b:82:58:99:ec:10:98:ce: 83:04:2c:1c:8d:be:09:ab:e6:4f:5e:30:45:8f:8d: 33:c3:04:0d:81:75:42:62:b2:17:d5:58:c3:d5:3d: 11:02:29:c6:f7:26:0a:31:b3:02:d1:fd:a8:bb:f2: 67:78:ce:63:37:74:d6:5e:21:76:5a:96:76:5b:f7: 22:8d:43:b4:2c:df:1a:d6:ac:ff:35:b2:17:60:b7: 5a:11:d3:af:54:17:ae:93:0c:67:6a:0a:d4:0a:c8: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A4:72:BA:E4:F8:E1:27:B1:A0:9E:96:0D:3D:9F:32:E5:A0:C1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/882d159c-de0a-3f49-8cc7-75226c1dc327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.crl X509v3 Authority Key Identifier: keyid:D3:89:58:66:39:44:CC:1D:B3:FE:EF:3D:F6:9E:37:BC:76:45:B2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer sbgp-ipAddrBlock: critical IPv6: 2606:4cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1b:79:e2:83:9a:b0:79:3f:a8:c2:9a:43:99:6e:ae:69:42: 6b:27:b5:3d:ae:dd:bd:af:a1:63:a6:10:df:5a:5e:0a:29:5f: 31:5a:fc:2a:d0:62:2f:4d:05:c6:04:a4:89:93:91:d5:c5:20: 03:8c:63:7d:8e:f7:1e:38:59:bd:a9:27:ef:ca:4f:08:1b:6c: e9:6b:15:98:8a:f9:2a:eb:29:c5:04:9f:d9:86:31:2e:10:d1: 49:e8:23:4e:08:ff:d0:16:c6:a2:12:07:70:35:ad:b9:eb:a8: c2:5f:35:04:c9:65:bc:57:f8:8a:65:dc:3a:a4:01:2d:26:83: 53:b1:83:4e:ab:1e:04:ec:d6:c4:30:c7:d4:f1:45:b8:26:a6: ed:af:1b:cf:59:2a:57:37:6d:ae:69:1c:39:c8:e8:11:3f:18: 24:96:64:b7:75:44:ee:bf:3a:07:f0:df:fa:aa:3d:32:17:a2: a6:27:f4:da:ee:64:7c:40:0a:e6:83:32:3c:c8:4c:bc:8c:f1: b4:8e:10:85:bc:ea:78:39:cb:f8:12:f3:86:41:41:36:09:87: e8:0b:e3:fa:2f:b5:80:58:92:2d:df:18:5b:4e:77:56:53:39: 56:53:00:0e:0d:5e:c6:94:cf:f0:75:68:25:d9:c6:0f:c6:91: bf:7c:f3:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr50Frzdd8rqcDqJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyNDc1OWEtMmYwYS00NzhmLThlYjEtNDFmMWI4NjM1 M2Y5MB4XDTI1MDgyNTE3MTY1MVoXDTI1MTEyMzE4MTY1MVowLzEtMCsGA1UEAxMk YmM1NjVlYzctMzYwNC00MWJjLTgzOGEtOGNlNGY2MGYwODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHATaWVxfPa0u8vp+Wu5QI/IHXtknW+/yUPs dxvGOCuk8jHgo4rOxV+7Ubx3tnopYJbfK+EKO+pgygcKFVsHWyrYrCRYLEbJCd/m iRBxzPtIHymLRoqvQ4RCe16hsSbS/gRnnRc9+c1odQWBUuMVMQRARCvolS42a/W4 VLYbKbpvMrTV+c/JiljqKwXQxwAT3fXltPvhZzv/K8uwC4JYmewQmM6DBCwcjb4J q+ZPXjBFj40zwwQNgXVCYrIX1VjD1T0RAinG9yYKMbMC0f2ou/JneM5jN3TWXiF2 WpZ2W/cijUO0LN8a1qz/NbIXYLdaEdOvVBeukwxnagrUCsjmxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKKkcrrk+OEnsaCelg09nzLloMHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81NTI0 NzU5YS0yZjBhLTQ3OGYtOGViMS00MWYxYjg2MzUzZjkvODgyZDE1OWMtZGUwYS0z ZjQ5LThjYzctNzUyMjZjMWRjMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTUyNDc1OWEtMmYwYS00NzhmLThl YjEtNDFmMWI4NjM1M2Y5LzU1MjQ3NTlhLTJmMGEtNDc4Zi04ZWIxLTQxZjFiODYz NTNmOS5jcmwwHwYDVR0jBBgwFoAU04lYZjlEzB2z/u899p43vHZFsmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81NTI0NzU5YS0yZjBhLTQ3OGYtOGViMS00MWYx Yjg2MzUzZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZMwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAcG3nig5qweT+owppDmW6uaUJrJ7U9rt29r6FjphDfWl4KKV8xWvwq 0GIvTQXGBKSJk5HVxSADjGN9jvceOFm9qSfvyk8IG2zpaxWYivkq6ynFBJ/ZhjEu ENFJ6CNOCP/QFsaiEgdwNa2566jCXzUEyWW8V/iKZdw6pAEtJoNTsYNOqx4E7NbE MMfU8UW4JqbtrxvPWSpXN22uaRw5yOgRPxgklmS3dUTuvzoH8N/6qj0yF6KmJ/Ta 7mR8QArmgzI8yEy8jPG0jhCFvOp4Ocv4EvOGQUE2CYfoC+P6L7WAWJIt3xhbTndW UzlWUwAODV7GlM/wdWgl2cYPxpG/fPPl -----END CERTIFICATE-----Generated at Wed Oct 8 19:40:00 2025 by rpki-client