$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/4f1a7538-9da8-3559-a70b-3b0dcc0053a9.roa File: 4f1a7538-9da8-3559-a70b-3b0dcc0053a9.roa (raw, json) Hash identifier: aGd5mA8fv8ot0rmkE2/VCO4CDewkp5dNqgEkKVfeWi4= Subject key identifier: ED:5A:8A:A4:55:11:C6:5A:A1:22:8F:1F:57:76:B6:23:32:43:D3:E0 Certificate issuer: /CN=823b3bd2-8946-4618-b2b5-7d04ccd697db Certificate serial: 010D0C9F4328584B0293B79FC796902938CECC80 Authority key identifier: 31:E4:E5:CB:99:3D:5F:CD:D2:18:41:69:51:CC:D0:BA:EB:34:4F:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/4f1a7538-9da8-3559-a70b-3b0dcc0053a9.roa Signing time: Thu 28 Aug 2025 20:36:57 +0000 ROA not before: Thu 28 Aug 2025 20:36:57 +0000 ROA not after: Wed 26 Nov 2025 21:36:57 +0000 asID: 19106 IP address blocks: 2620:0:2be0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/823b3bd2-8946-4618-b2b5-7d04ccd697db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/823b3bd2-8946-4618-b2b5-7d04ccd697db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:93:b7:9f:c7:96:90:29:38:ce:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823b3bd2-8946-4618-b2b5-7d04ccd697db Validity Not Before: Aug 28 20:36:57 2025 GMT Not After : Nov 26 21:36:57 2025 GMT Subject: CN=d0305f1a-deba-4753-8e52-599e681be91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:ce:f6:77:cd:b3:85:2f:21:0d:cc:4c:56: 4f:10:3f:05:96:14:83:09:48:e6:f2:65:20:7f:56: 05:0e:0c:e8:f7:ae:2e:97:7c:90:d2:a5:b7:2f:83: fb:f9:0e:5e:34:cb:b7:7f:16:4b:a2:22:13:dc:47: c5:fd:81:81:02:5b:99:c7:ec:b5:75:8f:41:64:c8: 2f:0d:e0:d7:26:e6:c8:8a:dc:ca:cd:03:fd:55:2d: 54:0d:81:9c:40:f5:12:30:06:9c:c9:50:05:44:e9: 4b:df:f2:8c:28:c1:cf:31:04:b3:90:20:0d:e0:1e: 6b:43:24:2f:07:31:e6:e2:6e:3c:b9:8c:20:f7:46: 59:2a:7f:9b:24:05:33:89:ed:55:55:1a:ad:bf:eb: 21:14:71:0d:4e:30:b1:6f:04:f6:72:4f:0e:49:c8: ff:b2:c0:3a:94:51:0f:12:df:50:56:98:0f:d4:d2: 17:bc:2a:17:da:b9:37:6f:d9:ff:93:fc:eb:9f:e6: 2f:f6:78:f7:b9:72:f8:90:d3:2f:04:78:ef:2d:5a: d7:87:9c:4b:4c:21:8a:bf:8f:e1:67:24:07:f6:1c: 1c:cb:bf:f3:3c:79:25:0f:65:85:1e:b7:ed:05:bb: 6c:09:76:29:47:83:2a:d5:59:1a:5b:8e:23:75:8c: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5A:8A:A4:55:11:C6:5A:A1:22:8F:1F:57:76:B6:23:32:43:D3:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/4f1a7538-9da8-3559-a70b-3b0dcc0053a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/823b3bd2-8946-4618-b2b5-7d04ccd697db.crl X509v3 Authority Key Identifier: keyid:31:E4:E5:CB:99:3D:5F:CD:D2:18:41:69:51:CC:D0:BA:EB:34:4F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:2be0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:cf:1d:91:64:b1:75:93:fa:63:30:36:e3:93:97:6c:8a:fd: 55:14:07:b6:b3:b7:55:a7:28:b4:f8:9b:dd:da:5a:ef:db:c6: 2c:9b:e9:be:56:59:3a:c5:ec:96:cc:92:81:e2:df:45:d6:a8: 5d:6f:c3:0f:88:28:1d:db:a4:81:13:b9:f9:da:1a:9b:50:d4: f5:01:3d:00:a5:0b:97:08:f9:ac:44:16:3a:49:ab:f3:f7:8e: f6:0f:1b:e9:6d:d8:40:52:c0:b4:a3:04:08:6d:4d:43:b0:5a: 5e:da:c5:ec:c6:f7:f6:ca:b8:c9:96:fe:64:d7:99:4b:80:35: 0b:c8:38:df:2a:12:c9:8b:a5:c0:86:4c:67:42:a0:d3:05:d4: 0c:cd:a9:af:ab:31:48:9f:56:3c:36:95:51:c6:35:b4:d6:67: 23:c5:81:f3:e7:1b:e6:72:8a:5f:f9:a9:cd:90:c6:d4:cd:2b: 90:15:f3:25:28:e8:f9:e9:24:2c:85:c1:e0:6f:5d:5b:5e:32: c2:0c:a2:e5:f5:8b:1d:68:5e:da:1d:af:13:61:5f:88:39:77: 01:ec:90:4d:8a:65:39:0c:1b:98:9b:07:66:e0:cc:29:49:bb: b0:1b:da:cd:70:00:c9:dc:db:a1:5f:b9:af:c5:70:92:aa:7c: 3b:69:6a:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsCk7efx5aQKTjOzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzYjNiZDItODk0Ni00NjE4LWIyYjUtN2QwNGNjZDY5 N2RiMB4XDTI1MDgyODIwMzY1N1oXDTI1MTEyNjIxMzY1N1owLzEtMCsGA1UEAxMk ZDAzMDVmMWEtZGViYS00NzUzLThlNTItNTk5ZTY4MWJlOTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yjO9nfNs4UvIQ3MTFZPED8FlhSDCUjm8mUg f1YFDgzo964ul3yQ0qW3L4P7+Q5eNMu3fxZLoiIT3EfF/YGBAluZx+y1dY9BZMgv DeDXJubIitzKzQP9VS1UDYGcQPUSMAacyVAFROlL3/KMKMHPMQSzkCAN4B5rQyQv BzHm4m48uYwg90ZZKn+bJAUzie1VVRqtv+shFHENTjCxbwT2ck8OScj/ssA6lFEP Et9QVpgP1NIXvCoX2rk3b9n/k/zrn+Yv9nj3uXL4kNMvBHjvLVrXh5xLTCGKv4/h ZyQH9hwcy7/zPHklD2WFHrftBbtsCXYpR4Mq1VkaW44jdYwtfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO1aiqRVEcZaoSKPH1d2tiMyQ9PgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84MjNi M2JkMi04OTQ2LTQ2MTgtYjJiNS03ZDA0Y2NkNjk3ZGIvNGYxYTc1MzgtOWRhOC0z NTU5LWE3MGItM2IwZGNjMDA1M2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODIzYjNiZDItODk0Ni00NjE4LWIy YjUtN2QwNGNjZDY5N2RiLzgyM2IzYmQyLTg5NDYtNDYxOC1iMmI1LTdkMDRjY2Q2 OTdkYi5jcmwwHwYDVR0jBBgwFoAUMeTly5k9X83SGEFpUczQuus0T2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84MjNiM2JkMi04OTQ2LTQ2MTgtYjJiNS03ZDA0 Y2NkNjk3ZGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAACvg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDPHZFksXWT+mMwNuOTl2yK/VUUB7azt1WnKLT4m93aWu/bxiyb 6b5WWTrF7JbMkoHi30XWqF1vww+IKB3bpIETufnaGptQ1PUBPQClC5cI+axEFjpJ q/P3jvYPG+lt2EBSwLSjBAhtTUOwWl7axezG9/bKuMmW/mTXmUuANQvION8qEsmL pcCGTGdCoNMF1AzNqa+rMUifVjw2lVHGNbTWZyPFgfPnG+Zyil/5qc2QxtTNK5AV 8yUo6PnpJCyFweBvXVteMsIMouX1ix1oXtodrxNhX4g5dwHskE2KZTkMG5ibB2bg zClJu7Ab2s1wAMnc26Ffua/FcJKqfDtpahM= -----END CERTIFICATE-----Generated at Wed Oct 8 19:32:30 2025 by rpki-client