$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa File: df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa (raw, json) Hash identifier: ITxHqhjwmYNR8ai7r77QvLmbNm1sQJVpgMGDCzimfzo= Subject key identifier: 42:20:1D:B0:B8:CA:47:0A:56:77:1D:03:CD:B0:5A:B4:B7:DC:A0:A6 Certificate issuer: /CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Certificate serial: 010D0C9F4328584B7176F199E19875F8CD7A5380 Authority key identifier: C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa Signing time: Tue 07 Oct 2025 13:53:42 +0000 ROA not before: Tue 07 Oct 2025 13:53:42 +0000 ROA not after: Mon 05 Jan 2026 14:53:42 +0000 asID: 402062 IP address blocks: 2604:2420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:76:f1:99:e1:98:75:f8:cd:7a:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Validity Not Before: Oct 7 13:53:42 2025 GMT Not After : Jan 5 14:53:42 2026 GMT Subject: CN=ccc0eeff-1bda-4f4d-b5b7-87ec17883833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:1c:c7:18:5a:c1:d3:71:9f:94:2f:e1:e5: ae:f0:05:f4:66:a6:9f:a8:bc:c0:83:8e:b1:15:ea: 58:93:f5:27:34:7d:de:d4:1a:90:f7:16:48:d4:08: ac:71:c1:cf:c1:d5:be:79:c4:21:95:3c:aa:82:fa: 9c:a5:6c:3f:fb:df:49:89:d6:5f:75:ad:c6:ad:8a: cc:0c:a0:2c:50:7c:02:c3:1a:5c:9f:c9:32:98:34: 3f:8c:92:ef:d8:b0:9a:2b:56:c1:3c:cc:0c:a5:a5: e2:8d:00:47:fd:84:ab:0d:ec:34:45:57:7c:0f:a3: fd:40:d7:ba:29:f4:95:ad:77:6c:25:c6:00:92:7c: 56:0e:8d:f7:41:74:a7:d7:40:50:fb:50:96:9d:e7: c8:08:a6:33:ab:25:1a:f0:be:bf:bd:4c:98:ad:78: 9d:69:31:6f:25:52:ea:64:d5:6f:99:e5:e1:4b:c0: f6:04:28:8e:df:20:48:f1:c2:35:8f:75:70:f9:bd: c0:e9:57:bf:6e:26:28:4d:d4:de:3a:27:b8:5f:d5: 61:d1:73:ba:f9:a3:96:c1:9d:44:21:b5:13:c0:ee: 9d:1f:a6:37:20:76:29:ba:1e:b1:37:9a:2b:5c:e5: bb:dc:1e:99:10:d3:54:5d:39:83:a9:5d:e6:c3:aa: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:20:1D:B0:B8:CA:47:0A:56:77:1D:03:CD:B0:5A:B4:B7:DC:A0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl X509v3 Authority Key Identifier: keyid:C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer sbgp-ipAddrBlock: critical IPv6: 2604:2420::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:7d:c1:85:63:fe:8f:d0:c4:e5:c2:f6:3f:58:e1:c5:9c:95: 94:3c:cb:8d:6d:9f:70:7a:52:b7:0a:8d:34:73:bc:f5:fb:87: 94:e7:6a:92:b7:a8:92:5c:ce:37:41:9c:e4:5f:73:d9:b9:35: c1:24:52:cb:cf:0b:be:54:fe:53:16:5c:85:32:f3:0e:f0:98: 11:d3:b0:d5:20:ed:72:0d:b7:82:ea:b8:d9:87:3a:20:c7:3a: fa:2f:e4:13:fc:1e:43:21:d0:be:30:23:ed:28:75:5c:8d:46: 16:11:7a:e7:d2:c2:b8:1d:13:23:c3:c7:a1:e7:f8:40:2e:da: 44:e1:18:5e:6f:d7:4d:3b:ac:14:46:38:43:3d:60:ec:15:7c: f8:93:b5:90:70:1d:30:bc:48:60:95:61:df:93:62:2d:1a:2d: 7f:0a:b0:d6:7e:da:38:13:46:3e:7d:03:ff:ac:a5:5c:7b:c8: e2:90:6e:c7:87:4e:58:40:49:74:99:82:c8:ae:45:01:f8:c3: 8d:24:73:23:99:57:45:cd:ee:f8:22:17:71:3a:2d:08:58:34: 99:21:c5:0a:33:f9:0a:95:91:a0:fb:cf:fa:88:f2:0b:63:31: f0:dd:75:4b:70:c7:d6:22:0c:d4:e4:49:2c:3c:1c:c5:46:23: 8b:09:25:81 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxdvGZ4Zh1+M16U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyNzg4ZTYtN2FiMC00YTMyLThmZjEtM2M4MjY5MGZm YWE5MB4XDTI1MTAwNzEzNTM0MloXDTI2MDEwNTE0NTM0MlowLzEtMCsGA1UEAxMk Y2NjMGVlZmYtMWJkYS00ZjRkLWI1YjctODdlYzE3ODgzODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6UcxxhawdNxn5Qv4eWu8AX0ZqafqLzAg46x FepYk/UnNH3e1BqQ9xZI1AisccHPwdW+ecQhlTyqgvqcpWw/+99JidZfda3GrYrM DKAsUHwCwxpcn8kymDQ/jJLv2LCaK1bBPMwMpaXijQBH/YSrDew0RVd8D6P9QNe6 KfSVrXdsJcYAknxWDo33QXSn10BQ+1CWnefICKYzqyUa8L6/vUyYrXidaTFvJVLq ZNVvmeXhS8D2BCiO3yBI8cI1j3Vw+b3A6Ve/biYoTdTeOie4X9Vh0XO6+aOWwZ1E IbUTwO6dH6Y3IHYpuh6xN5orXOW73B6ZENNUXTmDqV3mw6pSPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEIgHbC4ykcKVncdA82wWrS33KCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3 ODhlNi03YWIwLTRhMzItOGZmMS0zYzgyNjkwZmZhYTkvZGYwZDNkYTQtZDY2My0z YTFlLTljN2EtYjY5MTVhNzQzYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzMyNzg4ZTYtN2FiMC00YTMyLThm ZjEtM2M4MjY5MGZmYWE5L2MzMjc4OGU2LTdhYjAtNGEzMi04ZmYxLTNjODI2OTBm ZmFhOS5jcmwwHwYDVR0jBBgwFoAUxxHw61JDgmWZrfefzPBexANp2wwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3ODhlNi03YWIwLTRhMzItOGZmMS0zYzgy NjkwZmZhYTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQkIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATfcGFY/6P0MTlwvY/WOHFnJWUPMuNbZ9welK3Co00c7z1+4eU52qS t6iSXM43QZzkX3PZuTXBJFLLzwu+VP5TFlyFMvMO8JgR07DVIO1yDbeC6rjZhzog xzr6L+QT/B5DIdC+MCPtKHVcjUYWEXrn0sK4HRMjw8eh5/hALtpE4Rheb9dNO6wU RjhDPWDsFXz4k7WQcB0wvEhglWHfk2ItGi1/CrDWfto4E0Y+fQP/rKVce8jikG7H h05YQEl0mYLIrkUB+MONJHMjmVdFze74IhdxOi0IWDSZIcUKM/kKlZGg+8/6iPIL YzHw3XVLcMfWIgzU5EksPBzFRiOLCSWB -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:09 2025 by rpki-client