$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a3127224-4fed-317e-abb6-66f5e61dbf1c.roa File: a3127224-4fed-317e-abb6-66f5e61dbf1c.roa (raw, json) Hash identifier: RY+lqb4RLYaglvtbm8WdLFnBjpNfne6j9gLpqOkHO+U= Subject key identifier: 01:46:7A:3F:12:20:E5:B0:4E:BE:4E:AB:57:7A:DF:79:94:1A:EF:C4 Certificate issuer: /CN=233d8eef-51df-487b-9edb-f16ba403f442 Certificate serial: 010D0C9F4328584BB2F7A4B860820E807C7F7090 Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a3127224-4fed-317e-abb6-66f5e61dbf1c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 395766 IP address blocks: 2607:3380:1100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a4:b8:60:82:0e:80:7c:7f:70:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=fd49e35f-2f0b-42a3-ad41-e874bd21cf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:c9:55:9b:1a:e4:37:17:0e:9a:dd:ba:fb: 99:3b:11:92:5d:02:9e:ac:4c:ce:ce:57:cf:de:c4: 71:0b:83:64:af:fc:3d:c1:77:19:81:a3:b8:e0:d4: 02:8b:68:b8:8d:0b:47:76:76:a5:cf:b1:5f:52:9d: 85:41:1f:b5:fd:68:d9:d3:b3:41:d1:39:a0:58:2d: 58:7d:39:e0:ee:d9:7e:b0:b2:e4:8b:2d:c3:ad:23: 1f:06:ed:28:77:19:64:d3:03:c8:ab:4c:3a:2e:6d: 2c:ed:9a:a7:ea:53:43:12:20:0a:58:8a:cc:51:08: 21:66:cd:3d:ed:c5:82:74:36:29:6c:e4:fb:a6:dd: 4f:88:ba:cc:0c:15:2e:d9:f9:50:28:ba:a2:7e:d3: 90:a1:67:b3:32:a2:eb:6e:cf:bd:5f:21:d4:fc:72: 2b:d6:3a:7a:f2:3b:32:b8:9b:e5:89:31:72:50:ad: 97:6b:c5:68:11:c9:25:fd:33:e7:31:e6:73:3d:89: bb:a0:bc:9b:1c:7a:e7:31:06:5c:32:5f:0f:08:0e: eb:88:5e:aa:3f:8d:6f:33:ee:df:c9:b7:2f:2d:71: 5d:ba:47:bc:43:49:db:9a:68:2d:75:a5:ba:ce:39: ec:73:94:13:73:87:d5:02:d8:d2:4f:c7:ba:e3:87: 89:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:46:7A:3F:12:20:E5:B0:4E:BE:4E:AB:57:7A:DF:79:94:1A:EF:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a3127224-4fed-317e-abb6-66f5e61dbf1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl X509v3 Authority Key Identifier: keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer sbgp-ipAddrBlock: critical IPv6: 2607:3380:1100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:02:65:d3:fe:1a:1f:e8:a9:52:c1:31:53:f1:41:2f:f5:ab: c9:da:79:15:2a:2e:a4:16:4d:68:e9:6f:9b:18:78:32:ea:a0: 6f:91:df:35:f0:52:7a:a3:c2:4f:b0:7d:32:00:b2:bf:40:6c: 30:df:29:24:e1:05:67:31:c8:6f:1d:04:b2:76:a8:47:9e:c5: 19:12:90:66:13:ab:7d:9e:3f:5b:b8:6d:d5:95:0d:ef:7a:49: fc:52:a7:43:ca:b1:0c:5e:8b:79:25:5d:20:01:9b:06:17:5a: 41:ed:ad:a7:18:2c:07:ed:bd:ba:e5:d4:3d:3b:d0:c1:c1:19: 0d:1e:e8:c0:74:3f:68:80:45:8b:c4:79:29:57:30:3c:d7:9a: d2:6f:d1:ee:ff:09:f2:24:19:0b:ae:e0:36:16:df:7b:10:0c: 1a:64:df:79:e4:6d:0c:c1:f9:a2:c0:cb:ed:ee:49:e9:89:ba: 6f:28:0f:cd:4d:8d:a1:23:fd:ad:bd:75:4e:8f:db:b0:67:8b: 4e:d6:25:74:11:e9:0f:67:16:dd:4c:eb:b4:f6:9e:f5:82:ff: c2:ae:88:82:0e:43:5e:5c:41:ea:82:27:9f:35:ff:0f:81:6c: e5:b0:90:53:01:39:49:9f:89:cf:4c:5c:46:8d:f7:29:29:73: 36:03:cc:d4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuy96S4YIIOgHx/cJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjMzZDhlZWYtNTFkZi00ODdiLTllZGItZjE2YmE0MDNm NDQyMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmQ0OWUzNWYtMmYwYi00MmEzLWFkNDEtZTg3NGJkMjFjZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdPJVZsa5DcXDprduvuZOxGSXQKerEzOzlfP 3sRxC4Nkr/w9wXcZgaO44NQCi2i4jQtHdnalz7FfUp2FQR+1/WjZ07NB0TmgWC1Y fTng7tl+sLLkiy3DrSMfBu0odxlk0wPIq0w6Lm0s7Zqn6lNDEiAKWIrMUQghZs09 7cWCdDYpbOT7pt1PiLrMDBUu2flQKLqiftOQoWezMqLrbs+9XyHU/HIr1jp68jsy uJvliTFyUK2Xa8VoEckl/TPnMeZzPYm7oLybHHrnMQZcMl8PCA7riF6qP41vM+7f ybcvLXFduke8Q0nbmmgtdaW6zjnsc5QTc4fVAtjST8e644eJFQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAFGej8SIOWwTr5Oq1d633mUGu/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzNk OGVlZi01MWRmLTQ4N2ItOWVkYi1mMTZiYTQwM2Y0NDIvYTMxMjcyMjQtNGZlZC0z MTdlLWFiYjYtNjZmNWU2MWRiZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjMzZDhlZWYtNTFkZi00ODdiLTll ZGItZjE2YmE0MDNmNDQyLzIzM2Q4ZWVmLTUxZGYtNDg3Yi05ZWRiLWYxNmJhNDAz ZjQ0Mi5jcmwwHwYDVR0jBBgwFoAUVoUG6oo0R7YSsaIf3t1ae2CBbzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzNkOGVlZi01MWRmLTQ4N2ItOWVkYi1mMTZi YTQwM2Y0NDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgczgBEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAwJl0/4aH+ipUsExU/FBL/Wrydp5FSoupBZNaOlvmxh4Muqgb5Hf NfBSeqPCT7B9MgCyv0BsMN8pJOEFZzHIbx0EsnaoR57FGRKQZhOrfZ4/W7ht1ZUN 73pJ/FKnQ8qxDF6LeSVdIAGbBhdaQe2tpxgsB+29uuXUPTvQwcEZDR7owHQ/aIBF i8R5KVcwPNea0m/R7v8J8iQZC67gNhbfexAMGmTfeeRtDMH5osDL7e5J6Ym6bygP zU2NoSP9rb11To/bsGeLTtYldBHpD2cW3UzrtPae9YL/wq6Igg5DXlxB6oInnzX/ D4Fs5bCQUwE5SZ+Jz0xcRo33KSlzNgPM1A== -----END CERTIFICATE-----Generated at Sun Nov 2 05:18:22 2025 by rpki-client