$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52c4a2b7-828c-3d13-9bd7-53b14f32a948.roa File: 52c4a2b7-828c-3d13-9bd7-53b14f32a948.roa (raw, json) Hash identifier: Ak5kabTJlcZrfJ9y1R+TWHOISD+S9teKKJtICrQkm7o= Subject key identifier: EE:16:AF:78:6D:2D:AD:A4:28:C0:1F:E9:FE:34:11:90:D3:D1:6A:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7ADCFAAB6AA8CD0FE7680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52c4a2b7-828c-3d13-9bd7-53b14f32a948.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 2603:3004:900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:ad:cf:aa:b6:aa:8c:d0:fe:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=21a44556-527a-452a-9fcb-e491f1ca3c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:be:5f:f0:24:f4:14:15:fd:99:f8:e6:e7: 32:99:6b:44:49:7d:06:96:25:1a:81:33:c2:6c:33: 1d:a5:12:3f:9a:25:a1:5d:79:20:20:22:8a:5c:53: e9:ac:6a:d3:e9:13:b2:fe:3b:5f:70:c4:c1:2c:31: 33:f5:65:b5:be:f4:8b:91:10:03:3d:ba:94:20:26: d4:0d:86:9f:b0:61:a5:cf:d8:a2:cb:6f:0c:a7:5e: c3:4e:c9:28:75:53:82:3f:4a:1d:d5:97:ec:56:22: 16:4d:27:69:45:be:5f:2d:31:0f:c4:d9:4a:6d:f9: 83:fe:99:51:9d:cb:9a:80:bc:22:79:e5:7e:40:59: 80:33:59:49:8f:08:05:64:0e:53:27:7c:01:da:7e: 11:93:44:e3:24:9a:cf:40:cc:dd:3d:42:7c:94:54: 45:ce:76:cc:e2:91:d1:95:29:5c:39:ce:2b:07:91: 7e:58:51:90:56:b5:32:87:68:df:5b:78:27:54:4e: f0:a0:bc:55:c2:05:34:b8:1d:ec:e4:46:b4:c3:03: e5:81:a7:a9:cf:61:60:a7:e5:09:65:a8:71:46:69: cd:1f:13:a2:12:fb:4d:7f:65:1b:ac:f4:54:14:33: a7:01:81:55:68:b4:2b:25:b2:b4:50:8c:5b:a5:91: 9e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:16:AF:78:6D:2D:AD:A4:28:C0:1F:E9:FE:34:11:90:D3:D1:6A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52c4a2b7-828c-3d13-9bd7-53b14f32a948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3004:900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:fe:3c:86:83:d7:00:2d:4f:b9:df:0c:45:ac:cd:f7:2b:9a: 7e:42:34:7f:63:68:9c:6c:2f:29:c3:9c:46:67:6a:9e:04:69: 97:78:c5:41:ca:d9:9c:63:5c:09:d6:8f:00:f5:b8:2e:f1:30: ce:44:6a:c6:6a:70:5d:37:23:7d:17:05:cc:43:84:f1:3d:a4: fd:8b:f9:13:c6:11:e0:c6:69:33:1f:28:af:9f:49:b7:47:dd: 11:fd:a8:03:6f:45:dd:26:8f:82:b0:cc:f3:75:68:5f:ce:2f: f3:39:d8:29:c3:95:f2:6c:79:fa:f5:28:56:31:78:0c:e6:0e: 7e:95:0b:40:b4:a2:da:3d:12:08:f8:fa:17:c1:c4:94:9e:1a: 71:fb:16:f3:ee:d8:57:de:c5:10:bb:c9:dc:ef:24:b0:43:88: d8:df:be:b0:a8:f1:6a:11:5f:1f:bd:d2:62:e1:ce:46:58:de: ff:08:f3:06:20:c9:61:53:95:e4:28:a9:bd:43:df:38:66:58: 7e:c6:30:7b:14:99:7d:4d:5e:d7:ec:19:a0:75:39:1a:0e:1a: 86:5f:19:aa:9f:78:0d:68:e1:8b:a1:d0:88:58:d9:eb:5a:c9: 30:1f:70:0a:9d:bd:80:9a:f7:1b:43:93:92:29:98:c8:21:15: 0b:15:60:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVp63PqraqjND+doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjFhNDQ1NTYtNTI3YS00NTJhLTlmY2ItZTQ5MWYxY2EzYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqq+X/Ak9BQV/Zn45ucymWtESX0GliUagTPC bDMdpRI/miWhXXkgICKKXFPprGrT6ROy/jtfcMTBLDEz9WW1vvSLkRADPbqUICbU DYafsGGlz9iiy28Mp17DTskodVOCP0od1ZfsViIWTSdpRb5fLTEPxNlKbfmD/plR ncuagLwieeV+QFmAM1lJjwgFZA5TJ3wB2n4Rk0TjJJrPQMzdPUJ8lFRFznbM4pHR lSlcOc4rB5F+WFGQVrUyh2jfW3gnVE7woLxVwgU0uB3s5Ea0wwPlgaepz2Fgp+UJ ZahxRmnNHxOiEvtNf2UbrPRUFDOnAYFVaLQrJbK0UIxbpZGeYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFO4Wr3htLa2kKMAf6f40EZDT0WrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTJjNGEyYjctODI4Yy0z ZDEzLTliZDctNTNiMTRmMzJhOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBAkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMf48hoPXAC1Pud8MRazN9yuafkI0f2NonGwvKcOcRmdqngRpl3jF QcrZnGNcCdaPAPW4LvEwzkRqxmpwXTcjfRcFzEOE8T2k/Yv5E8YR4MZpMx8or59J t0fdEf2oA29F3SaPgrDM83VoX84v8znYKcOV8mx5+vUoVjF4DOYOfpULQLSi2j0S CPj6F8HElJ4acfsW8+7YV97FELvJ3O8ksEOI2N++sKjxahFfH73SYuHORlje/wjz BiDJYVOV5CipvUPfOGZYfsYwexSZfU1e1+wZoHU5Gg4ahl8Zqp94DWjhi6HQiFjZ 61rJMB9wCp29gJr3G0OTkimYyCEVCxVgoA== -----END CERTIFICATE-----Generated at Tue Oct 21 21:50:32 2025 by rpki-client