$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e93d23c2-8b0a-3446-b6e2-f658ef316d53.roa File: e93d23c2-8b0a-3446-b6e2-f658ef316d53.roa (raw, json) Hash identifier: KjmCkVKK9+qN8e8260KSJVkVqm6xTEIg7pk3IxfpGqs= Subject key identifier: F2:66:2C:73:21:3B:4A:5F:A9:67:CF:3A:4B:7B:AF:05:60:6C:1E:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAA073B482AE513D4C6B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e93d23c2-8b0a-3446-b6e2-f658ef316d53.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 2603:300c:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:a0:73:b4:82:ae:51:3d:4c:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7b5cf375-14c0-489a-9729-1f9a30a6fe82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:52:0c:7f:b0:a6:80:99:8f:9a:58:92:12: 54:b9:22:a6:c3:14:2e:ad:7a:79:cc:8b:19:39:a7: 5b:ea:9d:a9:f6:30:43:55:a7:28:46:cd:0d:86:34: 17:28:a0:33:62:35:47:32:92:8c:62:e0:f4:19:94: 77:88:3d:d9:ba:dc:17:e1:bd:46:84:45:74:5b:c8: a7:f6:7d:43:1d:cc:ea:10:5a:7d:7c:5a:f9:32:3a: e2:0e:5c:7e:e5:01:9a:51:dc:f3:0f:6c:a8:26:82: 76:9a:68:c5:9e:39:99:b6:c2:bc:1e:73:fa:1b:93: 97:b1:82:a6:53:d6:e8:41:0d:36:65:24:a3:55:68: ff:e5:ca:16:f1:68:9c:43:ad:90:c7:f0:5e:73:60: 83:04:66:7e:e1:2e:12:17:94:17:ae:11:d5:86:de: 58:3c:f2:e5:ef:fc:81:aa:88:09:2a:b7:2b:cf:ef: 5d:1f:26:a0:5b:18:64:66:da:c2:03:17:6e:99:d2: 2c:92:ec:c9:f0:54:b0:cd:42:2a:f6:f9:6f:9f:63: 95:14:93:54:c5:64:05:3e:2d:72:0a:a4:b1:9c:ca: 8e:e7:d5:94:59:d8:56:30:58:ea:73:2b:8a:66:7a: b6:ce:ea:3b:62:3f:ec:5f:b3:06:c3:5d:f7:ee:e0: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:66:2C:73:21:3B:4A:5F:A9:67:CF:3A:4B:7B:AF:05:60:6C:1E:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e93d23c2-8b0a-3446-b6e2-f658ef316d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:300c:600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:eb:aa:3b:42:c7:37:2c:12:d2:bb:11:b1:45:ee:3f:c7:39: 02:fa:69:7f:80:2f:96:40:8a:b6:e1:b6:6a:29:41:bb:75:37: 8e:43:74:8a:b1:4b:9d:62:21:23:01:8c:cd:7e:34:96:9c:c0: 8b:c6:b3:63:75:9e:6c:9a:80:c0:9d:38:f5:fb:06:e5:43:f9: f7:01:6e:35:97:27:51:5c:77:73:03:2c:e4:d2:02:18:19:63: 68:cd:61:af:76:d1:c9:10:a0:2c:1b:55:29:21:b0:38:95:45: f2:c6:1c:60:5f:24:5f:e5:bd:60:24:ad:cd:87:dc:f1:06:0f: 26:eb:ac:6f:2d:b7:53:38:cc:81:4c:a4:3c:43:44:65:75:c9: 45:5a:62:73:d6:f0:7a:81:1d:e8:df:b6:2b:48:b8:ab:ae:4c: 4e:a4:1b:a2:12:0d:19:4a:bf:19:de:e5:0d:0f:3b:35:52:89: 62:e3:9d:79:a5:9e:8f:75:22:6b:42:60:1e:75:17:b0:46:2a: 58:c0:6a:b5:0d:f7:58:f4:4b:8e:39:88:fa:39:6d:0f:a2:98: 9b:b5:77:26:b5:e3:b0:c1:38:87:40:3c:01:22:a1:f5:1b:26: 28:4e:21:29:60:9d:10:95:d3:d3:41:b1:f0:3a:8c:d3:67:73: 1a:e7:c1:d8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqqBztIKuUT1MawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2I1Y2YzNzUtMTRjMC00ODlhLTk3MjktMWY5YTMwYTZmZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMtSDH+wpoCZj5pYkhJUuSKmwxQurXp5zIsZ Oadb6p2p9jBDVacoRs0NhjQXKKAzYjVHMpKMYuD0GZR3iD3ZutwX4b1GhEV0W8in 9n1DHczqEFp9fFr5MjriDlx+5QGaUdzzD2yoJoJ2mmjFnjmZtsK8HnP6G5OXsYKm U9boQQ02ZSSjVWj/5coW8WicQ62Qx/Bec2CDBGZ+4S4SF5QXrhHVht5YPPLl7/yB qogJKrcrz+9dHyagWxhkZtrCAxdumdIskuzJ8FSwzUIq9vlvn2OVFJNUxWQFPi1y CqSxnMqO59WUWdhWMFjqcyuKZnq2zuo7Yj/sX7MGw1337uDF3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPJmLHMhO0pfqWfPOkt7rwVgbB5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTkzZDIzYzItOGIwYS0z NDQ2LWI2ZTItZjY1OGVmMzE2ZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDAYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAwuuqO0LHNywS0rsRsUXuP8c5Avppf4AvlkCKtuG2ailBu3U3jkN0 irFLnWIhIwGMzX40lpzAi8azY3WebJqAwJ049fsG5UP59wFuNZcnUVx3cwMs5NIC GBljaM1hr3bRyRCgLBtVKSGwOJVF8sYcYF8kX+W9YCStzYfc8QYPJuusby23UzjM gUykPENEZXXJRVpic9bweoEd6N+2K0i4q65MTqQbohINGUq/Gd7lDQ87NVKJYuOd eaWej3Uia0JgHnUXsEYqWMBqtQ33WPRLjjmI+jltD6KYm7V3JrXjsME4h0A8ASKh 9RsmKE4hKWCdEJXT00Gx8DqM02dzGufB2A== -----END CERTIFICATE-----Generated at Tue Oct 21 19:33:28 2025 by rpki-client