$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/84a1f65b-11a0-36ff-9041-d379bbbafa46.roa File: 84a1f65b-11a0-36ff-9041-d379bbbafa46.roa (raw, json) Hash identifier: Bzj8IsMMkhyJ/+wZ+uQAtKCM1cC12BmK/D7izaDaDAc= Subject key identifier: C7:90:E7:38:AC:69:8C:4F:81:4F:DE:62:18:11:CF:85:F3:D8:F5:29 Certificate issuer: /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Certificate serial: 010D0C9F4328584B28C6EB88D3E8C0F941A38B80 Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/84a1f65b-11a0-36ff-9041-d379bbbafa46.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 0 IP address blocks: 2001:504:96::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:eb:88:d3:e8:c0:f9:41:a3:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=c5b1f76b-dacb-4de1-a579-bd3ff619df2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:58:87:02:3e:b1:97:1c:71:d7:c0:ed:fb: 45:5f:15:33:5d:61:27:fa:6b:37:63:68:47:22:2d: 13:be:c0:d9:e2:37:05:06:a1:e3:83:8d:de:75:88: 10:78:ac:95:58:61:22:ac:b2:cf:15:4d:d9:7e:00: 94:0c:bd:b7:a8:d9:e2:b9:7f:47:09:24:3a:3e:f5: 51:16:ef:a9:20:27:40:46:0a:ef:dc:2f:b7:fb:09: 83:9d:b4:31:c5:bf:ac:10:17:ae:a6:22:df:85:25: 71:03:ff:f9:d2:05:bd:0d:51:54:c9:f5:fd:d6:c9: e0:22:07:d3:1d:a1:b7:7e:5b:7b:41:a3:b6:e3:a4: 5b:a2:29:08:24:94:e1:98:f4:f4:01:c6:41:f3:9a: b3:0f:f2:f6:6e:ce:72:09:62:6d:8f:aa:68:11:9f: 74:b0:a0:5e:02:23:17:85:33:39:59:3e:86:0c:ad: e0:26:c4:9b:4d:6a:7c:d1:63:98:73:ad:00:95:48: 68:5a:ce:5c:42:d0:d2:df:ec:2f:bc:20:c2:e6:8d: 2f:ce:d4:72:c9:b7:37:a3:7d:a8:31:d4:e8:76:62: 78:05:8e:7b:fa:a7:85:bc:5f:c1:88:7a:1c:61:ec: 40:f8:a9:ce:d4:94:3c:6b:7a:d2:97:e3:3a:e4:ec: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:90:E7:38:AC:69:8C:4F:81:4F:DE:62:18:11:CF:85:F3:D8:F5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/84a1f65b-11a0-36ff-9041-d379bbbafa46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl X509v3 Authority Key Identifier: keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:96::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:86:da:b9:88:f6:2e:3a:a0:00:5e:6e:d9:75:9f:17:5c:c3: 29:93:bc:f9:cb:71:07:29:4e:3c:81:4b:ea:19:43:70:7a:f5: e6:8d:3a:06:5e:68:28:92:88:d3:4c:c8:16:bd:c9:af:ea:06: 93:e3:b6:b2:e0:7e:56:fa:f5:81:fa:bc:1f:64:73:aa:21:78: e8:84:12:24:0d:59:6a:2e:e3:8b:24:1e:c2:e9:f3:17:18:98: 47:dc:11:40:fb:a4:0e:a9:48:3e:7f:91:03:32:16:36:a1:10: d2:66:26:a2:af:bf:45:3a:47:c9:80:be:e7:2e:28:6f:37:2c: 0c:11:01:93:f4:8e:3b:49:12:49:b9:c6:c1:c9:d7:4b:5c:06: df:80:56:85:10:ad:24:79:32:b9:11:de:70:69:2a:7e:77:c7: 58:89:1c:fe:e5:9d:8b:37:f1:f8:05:98:6b:60:e5:07:a4:44: 1e:c3:ce:01:f5:29:2a:0b:56:e6:7f:37:c5:64:4d:ad:22:78: ed:62:7a:92:4f:06:24:af:e6:1b:97:a4:b3:b1:0d:a7:7e:0f: 27:58:f3:c1:52:74:3c:96:51:70:05:75:0c:36:a1:92:ca:49: bf:8c:4f:7c:28:08:12:ca:9f:ad:77:7e:da:c4:bc:09:bc:db: e5:b7:02:70 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEsoxuuI0+jA+UGji4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy YWI4MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk YzViMWY3NmItZGFjYi00ZGUxLWE1NzktYmQzZmY2MTlkZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjpYhwI+sZcccdfA7ftFXxUzXWEn+ms3Y2hH Ii0TvsDZ4jcFBqHjg43edYgQeKyVWGEirLLPFU3ZfgCUDL23qNniuX9HCSQ6PvVR Fu+pICdARgrv3C+3+wmDnbQxxb+sEBeupiLfhSVxA//50gW9DVFUyfX91sngIgfT HaG3flt7QaO246RboikIJJThmPT0AcZB85qzD/L2bs5yCWJtj6poEZ90sKBeAiMX hTM5WT6GDK3gJsSbTWp80WOYc60AlUhoWs5cQtDS3+wvvCDC5o0vztRyybc3o32o MdTodmJ4BY57+qeFvF/BiHocYexA+KnO1JQ8a3rSl+M65OxmZwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFMeQ5zisaYxPgU/eYhgRz4Xz2PUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvODRhMWY2NWItMTFhMC0z NmZmLTkwNDEtZDM3OWJiYmFmYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3 NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4 MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi MDA0ODJhYjguY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACW AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAm4bauYj2LjqgAF5u2XWfF1zDKZO8+ctxBylOPIFL6hlDcHr1 5o06Bl5oKJKI00zIFr3Jr+oGk+O2suB+Vvr1gfq8H2RzqiF46IQSJA1Zai7jiyQe wunzFxiYR9wRQPukDqlIPn+RAzIWNqEQ0mYmoq+/RTpHyYC+5y4obzcsDBEBk/SO O0kSSbnGwcnXS1wG34BWhRCtJHkyuRHecGkqfnfHWIkc/uWdizfx+AWYa2DlB6RE HsPOAfUpKgtW5n83xWRNrSJ47WJ6kk8GJK/mG5eks7ENp34PJ1jzwVJ0PJZRcAV1 DDahkspJv4xPfCgIEsqfrXd+2sS8Cbzb5bcCcA== -----END CERTIFICATE-----Generated at Sun Oct 19 05:48:05 2025 by rpki-client