$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa File: 4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (raw, json) Hash identifier: ksV+UuQ/0SB3OK72TPfnUF6cxhSSHSAOg0e/lOofABU= Subject key identifier: 7B:94:13:DF:E5:A4:54:92:BA:77:6A:C4:C3:94:2D:58:36:FF:91:86 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F4328584B2496D73B100A7BA272B24690 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2600:400:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d7:3b:10:0a:7b:a2:72:b2:46:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=6de47f9c-1e99-42ed-87d6-0245a7756b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:35:80:6d:0c:cc:70:c9:11:58:7f:93:8a: cd:83:c3:2d:f3:bd:6d:72:88:56:5a:14:d4:a8:e5: 55:73:d8:6e:6d:b1:cb:a7:0b:34:8e:40:21:7e:79: a7:20:89:7f:5c:52:d9:07:9b:ed:95:7d:be:fb:27: d7:39:12:01:66:bd:f6:67:aa:d4:2f:3c:00:c4:3f: 7c:08:10:5a:d6:e6:b3:18:23:f9:87:2a:ea:5a:39: 4b:c4:bd:9e:fb:ef:6e:af:91:6c:ec:20:1e:4f:3e: 13:58:3c:5d:6a:8c:3a:5a:9a:33:23:0c:4a:eb:16: 42:74:9c:37:4a:53:f0:26:3b:e2:11:be:63:9f:a3: ee:9d:24:db:99:34:83:8e:ab:36:13:52:6f:3c:8a: 61:03:34:c1:fc:4a:53:84:92:aa:c8:77:b5:00:a2: 8f:6a:a1:43:d4:28:bc:7c:6b:37:c4:9e:78:e5:4c: 0c:88:1a:7c:1e:26:6e:04:65:7d:28:ef:b1:a5:8f: a9:7c:06:e2:1b:9e:06:a0:b2:8e:3f:96:84:76:22: ea:8c:0d:be:c8:5c:20:a2:94:da:43:0e:f0:b2:b4: 89:c5:10:99:cc:97:a9:33:8b:93:2f:2e:b3:0d:e4: 4a:9e:a7:7d:71:eb:32:97:91:c2:f2:5d:59:d6:50: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:94:13:DF:E5:A4:54:92:BA:77:6A:C4:C3:94:2D:58:36:FF:91:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv6: 2600:400:ff00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:cb:4d:22:36:34:07:b0:14:85:33:9d:6a:76:2b:20:3d:b0: 9c:42:b7:08:fb:32:80:38:11:5c:3b:8d:6c:31:88:a1:f3:10: e5:2b:a8:1d:6e:7f:03:d4:19:e4:79:c3:2c:89:c9:90:d2:14: 53:3a:d6:eb:ec:f1:43:87:7e:44:35:ea:d3:3f:96:e3:4c:0a: 9a:03:f6:9e:96:95:aa:f8:04:54:6d:6c:11:e9:b7:9f:e1:0b: 53:37:cd:86:8e:2f:26:b7:6c:00:df:d2:f6:59:fe:f1:87:dd: 2b:c2:c0:42:c0:f9:9c:7a:45:af:cd:3c:b5:cc:51:33:e9:27: 70:f5:b5:ef:10:77:38:8d:a0:c8:75:79:7b:32:ee:0c:83:a1: 1f:70:09:ee:27:9d:02:f9:0c:71:15:29:55:87:50:87:fd:a5: 2d:7a:b2:12:01:70:1a:4d:fa:cd:1b:97:9f:45:a8:2f:23:2e: a1:ca:c5:f2:e6:a7:10:6a:01:ff:c6:88:36:4a:34:95:02:39: 3f:13:45:3c:82:9b:29:d6:6e:8b:64:a1:9f:bb:0d:e1:a6:d3: 2c:85:ba:39:76:7c:74:b1:65:6b:a5:eb:14:59:96:88:dd:48: c4:49:0b:2c:63:94:e2:dc:8e:35:68:83:9b:f3:23:60:37:e3: b1:90:d3:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEskltc7EAp7onKyRpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NmRlNDdmOWMtMWU5OS00MmVkLTg3ZDYtMDI0NWE3NzU2YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHA1gG0MzHDJEVh/k4rNg8Mt871tcohWWhTU qOVVc9hubbHLpws0jkAhfnmnIIl/XFLZB5vtlX2++yfXORIBZr32Z6rULzwAxD98 CBBa1uazGCP5hyrqWjlLxL2e++9ur5Fs7CAeTz4TWDxdaow6WpozIwxK6xZCdJw3 SlPwJjviEb5jn6PunSTbmTSDjqs2E1JvPIphAzTB/EpThJKqyHe1AKKPaqFD1Ci8 fGs3xJ545UwMiBp8HiZuBGV9KO+xpY+pfAbiG54GoLKOP5aEdiLqjA2+yFwgopTa Qw7wsrSJxRCZzJepM4uTLy6zDeRKnqd9cesyl5HC8l1Z1lAAAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHuUE9/lpFSSundqxMOULVg2/5GGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvNGYwZmU2ZTctYjhhYi0z ZGFjLTkxNTUtMDAxYWM2NGRjMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAEAP8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACzLTSI2NAewFIUznWp2KyA9sJxCtwj7MoA4EVw7jWwxiKHzEOUr qB1ufwPUGeR5wyyJyZDSFFM61uvs8UOHfkQ16tM/luNMCpoD9p6Wlar4BFRtbBHp t5/hC1M3zYaOLya3bADf0vZZ/vGH3SvCwELA+Zx6Ra/NPLXMUTPpJ3D1te8QdziN oMh1eXsy7gyDoR9wCe4nnQL5DHEVKVWHUIf9pS16shIBcBpN+s0bl59FqC8jLqHK xfLmpxBqAf/GiDZKNJUCOT8TRTyCmynWbotkoZ+7DeGm0yyFujl2fHSxZWul6xRZ lojdSMRJCyxjlOLcjjVog5vzI2A347GQ01A= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:21 2025 by rpki-client