$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/697f6835-591d-334a-a7c3-cca024d5d5d4.roa File: 697f6835-591d-334a-a7c3-cca024d5d5d4.roa (raw, json) Hash identifier: +t62/vDhbIIRT6T1MlDg0m3CK7QT0e4NRn7tuqE5EZY= Subject key identifier: 48:7E:FA:DC:49:59:D0:D9:07:EA:88:E2:FC:5C:5A:C7:F6:AA:BD:0C Certificate issuer: /CN=253f385b-feb4-4b22-9447-502d6e3a69ac Certificate serial: 010D0C9F4328584B0CCE0723EA38B14A4DE0DB80 Authority key identifier: 91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/697f6835-591d-334a-a7c3-cca024d5d5d4.roa Signing time: Mon 01 Sep 2025 12:32:31 +0000 ROA not before: Mon 01 Sep 2025 12:32:31 +0000 ROA not after: Sun 30 Nov 2025 13:32:31 +0000 asID: 401725 IP address blocks: 2604:ae0:140::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:ce:07:23:ea:38:b1:4a:4d:e0:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253f385b-feb4-4b22-9447-502d6e3a69ac Validity Not Before: Sep 1 12:32:31 2025 GMT Not After : Nov 30 13:32:31 2025 GMT Subject: CN=1d99aadc-3b51-413a-b876-3a0a681e6d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:df:c3:c3:94:7c:e2:a6:35:23:ab:3f:56: d3:1a:a0:7c:46:ea:3f:88:aa:e9:3e:99:9d:f4:c7: 21:9d:e0:57:ca:07:89:21:ff:51:10:72:bc:89:25: 6c:50:13:18:09:75:5a:c3:59:db:66:d5:03:33:62: 5e:ba:b8:1a:bb:a0:b3:40:a6:75:18:5d:39:ce:21: 20:b2:7d:5a:30:48:69:f5:3b:7d:34:78:5b:61:48: 1f:0c:db:65:f7:77:8a:57:2a:32:64:71:7a:ab:3c: 48:35:4b:d1:3d:fd:d2:e0:df:d2:54:17:af:38:b7: 02:c0:f1:bd:27:f9:c1:2b:70:3d:7e:c8:57:da:ee: 93:e0:a9:4b:03:b2:3a:bc:e7:99:73:8b:ea:52:b1: 55:3c:f7:66:bc:f5:76:3a:c5:70:64:70:c5:a0:00: c3:76:f9:b5:0d:9c:e2:2c:c4:e3:14:c6:d1:ce:65: cc:ab:33:b1:84:4d:a2:1e:27:37:39:33:f0:b6:3e: 65:1f:66:52:1b:23:02:8b:a4:6b:e8:3e:d6:70:1a: 46:f7:8f:44:af:48:78:41:3e:4d:45:b7:ac:36:36: e7:b6:c0:d1:f6:13:2c:1c:43:5a:3c:d0:3b:ef:3e: a7:83:c2:0d:05:b4:3c:e3:06:04:ed:b2:22:48:cb: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7E:FA:DC:49:59:D0:D9:07:EA:88:E2:FC:5C:5A:C7:F6:AA:BD:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/697f6835-591d-334a-a7c3-cca024d5d5d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl X509v3 Authority Key Identifier: keyid:91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer sbgp-ipAddrBlock: critical IPv6: 2604:ae0:140::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:38:ff:e7:88:11:d7:ef:44:ca:20:5a:ae:91:db:dd:fa:17: 95:d3:b0:5b:59:1d:8f:f4:13:ba:4e:ae:02:1f:5c:94:38:c2: b7:89:77:89:b5:f7:c7:76:d6:82:57:76:45:d8:59:fd:bd:4f: ee:f3:9a:af:3d:65:2f:58:2a:d6:e4:f0:0f:63:8b:52:b3:fa: 2c:f2:6a:8e:7c:98:4e:7f:92:d8:11:6b:8d:b8:c5:77:1f:a4: 18:a3:d9:07:ef:ca:59:cb:ff:a1:a7:ac:cc:88:d2:bc:3a:92: 38:79:a5:76:70:c3:79:a5:d5:59:0f:bc:81:23:a9:d0:c7:86: 10:af:70:3e:bb:59:41:f8:ba:5e:9b:dc:ce:2f:36:58:2e:f7: bd:77:1e:d7:81:9f:9c:3a:4e:c7:04:2a:d0:a7:9b:c6:1c:47: 44:18:8e:f0:99:25:7b:84:de:1a:2b:3a:8d:b4:9f:10:03:e7: 54:27:cf:17:6a:6f:68:7a:c5:9e:95:a4:f1:ed:77:0d:25:cb: d9:9f:68:26:69:ef:83:8d:59:b0:9b:40:2d:a2:55:35:94:45: ed:1b:71:74:f1:e7:4f:75:06:68:06:d1:b9:7a:e6:48:8b:0f: 3b:9c:93:7f:2a:0b:7b:1e:96:97:40:80:ed:db:9f:ef:9c:a7: ec:35:c6:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsMzgcj6jixSk3g24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzZjM4NWItZmViNC00YjIyLTk0NDctNTAyZDZlM2E2 OWFjMB4XDTI1MDkwMTEyMzIzMVoXDTI1MTEzMDEzMzIzMVowLzEtMCsGA1UEAxMk MWQ5OWFhZGMtM2I1MS00MTNhLWI4NzYtM2EwYTY4MWU2ZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlzfw8OUfOKmNSOrP1bTGqB8Ruo/iKrpPpmd 9MchneBXygeJIf9REHK8iSVsUBMYCXVaw1nbZtUDM2Jeurgau6CzQKZ1GF05ziEg sn1aMEhp9Tt9NHhbYUgfDNtl93eKVyoyZHF6qzxINUvRPf3S4N/SVBevOLcCwPG9 J/nBK3A9fshX2u6T4KlLA7I6vOeZc4vqUrFVPPdmvPV2OsVwZHDFoADDdvm1DZzi LMTjFMbRzmXMqzOxhE2iHic3OTPwtj5lH2ZSGyMCi6Rr6D7WcBpG949Er0h4QT5N RbesNjbntsDR9hMsHENaPNA77z6ng8INBbQ84wYE7bIiSMvsNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEh++txJWdDZB+qI4vxcWsf2qr0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNm Mzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJkNmUzYTY5YWMvNjk3ZjY4MzUtNTkxZC0z MzRhLWE3YzMtY2NhMDI0ZDVkNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjUzZjM4NWItZmViNC00YjIyLTk0 NDctNTAyZDZlM2E2OWFjLzI1M2YzODViLWZlYjQtNGIyMi05NDQ3LTUwMmQ2ZTNh NjlhYy5jcmwwHwYDVR0jBBgwFoAUkUpN/2Rq2ifzR3KSCn3ur07uzf8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNmMzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJk NmUzYTY5YWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgQK4AFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI84/+eIEdfvRMogWq6R2936F5XTsFtZHY/0E7pOrgIfXJQ4wreJ d4m198d21oJXdkXYWf29T+7zmq89ZS9YKtbk8A9ji1Kz+izyao58mE5/ktgRa424 xXcfpBij2QfvylnL/6GnrMyI0rw6kjh5pXZww3ml1VkPvIEjqdDHhhCvcD67WUH4 ul6b3M4vNlgu9713HteBn5w6TscEKtCnm8YcR0QYjvCZJXuE3horOo20nxAD51Qn zxdqb2h6xZ6VpPHtdw0ly9mfaCZp74ONWbCbQC2iVTWURe0bcXTx5091BmgG0bl6 5kiLDzuck38qC3selpdAgO3bn++cp+w1xmA= -----END CERTIFICATE-----Generated at Tue Oct 28 13:14:19 2025 by rpki-client