$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/dc7a4196-26da-3b6b-a999-e244c05cb9ad.roa File: dc7a4196-26da-3b6b-a999-e244c05cb9ad.roa (raw, json) Hash identifier: l7nR3CeLZNu/+t95ohVJthU1hxhGIPvRmIocGtzeMmo= Subject key identifier: 6E:EF:D7:53:3B:0B:60:43:61:D5:50:DE:7C:12:51:5E:26:48:93:2A Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584B71E616F918C508FE9452FE00 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/dc7a4196-26da-3b6b-a999-e244c05cb9ad.roa Signing time: Tue 07 Oct 2025 17:37:39 +0000 ROA not before: Tue 07 Oct 2025 17:37:39 +0000 ROA not after: Mon 05 Jan 2026 18:37:39 +0000 asID: 22709 IP address blocks: 2605:280::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:e6:16:f9:18:c5:08:fe:94:52:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Oct 7 17:37:39 2025 GMT Not After : Jan 5 18:37:39 2026 GMT Subject: CN=438d15c9-34ec-46d7-b72c-f8d114ef369c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:af:02:c5:5f:20:39:8d:e0:4a:c4:d5:66:6a: f8:a2:98:63:65:4a:db:63:6e:37:6a:25:c4:7e:fd: 8d:30:32:14:6b:a6:84:db:3e:de:ea:7b:19:f0:2f: d3:10:1e:c1:92:a3:41:9c:15:02:04:a2:ad:85:cf: d5:40:21:d8:ee:91:77:f7:d0:a6:9f:9c:29:20:58: 92:c3:df:81:e9:01:51:f7:8f:77:3d:5c:84:e3:25: 11:d8:8c:2b:56:b8:18:7a:72:19:d2:ab:0c:dc:5a: 8c:a5:59:23:c2:81:16:08:ec:05:9b:7e:5d:72:f8: f6:bc:5d:4c:6e:f8:29:e3:e8:3d:36:d3:e0:17:88: 02:7c:b7:d0:e9:9a:2a:52:e6:d5:c9:31:8c:6d:b7: 5f:66:4e:f3:b7:32:0a:0e:e1:4f:76:f0:b0:02:17: 1d:9b:d1:38:6a:36:76:b3:12:7d:c2:52:8f:11:53: 68:ba:25:42:f2:af:98:e5:5f:04:00:74:1f:85:70: 73:50:d0:6b:0e:28:9c:d8:7d:b2:a0:38:7a:25:a8: 69:54:31:74:6f:60:fb:6f:ea:49:5d:b5:34:fe:23: 1a:48:9b:ac:8f:56:51:2e:a8:fd:45:d5:9d:55:18: 9d:39:7f:64:01:c6:1e:1f:4b:de:15:b6:25:ff:7a: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EF:D7:53:3B:0B:60:43:61:D5:50:DE:7C:12:51:5E:26:48:93:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/dc7a4196-26da-3b6b-a999-e244c05cb9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv6: 2605:280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e7:d9:1d:f9:2f:8e:9e:5f:1a:37:ec:c4:be:3d:b1:26:e1: a6:11:98:59:bb:1b:4d:be:f6:49:7d:15:54:bb:42:10:16:69: ee:40:fa:b5:b4:f3:75:3f:11:88:f6:4d:2d:35:9a:1b:a4:09: 65:6c:f6:99:b1:3b:0a:60:e1:3e:24:a0:57:27:ea:b5:f4:67: 0a:b6:12:19:3e:6f:e6:43:8d:35:0d:94:a7:90:91:a2:29:f9: cb:b0:25:c0:b2:33:53:89:06:9c:09:c1:6e:df:f2:89:ca:51: d3:71:d3:fe:a0:f6:27:7e:15:f1:b4:0d:fd:07:23:8b:f2:b0: 9c:cc:26:db:8e:2a:52:e8:47:98:d1:34:2c:63:a1:37:3d:80: ed:a7:53:89:47:60:29:13:de:1d:26:18:7c:75:79:d5:16:2d: 0a:03:88:51:5a:cb:52:7c:97:ae:14:58:4a:81:b3:57:fe:13: 04:a5:5b:7b:d9:e3:f6:ff:30:94:8b:b8:99:a4:43:50:2e:30: 32:0e:d7:f5:b5:8e:98:77:af:0a:5c:58:e7:c6:7b:d9:06:30: 24:0a:78:be:e7:f3:2d:96:da:f3:f4:85:b4:5b:a4:94:bc:aa: c8:d6:bd:00:ad:fb:14:d3:42:66:23:45:2a:0a:88:1f:26:d7: 96:6d:9e:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtx5hb5GMUI/pRS/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MTAwNzE3MzczOVoXDTI2MDEwNTE4MzczOVowLzEtMCsGA1UEAxMk NDM4ZDE1YzktMzRlYy00NmQ3LWI3MmMtZjhkMTE0ZWYzNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg68CxV8gOY3gSsTVZmr4ophjZUrbY243aiXE fv2NMDIUa6aE2z7e6nsZ8C/TEB7BkqNBnBUCBKKthc/VQCHY7pF399Cmn5wpIFiS w9+B6QFR9493PVyE4yUR2IwrVrgYenIZ0qsM3FqMpVkjwoEWCOwFm35dcvj2vF1M bvgp4+g9NtPgF4gCfLfQ6ZoqUubVyTGMbbdfZk7ztzIKDuFPdvCwAhcdm9E4ajZ2 sxJ9wlKPEVNouiVC8q+Y5V8EAHQfhXBzUNBrDiic2H2yoDh6JahpVDF0b2D7b+pJ XbU0/iMaSJusj1ZRLqj9RdWdVRidOX9kAcYeH0veFbYl/3rRlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG7v11M7C2BDYdVQ3nwSUV4mSJMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvZGM3YTQxOTYtMjZkYS0z YjZiLWE5OTktZTI0NGMwNWNiOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBA59kd+S+Onl8aN+zEvj2xJuGmEZhZuxtNvvZJfRVUu0IQFmnuQPq1 tPN1PxGI9k0tNZobpAllbPaZsTsKYOE+JKBXJ+q19GcKthIZPm/mQ401DZSnkJGi KfnLsCXAsjNTiQacCcFu3/KJylHTcdP+oPYnfhXxtA39ByOL8rCczCbbjipS6EeY 0TQsY6E3PYDtp1OJR2ApE94dJhh8dXnVFi0KA4hRWstSfJeuFFhKgbNX/hMEpVt7 2eP2/zCUi7iZpENQLjAyDtf1tY6Yd68KXFjnxnvZBjAkCni+5/Mtltrz9IW0W6SU vKrI1r0ArfsU00JmI0UqCogfJteWbZ6a -----END CERTIFICATE-----Generated at Thu Oct 16 17:34:24 2025 by rpki-client