$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa File: f52b129b-55ba-354b-9c3a-00936112d94e.roa (raw, json) Hash identifier: Gfy+noyPkO30FJvCxdzlJEAIFAmYIEj7QUhUl3PiWV0= Subject key identifier: B3:2D:00:90:44:5B:B8:9F:7E:28:70:EC:BF:B6:71:19:D8:1F:2B:BF Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890 Certificate serial: 010D0C9F4328584B970CE3D559991747DEA11B80 Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 32482 IP address blocks: 2605:7840:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e3:d5:59:99:17:47:de:a1:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=e2d61ce8-715b-4190-b028-374105ce40d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1f:ac:e8:d7:c4:08:5a:c3:b8:67:e0:69:a6: ab:24:b3:68:ce:24:bd:ae:64:ab:93:c8:f8:b4:95: 19:72:b7:11:ba:0e:33:4c:a4:14:8b:97:99:e2:14: fe:0e:60:ca:01:aa:30:2d:6e:b0:d7:36:e1:5d:77: 18:b9:4c:e0:6f:a4:e4:a0:e1:82:ce:41:ea:8a:ad: 69:4f:79:90:81:6e:c1:7d:6c:28:fb:ff:d0:83:1e: d1:5f:88:26:05:c8:42:b9:5e:56:9f:27:cc:68:31: b2:da:6b:02:1f:b1:84:11:67:20:21:75:70:d6:31: a1:55:fb:db:c8:6c:ad:18:03:3f:0d:d6:36:2f:37: 9d:7c:ca:45:00:fd:e1:ce:7f:1b:30:18:7f:14:6c: 36:aa:e1:33:7a:24:b3:37:55:7b:9e:b9:0d:18:19: 41:e0:39:8b:2d:b2:af:78:ae:e4:f5:ab:da:e0:13: 4f:e7:a1:ba:d1:ab:d2:03:1b:93:30:56:4a:b8:9c: cf:a3:6e:ef:51:08:1b:96:93:82:68:4d:d8:68:d7: 6e:c1:40:3a:44:6a:de:08:cf:38:94:f8:1a:97:75: 0b:11:8d:9d:81:b0:6d:8d:fe:9e:a2:47:66:21:cc: 91:cd:db:58:11:d4:af:00:50:a6:6f:3f:83:d0:08: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2D:00:90:44:5B:B8:9F:7E:28:70:EC:BF:B6:71:19:D8:1F:2B:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl X509v3 Authority Key Identifier: keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer sbgp-ipAddrBlock: critical IPv6: 2605:7840:2000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:bb:0f:e5:9b:69:8b:f5:47:87:24:e0:74:41:9c:ae:32:b2: be:2b:df:27:4a:25:63:6b:5e:50:7f:bc:c7:9a:a4:b5:cd:f3: ed:3b:b6:7a:a9:3c:6d:5f:75:80:d7:1e:d9:22:42:7b:23:48: 70:f4:be:8b:7e:67:a2:b9:77:98:c8:ba:8a:8c:07:5b:d1:88: fb:d0:38:df:01:d8:ee:ca:d8:bb:1a:ba:c4:f0:f5:30:2b:47: b7:49:58:63:08:15:e6:bc:35:7c:30:46:04:57:3b:24:a9:fe: 91:83:fd:08:1c:44:6f:ad:ac:2b:aa:25:5d:93:01:ff:12:78: 1c:fc:32:00:b9:53:bb:0e:c0:62:d3:9f:00:6b:14:13:b6:ce: 3d:71:96:4a:a3:fe:1f:88:38:5b:d0:8b:4c:b8:71:ed:9a:f2: a4:67:a3:d9:8f:d8:72:7c:b9:51:ea:dd:52:0c:ec:ce:4e:9b: c7:5b:8a:2e:c4:77:cd:83:85:b0:2c:44:12:c4:ee:2c:32:b3: fa:0c:a8:40:42:66:3c:38:10:3f:f9:da:bb:81:1f:b4:df:64: dd:8d:8d:fe:90:e1:de:43:b7:8d:c2:02:fb:8c:93:40:56:a5: b7:df:66:6c:08:8c:4b:1b:53:41:b6:ba:3f:f0:4c:60:10:32: 09:22:d9:30 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuXDOPVWZkXR96hG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz ODkwMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZTJkNjFjZTgtNzE1Yi00MTkwLWIwMjgtMzc0MTA1Y2U0MGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B+s6NfECFrDuGfgaaarJLNoziS9rmSrk8j4 tJUZcrcRug4zTKQUi5eZ4hT+DmDKAaowLW6w1zbhXXcYuUzgb6TkoOGCzkHqiq1p T3mQgW7BfWwo+//Qgx7RX4gmBchCuV5WnyfMaDGy2msCH7GEEWcgIXVw1jGhVfvb yGytGAM/DdY2LzedfMpFAP3hzn8bMBh/FGw2quEzeiSzN1V7nrkNGBlB4DmLLbKv eK7k9ava4BNP56G60avSAxuTMFZKuJzPo27vUQgblpOCaE3YaNduwUA6RGreCM84 lPgal3ULEY2dgbBtjf6eokdmIcyRzdtYEdSvAFCmbz+D0Ag5DQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLMtAJBEW7iffihw7L+2cRnYHyu/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvZjUyYjEyOWItNTViYS0z NTRiLTljM2EtMDA5MzYxMTJkOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5 N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4 Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx NjRlODM4OTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgV4QCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEArbsP5Ztpi/VHhyTgdEGcrjKyvivfJ0olY2teUH+8x5qktc3z7Tu2 eqk8bV91gNce2SJCeyNIcPS+i35norl3mMi6iowHW9GI+9A43wHY7srYuxq6xPD1 MCtHt0lYYwgV5rw1fDBGBFc7JKn+kYP9CBxEb62sK6olXZMB/xJ4HPwyALlTuw7A YtOfAGsUE7bOPXGWSqP+H4g4W9CLTLhx7ZrypGej2Y/Ycny5UerdUgzszk6bx1uK LsR3zYOFsCxEEsTuLDKz+gyoQEJmPDgQP/nau4EftN9k3Y2N/pDh3kO3jcIC+4yT QFalt99mbAiMSxtTQba6P/BMYBAyCSLZMA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:09:21 2025 by rpki-client