$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa File: d6139039-6fc7-37b5-b79d-4f80d949e210.roa (raw, json) Hash identifier: 9A57CSFBcepcsK4zt1bF++FX8HO4jtwLWeGSL85T4wI= Subject key identifier: 5B:65:76:FB:5C:A4:AB:86:B5:86:C4:DB:B6:16:BB:6D:33:5B:7F:3C Certificate issuer: /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355 Certificate serial: 010D0C9F4328584B48E1ABA13A4FE9136DDDAE00 Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 2381 IP address blocks: 2001:4e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ab:a1:3a:4f:e9:13:6d:dd:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=c40212cb-20c5-400e-9e52-77d517811520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7b:9c:23:66:b4:2f:bd:27:31:79:bb:ae:2a: f2:31:42:5b:7c:77:b3:56:bb:6d:1d:49:bb:fd:57: 6b:31:ab:64:63:aa:b1:fd:ab:d6:11:9c:ff:ee:ef: 10:a3:53:1c:a8:ac:30:5e:c4:a2:73:d8:6e:06:5f: cc:36:e1:3e:eb:56:d3:0f:7e:23:54:9d:9a:d9:31: b7:a3:73:59:71:93:56:81:ee:cb:cf:17:fa:0f:c4: be:01:0b:36:83:23:bf:c6:b8:99:ba:4c:20:64:8d: 5e:b6:9d:9f:1b:0f:ee:ac:0e:b8:a4:50:3f:14:4d: ff:1f:44:a8:6e:8a:1c:c9:a5:87:75:6b:95:e9:33: 56:93:a3:d6:cd:63:e2:95:c1:af:bc:07:66:83:bf: 88:aa:12:79:1b:30:30:7a:23:1b:9f:23:14:59:bb: 49:54:b9:bf:0e:c5:01:49:b4:f4:bd:65:ed:68:08: 83:27:19:fe:73:59:7d:be:a8:ba:c8:cb:49:a5:2f: f9:40:27:58:07:80:2e:e9:12:4f:e4:4d:47:cd:cb: 3a:8b:2a:57:f1:31:bd:c1:1a:4d:41:e3:68:d4:5b: 26:1d:ed:ad:51:a3:b7:d5:1c:ce:de:e7:c0:c9:c6: dd:9c:49:4a:26:2b:f7:5b:8e:73:39:38:99:c5:44: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:65:76:FB:5C:A4:AB:86:B5:86:C4:DB:B6:16:BB:6D:33:5B:7F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl X509v3 Authority Key Identifier: keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer sbgp-ipAddrBlock: critical IPv6: 2001:4e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2c:ff:d1:34:0f:81:ab:20:c2:78:c9:dc:81:99:d5:16:4e: 03:4c:19:5b:55:a4:86:b3:16:07:d2:f5:7c:76:3d:12:23:2b: 81:24:b2:e6:00:9e:b4:f6:3a:6a:e8:b2:8e:e8:41:70:f7:9a: 13:4f:62:8b:e4:77:50:4c:61:83:da:2b:33:a9:5b:4c:da:77: 98:21:2f:4c:1b:40:b3:fc:86:c5:5d:fe:01:29:20:cd:db:02: 70:0c:68:e1:fa:4c:9d:f9:85:60:fa:68:6a:89:c0:27:1a:f1: 78:28:b1:b0:04:36:5a:88:6d:56:0c:50:92:2e:b2:98:2d:ee: 2d:af:db:a9:5d:0b:4f:b8:94:2e:3f:c8:68:24:99:e4:a0:3f: 2f:96:47:f4:1c:77:00:d3:71:4e:7c:9b:66:5a:7c:c8:4e:d0: 61:d0:04:6a:02:f1:8a:63:dc:f9:c3:81:02:e6:b9:7c:f2:5e: 77:da:92:f9:ee:be:5e:cf:a6:5c:2d:c9:01:9d:70:36:33:fc: 41:f8:5b:7c:f9:d6:12:fa:60:da:d3:39:be:25:d4:60:e5:ba: e3:f0:ba:c2:dc:bb:b5:c2:fe:ac:8e:e6:63:25:5f:e8:37:92: f5:10:1c:32:28:75:c2:1b:1b:7f:7f:72:b5:10:b3:6d:e6:b1: 63:68:98:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtI4auhOk/pE23drgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZkYTBlMTAtZjZiZi00YzIzLWJmZmItZDRhOWE3MzUy MzU1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzQwMjEyY2ItMjBjNS00MDBlLTllNTItNzdkNTE3ODExNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnucI2a0L70nMXm7riryMUJbfHezVrttHUm7 /VdrMatkY6qx/avWEZz/7u8Qo1McqKwwXsSic9huBl/MNuE+61bTD34jVJ2a2TG3 o3NZcZNWge7Lzxf6D8S+AQs2gyO/xriZukwgZI1etp2fGw/urA64pFA/FE3/H0So boocyaWHdWuV6TNWk6PWzWPilcGvvAdmg7+IqhJ5GzAweiMbnyMUWbtJVLm/DsUB SbT0vWXtaAiDJxn+c1l9vqi6yMtJpS/5QCdYB4Au6RJP5E1Hzcs6iypX8TG9wRpN QeNo1FsmHe2tUaO31RzO3ufAycbdnElKJiv3W45zOTiZxUS8uwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFtldvtcpKuGtYbE27YWu20zW388MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZmRh MGUxMC1mNmJmLTRjMjMtYmZmYi1kNGE5YTczNTIzNTUvZDYxMzkwMzktNmZjNy0z N2I1LWI3OWQtNGY4MGQ5NDllMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGZkYTBlMTAtZjZiZi00YzIzLWJm ZmItZDRhOWE3MzUyMzU1LzhmZGEwZTEwLWY2YmYtNGMyMy1iZmZiLWQ0YTlhNzM1 MjM1NS5jcmwwHwYDVR0jBBgwFoAUEFJ7frj3pvQHb8/NWj8S4x3SLMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZmRhMGUxMC1mNmJmLTRjMjMtYmZmYi1kNGE5 YTczNTIzNTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEE4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQLP/RNA+BqyDCeMncgZnVFk4DTBlbVaSGsxYH0vV8dj0SIyuBJLLm AJ609jpq6LKO6EFw95oTT2KL5HdQTGGD2iszqVtM2neYIS9MG0Cz/IbFXf4BKSDN 2wJwDGjh+kyd+YVg+mhqicAnGvF4KLGwBDZaiG1WDFCSLrKYLe4tr9upXQtPuJQu P8hoJJnkoD8vlkf0HHcA03FOfJtmWnzITtBh0ARqAvGKY9z5w4EC5rl88l532pL5 7r5ez6ZcLckBnXA2M/xB+Ft8+dYS+mDa0zm+JdRg5brj8LrC3Lu1wv6sjuZjJV/o N5L1EBwyKHXCGxt/f3K1ELNt5rFjaJgO -----END CERTIFICATE-----Generated at Sun Oct 19 20:08:57 2025 by rpki-client