$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa File: ce877e20-3760-3ae7-af09-9478dcb48f9c.roa (raw, json) Hash identifier: oYNSpGFDOthtnotZnBiOWjihfKvRHGbvANWOF8fFMNk= Subject key identifier: A5:33:F7:F7:36:58:3A:51:9D:DA:68:7D:FA:CE:96:E9:F9:6B:5F:5F Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584B8917631394DEC8C0A247FC90 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 13807 IP address blocks: 2604:9500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:63:13:94:de:c8:c0:a2:47:fc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=080f2886-da2d-4795-8d44-1b7e9bed72ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b2:6f:f8:b8:7e:36:a4:a7:31:e0:2e:97:fa: 79:f9:70:08:0c:c2:0f:26:b4:7d:a2:0c:bf:d4:b7: 5f:35:d3:ca:d9:99:b8:cb:91:37:63:f2:c5:a0:4d: 42:f9:1f:46:bc:e5:95:b1:5e:cc:93:6f:f3:50:88: 4d:f9:8f:4d:72:c7:8a:9d:d8:91:2a:cc:59:1b:81: 06:f8:f0:32:62:28:8a:ae:ab:28:05:74:10:38:1c: 1c:90:7d:96:78:ba:ee:bd:44:5c:4a:0b:1c:ab:1d: ed:46:78:3f:0b:58:b4:61:fe:20:7b:e7:c8:88:36: a2:44:b6:93:42:ea:23:b3:39:fc:ca:ff:62:fd:2a: 4d:e5:38:b7:12:c6:cc:70:b1:1b:cf:9d:01:c3:86: 5b:af:b4:c7:b5:4d:7d:a8:ca:23:c9:1d:51:94:94: 5e:38:88:76:bd:75:41:44:68:cf:79:5d:cd:98:8d: b7:36:fc:d5:f3:6a:81:c3:74:95:96:7b:9e:95:f8: 3d:f6:82:e5:ab:86:74:51:4b:92:2d:46:a7:84:87: 06:b0:24:3e:c2:01:4d:c7:77:53:73:4a:f5:d9:34: 2a:b5:80:20:c4:51:ca:44:97:1a:46:ba:98:59:17: 82:7e:59:83:a4:45:f5:9c:0c:da:2d:2c:10:b9:7d: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:33:F7:F7:36:58:3A:51:9D:DA:68:7D:FA:CE:96:E9:F9:6B:5F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv6: 2604:9500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:d6:0d:72:b7:7d:69:1d:f7:73:b2:95:73:0b:93:8a:b2:58: 41:a2:23:4b:81:03:5a:b7:c3:cf:a2:60:26:fe:ea:e7:be:2d: 02:ef:82:b3:38:0c:f6:ed:a2:63:58:68:7b:0f:70:2f:ab:ec: bd:ca:67:03:10:03:12:b6:2f:11:4e:8c:a5:72:6c:b2:7a:b4: 2b:8b:79:f3:83:6d:d0:c2:64:dd:e6:67:f5:b5:68:a1:93:81: fc:e7:3b:e3:8e:a1:9d:41:27:41:67:82:36:09:ef:2e:ad:e3: 52:c0:2e:52:d0:6f:d2:14:50:89:a2:e5:61:f3:08:58:80:66: a5:3d:d1:7c:5b:66:d2:da:0c:c2:51:2d:d0:07:20:d3:31:99: ba:7f:c8:74:e6:b4:79:c9:0f:1b:bf:e1:6c:6f:77:8c:63:28: 5c:f6:fd:90:11:34:11:81:13:63:d0:c2:6b:04:d5:4d:64:07: 77:50:56:f7:4f:4d:bd:c5:aa:5e:86:64:21:6e:4c:24:21:bf: ab:13:81:50:01:85:e1:f7:38:49:6b:1e:67:3d:08:9b:09:40: cb:7c:71:ff:a4:ce:71:d5:64:55:f5:e2:14:7a:36:a6:75:ea: 82:cf:cd:97:14:10:74:16:16:5a:79:7e:4e:2d:74:58:ab:f0: 13:4e:dd:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuJF2MTlN7IwKJH/JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MDgwZjI4ODYtZGEyZC00Nzk1LThkNDQtMWI3ZTliZWQ3MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprJv+Lh+NqSnMeAul/p5+XAIDMIPJrR9ogy/ 1LdfNdPK2Zm4y5E3Y/LFoE1C+R9GvOWVsV7Mk2/zUIhN+Y9NcseKndiRKsxZG4EG +PAyYiiKrqsoBXQQOBwckH2WeLruvURcSgscqx3tRng/C1i0Yf4ge+fIiDaiRLaT Quojszn8yv9i/SpN5Ti3EsbMcLEbz50Bw4Zbr7THtU19qMojyR1RlJReOIh2vXVB RGjPeV3NmI23NvzV82qBw3SVlnuelfg99oLlq4Z0UUuSLUanhIcGsCQ+wgFNx3dT c0r12TQqtYAgxFHKRJcaRrqYWReCflmDpEX1nAzaLSwQuX2iYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKUz9/c2WDpRndpoffrOlun5a19fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvY2U4NzdlMjAtMzc2MC0z YWU3LWFmMDktOTQ3OGRjYjQ4ZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSVADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCs1g1yt31pHfdzspVzC5OKslhBoiNLgQNat8PPomAm/urnvi0C74Kz OAz27aJjWGh7D3Avq+y9ymcDEAMSti8RToylcmyyerQri3nzg23QwmTd5mf1tWih k4H85zvjjqGdQSdBZ4I2Ce8ureNSwC5S0G/SFFCJouVh8whYgGalPdF8W2bS2gzC US3QByDTMZm6f8h05rR5yQ8bv+Fsb3eMYyhc9v2QETQRgRNj0MJrBNVNZAd3UFb3 T029xapehmQhbkwkIb+rE4FQAYXh9zhJax5nPQibCUDLfHH/pM5x1WRV9eIUejam deqCz82XFBB0FhZaeX5OLXRYq/ATTt3/ -----END CERTIFICATE-----Generated at Thu Oct 16 13:44:27 2025 by rpki-client