$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/fd72274a-524d-3958-b3e6-a306e2c8e19b.roa File: fd72274a-524d-3958-b3e6-a306e2c8e19b.roa (raw, json) Hash identifier: zPQz5xyDISoNiQEnKRGZQeyMjPnuQXg1P3YgXIhPJpI= Subject key identifier: 77:75:36:31:89:80:42:25:D2:24:1C:7F:C7:68:22:40:18:75:98:E3 Certificate issuer: /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a Certificate serial: 010D0C9F4328584BA0D25B8BB15627017EA5CD00 Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/fd72274a-524d-3958-b3e6-a306e2c8e19b.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 209453 IP address blocks: 2604:3400:aaac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5b:8b:b1:56:27:01:7e:a5:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=f0753bd4-3b53-45a7-9cd4-65bc522dd6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:42:ec:4d:5c:ec:2e:33:0a:89:d6:6a:f2: 77:c8:3a:7f:5c:c2:9a:a2:5a:f8:88:fb:27:68:81: 77:75:9c:9d:c1:78:4b:e0:99:f5:dc:a8:34:48:7b: 7f:75:f2:c7:0e:41:78:e3:bd:3c:de:9e:dc:4b:51: 72:f2:94:f4:b5:0b:ef:95:16:3e:75:0c:89:5c:85: 19:e2:7e:f5:c5:3e:b0:60:9a:b5:73:4f:3d:e1:bb: ce:97:d0:12:d4:71:3c:68:53:72:80:89:1f:f4:5b: a7:74:79:ce:e8:50:5d:aa:f4:05:89:85:6d:c0:b4: 2d:02:97:a5:8f:68:0f:a2:a6:9e:1b:14:42:c9:5e: bf:f9:13:35:0a:61:0c:fd:c8:1d:7b:53:46:66:fa: 9c:b8:93:e2:b8:f0:6a:db:e8:c8:ff:fb:8c:12:2d: c1:a4:f9:14:e9:6b:19:78:7e:24:b0:4b:fd:d0:53: 85:c0:d6:40:93:ed:31:f6:50:e0:6f:22:97:ec:5e: 06:d5:17:86:b2:1b:8a:ad:fb:46:97:40:d2:d3:55: 2a:5d:d2:e8:c4:d1:d4:0d:ac:6a:58:2c:00:52:81: 8f:0f:9d:c5:51:7f:d6:99:99:67:fc:ac:b1:ef:cf: 10:de:01:58:db:2c:b8:be:1b:92:df:08:c2:0a:89: d3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:75:36:31:89:80:42:25:D2:24:1C:7F:C7:68:22:40:18:75:98:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/fd72274a-524d-3958-b3e6-a306e2c8e19b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl X509v3 Authority Key Identifier: keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer sbgp-ipAddrBlock: critical IPv6: 2604:3400:aaac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:aa:52:fe:e1:ba:e8:1e:dc:80:74:1f:b2:89:f7:05:02:37: 23:34:02:e1:84:9e:14:47:14:bd:5b:fb:bf:35:1d:01:1a:86: b7:89:05:bb:13:d4:05:df:3a:9a:6d:8d:bb:b6:ee:05:f0:e5: 48:a0:e3:af:4e:63:bb:bc:57:02:68:35:53:3d:b2:08:b2:1c: cd:05:1b:7f:60:43:ae:f8:24:98:7a:b7:18:c4:3a:06:6a:6e: f7:c4:01:0d:9f:55:47:a1:b0:46:2d:6f:b2:9a:00:7d:4b:f5: 73:c5:da:a9:d2:21:c6:cb:f3:58:a6:0c:1a:61:a8:7c:2d:22: 9f:54:93:ed:ab:40:60:ea:e8:8a:67:a3:d9:7f:f4:c6:b2:55: 63:63:9e:4c:58:b8:ef:e0:1d:76:49:0a:18:b2:3d:a5:90:fe: f5:65:a4:a5:89:69:39:29:fd:9d:49:e7:79:46:23:c0:76:66: 11:e9:0f:1b:72:42:5a:d6:68:97:d9:21:6c:26:1f:45:2d:5d: 8f:d7:14:1f:9a:a8:2d:a3:12:be:31:6a:f8:76:5c:16:39:9f: a9:5f:03:33:ec:db:86:1d:45:5f:af:95:0c:8a:83:fc:ca:8b: b8:66:33:ad:75:dc:0a:74:00:a1:df:cf:1c:6d:45:68:4a:e7: 9b:c3:3a:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEug0luLsVYnAX6lzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRlZTMyOWYtNmE5Ni00NGNiLThjYzUtMjIyZTBmZWM4 YzNhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZjA3NTNiZDQtM2I1My00NWE3LTljZDQtNjViYzUyMmRkNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicRC7E1c7C4zConWavJ3yDp/XMKaolr4iPsn aIF3dZydwXhL4Jn13Kg0SHt/dfLHDkF447083p7cS1Fy8pT0tQvvlRY+dQyJXIUZ 4n71xT6wYJq1c0894bvOl9AS1HE8aFNygIkf9FundHnO6FBdqvQFiYVtwLQtApel j2gPoqaeGxRCyV6/+RM1CmEM/cgde1NGZvqcuJPiuPBq2+jI//uMEi3BpPkU6WsZ eH4ksEv90FOFwNZAk+0x9lDgbyKX7F4G1ReGshuKrftGl0DS01UqXdLoxNHUDaxq WCwAUoGPD53FUX/WmZln/Kyx788Q3gFY2yy4vhuS3wjCConTiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHd1NjGJgEIl0iQcf8doIkAYdZjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNGVl MzI5Zi02YTk2LTQ0Y2ItOGNjNS0yMjJlMGZlYzhjM2EvZmQ3MjI3NGEtNTI0ZC0z OTU4LWIzZTYtYTMwNmUyYzhlMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTRlZTMyOWYtNmE5Ni00NGNiLThj YzUtMjIyZTBmZWM4YzNhLzE0ZWUzMjlmLTZhOTYtNDRjYi04Y2M1LTIyMmUwZmVj OGMzYS5jcmwwHwYDVR0jBBgwFoAUrkgj+aHqwwoeetBYqtTqeK/B7BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNGVlMzI5Zi02YTk2LTQ0Y2ItOGNjNS0yMjJl MGZlYzhjM2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ0AKqs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSqUv7huuge3IB0H7KJ9wUCNyM0AuGEnhRHFL1b+781HQEahreJ BbsT1AXfOpptjbu27gXw5Uig469OY7u8VwJoNVM9sgiyHM0FG39gQ674JJh6txjE OgZqbvfEAQ2fVUehsEYtb7KaAH1L9XPF2qnSIcbL81imDBphqHwtIp9Uk+2rQGDq 6Ipno9l/9MayVWNjnkxYuO/gHXZJChiyPaWQ/vVlpKWJaTkp/Z1J53lGI8B2ZhHp DxtyQlrWaJfZIWwmH0UtXY/XFB+aqC2jEr4xavh2XBY5n6lfAzPs24YdRV+vlQyK g/zKi7hmM6113Ap0AKHfzxxtRWhK55vDOnw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:25 2025 by rpki-client