$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa File: 8a673006-55a5-3418-963c-f9a5b7571cea.roa (raw, json) Hash identifier: AAkY6RDD4GVZrlv4+2d4Oi0PvZh184E6Jt9JIXF4dh0= Subject key identifier: 43:A8:E4:E0:32:0E:98:68:77:DE:B4:A9:1C:02:02:69:39:25:FE:C7 Certificate issuer: /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc Certificate serial: 010D0C9F4328584B2CF6E0DCB90CAB1A7C2E7180 Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 393869 IP address blocks: 2620:11f:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e0:dc:b9:0c:ab:1a:7c:2e:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=9b758073-7294-4b62-ba60-93b6e8622bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f3:41:35:38:63:a0:2d:7e:9a:0f:87:78:d4: ed:8b:81:d2:7d:27:db:ad:5a:8a:4c:a1:eb:a1:94: b2:86:7b:a2:1a:4e:9c:bd:a0:20:e2:5b:b0:ee:c9: ee:ad:9b:b6:5d:78:81:d0:83:2b:f0:05:06:d6:01: 95:ac:13:42:3e:fd:ec:47:6a:87:7f:12:8e:15:c4: bd:46:45:5a:86:cf:f2:ff:bc:ec:51:38:dc:db:a7: 09:75:4d:dc:b0:d3:05:64:d8:88:30:0f:1a:d6:cd: 6c:47:8a:e1:d8:6c:8b:98:53:70:ff:fe:b5:5c:3f: a8:f1:bc:ac:5e:57:c1:a6:c7:a0:c8:eb:4d:63:26: 21:a2:47:45:d3:ed:33:58:3c:36:b8:ca:b3:79:5b: 64:a5:d9:6d:b7:c3:68:0d:8c:47:fd:9d:22:f2:42: 74:39:d4:de:e5:9a:fe:0a:37:d4:e6:ff:a5:64:1a: 30:15:59:f6:6b:32:e0:fb:ad:81:3b:95:70:d3:37: 23:39:a2:f8:ee:a3:1f:e8:a4:55:b6:dd:e0:90:49: 30:2c:51:93:22:82:4b:1d:e4:68:5a:c1:8c:f4:2b: 7f:b2:b9:53:e6:51:e8:84:b8:c1:ba:8d:58:01:ee: 62:77:e7:58:30:f5:17:7e:d4:ff:7b:b9:1d:db:22: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A8:E4:E0:32:0E:98:68:77:DE:B4:A9:1C:02:02:69:39:25:FE:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl X509v3 Authority Key Identifier: keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer sbgp-ipAddrBlock: critical IPv6: 2620:11f:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:af:a4:29:75:c8:c7:52:dc:9c:e6:f5:b9:8f:da:4d:35:86: 88:d2:a0:c8:bb:90:81:9e:3a:9e:b9:8f:50:c4:8d:b8:cb:24: fe:46:e0:3d:2f:a7:61:19:9c:b2:b9:6c:92:22:31:42:b1:f2: 6f:07:6c:81:2b:2f:08:14:e0:37:68:55:b7:bf:0e:0e:5e:d5: 28:d9:24:98:38:5a:0f:b3:5f:c7:0b:cc:9e:60:d7:ae:3b:2b: 0d:80:f8:04:48:92:f5:44:dc:21:3d:34:63:20:b9:3a:0a:7a: 9b:d6:bb:3e:82:e0:2f:1e:17:7b:7c:13:6b:cf:19:47:50:cc: 6d:af:37:d2:77:2a:4c:83:ea:d9:45:96:94:6e:27:ea:a3:32: 48:79:f9:22:a9:5e:5f:62:a0:ea:7d:88:e4:b9:ee:e7:f1:4c: 0d:85:8f:40:af:3e:a1:ee:c2:b7:e1:a3:8b:a7:9b:3f:2b:29: d4:da:76:79:6a:50:2f:e4:93:be:0e:1f:d2:5f:46:07:30:07: 09:57:61:0c:88:76:de:f1:96:f5:c9:b9:ed:de:d1:f1:97:6a: 24:b3:f4:00:a8:e5:e3:ad:36:8d:43:ab:3b:e6:37:81:af:4a: 36:fc:43:c4:c5:e3:80:42:2d:25:c6:b2:d1:ea:7b:05:ae:2b: d5:17:de:74 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEss9uDcuQyrGnwucYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTllMmMxYWMtZTI1NS00MGZlLThkYzgtMzY3NTBiNTY5 YmZjMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OWI3NTgwNzMtNzI5NC00YjYyLWJhNjAtOTNiNmU4NjIyYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/NBNThjoC1+mg+HeNTti4HSfSfbrVqKTKHr oZSyhnuiGk6cvaAg4luw7snurZu2XXiB0IMr8AUG1gGVrBNCPv3sR2qHfxKOFcS9 RkVahs/y/7zsUTjc26cJdU3csNMFZNiIMA8a1s1sR4rh2GyLmFNw//61XD+o8bys XlfBpsegyOtNYyYhokdF0+0zWDw2uMqzeVtkpdltt8NoDYxH/Z0i8kJ0OdTe5Zr+ CjfU5v+lZBowFVn2azLg+62BO5Vw0zcjOaL47qMf6KRVtt3gkEkwLFGTIoJLHeRo WsGM9Ct/srlT5lHohLjBuo1YAe5id+dYMPUXftT/e7kd2yKTJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEOo5OAyDphod960qRwCAmk5Jf7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUy YzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1MGI1NjliZmMvOGE2NzMwMDYtNTVhNS0z NDE4LTk2M2MtZjlhNWI3NTcxY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTllMmMxYWMtZTI1NS00MGZlLThk YzgtMzY3NTBiNTY5YmZjL2E5ZTJjMWFjLWUyNTUtNDBmZS04ZGM4LTM2NzUwYjU2 OWJmYy5jcmwwHwYDVR0jBBgwFoAUQ16gpiq9KrPgDx52W71+jvmA1x0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUyYzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1 MGI1NjliZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABH1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAf6+kKXXIx1LcnOb1uY/aTTWGiNKgyLuQgZ46nrmPUMSNuMsk/kbg PS+nYRmcsrlskiIxQrHybwdsgSsvCBTgN2hVt78ODl7VKNkkmDhaD7NfxwvMnmDX rjsrDYD4BEiS9UTcIT00YyC5Ogp6m9a7PoLgLx4Xe3wTa88ZR1DMba830ncqTIPq 2UWWlG4n6qMySHn5IqleX2Kg6n2I5Lnu5/FMDYWPQK8+oe7Ct+Gji6ebPysp1Np2 eWpQL+STvg4f0l9GBzAHCVdhDIh23vGW9cm57d7R8ZdqJLP0AKjl4602jUOrO+Y3 ga9KNvxDxMXjgEItJcay0ep7Ba4r1RfedA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:16:31 2025 by rpki-client