$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa File: cb396975-c95e-3a31-ba3b-e1d1a955c922.roa (raw, json) Hash identifier: C8lSRblto0TmAoypd/VXHhwA7NWk8Dm2Szlk0Uxovb4= Subject key identifier: 69:33:BC:5F:E3:7C:DB:97:57:14:F6:10:CC:6C:8E:6D:16:94:C6:F9 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584BA0D25EAD6ECF38E3D8037640 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 2607:a640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5e:ad:6e:cf:38:e3:d8:03:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=025c0591-942a-482b-86db-64074f140eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:83:36:c4:89:e6:6b:36:a4:ef:63:68:19: 5e:26:d6:f9:53:b9:cf:9f:ca:fc:b6:6b:81:f2:c2: 5e:58:a2:ff:26:3f:d1:84:14:0c:21:c1:02:4e:e5: f3:6c:c1:85:fe:09:44:b8:aa:40:86:24:32:04:77: 31:8e:0f:02:b0:58:82:a8:14:c9:63:83:d1:1c:b1: 8a:64:c7:2a:f7:00:09:b6:d3:69:9f:bf:df:54:fc: 4a:31:78:fc:2b:03:b3:ae:7b:6f:04:7c:62:a8:79: 1b:1b:b1:32:c4:c1:b9:70:de:99:3b:7d:5d:2c:f2: 8a:2b:4c:7e:84:ee:37:a8:8f:57:d3:75:89:80:37: 5e:39:38:69:f4:eb:98:cf:6f:ca:ee:74:dd:7b:15: 7b:c5:a7:dc:d8:26:b8:59:9c:0b:ce:95:d9:5f:94: 05:75:2c:fe:19:e9:96:63:72:e9:b2:35:c2:f4:15: 71:76:cc:81:f1:2f:81:0d:10:5c:68:8f:60:ba:70: d4:46:65:fd:7a:e3:4d:ba:12:07:d4:81:d5:d6:e3: b3:fc:4a:29:b0:22:76:34:0e:dc:66:a8:ba:fe:7b: dd:34:83:24:89:90:81:e5:c8:fd:98:2f:db:39:67: 12:15:ea:d0:9f:ac:34:57:0d:3f:7b:c0:00:9e:10: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:33:BC:5F:E3:7C:DB:97:57:14:F6:10:CC:6C:8E:6D:16:94:C6:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:a640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:0d:47:0b:e5:50:a7:2a:32:1e:72:93:05:c6:cd:ac:53:bb: da:6b:df:cf:c2:50:e8:8e:7e:24:bb:3c:2d:c7:89:5e:38:bf: c6:36:c8:03:23:af:6f:7a:c7:e2:7c:2f:67:0c:1f:c3:e5:c6: a4:0f:2d:19:b9:89:c3:08:54:9a:74:49:fb:3d:f6:08:db:d0: 0b:d0:7a:8d:50:10:cf:19:84:e2:1c:bd:71:55:e1:b9:09:6f: 23:42:ec:3d:ac:58:bf:dc:65:dc:90:58:55:c1:d8:58:72:59: 71:09:da:c7:b2:7d:d3:f4:ac:b7:48:d7:79:40:a2:6f:2d:75: bb:13:88:75:c4:77:cf:c4:e1:bc:55:97:da:a4:92:28:dd:69: aa:d1:7c:89:7f:5c:f7:a1:d8:a5:56:7d:53:ee:e4:e6:86:55: 39:84:3a:fa:98:07:de:65:9c:ef:0c:ab:1f:8a:ce:6a:7a:96: 33:f4:ff:b0:44:62:32:6b:07:d5:cf:9c:68:46:d0:a2:a0:47: 4d:ad:0b:5c:69:dc:72:e4:da:a9:c8:98:00:a4:14:cc:67:4d: 41:58:20:7f:99:27:88:6e:27:e3:ca:9e:60:c4:d3:72:07:a5: d0:5d:7f:47:97:ae:c2:9f:88:51:f3:89:e0:46:a2:8e:38:e0: 75:50:ff:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEug0l6tbs8449gDdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MDI1YzA1OTEtOTQyYS00ODJiLTg2ZGItNjQwNzRmMTQwZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllyDNsSJ5ms2pO9jaBleJtb5U7nPn8r8tmuB 8sJeWKL/Jj/RhBQMIcECTuXzbMGF/glEuKpAhiQyBHcxjg8CsFiCqBTJY4PRHLGK ZMcq9wAJttNpn7/fVPxKMXj8KwOzrntvBHxiqHkbG7EyxMG5cN6ZO31dLPKKK0x+ hO43qI9X03WJgDdeOThp9OuYz2/K7nTdexV7xafc2Ca4WZwLzpXZX5QFdSz+GemW Y3LpsjXC9BVxdsyB8S+BDRBcaI9gunDURmX9euNNuhIH1IHV1uOz/EopsCJ2NA7c Zqi6/nvdNIMkiZCB5cj9mC/bOWcSFerQn6w0Vw0/e8AAnhBfOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGkzvF/jfNuXVxT2EMxsjm0WlMb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvY2IzOTY5NzUtYzk1ZS0z YTMxLWJhM2ItZTFkMWE5NTVjOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgemQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCTDUcL5VCnKjIecpMFxs2sU7vaa9/PwlDojn4kuzwtx4leOL/GNsgD I69vesfifC9nDB/D5cakDy0ZuYnDCFSadEn7PfYI29AL0HqNUBDPGYTiHL1xVeG5 CW8jQuw9rFi/3GXckFhVwdhYcllxCdrHsn3T9Ky3SNd5QKJvLXW7E4h1xHfPxOG8 VZfapJIo3Wmq0XyJf1z3odilVn1T7uTmhlU5hDr6mAfeZZzvDKsfis5qepYz9P+w RGIyawfVz5xoRtCioEdNrQtcadxy5NqpyJgApBTMZ01BWCB/mSeIbifjyp5gxNNy B6XQXX9Hl67Cn4hR84ngRqKOOOB1UP/K -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:37 2025 by rpki-client