$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a6cb676-2461-30d8-beaf-5467f3d196c4.roa File: 9a6cb676-2461-30d8-beaf-5467f3d196c4.roa (raw, json) Hash identifier: Vq1EeG4KvRpn4DY+v+pCDZjHCHDpTXKZbTFzs+qUekI= Subject key identifier: FC:15:58:19:F8:F0:2B:A9:A7:9C:04:89:5D:8C:23:0B:D7:94:E8:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10AFC1A4FDD6851B7546580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a6cb676-2461-30d8-beaf-5467f3d196c4.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 2601:c9:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:fc:1a:4f:dd:68:51:b7:54:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=199e2bf1-08ec-4339-b47f-d909dd324491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:fe:83:4a:40:a2:16:6e:fa:38:1e:d0:32: 0d:6b:fc:1a:6b:57:d0:59:b3:8e:b8:84:a8:c0:5b: 26:19:d8:dd:d5:a5:86:c9:f6:0c:9b:fb:1c:39:60: a3:28:ab:6b:c5:ac:24:7e:43:19:05:aa:31:ef:d1: 70:e8:85:21:8c:45:f9:4f:50:74:7c:67:06:96:d4: c9:97:a1:64:4d:c0:57:ff:7e:5b:36:20:c1:13:17: 1e:bb:60:1d:f6:46:cd:68:3c:18:fa:66:a5:e1:48: 58:97:85:ac:a5:ea:c9:7d:ff:aa:d7:b5:bd:f0:e9: f6:79:c7:bb:00:77:c6:73:c8:bb:7c:93:fc:21:4a: f6:70:be:7e:66:3e:ea:a8:e9:f5:ed:a4:5e:5a:53: 3f:1a:b8:6a:c7:0e:7f:cb:a9:89:15:f4:fe:c3:ef: a6:27:56:54:58:9d:8a:d7:e7:68:85:19:f7:11:20: 68:b3:ec:b4:ab:29:fa:d2:06:10:79:14:9e:64:bc: fa:56:d3:bf:04:6c:69:fb:c8:c8:58:9a:50:2e:e6: 22:06:39:34:98:e0:6d:f8:29:3e:98:5a:13:19:d1: fd:20:52:59:18:2b:5a:69:17:2c:0c:62:49:2e:95: 2b:23:19:af:e9:7d:81:00:cd:35:19:15:0e:e6:46: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:58:19:F8:F0:2B:A9:A7:9C:04:89:5D:8C:23:0B:D7:94:E8:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a6cb676-2461-30d8-beaf-5467f3d196c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:c9:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:69:d1:8a:96:a3:fb:2b:d6:ce:1a:61:60:71:ff:3f:bd:99: fb:6d:bc:88:93:48:37:83:bd:f7:a9:5c:6a:c6:c5:16:10:62: 60:6b:e5:00:bd:82:79:c4:d2:d5:5a:ba:0b:b4:3c:83:9b:0b: 47:08:74:35:7d:9e:d2:6d:09:98:cd:21:de:6b:30:d0:92:d3: e7:20:69:9e:59:b0:e6:95:39:3d:e9:9e:9d:0c:59:e4:db:f5: fb:b9:81:29:9f:19:b3:f5:9b:31:40:7f:57:cd:a8:e8:d2:bb: d4:9f:3f:e2:a3:eb:ea:c7:c7:51:6a:a1:cc:1c:77:c1:88:46: b3:3c:f2:e4:6d:3d:54:8c:cc:26:4a:ec:19:ab:8c:e6:14:92: c6:0e:2f:b4:8a:be:fc:8f:b3:88:cd:f9:52:5e:9b:df:0b:17: af:0a:30:dd:71:5e:f3:19:59:52:11:88:4c:fc:a1:b8:4c:e1: fc:cf:8d:55:8c:68:5d:4f:f2:73:33:13:16:74:ac:51:91:35: 13:0f:0a:5d:e8:9d:1a:60:1a:70:44:29:8f:fc:fb:79:d8:2a: 56:23:e0:77:e7:db:77:80:80:00:11:97:19:50:ac:c7:c3:9b: 1f:87:8e:40:6d:c1:d4:f5:c0:09:37:75:1d:89:be:41:6b:50: 21:0d:8d:73 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvBCvwaT91oUbdUZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MTk5ZTJiZjEtMDhlYy00MzM5LWI0N2YtZDkwOWRkMzI0NDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsz+g0pAohZu+jge0DINa/waa1fQWbOOuISo wFsmGdjd1aWGyfYMm/scOWCjKKtrxawkfkMZBaox79Fw6IUhjEX5T1B0fGcGltTJ l6FkTcBX/35bNiDBExceu2Ad9kbNaDwY+mal4UhYl4WsperJff+q17W98On2ece7 AHfGc8i7fJP8IUr2cL5+Zj7qqOn17aReWlM/Grhqxw5/y6mJFfT+w++mJ1ZUWJ2K 1+dohRn3ESBos+y0qyn60gYQeRSeZLz6VtO/BGxp+8jIWJpQLuYiBjk0mOBt+Ck+ mFoTGdH9IFJZGCtaaRcsDGJJLpUrIxmv6X2BAM01GRUO5kY7+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPwVWBn48Cupp5wEiV2MIwvXlOgzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWE2Y2I2NzYtMjQ2MS0z MGQ4LWJlYWYtNTQ2N2YzZDE5NmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAyYAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAyGnRipaj+yvWzhphYHH/P72Z+228iJNIN4O996lcasbFFhBiYGvl AL2CecTS1Vq6C7Q8g5sLRwh0NX2e0m0JmM0h3msw0JLT5yBpnlmw5pU5PemenQxZ 5Nv1+7mBKZ8Zs/WbMUB/V82o6NK71J8/4qPr6sfHUWqhzBx3wYhGszzy5G09VIzM JkrsGauM5hSSxg4vtIq+/I+ziM35Ul6b3wsXrwow3XFe8xlZUhGITPyhuEzh/M+N VYxoXU/yczMTFnSsUZE1Ew8KXeidGmAacEQpj/z7edgqViPgd+fbd4CAABGXGVCs x8ObH4eOQG3B1PXACTd1HYm+QWtQIQ2Ncw== -----END CERTIFICATE-----Generated at Wed Nov 5 10:26:21 2025 by rpki-client