$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d11b7a0b-02cc-3588-8a06-c54f8f878b84.roa File: d11b7a0b-02cc-3588-8a06-c54f8f878b84.roa (raw, json) Hash identifier: pke+i5BIbHZEBxT8tXUZbTVFBEWh6JqWYwTPvMpHIY4= Subject key identifier: C3:EB:69:C4:3A:B3:FD:3C:2C:2A:4B:10:73:43:22:D9:21:48:CE:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10AFDB87BB28527215CE580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d11b7a0b-02cc-3588-8a06-c54f8f878b84.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 2603:20c8:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:fd:b8:7b:b2:85:27:21:5c:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=cbed572b-b214-4872-aa21-93cd84329b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:db:f5:84:d4:6e:79:93:91:08:a8:92:2b: 28:a6:12:18:08:36:21:65:60:02:b9:1d:b1:a4:d2: ff:fb:af:73:02:62:5a:9f:03:42:89:5a:33:34:72: 4b:cb:ca:4c:d0:17:3d:a6:3e:86:66:b5:4c:82:53: 3d:4b:2d:7f:6e:de:c9:10:49:ce:09:f1:6a:5e:31: 29:3a:0d:22:e1:d3:94:6a:75:65:83:fe:1c:bb:0f: 59:ef:91:83:26:ee:ed:8a:6b:08:0d:56:63:8a:38: 39:cd:61:39:d9:38:fa:8a:4f:a6:77:0c:2d:c0:04: 10:2c:77:63:c9:8f:a1:d1:95:23:b5:59:79:8b:6e: f6:fd:26:49:ac:9a:01:09:ab:b6:ca:73:f2:01:24: dc:c7:e0:41:21:26:11:10:1d:af:dc:f8:60:04:24: 89:cd:2a:b9:12:49:f0:27:8a:01:45:08:11:24:08: 45:4f:9e:09:7f:5b:cc:9f:d2:dd:4d:4b:b7:b5:61: 90:0f:db:cb:a9:f8:1f:80:5f:4d:60:6c:e7:01:a1: f9:52:3b:fa:cd:7e:4d:6d:85:b1:93:2e:5a:73:98: 8c:67:6b:10:88:e2:94:ab:d6:51:44:ee:89:0a:98: 10:12:d0:82:e6:58:a5:a2:46:ca:7a:83:e9:fe:5f: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:69:C4:3A:B3:FD:3C:2C:2A:4B:10:73:43:22:D9:21:48:CE:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d11b7a0b-02cc-3588-8a06-c54f8f878b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:20c8:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:54:f6:58:42:e1:ac:e2:53:bb:f3:39:f8:18:80:30:28:10: 5c:1c:0c:7c:3b:39:43:3e:c4:02:2b:42:28:e5:c9:da:0d:09: ad:c5:af:49:40:80:6c:bc:5f:12:ce:a1:29:8e:f4:e9:f2:2a: 1c:44:85:f4:7f:65:57:6c:a1:56:88:09:58:3c:2e:f1:3a:c1: 6a:7e:3f:9e:3c:78:b7:b4:0e:44:5d:27:ca:1f:c8:4d:da:65: 5f:04:7b:b6:5c:7c:76:f1:78:2e:97:00:6a:2b:10:ac:cf:a6: e7:29:2e:9c:97:35:8f:06:eb:56:43:a7:c2:10:ba:fc:4e:81: 3a:4a:b0:6e:30:6e:c1:ea:ba:7d:93:0b:80:6c:74:8e:2e:c7: ad:67:fb:d5:77:e1:95:b5:c1:33:33:ca:d4:e1:bf:38:25:b9: 91:ba:12:34:1f:f5:47:27:6f:5a:35:87:e0:73:c3:c5:3d:b9: 04:6b:96:ae:c0:1f:ff:ca:b6:03:bc:47:05:61:50:31:8e:c0: 47:02:5a:10:6b:5a:00:cc:50:69:5e:09:0a:1b:fc:3e:60:3b: 93:65:57:61:87:23:c5:4b:c1:66:ae:5a:8b:ef:48:c5:00:56: 8d:2b:85:5d:85:b5:08:49:79:49:2b:6e:d2:c9:46:0c:08:ea: a7:8f:60:15 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvBCv24e7KFJyFc5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk Y2JlZDU3MmItYjIxNC00ODcyLWFhMjEtOTNjZDg0MzI5YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMXb9YTUbnmTkQiokisophIYCDYhZWACuR2x pNL/+69zAmJanwNCiVozNHJLy8pM0Bc9pj6GZrVMglM9Sy1/bt7JEEnOCfFqXjEp Og0i4dOUanVlg/4cuw9Z75GDJu7timsIDVZjijg5zWE52Tj6ik+mdwwtwAQQLHdj yY+h0ZUjtVl5i272/SZJrJoBCau2ynPyASTcx+BBISYREB2v3PhgBCSJzSq5Eknw J4oBRQgRJAhFT54Jf1vMn9LdTUu3tWGQD9vLqfgfgF9NYGznAaH5Ujv6zX5NbYWx ky5ac5iMZ2sQiOKUq9ZRRO6JCpgQEtCC5lilokbKeoPp/l+QWQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMPracQ6s/08LCpLEHNDItkhSM6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDExYjdhMGItMDJjYy0z NTg4LThhMDYtYzU0ZjhmODc4Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgyIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANlT2WELhrOJTu/M5+BiAMCgQXBwMfDs5Qz7EAitCKOXJ2g0JrcWv SUCAbLxfEs6hKY706fIqHESF9H9lV2yhVogJWDwu8TrBan4/njx4t7QORF0nyh/I TdplXwR7tlx8dvF4LpcAaisQrM+m5ykunJc1jwbrVkOnwhC6/E6BOkqwbjBuweq6 fZMLgGx0ji7HrWf71XfhlbXBMzPK1OG/OCW5kboSNB/1RydvWjWH4HPDxT25BGuW rsAf/8q2A7xHBWFQMY7ARwJaEGtaAMxQaV4JChv8PmA7k2VXYYcjxUvBZq5ai+9I xQBWjSuFXYW1CEl5SStu0slGDAjqp49gFQ== -----END CERTIFICATE-----Generated at Wed Nov 5 07:22:17 2025 by rpki-client