$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71e8ff1-f752-3b23-af81-a3662b50e662.roa File: d71e8ff1-f752-3b23-af81-a3662b50e662.roa (raw, json) Hash identifier: ICQWoHgjX5SZQJuHe2qkoTNjdEIvqIIzaIBQBBQ9lQA= Subject key identifier: 51:A5:24:58:5F:C1:FB:39:50:AC:39:F1:87:4B:FA:7A:E8:F5:1D:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B7CE9BFBEF825B7769C70 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71e8ff1-f752-3b23-af81-a3662b50e662.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 2603:300d:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:7c:e9:bf:be:f8:25:b7:76:9c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=88680d68-a3b1-4a66-b6a9-a69dab2fbec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:77:87:48:7c:9d:7e:c4:3a:f4:9d:65:12: c6:ed:45:e2:56:8f:02:72:4f:16:18:5e:d8:d6:fb: 84:41:19:ef:fa:34:f3:2f:50:22:bc:47:97:3b:fe: b3:e9:69:96:2e:bd:c9:a0:29:b6:5d:3c:56:d9:ee: 1c:96:ac:a4:64:b9:89:4c:a2:70:1f:08:e4:00:00: a4:32:84:8b:64:17:f6:9d:0f:2f:66:6d:cb:8a:71: 34:6c:66:d6:c9:1a:32:a8:96:aa:1f:d0:cc:59:1b: 97:19:04:b4:ab:9e:dc:a0:b7:6b:9f:2d:b7:22:9c: 22:30:0c:13:12:39:61:29:ce:8e:56:18:a4:43:70: 1e:d0:98:1b:75:c2:9c:22:ba:de:64:38:72:b3:42: 12:8f:57:a3:7d:67:b7:3a:5c:62:79:be:3c:f9:05: 02:77:e9:f6:4f:69:f2:29:ac:38:05:5d:67:35:4f: 98:15:43:12:2b:7c:3b:42:5d:59:9a:aa:f3:9f:aa: d0:1f:5a:21:29:9e:57:ab:b9:5a:89:f3:32:3d:dc: 81:0a:0b:f7:48:1e:2d:16:37:b5:9e:99:4f:68:00: 67:3c:9c:17:f0:e7:75:06:d0:d1:7f:fb:2c:74:6d: be:f3:bd:d8:ed:7a:fc:be:b8:7b:a3:97:32:6d:25: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A5:24:58:5F:C1:FB:39:50:AC:39:F1:87:4B:FA:7A:E8:F5:1D:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71e8ff1-f752-3b23-af81-a3662b50e662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:300d:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:62:22:bd:4e:98:20:86:f6:90:7a:a1:47:09:bf:80:20:7e: f2:76:33:3a:dd:a1:c0:bc:fa:dc:bf:47:fc:77:7c:3c:7b:4d: 0e:d9:0a:df:e4:ce:12:98:bb:23:26:0c:6d:9c:d2:16:07:62: fb:c0:5f:78:64:72:3b:1d:c9:6f:eb:7e:0e:90:56:0d:75:29: e0:8d:c0:df:0e:6b:e1:5b:79:aa:7e:e2:de:b2:42:72:ac:ee: 59:02:ce:31:43:56:a3:73:fc:b3:85:4a:5a:96:76:0a:9b:34: 95:9f:3e:15:69:28:1d:53:bf:6a:82:df:4c:14:4b:f2:0c:56: 6b:70:c1:c0:41:80:d8:80:03:cd:24:4a:17:ef:18:33:7d:92: 26:ac:69:6e:ee:bb:bf:6f:95:59:e7:d3:64:a6:1c:2a:84:eb: c5:46:4a:73:2d:59:00:cf:72:ca:57:ea:cd:32:bf:4a:6b:75: 94:c3:0b:bf:88:57:5e:b7:eb:60:1b:91:7e:b6:32:ed:82:b7: 09:e7:a9:eb:25:8d:89:02:81:e0:c4:f0:c1:a3:a3:c2:e7:60: f1:1a:2d:1b:44:66:e0:c7:cb:39:7e:26:ee:ce:74:3c:97:c3: 77:fb:96:b4:2c:e9:3f:0a:b8:27:01:36:61:83:3e:49:d5:d4: ed:d0:10:51 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvBC3zpv774Jbd2nHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ODg2ODBkNjgtYTNiMS00YTY2LWI2YTktYTY5ZGFiMmZiZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup53h0h8nX7EOvSdZRLG7UXiVo8Cck8WGF7Y 1vuEQRnv+jTzL1AivEeXO/6z6WmWLr3JoCm2XTxW2e4clqykZLmJTKJwHwjkAACk MoSLZBf2nQ8vZm3LinE0bGbWyRoyqJaqH9DMWRuXGQS0q57coLdrny23IpwiMAwT EjlhKc6OVhikQ3Ae0JgbdcKcIrreZDhys0ISj1ejfWe3Olxieb48+QUCd+n2T2ny Kaw4BV1nNU+YFUMSK3w7Ql1Zmqrzn6rQH1ohKZ5Xq7laifMyPdyBCgv3SB4tFje1 nplPaABnPJwX8Od1BtDRf/ssdG2+873Y7Xr8vrh7o5cybSVt3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFGlJFhfwfs5UKw58YdL+nro9R0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDcxZThmZjEtZjc1Mi0z YjIzLWFmODEtYTM2NjJiNTBlNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDQEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApGIivU6YIIb2kHqhRwm/gCB+8nYzOt2hwLz63L9H/Hd8PHtNDtkK 3+TOEpi7IyYMbZzSFgdi+8BfeGRyOx3Jb+t+DpBWDXUp4I3A3w5r4Vt5qn7i3rJC cqzuWQLOMUNWo3P8s4VKWpZ2Cps0lZ8+FWkoHVO/aoLfTBRL8gxWa3DBwEGA2IAD zSRKF+8YM32SJqxpbu67v2+VWefTZKYcKoTrxUZKcy1ZAM9yylfqzTK/Smt1lMML v4hXXrfrYBuRfrYy7YK3Ceep6yWNiQKB4MTwwaOjwudg8RotG0Rm4MfLOX4m7s50 PJfDd/uWtCzpPwq4JwE2YYM+SdXU7dAQUQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:36:52 2025 by rpki-client