$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa File: fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa (raw, json) Hash identifier: LLnpRfhMG8E+HuoOorfDcCExQtf2BYVTIPYNZ8pPrXg= Subject key identifier: 77:B4:0D:13:2D:CA:EE:FE:64:77:7B:34:8B:17:B8:E6:2C:9E:F1:09 Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F4328584BB2F7A6F568087E18EB5F9A00 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 2607:3000::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a6:f5:68:08:7e:18:eb:5f:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=557f9852-3990-4e68-bd0b-15f3b8ef0871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:1b:68:bc:0f:69:8b:ab:ff:46:98:06:f5: 75:bd:63:87:66:37:33:1a:7d:a5:45:c9:5d:ee:03: 43:d2:53:33:85:a9:33:94:4d:cb:9f:78:be:3a:b1: 0f:96:da:a2:b9:d8:0a:a1:87:7b:5e:f6:95:83:76: 19:e4:77:1e:0e:c9:06:bd:12:79:70:45:11:ce:50: 22:e9:1a:f9:f7:fd:59:95:9d:8d:47:ee:64:a7:ba: b6:c9:18:c8:69:f0:1d:51:a6:bb:8d:65:75:c7:83: 77:48:03:45:d1:c6:e5:b7:78:02:cb:90:e5:20:9e: 60:8a:50:51:a2:79:bc:f7:19:7f:79:07:70:24:e6: 75:65:ea:fa:d2:4c:c1:06:16:4a:5c:2f:30:8b:4a: 8d:d7:ca:d3:a4:7e:a2:f3:e5:d4:db:7f:9c:a7:7f: 5f:ea:db:55:d6:77:e6:25:4c:be:44:9f:3b:94:93: 5a:77:77:06:3f:4a:d9:25:fe:3c:b4:03:3b:83:aa: 84:f9:1c:7a:fd:72:f8:8d:9b:5f:72:00:e6:40:4d: bb:c0:0a:93:13:bb:59:08:ef:1a:38:0d:b8:bf:7d: cd:aa:27:28:d2:92:fb:57:ea:c5:60:34:21:d2:9e: 5a:09:6b:63:8b:78:55:d5:d0:71:b3:45:b7:14:80: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B4:0D:13:2D:CA:EE:FE:64:77:7B:34:8B:17:B8:E6:2C:9E:F1:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv6: 2607:3000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:76:fa:62:a2:aa:29:ef:a9:ca:4c:09:9e:55:e1:52:f1:1e: fb:23:0c:43:da:96:3d:e1:38:b1:88:c7:ed:c6:20:26:0f:75: f7:93:c4:14:10:17:f2:d9:76:f1:0a:a8:4f:57:4f:c7:f8:f0: 5b:54:84:15:5a:de:dd:4d:02:1e:42:7a:e2:28:53:99:bc:b7: 9c:32:04:4b:40:2d:9f:68:45:9e:94:43:fa:ba:d2:22:e4:6a: eb:df:5a:c3:df:4f:9e:f5:8b:a8:bc:d9:13:ca:0d:6d:0e:6c: 20:2c:b6:64:e6:1c:9a:ed:91:cb:6f:ca:a8:b0:a6:35:69:3d: 10:47:a8:69:f6:9a:62:0f:19:30:4a:cf:93:2a:af:11:9e:c1: 3b:18:a8:59:ad:f9:15:48:74:a6:ff:6d:89:a8:bf:ac:31:0f: 22:4a:1a:da:6b:7f:c6:9f:3d:2b:5c:fd:9e:0b:43:de:d8:12: 66:40:e3:2f:35:96:84:b5:d6:4c:31:f9:ed:4d:a0:1e:ae:cd: d7:fe:bb:0d:e6:7d:c2:74:d6:27:a7:4d:3f:f8:e9:5d:a1:f1: 24:2c:46:f1:28:a3:9e:a7:1f:81:67:b1:79:91:73:5b:c3:ee: a0:1c:ee:df:b7:18:a9:3b:20:8b:80:96:20:e5:e0:49:98:bc: d1:9f:a8:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuy96b1aAh+GOtfmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NTU3Zjk4NTItMzk5MC00ZTY4LWJkMGItMTVmM2I4ZWYwODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+MbaLwPaYur/0aYBvV1vWOHZjczGn2lRcld 7gND0lMzhakzlE3Ln3i+OrEPltqiudgKoYd7XvaVg3YZ5HceDskGvRJ5cEURzlAi 6Rr59/1ZlZ2NR+5kp7q2yRjIafAdUaa7jWV1x4N3SANF0cblt3gCy5DlIJ5gilBR onm89xl/eQdwJOZ1Zer60kzBBhZKXC8wi0qN18rTpH6i8+XU23+cp39f6ttV1nfm JUy+RJ87lJNad3cGP0rZJf48tAM7g6qE+Rx6/XL4jZtfcgDmQE27wAqTE7tZCO8a OA24v33Nqico0pL7V+rFYDQh0p5aCWtji3hV1dBxs0W3FICjAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHe0DRMtyu7+ZHd7NIsXuOYsnvEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvZmE0ZWQ0NjQtMjliMy0z NDUyLWJkZDktNjg0NGZiNGRiOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcwADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATdvpioqop76nKTAmeVeFS8R77IwxD2pY94TixiMftxiAmD3X3k8QU EBfy2XbxCqhPV0/H+PBbVIQVWt7dTQIeQnriKFOZvLecMgRLQC2faEWelEP6utIi 5Grr31rD30+e9YuovNkTyg1tDmwgLLZk5hya7ZHLb8qosKY1aT0QR6hp9ppiDxkw Ss+TKq8RnsE7GKhZrfkVSHSm/22JqL+sMQ8iShraa3/Gnz0rXP2eC0Pe2BJmQOMv NZaEtdZMMfntTaAers3X/rsN5n3CdNYnp00/+OldofEkLEbxKKOepx+BZ7F5kXNb w+6gHO7ftxipOyCLgJYg5eBJmLzRn6gp -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:34 2025 by rpki-client