$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/a0f485f5-967d-3448-a732-d57c2d1d96bb.roa File: a0f485f5-967d-3448-a732-d57c2d1d96bb.roa (raw, json) Hash identifier: zOb5ZtUf/N1LGEM4HAkT2vfYJMlO1bAXwZYbA5/Yn/Y= Subject key identifier: 44:01:9C:48:97:D0:00:DD:22:20:67:EF:52:A6:3B:17:5C:D3:FC:AD Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584BBA104ADA7B9F10D799FADFC0 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/a0f485f5-967d-3448-a732-d57c2d1d96bb.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 5715 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4a:da:7b:9f:10:d7:99:fa:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=af612d2b-f0dd-4a3f-ba65-fb842c50214b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:0f:8b:10:5b:26:2d:3d:ae:88:3e:fa:0e: 12:e7:48:6b:0f:72:cc:1a:92:ae:02:24:30:35:80: 8f:68:9a:c6:5b:71:c4:1b:12:7f:89:2d:d3:72:10: 0e:e3:34:14:d7:f6:7f:2b:44:c0:2f:5e:1b:3c:2c: c4:2e:64:73:22:e3:5e:56:05:41:c7:a8:03:48:b9: f7:77:85:83:be:5a:a5:8b:d5:b5:2c:f1:4f:33:71: e3:d5:e2:eb:88:30:d6:10:78:3c:bb:f2:cf:ba:e0: 42:27:7d:05:45:7c:49:71:45:5d:00:58:6a:98:87: ee:c6:49:3c:b3:60:1c:d8:e0:cf:68:38:cd:77:68: e3:91:e2:d2:81:c9:2c:2a:2e:92:72:c6:3d:d3:c9: 2a:ec:71:ce:f6:f5:68:ff:0e:df:81:c7:8a:ad:f8: 26:61:f6:75:2b:44:15:4b:9c:11:b7:54:82:a1:10: 47:61:de:24:46:6b:d2:54:6f:7f:46:54:26:c6:e8: 57:50:80:cd:a0:9c:ec:0c:47:a9:f8:c5:85:06:a4: 76:29:82:50:92:bf:e7:74:38:fd:b5:dd:8a:82:48: b1:18:53:3a:29:8e:0f:97:ee:fe:ef:67:32:58:16: 4b:48:fe:8c:33:a8:5b:ee:7b:71:d7:f6:8b:5d:40: ea:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:01:9C:48:97:D0:00:DD:22:20:67:EF:52:A6:3B:17:5C:D3:FC:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/a0f485f5-967d-3448-a732-d57c2d1d96bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:99:27:94:c4:55:5a:9a:e5:20:5a:3a:37:e9:d1:da:05:e4: 0f:a4:b4:cd:84:8d:b5:9d:1e:d4:7e:21:96:71:7e:8c:cb:4e: 16:9e:6b:fc:3a:67:37:30:b4:d2:8e:cb:8d:96:dd:6f:94:db: 7c:ee:28:3b:2b:d4:a0:9d:3e:f7:cd:81:29:10:0e:1a:b9:26: 84:0b:cf:06:81:21:54:c5:13:ac:e4:1f:9e:a5:6d:a8:81:10: c7:d0:73:cb:dd:08:e3:56:d5:78:76:2e:eb:f7:3c:1a:38:25: fc:54:11:3e:88:25:2d:94:32:57:a1:31:00:6f:99:84:cc:f6: bb:2c:61:7e:ac:a7:04:67:d7:b1:b8:63:14:e2:13:28:51:51: 47:af:c0:ee:70:92:65:2c:33:c1:2b:b7:c5:e6:89:77:06:62: 08:76:e9:85:3b:24:43:ad:b2:4b:70:f7:fb:a7:da:cf:ff:98: 41:9f:d4:0d:a7:84:98:50:f6:2d:97:59:ac:49:0c:ec:c9:3c: 34:a4:7a:19:97:41:a9:b6:83:03:54:47:9d:72:92:14:ea:79: 46:c5:fe:fd:d1:1d:b2:c5:21:d3:f1:11:ca:d8:cf:03:bc:ed: 8b:6a:89:12:2d:9e:21:a5:59:74:4f:86:fa:37:5f:61:e6:27: eb:d4:ab:a4 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEu6EErae58Q15n638AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YWY2MTJkMmItZjBkZC00YTNmLWJhNjUtZmI4NDJjNTAyMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc4PixBbJi09rog++g4S50hrD3LMGpKuAiQw NYCPaJrGW3HEGxJ/iS3TchAO4zQU1/Z/K0TAL14bPCzELmRzIuNeVgVBx6gDSLn3 d4WDvlqli9W1LPFPM3Hj1eLriDDWEHg8u/LPuuBCJ30FRXxJcUVdAFhqmIfuxkk8 s2Ac2ODPaDjNd2jjkeLSgcksKi6ScsY908kq7HHO9vVo/w7fgceKrfgmYfZ1K0QV S5wRt1SCoRBHYd4kRmvSVG9/RlQmxuhXUIDNoJzsDEep+MWFBqR2KYJQkr/ndDj9 td2KgkixGFM6KY4Pl+7+72cyWBZLSP6MM6hb7ntx1/aLXUDqHQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEQBnEiX0ADdIiBn71KmOxdc0/ytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvYTBmNDg1ZjUtOTY3ZC0z NDQ4LWE3MzItZDU3YzJkMWQ5NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAKZJ5TEVVqa5SBaOjfp0doF5A+ktM2EjbWd HtR+IZZxfozLThaea/w6ZzcwtNKOy42W3W+U23zuKDsr1KCdPvfNgSkQDhq5JoQL zwaBIVTFE6zkH56lbaiBEMfQc8vdCONW1Xh2Luv3PBo4JfxUET6IJS2UMlehMQBv mYTM9rssYX6spwRn17G4YxTiEyhRUUevwO5wkmUsM8Ert8XmiXcGYgh26YU7JEOt sktw9/un2s//mEGf1A2nhJhQ9i2XWaxJDOzJPDSkehmXQam2gwNUR51ykhTqeUbF /v3RHbLFIdPxEcrYzwO87YtqiRItniGlWXRPhvo3X2HmJ+vUq6Q= -----END CERTIFICATE-----Generated at Wed Nov 5 13:10:01 2025 by rpki-client