$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2853e4cd-1d64-3bad-b983-48f99d148a6a.roa File: 2853e4cd-1d64-3bad-b983-48f99d148a6a.roa (raw, json) Hash identifier: dnafu/O4IHv0p2iJATSEIKU78fyVZfDyos9tLRSAmDg= Subject key identifier: 4E:B8:68:6B:BF:F1:D5:34:2B:8B:99:94:CB:31:8B:64:07:3A:A6:A5 Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7 Certificate serial: 010D0C9F4328584B2C0ECCBEBDF8D97DAB359C00 Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2853e4cd-1d64-3bad-b983-48f99d148a6a.roa Signing time: Fri 12 Sep 2025 17:13:05 +0000 ROA not before: Fri 12 Sep 2025 17:13:05 +0000 ROA not after: Thu 11 Dec 2025 18:13:05 +0000 asID: 16509 IP address blocks: 2620:a0:200e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:0e:cc:be:bd:f8:d9:7d:ab:35:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7 Validity Not Before: Sep 12 17:13:05 2025 GMT Not After : Dec 11 18:13:05 2025 GMT Subject: CN=3639ec20-35f4-46bb-a97e-d33fcd4b279c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d5:6a:bf:a1:9f:1c:0e:9f:fa:40:76:07:a0: 35:c6:46:5e:58:9f:21:0d:15:11:f8:9c:33:ba:23: d6:89:0f:d3:ca:1f:04:b7:42:44:3d:0b:a6:19:ff: 1b:8e:43:9b:47:58:af:d9:59:d1:e2:fe:c5:4f:90: 44:f1:57:ea:5e:74:5b:35:6d:93:62:1e:36:95:a4: 56:0e:5b:38:85:9e:05:4e:5e:cb:42:0a:dd:de:9a: a0:5e:0e:7e:88:ef:2e:28:86:61:4c:a3:c6:e7:a2: 96:ed:64:09:3f:e1:fd:c8:8a:6d:4e:23:e3:b1:fc: 71:55:5b:f9:83:b9:11:2c:3d:40:23:a7:8e:5c:5c: 36:bc:8e:0e:eb:7f:ee:61:40:0b:3a:3e:d5:35:f3: 8e:be:46:3a:69:8e:8a:45:5d:3c:2d:32:c8:a4:b1: 69:34:4f:74:d7:ea:6f:74:d3:27:a1:24:80:8b:b1: d0:da:4b:77:3b:38:86:62:b3:27:1f:be:af:8d:4d: dd:b4:47:7a:29:ff:50:a1:4a:5c:84:15:2a:9b:d9: f7:ef:74:e1:32:0b:b6:b1:cd:8f:57:1c:30:48:65: 54:20:82:93:fe:ca:52:3e:48:2c:43:1c:21:fc:aa: 19:83:22:3c:d7:3a:b1:fe:d3:e0:d9:2c:d0:89:92: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B8:68:6B:BF:F1:D5:34:2B:8B:99:94:CB:31:8B:64:07:3A:A6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2853e4cd-1d64-3bad-b983-48f99d148a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl X509v3 Authority Key Identifier: keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer sbgp-ipAddrBlock: critical IPv6: 2620:a0:200e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:33:8c:b6:6b:c4:91:92:6e:dd:de:38:29:37:63:f6:60:98: 0d:2e:4b:70:12:d7:91:f9:0a:ea:d3:da:8d:e9:38:70:b1:b5: 20:6c:c8:79:29:41:55:23:53:8a:a3:a5:12:a2:78:3e:ea:ec: c4:34:f8:3a:33:f6:4e:f9:0d:fb:43:6c:7e:0b:50:81:e2:13: f2:cf:d5:5b:a9:fa:b3:ff:dc:98:13:40:c6:18:a0:5a:ec:75: 1e:50:71:78:eb:73:8c:3e:9c:bb:fd:af:c2:a1:5e:9d:eb:69: 63:03:de:61:65:5e:c6:3a:7d:a2:d0:ed:d8:97:43:9f:cc:3d: 4c:65:34:b2:7a:58:29:42:66:8b:17:25:c8:86:d4:64:75:9a: 83:45:9a:cb:da:59:48:76:32:19:e2:c8:8e:8d:d4:b8:86:63: 0c:4b:9b:42:c8:d3:8a:e5:d6:45:96:f2:a5:e0:16:a3:ba:d0: 0b:84:4b:a8:33:2c:04:58:0e:03:32:e2:cf:64:21:67:10:f8: d0:0e:75:3e:bb:e5:9f:9d:69:52:09:2b:e9:da:bf:c6:73:d0: f6:f9:23:cd:46:bb:88:c1:c9:a9:71:4a:7c:9b:89:d1:fb:d5: 20:93:2b:a5:6a:21:82:39:ea:89:45:e1:ab:02:ad:10:00:af: ec:d3:37:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEssDsy+vfjZfas1nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5 OWM3MB4XDTI1MDkxMjE3MTMwNVoXDTI1MTIxMTE4MTMwNVowLzEtMCsGA1UEAxMk MzYzOWVjMjAtMzVmNC00NmJiLWE5N2UtZDMzZmNkNGIyNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidVqv6GfHA6f+kB2B6A1xkZeWJ8hDRUR+Jwz uiPWiQ/Tyh8Et0JEPQumGf8bjkObR1iv2VnR4v7FT5BE8VfqXnRbNW2TYh42laRW Dls4hZ4FTl7LQgrd3pqgXg5+iO8uKIZhTKPG56KW7WQJP+H9yIptTiPjsfxxVVv5 g7kRLD1AI6eOXFw2vI4O63/uYUALOj7VNfOOvkY6aY6KRV08LTLIpLFpNE901+pv dNMnoSSAi7HQ2kt3OziGYrMnH76vjU3dtEd6Kf9QoUpchBUqm9n373ThMgu2sc2P VxwwSGVUIIKT/spSPkgsQxwh/KoZgyI81zqx/tPg2SzQiZIj9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE64aGu/8dU0K4uZlMsxi2QHOqalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0 ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvMjg1M2U0Y2QtMWQ2NC0z YmFkLWI5ODMtNDhmOTlkMTQ4YTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1 NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEozjLZrxJGSbt3eOCk3Y/ZgmA0uS3AS15H5CurT2o3pOHCxtSBs yHkpQVUjU4qjpRKieD7q7MQ0+Doz9k75DftDbH4LUIHiE/LP1Vup+rP/3JgTQMYY oFrsdR5QcXjrc4w+nLv9r8KhXp3raWMD3mFlXsY6faLQ7diXQ5/MPUxlNLJ6WClC ZosXJciG1GR1moNFmsvaWUh2MhniyI6N1LiGYwxLm0LI04rl1kWW8qXgFqO60AuE S6gzLARYDgMy4s9kIWcQ+NAOdT675Z+daVIJK+nav8Zz0Pb5I81Gu4jByalxSnyb idH71SCTK6VqIYI56olF4asCrRAAr+zTN44= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:35 2025 by rpki-client