$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2a91e7d9-f14d-3585-b196-ff2b6ef53ff6.roa File: 2a91e7d9-f14d-3585-b196-ff2b6ef53ff6.roa (raw, json) Hash identifier: AId+mgvINlF4nNgqthNknA6g7fyjvNSsGbrc3fVrSms= Subject key identifier: 46:9F:78:27:21:7D:57:02:1C:C7:BA:51:A1:23:F0:3E:2F:B6:58:6E Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7 Certificate serial: 010D0C9F4328584B2C0FC3CC99435DB9D57781C0 Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2a91e7d9-f14d-3585-b196-ff2b6ef53ff6.roa Signing time: Fri 12 Sep 2025 17:15:02 +0000 ROA not before: Fri 12 Sep 2025 17:15:02 +0000 ROA not after: Thu 11 Dec 2025 18:15:02 +0000 asID: 9498 IP address blocks: 2620:a0:2008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:0f:c3:cc:99:43:5d:b9:d5:77:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7 Validity Not Before: Sep 12 17:15:02 2025 GMT Not After : Dec 11 18:15:02 2025 GMT Subject: CN=d7af795a-de95-47ce-a628-05703d7dc66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:d0:65:a4:e1:96:d4:c4:13:71:d9:0f:dd: b3:c0:63:ef:c5:34:cc:29:70:1d:d5:72:4f:d9:30: 55:ca:b9:49:c2:2a:39:f7:ce:7f:d0:70:76:56:b1: de:65:f1:f7:6f:0e:90:01:0c:e3:4c:65:b1:84:21: 32:46:56:08:a0:2a:e5:0b:1c:12:a7:6f:da:55:74: 29:6c:41:31:87:5f:dc:77:98:6c:0e:dc:5d:b2:80: 90:72:31:d9:51:55:d5:9f:67:54:7a:a6:24:5a:10: c1:99:8a:a1:f6:8d:42:31:13:39:3f:74:76:24:43: f4:f6:28:c0:04:43:07:8c:de:3b:83:79:92:0c:1c: 96:3b:26:c9:c8:27:3d:5d:64:9f:50:0b:76:85:55: fd:c1:c6:42:5f:70:ac:3f:fe:fd:ee:30:f1:97:98: 79:44:45:44:4b:7b:e8:a4:d2:96:1d:c4:d3:48:4f: 62:9c:13:f3:a8:6b:c5:9b:c7:08:86:84:5d:5f:58: d0:bf:d1:c9:fd:cb:50:d6:cb:09:02:00:ff:e3:02: 63:ae:b4:28:9d:8b:dc:ef:43:73:3c:0f:60:cc:be: e7:e1:74:7e:80:c9:7f:43:2c:df:c1:32:97:83:8d: 52:5f:14:7d:35:c2:e2:6b:47:cd:c0:b8:43:33:09: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9F:78:27:21:7D:57:02:1C:C7:BA:51:A1:23:F0:3E:2F:B6:58:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2a91e7d9-f14d-3585-b196-ff2b6ef53ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl X509v3 Authority Key Identifier: keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer sbgp-ipAddrBlock: critical IPv6: 2620:a0:2008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3f:84:5c:3a:e2:db:15:35:27:fd:f1:68:6f:4e:8c:e1:03: e3:cb:9d:ae:49:d6:a1:71:55:21:37:3e:f6:41:6e:78:49:d8: 82:06:de:ed:93:45:0e:32:a3:aa:ba:16:60:7a:15:5d:04:31: 65:20:c4:76:c8:c9:43:3a:9f:50:a8:b5:7a:b6:c0:11:77:9c: d6:8a:65:a1:44:b6:0e:7a:7b:b0:86:14:b5:7b:27:6f:19:55: 18:c7:60:b2:c9:8f:c7:37:e1:49:a2:04:e9:e0:cc:62:8f:4f: f6:e9:5b:b1:b4:12:5e:06:78:a8:b0:d9:a6:0d:f9:f0:1d:85: bd:94:cb:bf:8c:2c:4d:1f:4e:93:ad:9c:8a:a9:55:76:57:38: e7:22:5f:41:d9:da:3f:e7:bd:b9:66:7e:6d:cd:1c:b5:eb:d2: 3f:aa:62:3c:ad:a0:f1:fc:93:9c:27:65:24:ae:13:6b:75:19: 88:52:3c:2d:f7:d5:2c:5e:33:fa:d3:8a:5a:a0:26:d5:3f:96: 65:21:1b:af:2c:9c:21:e7:e5:a9:d4:b0:3a:35:ac:78:34:2d: 4a:17:e5:50:92:b0:88:60:68:68:3c:18:cc:ec:97:ed:2b:39: be:f8:97:94:42:47:2e:77:3e:7b:96:61:73:8c:4d:ee:8b:4d: 34:1b:5d:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEssD8PMmUNdudV3gcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5 OWM3MB4XDTI1MDkxMjE3MTUwMloXDTI1MTIxMTE4MTUwMlowLzEtMCsGA1UEAxMk ZDdhZjc5NWEtZGU5NS00N2NlLWE2MjgtMDU3MDNkN2RjNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxnQZaThltTEE3HZD92zwGPvxTTMKXAd1XJP 2TBVyrlJwio5985/0HB2VrHeZfH3bw6QAQzjTGWxhCEyRlYIoCrlCxwSp2/aVXQp bEExh1/cd5hsDtxdsoCQcjHZUVXVn2dUeqYkWhDBmYqh9o1CMRM5P3R2JEP09ijA BEMHjN47g3mSDByWOybJyCc9XWSfUAt2hVX9wcZCX3CsP/797jDxl5h5REVES3vo pNKWHcTTSE9inBPzqGvFm8cIhoRdX1jQv9HJ/ctQ1ssJAgD/4wJjrrQonYvc70Nz PA9gzL7n4XR+gMl/QyzfwTKXg41SXxR9NcLia0fNwLhDMwk5lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEafeCchfVcCHMe6UaEj8D4vtlhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0 ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvMmE5MWU3ZDktZjE0ZC0z NTg1LWIxOTYtZmYyYjZlZjUzZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1 NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEs/hFw64tsVNSf98WhvTozhA+PLna5J1qFxVSE3PvZBbnhJ2IIG 3u2TRQ4yo6q6FmB6FV0EMWUgxHbIyUM6n1CotXq2wBF3nNaKZaFEtg56e7CGFLV7 J28ZVRjHYLLJj8c34UmiBOngzGKPT/bpW7G0El4GeKiw2aYN+fAdhb2Uy7+MLE0f TpOtnIqpVXZXOOciX0HZ2j/nvblmfm3NHLXr0j+qYjytoPH8k5wnZSSuE2t1GYhS PC331SxeM/rTilqgJtU/lmUhG68snCHn5anUsDo1rHg0LUoX5VCSsIhgaGg8GMzs l+0rOb74l5RCRy53PnuWYXOMTe6LTTQbXbE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:22:11 2025 by rpki-client