$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/900c34ab-638c-3774-a83f-faf44c9cf9a7.roa File: 900c34ab-638c-3774-a83f-faf44c9cf9a7.roa (raw, json) Hash identifier: JYt4kjE6mJryHINMqlbSGmI8xnwlAtoEhO19WbiB5kc= Subject key identifier: A3:97:3F:AF:1E:4C:52:3B:45:0A:29:2A:CE:D1:16:B4:C3:90:85:89 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584B0A1166301314E61891DB5A00 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/900c34ab-638c-3774-a83f-faf44c9cf9a7.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 393885 IP address blocks: 2604:4a00:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:66:30:13:14:e6:18:91:db:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=5e594436-e067-4f39-9c79-7422e5bcd49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:96:4b:ba:d2:ec:8e:f4:8c:43:0a:ed:49: 4a:ab:17:c2:22:28:3e:09:32:e5:ba:54:5b:00:44: 1e:73:f1:05:e7:cc:78:b7:b5:dc:e5:53:a0:5a:d8: 95:09:2e:e6:6d:b2:b7:e2:42:b4:3d:f8:4c:37:77: c2:43:5c:1f:30:5f:71:7e:35:9a:2a:47:c6:7a:81: 51:70:7d:e8:9b:e3:6f:61:9e:ba:fd:1c:1e:b1:5e: 85:0a:48:2a:51:af:50:cd:77:50:6d:33:b2:7f:84: 98:23:96:d5:66:e2:aa:00:35:19:6e:84:de:ce:3b: 45:32:df:8c:cc:90:ec:88:f7:4a:52:70:79:ff:71: 41:48:b4:e9:51:97:c7:dc:96:2f:a9:ea:07:c6:27: cc:2a:ce:90:5b:59:79:44:34:6f:71:d7:f0:d9:cb: a9:09:7a:82:61:20:3d:4f:af:d7:72:bf:45:1d:c0: 5a:a3:e8:b5:69:ef:29:7e:17:12:e5:02:32:ec:1e: 7b:bf:cd:12:99:81:50:d5:f7:3c:b9:d4:d6:5b:a1: 96:f5:20:02:b3:6a:f2:04:6c:b6:a5:a5:39:c0:0a: d1:80:2f:16:0b:f4:53:fa:ed:83:84:e2:f1:ff:43: d7:21:b9:dd:dc:af:f9:59:c0:49:53:bb:6a:6e:cd: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:97:3F:AF:1E:4C:52:3B:45:0A:29:2A:CE:D1:16:B4:C3:90:85:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/900c34ab-638c-3774-a83f-faf44c9cf9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:2000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f6:ac:93:ee:51:02:75:e4:bd:23:7d:a6:1f:d5:19:ff:25: d9:be:53:9e:ba:9c:d8:02:d9:91:4c:75:8f:f1:ca:5e:1e:46: 5d:d1:81:5b:54:9c:8e:be:ab:a0:46:f0:e9:16:3e:1d:18:ad: e9:41:e3:45:da:cc:a6:3f:7b:88:69:76:cd:23:75:2d:d5:ba: 29:86:5b:2a:68:1b:a4:04:7e:93:a2:88:98:ff:c3:59:20:0a: 12:c8:a0:23:17:1b:ba:ba:4a:71:08:7a:52:fa:4a:c0:a8:1a: 44:ce:95:44:7f:c9:96:63:12:91:e8:44:f3:57:16:0a:74:21: e0:9f:57:34:d7:ad:d5:e0:f8:68:2c:f2:df:e3:c7:16:7b:90: e7:9a:10:48:fe:c5:66:60:b0:59:3c:f3:e8:2b:54:2f:72:9f: 43:38:7c:b3:cb:55:b9:6f:57:87:64:a5:e9:a5:82:2a:db:55: 41:c8:eb:88:b8:a8:e9:06:fe:29:88:b2:05:33:a4:d5:64:9e: 4f:20:82:7c:bd:ba:31:ec:a7:89:2a:38:0f:71:d4:70:e4:10: 43:dc:20:95:db:49:4f:8f:b5:6f:00:35:61:27:57:6e:57:71: 6e:bb:d5:45:e5:54:60:d9:1f:af:bc:fd:8e:89:13:43:af:54: c3:19:9e:8d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsKEWYwExTmGJHbWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NWU1OTQ0MzYtZTA2Ny00ZjM5LTljNzktNzQyMmU1YmNkNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAeWS7rS7I70jEMK7UlKqxfCIig+CTLlulRb AEQec/EF58x4t7Xc5VOgWtiVCS7mbbK34kK0PfhMN3fCQ1wfMF9xfjWaKkfGeoFR cH3om+NvYZ66/RwesV6FCkgqUa9QzXdQbTOyf4SYI5bVZuKqADUZboTezjtFMt+M zJDsiPdKUnB5/3FBSLTpUZfH3JYvqeoHxifMKs6QW1l5RDRvcdfw2cupCXqCYSA9 T6/Xcr9FHcBao+i1ae8pfhcS5QIy7B57v80SmYFQ1fc8udTWW6GW9SACs2ryBGy2 paU5wArRgC8WC/RT+u2DhOLx/0PXIbnd3K/5WcBJU7tqbs3gtwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKOXP68eTFI7RQopKs7RFrTDkIWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvOTAwYzM0YWItNjM4Yy0z Nzc0LWE4M2YtZmFmNDRjOWNmOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKACAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFvask+5RAnXkvSN9ph/VGf8l2b5Tnrqc2ALZkUx1j/HKXh5GXdGB W1Scjr6roEbw6RY+HRit6UHjRdrMpj97iGl2zSN1LdW6KYZbKmgbpAR+k6KImP/D WSAKEsigIxcburpKcQh6UvpKwKgaRM6VRH/JlmMSkehE81cWCnQh4J9XNNet1eD4 aCzy3+PHFnuQ55oQSP7FZmCwWTzz6CtUL3KfQzh8s8tVuW9Xh2Sl6aWCKttVQcjr iLio6Qb+KYiyBTOk1WSeTyCCfL26MeyniSo4D3HUcOQQQ9wgldtJT4+1bwA1YSdX bldxbrvVReVUYNkfr7z9jokTQ69UwxmejQ== -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:43 2025 by rpki-client