$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa File: cfc0aa13-2df9-3952-848a-2c1df7879358.roa (raw, json) Hash identifier: KKKCIOZv3puUOmOhHr5NhQ1TsH7XAazCHsaiJj7EjLc= Subject key identifier: 74:12:1D:F0:64:1C:89:DB:1D:E3:21:55:D3:84:3C:90:07:7C:F3:B3 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584B0A11673447ADC7F5FAFAE600 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 393885 IP address blocks: 2604:4a00:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:67:34:47:ad:c7:f5:fa:fa:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=ee6c2dc3-aea8-4709-87ca-4353da979ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:d0:5f:0a:07:f0:55:b8:0a:c6:3b:44:19: 13:a9:2d:10:43:55:e2:d5:36:25:ae:05:a4:4c:e0: b6:a7:63:d1:a2:9e:67:9c:2b:2e:21:04:90:35:d9: 33:16:04:90:e7:0c:fd:cb:b0:fe:a8:41:81:e8:76: 08:46:30:2b:0d:7b:21:7b:c3:b4:10:1f:93:86:ed: 56:e5:7b:b8:ab:d0:84:28:0e:54:2f:94:6a:2a:15: a6:e1:26:4c:ce:db:e9:be:02:fb:a2:91:a6:9f:0c: 7c:d9:8a:4e:49:4a:76:f3:4d:09:d9:7c:ee:97:6b: 52:25:ce:fc:a6:b9:70:a0:1d:89:3b:43:91:e1:3f: d7:5d:21:d8:3d:6d:c3:cd:58:7f:09:6d:c7:78:fe: de:85:d7:bc:8d:2b:26:2e:2b:b7:66:90:28:2a:19: 14:90:83:77:78:2a:7c:7d:dd:a8:a8:3e:4d:22:f6: d2:8a:34:f9:02:49:d6:f3:d8:14:30:58:b1:76:d0: a5:8c:40:43:c4:60:54:ea:2a:f0:f7:5d:e0:51:7b: 71:59:17:a5:de:2c:b4:d5:d5:c0:92:60:a0:36:f7: 30:18:2d:34:c7:02:6f:c8:cc:2f:7b:ee:28:a6:43: 13:bf:03:b7:c9:de:ff:a4:de:f7:34:a3:8a:53:17: 0b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:12:1D:F0:64:1C:89:DB:1D:E3:21:55:D3:84:3C:90:07:7C:F3:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:f000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f1:15:54:d2:c5:40:93:1b:15:6d:2e:1a:27:ec:56:c9:1a: 4d:4d:c3:d2:fc:f9:12:c7:5a:16:44:57:b4:6b:17:7f:72:53: 25:0a:ae:26:7a:50:70:0a:b6:40:94:8b:b0:fc:92:31:3e:94: 4f:09:67:ea:d0:52:ca:7d:f7:6e:81:52:2c:d0:c7:12:39:52: af:df:b9:37:d4:a0:79:47:0e:7d:3f:5a:41:8e:06:ee:d4:98: 1b:5d:c1:44:d9:66:72:33:c6:b1:70:dd:de:d0:b1:ee:86:1b: 93:fd:86:7e:ee:54:f0:90:a2:c7:07:0f:7b:7c:a2:fa:ab:72: ae:4e:9e:9c:5d:27:19:05:b2:d9:68:d1:0e:1a:46:8a:bb:3f: 01:eb:02:00:a7:b8:7e:c8:37:4c:de:3c:5a:87:99:c0:76:a7: 94:a4:7c:e3:a1:4a:ff:79:04:b8:8e:2f:1f:9a:dd:27:72:c5: 12:b9:13:65:e8:19:5b:d2:00:4d:2e:33:25:73:3f:7f:dd:d6: e8:80:2a:9d:29:47:e1:c2:94:0f:17:e5:0c:3d:b8:a0:e3:05: 9f:95:4a:d6:29:0b:38:2e:08:6c:ce:97:a7:32:ba:ec:a8:8d: 64:26:db:65:53:15:74:83:d9:c1:ba:ee:41:98:fe:b2:43:9c: 6b:d6:44:79 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsKEWc0R63H9fr65gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ZWU2YzJkYzMtYWVhOC00NzA5LTg3Y2EtNDM1M2RhOTc5ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3TQXwoH8FW4CsY7RBkTqS0QQ1Xi1TYlrgWk TOC2p2PRop5nnCsuIQSQNdkzFgSQ5wz9y7D+qEGB6HYIRjArDXshe8O0EB+Thu1W 5Xu4q9CEKA5UL5RqKhWm4SZMztvpvgL7opGmnwx82YpOSUp2800J2Xzul2tSJc78 prlwoB2JO0OR4T/XXSHYPW3DzVh/CW3HeP7ehde8jSsmLiu3ZpAoKhkUkIN3eCp8 fd2oqD5NIvbSijT5AknW89gUMFixdtCljEBDxGBU6irw913gUXtxWRel3iy01dXA kmCgNvcwGC00xwJvyMwve+4opkMTvwO3yd7/pN73NKOKUxcLDQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHQSHfBkHInbHeMhVdOEPJAHfPOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvY2ZjMGFhMTMtMmRmOS0z OTUyLTg0OGEtMmMxZGY3ODc5MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAE/EVVNLFQJMbFW0uGifsVskaTU3D0vz5EsdaFkRXtGsXf3JTJQqu JnpQcAq2QJSLsPySMT6UTwln6tBSyn33boFSLNDHEjlSr9+5N9SgeUcOfT9aQY4G 7tSYG13BRNlmcjPGsXDd3tCx7oYbk/2Gfu5U8JCixwcPe3yi+qtyrk6enF0nGQWy 2WjRDhpGirs/AesCAKe4fsg3TN48WoeZwHanlKR846FK/3kEuI4vH5rdJ3LFErkT ZegZW9IATS4zJXM/f93W6IAqnSlH4cKUDxflDD24oOMFn5VK1ikLOC4IbM6XpzK6 7KiNZCbbZVMVdIPZwbruQZj+skOca9ZEeQ== -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:34 2025 by rpki-client