$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/f5a670e7-0b2a-3d19-ab24-de24bc74805f.roa File: f5a670e7-0b2a-3d19-ab24-de24bc74805f.roa (raw, json) Hash identifier: d787kGAnUNQcOqjdOIKWGHtmd5TRAD5Kpv8FPxBFWow= Subject key identifier: FF:06:92:2E:8C:46:B9:B0:CA:0C:AB:C7:9F:61:40:01:D4:0B:42:AC Certificate issuer: /CN=0432b247-64bf-4a12-bc99-32dbce58a455 Certificate serial: 010D0C9F4328584BB88D0DF19896DC37AF9C6C00 Authority key identifier: 00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/f5a670e7-0b2a-3d19-ab24-de24bc74805f.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 2620:104:2041::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:0d:f1:98:96:dc:37:af:9c:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0432b247-64bf-4a12-bc99-32dbce58a455 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=e5298fef-3a09-4ae2-be55-d12bce413ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:ea:e3:11:a3:f6:05:09:ce:6a:25:97:85: a9:47:21:6e:0e:6e:50:1c:18:68:95:72:dc:4f:06: 2d:1a:13:fb:1c:ce:2e:29:59:23:23:a6:77:3a:c4: a4:9a:26:1d:93:bc:b3:72:96:4b:22:6c:11:b1:49: b0:3e:64:66:03:20:e1:49:c1:35:4c:64:9a:b4:2f: f2:91:15:1d:7b:c2:49:40:30:82:24:a5:1c:b3:ca: 8d:49:dd:4b:a7:1b:9c:70:49:9c:10:e5:8f:5d:f6: 78:ec:a5:59:75:a1:b3:a2:85:3a:23:c1:58:43:0f: 5d:f0:a0:a4:e3:94:64:01:5e:bd:e9:27:fa:12:1d: f3:35:7d:6d:39:d9:30:3b:8c:26:72:d1:3b:ac:8d: 1e:39:16:25:87:a0:1f:a2:4b:f4:63:76:28:5c:e2: 64:b8:47:84:08:c3:8c:67:ee:aa:c4:d5:38:8e:28: 0a:d9:06:2d:16:55:fb:8f:3e:9a:b5:fb:19:da:be: 67:ca:92:e6:a0:fc:5d:43:64:3d:f5:2c:8e:3c:44: e0:38:76:61:6c:ef:3d:dc:85:f6:17:c6:22:d2:51: 08:2a:37:8b:cb:11:f5:52:b9:77:b8:fd:4b:a3:c1: a8:42:48:a1:f5:bc:a4:1e:36:c1:c0:3e:42:65:0e: 4d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:06:92:2E:8C:46:B9:B0:CA:0C:AB:C7:9F:61:40:01:D4:0B:42:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/f5a670e7-0b2a-3d19-ab24-de24bc74805f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl X509v3 Authority Key Identifier: keyid:00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer sbgp-ipAddrBlock: critical IPv6: 2620:104:2041::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:68:7d:62:46:09:59:fb:09:ff:e7:8e:72:e1:5c:5a:71:6b: e5:16:cf:c1:b6:9f:07:35:4c:40:b9:db:e3:23:c2:0c:c3:9e: 28:8c:f5:f9:7e:e3:89:66:bb:a7:65:20:0e:c3:0f:bb:56:84: c9:c4:ae:8a:a6:d1:5b:c9:84:2f:cb:c9:05:a3:d0:af:ea:04: 6b:e6:86:20:2d:67:2d:71:3f:48:a5:50:a2:0b:33:16:21:a7: 35:ce:c2:90:ce:13:12:70:ac:62:a4:95:a5:9d:93:19:e6:5f: 39:76:5c:22:0b:89:ec:b7:4e:9c:b2:18:cb:dd:00:72:a7:28: d9:bb:74:5e:c8:d5:68:a5:93:79:d4:c4:3c:3e:1d:61:f1:35: e7:4e:49:92:91:61:9a:2a:e7:02:9b:af:12:cf:e0:ac:aa:8e: 4e:cf:67:90:5d:48:d1:07:68:e9:e3:89:3c:ce:f6:d9:46:1a: d1:76:52:31:7b:69:ca:32:5c:76:de:7f:f3:ba:65:80:7c:d5: 87:0f:4d:38:ed:7f:e9:7d:b4:1f:3a:a1:17:23:c0:e7:c7:9e: 09:b5:50:43:40:38:5e:a8:28:30:2b:8e:4e:63:27:9c:08:4d: 1e:27:7a:3f:6d:a8:39:76:ec:59:f3:6b:d7:ea:a3:50:e5:f7: ad:0f:93:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jQ3xmJbcN6+cbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQzMmIyNDctNjRiZi00YTEyLWJjOTktMzJkYmNlNThh NDU1MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTUyOThmZWYtM2EwOS00YWUyLWJlNTUtZDEyYmNlNDEzZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrbq4xGj9gUJzmoll4WpRyFuDm5QHBholXLc TwYtGhP7HM4uKVkjI6Z3OsSkmiYdk7yzcpZLImwRsUmwPmRmAyDhScE1TGSatC/y kRUde8JJQDCCJKUcs8qNSd1LpxuccEmcEOWPXfZ47KVZdaGzooU6I8FYQw9d8KCk 45RkAV696Sf6Eh3zNX1tOdkwO4wmctE7rI0eORYlh6Afokv0Y3YoXOJkuEeECMOM Z+6qxNU4jigK2QYtFlX7jz6atfsZ2r5nypLmoPxdQ2Q99SyOPETgOHZhbO893IX2 F8Yi0lEIKjeLyxH1Url3uP1Lo8GoQkih9bykHjbBwD5CZQ5NXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP8Gki6MRrmwygyrx59hQAHUC0KsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNDMy YjI0Ny02NGJmLTRhMTItYmM5OS0zMmRiY2U1OGE0NTUvZjVhNjcwZTctMGIyYS0z ZDE5LWFiMjQtZGUyNGJjNzQ4MDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDQzMmIyNDctNjRiZi00YTEyLWJj OTktMzJkYmNlNThhNDU1LzA0MzJiMjQ3LTY0YmYtNGExMi1iYzk5LTMyZGJjZTU4 YTQ1NS5jcmwwHwYDVR0jBBgwFoAUAOUyL6qZsi1MfnzRCPtaN7LjAT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNDMyYjI0Ny02NGJmLTRhMTItYmM5OS0zMmRi Y2U1OGE0NTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABBCBB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAItofWJGCVn7Cf/njnLhXFpxa+UWz8G2nwc1TEC52+MjwgzDniiM 9fl+44lmu6dlIA7DD7tWhMnEroqm0VvJhC/LyQWj0K/qBGvmhiAtZy1xP0ilUKIL MxYhpzXOwpDOExJwrGKklaWdkxnmXzl2XCILiey3TpyyGMvdAHKnKNm7dF7I1Wil k3nUxDw+HWHxNedOSZKRYZoq5wKbrxLP4Kyqjk7PZ5BdSNEHaOnjiTzO9tlGGtF2 UjF7acoyXHbef/O6ZYB81YcPTTjtf+l9tB86oRcjwOfHngm1UENAOF6oKDArjk5j J5wITR4nej9tqDl27Fnza9fqo1Dl960Pk1k= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:46 2025 by rpki-client