$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa File: 970b7e04-01f1-3927-90a0-79d7a904fce7.roa (raw, json) Hash identifier: 2kOU3Tdi0qBPb8x74l7bnfxfBaqJblHfJsInVsTZQGY= Subject key identifier: 17:B9:7B:4D:26:B2:EA:8C:D5:C8:CA:9E:18:96:42:8A:68:25:F2:06 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584B6A61E6A148B5E80FA87E26E0 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 10390 IP address blocks: 2620:10f:400e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e6:a1:48:b5:e8:0f:a8:7e:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=38f8a377-3f4f-4b68-98f1-97fd277293d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:18:38:2e:aa:c7:64:19:a8:36:d8:10:93: 00:c7:1a:c5:32:e5:43:ad:ba:00:58:dc:2b:ae:c8: d8:b5:15:45:55:8c:1f:55:7a:07:56:a0:dc:ce:a0: 0e:30:b9:73:86:6d:fc:76:80:82:ce:58:45:c8:ef: 34:d4:ac:33:30:a5:1b:3c:2d:83:d9:44:45:5a:d9: fd:ac:07:a3:41:ec:1e:74:dd:6d:32:d2:07:2c:5a: 6e:1e:55:32:53:08:f6:4f:96:8e:5d:ca:e4:d9:c8: 1a:10:55:15:9f:22:74:ea:fe:e4:36:c6:f5:9f:d3: c4:cc:49:1e:28:ed:c3:72:8a:61:38:29:ae:56:b3: ad:6a:4d:3c:07:51:a1:c0:5a:6a:6a:1a:19:2a:e1: 93:8a:af:79:f0:4e:56:60:73:15:a1:3d:ef:6d:26: 6e:d8:7c:ca:53:7a:c2:7f:2d:a6:c0:ed:95:71:53: bb:38:2d:92:eb:5a:33:f2:3f:20:0d:4e:85:b5:bb: a1:41:3c:36:9c:5e:b5:5f:5a:62:de:bb:e9:a8:95: 78:5c:98:bc:9b:7c:46:87:23:4e:50:0d:3a:c1:f6: e5:bd:e5:56:57:26:1f:7c:b7:d3:77:40:4a:20:bd: a7:de:07:13:e4:22:5b:49:7f:4d:44:f2:46:d3:02: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B9:7B:4D:26:B2:EA:8C:D5:C8:CA:9E:18:96:42:8A:68:25:F2:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv6: 2620:10f:400e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:22:82:da:cf:43:94:05:9d:51:31:cb:ed:b3:27:6b:5d:c4: 05:50:66:96:c6:6a:31:7d:81:a7:15:90:67:1f:e2:18:9f:1b: 27:ce:0f:03:2d:71:15:c9:33:08:f2:cf:b8:01:a6:0d:a5:6d: ca:f8:c5:9d:51:1f:54:61:f3:38:c2:eb:00:bd:41:37:8a:d5: 14:d2:4b:75:28:67:ee:98:68:b1:5e:73:b3:7d:41:37:95:77: ac:60:16:93:32:71:1e:03:e0:3d:b2:e5:fa:2a:a2:b1:91:83: bb:2f:7c:51:a4:70:08:f0:7f:b8:7b:47:dc:5e:34:cb:87:0d: 4c:25:95:44:55:4b:0f:3f:be:b1:ee:2e:7f:55:1c:60:cc:65: c1:25:39:6e:00:26:a5:6f:61:15:bf:98:6b:4f:2f:cf:3e:e8: 1d:bc:e6:c4:57:f2:06:8f:95:42:e3:35:ac:cf:82:ff:98:1c: 14:a6:72:4f:a4:04:ac:db:a2:15:0b:ff:0f:ea:2e:75:b7:72: 88:e2:5b:53:d4:da:c3:dc:21:65:f4:aa:79:d3:4a:75:93:69: 55:73:26:c0:9c:a7:fb:92:14:11:7d:2e:ed:b9:32:73:55:47: 48:e3:8a:42:f0:8a:e0:88:7b:02:8a:1a:e9:bc:d8:5b:15:78: 88:59:14:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtqYeahSLXoD6h+JuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MzhmOGEzNzctM2Y0Zi00YjY4LTk4ZjEtOTdmZDI3NzI5M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf8YOC6qx2QZqDbYEJMAxxrFMuVDrboAWNwr rsjYtRVFVYwfVXoHVqDczqAOMLlzhm38doCCzlhFyO801KwzMKUbPC2D2URFWtn9 rAejQewedN1tMtIHLFpuHlUyUwj2T5aOXcrk2cgaEFUVnyJ06v7kNsb1n9PEzEke KO3DcophOCmuVrOtak08B1GhwFpqahoZKuGTiq958E5WYHMVoT3vbSZu2HzKU3rC fy2mwO2VcVO7OC2S61oz8j8gDU6FtbuhQTw2nF61X1pi3rvpqJV4XJi8m3xGhyNO UA06wfblveVWVyYffLfTd0BKIL2n3gcT5CJbSX9NRPJG0wImPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBe5e00msuqM1cjKnhiWQopoJfIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvOTcwYjdlMDQtMDFmMS0z OTI3LTkwYTAtNzlkN2E5MDRmY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABD0AO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIMigtrPQ5QFnVExy+2zJ2tdxAVQZpbGajF9gacVkGcf4hifGyfO DwMtcRXJMwjyz7gBpg2lbcr4xZ1RH1Rh8zjC6wC9QTeK1RTSS3UoZ+6YaLFec7N9 QTeVd6xgFpMycR4D4D2y5foqorGRg7svfFGkcAjwf7h7R9xeNMuHDUwllURVSw8/ vrHuLn9VHGDMZcElOW4AJqVvYRW/mGtPL88+6B285sRX8gaPlULjNazPgv+YHBSm ck+kBKzbohUL/w/qLnW3cojiW1PU2sPcIWX0qnnTSnWTaVVzJsCcp/uSFBF9Lu25 MnNVR0jjikLwiuCIewKKGum82FsVeIhZFHA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:55:15 2025 by rpki-client