$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa File: 1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa (raw, json) Hash identifier: +YTf/K3UqSBOzr8uRxyggeXRdw/qgXDBKBtgh235OcA= Subject key identifier: A9:EC:5B:5A:AD:17:2D:56:A7:96:39:6C:6C:9D:18:77:63:3B:09:D0 Certificate issuer: /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c Certificate serial: 010D0C9F4328584AFEE6A45132BCCCD8A2B15200 Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 32217 IP address blocks: 2604:8440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a4:51:32:bc:cc:d8:a2:b1:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=eae80f50-b6d6-4b17-804a-f9be2e0fda61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:03:bd:02:50:9e:df:f6:e3:75:01:f5:31: 0d:78:f9:f9:7c:db:a0:43:4d:5b:fb:f4:97:24:05: 79:6f:e9:dd:0d:83:c3:31:56:55:b1:ca:4a:11:c1: af:19:d2:2b:85:7e:b7:83:ab:e7:44:1a:1f:ad:e5: db:22:6a:9a:97:32:13:ae:f2:22:d0:06:47:4c:07: 1c:e6:86:af:7c:f0:51:88:fb:a5:ab:41:9a:13:12: b6:0a:67:56:66:6e:b0:5f:de:ce:e6:16:e6:56:51: fa:47:ae:8d:d9:65:65:c2:f9:05:f1:f1:bb:20:73: 1c:ef:0a:90:8a:ef:e9:ce:2b:41:de:5d:59:a6:f1: 17:ef:e2:ab:52:95:e7:25:8b:b2:12:2b:14:37:f5: 4a:e8:af:b4:c2:56:d7:66:9c:aa:40:00:00:1f:ba: 4f:31:44:4e:2a:3e:cf:ea:22:0b:ee:ad:19:78:bd: 49:47:de:35:7b:2f:15:6f:10:d1:ef:27:69:5e:3e: b9:e2:de:cb:9c:b2:7c:96:63:75:a3:ae:df:83:52: a7:d8:ed:ea:bb:b0:0a:07:a5:54:15:49:61:df:aa: 24:fb:4a:ea:de:e2:82:b6:a7:ec:f3:47:e7:48:76: b0:75:dd:22:af:bf:19:96:9f:4a:08:33:36:8c:82: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EC:5B:5A:AD:17:2D:56:A7:96:39:6C:6C:9D:18:77:63:3B:09:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl X509v3 Authority Key Identifier: keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer sbgp-ipAddrBlock: critical IPv6: 2604:8440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:df:a2:38:20:96:1d:77:4b:af:b7:18:81:b3:ec:a7:fb:e2: de:fd:db:f4:ae:78:06:09:33:93:aa:11:c7:be:2c:ad:e0:b1: 80:26:f7:3d:ed:cb:a5:43:a0:5f:27:82:d7:a0:8a:29:d0:e9: 1f:10:85:e8:c0:af:40:c7:3c:70:24:91:c0:4a:4d:cd:ca:1e: fe:f2:64:a6:6f:01:4c:c7:58:d8:97:d3:1d:42:74:47:28:a6: a0:b8:c5:d8:d2:80:fc:bb:ee:87:ab:bd:17:93:05:43:3e:60: 75:59:76:73:3c:4d:95:73:c8:3b:50:db:ed:4a:bc:ae:43:1d: 23:4b:03:51:ed:f0:fc:98:1f:9a:0c:fb:79:90:f5:07:a0:19: af:f3:61:bf:92:2e:fb:f2:f6:06:c7:72:96:80:95:97:94:e5: 9d:55:c8:1c:a6:c9:c2:f0:36:84:7b:e2:cc:8d:12:d5:4b:74: 05:cb:39:07:67:0b:7b:ac:10:47:7d:ad:41:9f:a8:47:b7:25: 37:b5:3a:2f:00:76:78:f1:50:3c:86:99:8c:7f:78:4c:4d:54: 6f:9b:7f:7d:c6:1c:ce:a2:53:34:12:14:34:08:15:35:c2:a1: 31:41:c3:aa:74:0c:cb:6c:62:66:9a:f2:56:11:d6:b5:ba:b3: 17:64:3f:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr+5qRRMrzM2KKxUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhlMWY5ZWEtMjRiZi00YzIyLWExODItZmM5MjVkNWE4 MTljMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZWFlODBmNTAtYjZkNi00YjE3LTgwNGEtZjliZTJlMGZkYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4oDvQJQnt/243UB9TENePn5fNugQ01b+/SX JAV5b+ndDYPDMVZVscpKEcGvGdIrhX63g6vnRBofreXbImqalzITrvIi0AZHTAcc 5oavfPBRiPulq0GaExK2CmdWZm6wX97O5hbmVlH6R66N2WVlwvkF8fG7IHMc7wqQ iu/pzitB3l1ZpvEX7+KrUpXnJYuyEisUN/VK6K+0wlbXZpyqQAAAH7pPMUROKj7P 6iIL7q0ZeL1JR941ey8VbxDR7ydpXj654t7LnLJ8lmN1o67fg1Kn2O3qu7AKB6VU FUlh36ok+0rq3uKCtqfs80fnSHawdd0ir78Zlp9KCDM2jIILiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKnsW1qtFy1Wp5Y5bGydGHdjOwnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUx ZjllYS0yNGJmLTRjMjItYTE4Mi1mYzkyNWQ1YTgxOWMvMTM2M2IyYzMtNjNlYS0z YjNkLTkxM2YtZjdhZGYwNmVkYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjhlMWY5ZWEtMjRiZi00YzIyLWEx ODItZmM5MjVkNWE4MTljLzI4ZTFmOWVhLTI0YmYtNGMyMi1hMTgyLWZjOTI1ZDVh ODE5Yy5jcmwwHwYDVR0jBBgwFoAURJcM9+Kw97NRT515flzDl/luGxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUxZjllYS0yNGJmLTRjMjItYTE4Mi1mYzky NWQ1YTgxOWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSEQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBn36I4IJYdd0uvtxiBs+yn++Le/dv0rngGCTOTqhHHviyt4LGAJvc9 7culQ6BfJ4LXoIop0OkfEIXowK9AxzxwJJHASk3Nyh7+8mSmbwFMx1jYl9MdQnRH KKaguMXY0oD8u+6Hq70XkwVDPmB1WXZzPE2Vc8g7UNvtSryuQx0jSwNR7fD8mB+a DPt5kPUHoBmv82G/ki778vYGx3KWgJWXlOWdVcgcpsnC8DaEe+LMjRLVS3QFyzkH Zwt7rBBHfa1Bn6hHtyU3tTovAHZ48VA8hpmMf3hMTVRvm399xhzOolM0EhQ0CBU1 wqExQcOqdAzLbGJmmvJWEda1urMXZD9z -----END CERTIFICATE-----Generated at Wed Nov 5 22:12:50 2025 by rpki-client