$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa File: b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa (raw, json) Hash identifier: EUOlwb9+5S0zVgZfaMPXPA5ss36y8yoq54Y8AFWR+iw= Subject key identifier: 7C:6F:6F:E7:A4:E7:EC:54:48:3C:6F:7E:8A:A5:BE:E0:38:A7:41:B1 Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F4328584B79BCBA83504CCB1ECF9DEEE0 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 958 IP address blocks: 2605:ac40:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:ba:83:50:4c:cb:1e:cf:9d:ee:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=34d9b415-b049-4e30-9587-6dfea44d7a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:a2:a0:5f:39:b1:a4:4c:c1:ba:4c:ec:c1: 71:b1:76:96:2e:69:a2:b6:bf:c1:ed:89:f8:57:dd: 46:b9:9d:90:24:d1:81:cf:d8:a9:a6:36:61:14:2d: e0:37:2d:25:ca:5d:0e:fe:a4:aa:71:d1:3e:d7:86: 6a:a9:c9:08:77:ca:40:bd:df:4d:0d:ba:74:75:ac: 53:29:f6:28:a2:03:7e:70:5f:1b:3d:31:60:f2:f0: 4a:a6:72:e7:75:03:0e:88:8a:b6:c2:41:22:63:6d: 4f:a6:d7:34:b1:05:29:fe:10:80:38:a8:8a:a6:9c: a8:69:e9:fd:ad:4d:da:4a:b5:6c:35:8e:fc:48:79: 02:3e:26:0d:73:e4:d2:39:42:03:3e:6c:a6:b8:6c: 40:b1:fa:48:45:79:85:a6:94:87:e8:43:95:b5:ba: 30:0f:a5:19:56:15:69:b5:42:1b:72:f6:66:e1:8b: 41:ea:f6:eb:c1:07:05:e9:b1:d9:88:57:e0:1c:36: fc:64:bc:22:53:22:19:e1:96:16:ab:f0:fc:8e:0f: 64:94:af:16:d5:e4:7a:34:14:33:0a:cc:bd:02:b6: 2d:98:16:31:9f:02:59:71:0a:12:cf:ce:8c:c6:d2: 54:d8:c6:b8:75:ed:ed:26:e7:7c:4b:e3:70:c1:4f: 89:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6F:6F:E7:A4:E7:EC:54:48:3C:6F:7E:8A:A5:BE:E0:38:A7:41:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:38:98:2c:af:f7:01:bc:06:9f:66:4f:65:64:ec:bc:52:f7: bb:03:52:bc:16:05:bd:13:f4:b4:ca:1a:0f:32:38:e9:e1:29: c6:02:b8:48:ef:97:d3:d2:a5:19:f1:33:5d:86:b5:89:76:24: 2b:1d:0d:f4:47:2b:4a:a4:94:60:3a:2e:2e:d0:a0:84:ed:ab: 9b:c4:5e:90:07:72:b0:38:ab:0c:0b:05:cf:c3:f2:4d:ae:36: 92:f1:d8:4d:da:4a:95:9b:6c:67:03:da:eb:9d:e6:51:fd:b7: c4:c9:86:e7:af:5c:9f:a2:73:54:7d:b1:b2:09:bc:0b:a5:50: 54:21:46:fa:81:9b:64:13:cc:91:40:05:e0:0f:58:87:dd:fc: 27:fa:e7:8b:13:8f:1d:08:d2:72:35:2e:f7:23:b6:4e:7f:e0: 34:bd:34:7f:16:61:29:12:5f:f9:76:9c:63:01:2d:1f:da:25: 4b:16:aa:82:ad:a5:77:c6:7d:28:1e:f3:27:7a:6b:c1:0f:82: 20:5a:c2:35:3b:1a:19:db:22:78:0c:bb:1a:17:f2:07:5f:b5: e0:93:de:71:ab:29:49:ce:87:5f:1d:6c:28:dc:30:35:80:9a: ae:31:74:7d:30:3f:6c:c1:2e:21:e7:da:16:53:9b:0f:ed:85: ef:f6:79:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vLqDUEzLHs+d7uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MzRkOWI0MTUtYjA0OS00ZTMwLTk1ODctNmRmZWE0NGQ3YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAqioF85saRMwbpM7MFxsXaWLmmitr/B7Yn4 V91GuZ2QJNGBz9ippjZhFC3gNy0lyl0O/qSqcdE+14ZqqckId8pAvd9NDbp0daxT KfYoogN+cF8bPTFg8vBKpnLndQMOiIq2wkEiY21Pptc0sQUp/hCAOKiKppyoaen9 rU3aSrVsNY78SHkCPiYNc+TSOUIDPmymuGxAsfpIRXmFppSH6EOVtbowD6UZVhVp tUIbcvZm4YtB6vbrwQcF6bHZiFfgHDb8ZLwiUyIZ4ZYWq/D8jg9klK8W1eR6NBQz Csy9ArYtmBYxnwJZcQoSz86MxtJU2Ma4de3tJud8S+NwwU+JiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHxvb+ek5+xUSDxvfoqlvuA4p0GxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYjA5MjQ1YmYtYjNhZC0z NTZiLTgxZjAtZjBmOGJmMDMzYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABw4mCyv9wG8Bp9mT2Vk7LxS97sDUrwWBb0T9LTKGg8yOOnhKcYC uEjvl9PSpRnxM12GtYl2JCsdDfRHK0qklGA6Li7QoITtq5vEXpAHcrA4qwwLBc/D 8k2uNpLx2E3aSpWbbGcD2uud5lH9t8TJhuevXJ+ic1R9sbIJvAulUFQhRvqBm2QT zJFABeAPWIfd/Cf654sTjx0I0nI1Lvcjtk5/4DS9NH8WYSkSX/l2nGMBLR/aJUsW qoKtpXfGfSge8yd6a8EPgiBawjU7GhnbIngMuxoX8gdfteCT3nGrKUnOh18dbCjc MDWAmq4xdH0wP2zBLiHn2hZTmw/the/2eXE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:08:55 2025 by rpki-client