$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa File: 5e77d852-ed63-3985-aa23-e8aa56c369a2.roa (raw, json) Hash identifier: 6buhY+/5nAzIxfcCc7Ckhb7LS+EFyEgjmTl66uA1u4M= Subject key identifier: D7:C0:42:57:64:34:A2:B6:6B:09:CB:3E:C4:64:0F:D3:18:79:57:72 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD757774604C24E263F200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 11344 IP address blocks: 2001:4860:3::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:75:77:74:60:4c:24:e2:63:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c1f42c2a-b00f-475b-948f-8ea2369549a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:da:30:e8:b5:b4:dd:f7:4b:d5:12:ee:fe:e8: bb:c5:24:fc:b9:24:6b:1b:98:41:80:95:0d:26:2b: b3:58:ad:2b:df:d2:26:3f:44:85:d2:cc:3d:ac:70: a3:31:a2:c8:48:55:88:55:98:28:7e:a6:5e:ad:24: 40:97:20:3c:29:c6:de:fa:55:43:57:ab:e1:c5:92: 72:45:84:dc:31:ea:fa:92:79:26:46:ce:40:18:79: dd:39:bd:63:ad:18:c2:83:93:d0:85:c1:7b:43:55: 0e:a6:ba:00:81:8c:b6:87:4e:55:4e:b5:d4:67:a3: 28:73:ad:a6:ca:bd:33:3f:10:ca:12:48:1e:76:cb: 28:97:0d:4c:47:19:f3:e5:7e:b1:61:2f:53:95:a7: 97:20:57:28:e6:ac:a9:49:11:fd:5e:8b:4f:da:13: cc:a6:ad:6b:db:90:b1:73:a4:e0:e3:f6:6e:2c:84: 19:db:ab:87:0e:8d:12:4a:de:a9:29:b6:a1:f1:35: 96:14:7a:aa:a6:9e:f9:11:ca:b2:d4:20:4c:39:65: cd:af:f7:a3:a5:c5:03:2f:3f:6f:f3:bd:8d:2f:f3: 57:09:75:b0:e7:c5:b2:f7:57:dd:b6:50:f1:e8:b0: fa:06:e2:3a:70:87:a5:b9:3f:b2:e8:8c:4d:72:9b: 00:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C0:42:57:64:34:A2:B6:6B:09:CB:3E:C4:64:0F:D3:18:79:57:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:3::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ca:10:44:f1:24:7d:17:6f:4e:01:a9:a3:79:67:51:12:15: 42:0e:4b:8a:48:45:76:fd:e0:52:64:f2:22:94:6e:8e:d2:58: d8:f8:73:b7:72:2a:a4:a7:48:d1:a9:b0:a0:f4:e9:6f:aa:76: 67:6b:ec:df:6e:4e:f0:6d:df:bf:ad:ce:88:a4:31:da:86:75: a6:c5:70:3b:8b:40:0a:99:7b:5d:12:06:de:bb:dd:96:6e:7c: 4a:15:e0:9b:3c:8e:ca:04:fa:0f:d5:ed:63:4d:69:82:48:3e: 06:35:9c:d0:e0:dc:07:ca:50:5e:5e:e9:72:fd:e9:c3:0d:0a: d5:f5:8e:8c:3c:6c:32:34:78:82:90:86:ba:d0:2e:ba:6c:8a: 14:41:04:43:6a:c1:f8:dd:4c:0a:6c:78:6b:4f:3f:29:aa:96: 4d:e1:3f:a0:74:33:97:9f:e7:e8:e3:62:fe:d0:7a:eb:50:86: c4:20:05:2b:0a:af:74:64:f2:50:8f:6d:1a:8d:d4:5d:9b:77: 1d:1a:bc:bb:c5:92:64:38:0d:bb:b5:97:d9:e3:99:78:f9:b0: be:57:ef:3d:a6:d6:9f:10:6c:e1:7d:d6:53:ed:c2:1d:59:8f: 4a:2a:8a:64:64:4d:ab:0e:df:13:a8:ab:49:6f:f7:58:a8:f7: bc:01:7e:d5 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEtkzXV3dGBMJOJj8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzFmNDJjMmEtYjAwZi00NzViLTk0OGYtOGVhMjM2OTU0OWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNow6LW03fdL1RLu/ui7xST8uSRrG5hBgJUN JiuzWK0r39ImP0SF0sw9rHCjMaLISFWIVZgofqZerSRAlyA8Kcbe+lVDV6vhxZJy RYTcMer6knkmRs5AGHndOb1jrRjCg5PQhcF7Q1UOproAgYy2h05VTrXUZ6Moc62m yr0zPxDKEkgedssolw1MRxnz5X6xYS9TlaeXIFco5qypSRH9XotP2hPMpq1r25Cx c6Tg4/ZuLIQZ26uHDo0SSt6pKbah8TWWFHqqpp75Ecqy1CBMOWXNr/ejpcUDLz9v 872NL/NXCXWw58Wy91fdtlDx6LD6BuI6cIeluT+y6IxNcpsAUwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFNfAQldkNKK2awnLPsRkD9MYeVdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWU3N2Q4NTItZWQ2My0z OTg1LWFhMjMtZThhYTU2YzM2OWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAFIYAAD AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAfMoQRPEkfRdvTgGpo3lnURIVQg5LikhFdv3gUmTyIpRujtJY 2Phzt3IqpKdI0amwoPTpb6p2Z2vs325O8G3fv63OiKQx2oZ1psVwO4tACpl7XRIG 3rvdlm58ShXgmzyOygT6D9XtY01pgkg+BjWc0ODcB8pQXl7pcv3pww0K1fWOjDxs MjR4gpCGutAuumyKFEEEQ2rB+N1MCmx4a08/KaqWTeE/oHQzl5/n6ONi/tB661CG xCAFKwqvdGTyUI9tGo3UXZt3HRq8u8WSZDgNu7WX2eOZePmwvlfvPabWnxBs4X3W U+3CHVmPSiqKZGRNqw7fE6irSW/3WKj3vAF+1Q== -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:18 2025 by rpki-client