$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa File: c3e6db55-bfca-3e4b-817d-7472db3f9575.roa (raw, json) Hash identifier: jYpCfWZTXNyqUEFd7PxpfuZkBpPi+l7XTc1sYFesWlI= Subject key identifier: 11:AD:A0:D5:57:6F:8D:B8:B7:7A:BC:D8:14:80:66:7B:46:F7:C0:C2 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584B4616FB8D3CE455ACCB952800 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 3800 IP address blocks: 2605:8900::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:fb:8d:3c:e4:55:ac:cb:95:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=c12c85bf-4af8-439e-8962-a497a2d9a504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:08:01:2f:82:c1:7a:74:c2:0d:8a:4f:e9:ff: 49:e0:ae:54:9e:a2:07:31:d2:74:0d:0d:ec:46:d0: dc:cc:86:a1:3a:8b:65:10:cd:31:fe:70:8d:6a:88: fc:ab:dc:71:41:ae:cc:af:5e:63:73:83:78:8c:d7: 2d:ad:a8:6d:5f:9e:a6:f3:27:8d:d0:a0:55:48:ea: 83:66:a2:10:5a:5b:71:65:6a:f5:a7:9b:f8:33:b4: 00:75:48:02:3f:83:49:2a:84:04:63:63:ea:94:e3: 64:41:f3:1f:cf:90:3d:58:4f:77:6b:c0:0a:33:48: 02:db:64:0b:30:2a:5e:5d:b7:71:51:88:7c:ae:e3: 4f:ef:0d:dc:95:9d:02:3b:8c:b9:68:ec:20:f9:c6: a9:0f:0e:1a:eb:a8:59:b6:1e:3a:7b:b3:bf:a5:f8: 9a:2a:bf:87:4f:79:2c:38:b4:50:41:eb:f2:0c:5f: ec:ee:59:3b:30:40:77:35:fa:38:9e:e2:8e:ec:12: 03:28:af:3a:52:41:12:72:ee:81:91:65:03:d6:f6: 00:5c:4c:9d:7b:89:bd:0b:c8:bc:8f:42:73:d7:b3: 7d:58:a8:73:bf:94:a5:a4:ea:12:3d:95:43:c7:0d: 50:a1:a5:5a:3c:25:be:8c:33:82:78:ec:6d:3f:79: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AD:A0:D5:57:6F:8D:B8:B7:7A:BC:D8:14:80:66:7B:46:F7:C0:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv6: 2605:8900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ec:0b:59:7f:a2:77:f7:7c:e1:f4:84:0a:2d:a2:e2:f3:c2: 26:3c:22:3f:0f:63:3c:7a:4c:c1:2e:79:51:41:41:4d:b7:16: f4:94:bc:84:b5:15:00:7c:12:d4:b5:72:dd:9a:7f:1a:d7:a6: 24:a2:4a:fa:8f:59:14:4b:4b:b1:cf:36:88:39:dd:0b:ab:80: 9c:ae:19:cb:3a:10:37:7e:c9:c2:06:20:d5:38:4a:38:0d:24: a0:60:2a:0e:be:b7:0d:fa:0c:f0:81:d6:d4:a2:ab:80:61:d4: 0e:17:a9:b5:04:1f:a1:10:24:fa:fa:01:e6:b3:55:53:af:7a: bf:dc:cb:87:f8:4a:53:09:d5:07:38:de:6f:4e:44:77:60:1d: d3:38:3d:07:3b:1c:de:2f:36:b5:db:ad:9e:11:e9:23:56:8a: 5e:10:26:5c:49:5b:09:e1:b3:1f:ce:7e:cd:b7:fa:65:ce:47: 6b:8f:b5:ac:47:53:ae:a5:b3:b6:0f:da:40:ec:9e:fc:60:ed: 57:a6:72:6d:1d:20:f3:49:5e:85:73:70:5a:90:35:70:24:6e: ae:f9:4a:98:e8:3b:79:d7:58:4a:03:41:fe:46:31:d7:7d:97: 7d:bd:d1:10:21:78:75:fc:1c:b9:5d:f2:a2:ef:7b:34:bd:58: 44:ae:3f:71 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtGFvuNPORVrMuVKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk YzEyYzg1YmYtNGFmOC00MzllLTg5NjItYTQ5N2EyZDlhNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhggBL4LBenTCDYpP6f9J4K5UnqIHMdJ0DQ3s RtDczIahOotlEM0x/nCNaoj8q9xxQa7Mr15jc4N4jNctrahtX56m8yeN0KBVSOqD ZqIQWltxZWr1p5v4M7QAdUgCP4NJKoQEY2PqlONkQfMfz5A9WE93a8AKM0gC22QL MCpeXbdxUYh8ruNP7w3clZ0CO4y5aOwg+capDw4a66hZth46e7O/pfiaKr+HT3ks OLRQQevyDF/s7lk7MEB3Nfo4nuKO7BIDKK86UkEScu6BkWUD1vYAXEyde4m9C8i8 j0Jz17N9WKhzv5SlpOoSPZVDxw1QoaVaPCW+jDOCeOxtP3kK0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBGtoNVXb424t3q82BSAZntG98DCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvYzNlNmRiNTUtYmZjYS0z ZTRiLTgxN2QtNzQ3MmRiM2Y5NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWJADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBw7AtZf6J393zh9IQKLaLi88ImPCI/D2M8ekzBLnlRQUFNtxb0lLyE tRUAfBLUtXLdmn8a16Ykokr6j1kUS0uxzzaIOd0Lq4CcrhnLOhA3fsnCBiDVOEo4 DSSgYCoOvrcN+gzwgdbUoquAYdQOF6m1BB+hECT6+gHms1VTr3q/3MuH+EpTCdUH ON5vTkR3YB3TOD0HOxzeLza1262eEekjVopeECZcSVsJ4bMfzn7Nt/plzkdrj7Ws R1OupbO2D9pA7J78YO1XpnJtHSDzSV6Fc3BakDVwJG6u+UqY6Dt511hKA0H+RjHX fZd9vdEQIXh1/By5XfKi73s0vVhErj9x -----END CERTIFICATE-----Generated at Sat Oct 11 07:15:31 2025 by rpki-client