$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa File: 499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa (raw, json) Hash identifier: qVRnvtsQJOn828iXh0cvYXaCPBwxUI/oX6Ts9LxMzB8= Subject key identifier: D1:88:1E:0B:10:A6:6B:2C:D1:43:1F:9C:AC:2E:E5:F7:FF:AD:38:CC Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B3986F9534AF2EDFEAD56E600 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 400097 IP address blocks: 2606:3d40:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:f9:53:4a:f2:ed:fe:ad:56:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=d2f5e263-1237-41ac-b911-51af12753fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:ab:31:31:38:23:74:83:5a:49:19:00:06: 75:a9:db:84:fa:9c:a7:ab:43:b7:24:ea:a1:2b:1f: f6:67:ae:c8:d3:e0:bf:ba:c0:88:12:0b:4c:5c:16: 64:9b:0c:f7:58:a4:32:ea:b0:cb:56:50:60:f2:6b: a6:b7:a9:84:4f:75:f6:92:0f:d2:9b:28:70:62:e4: 7c:aa:ef:ae:52:e1:f4:d9:8e:6e:ed:97:9b:60:2b: 6d:f6:ae:88:81:32:13:76:60:8a:64:09:1a:df:ab: f2:df:68:9c:7f:29:13:1e:b4:b3:be:b1:70:03:ca: 8c:ad:4d:5d:8b:66:76:62:af:23:e8:b0:02:77:2e: cf:f5:07:38:6d:58:9f:82:c3:3c:01:c5:bf:65:e0: 4a:72:3d:b6:e8:81:55:7f:12:e6:c8:53:0f:f8:16: 1b:68:68:de:12:14:89:4a:ed:84:a8:94:8e:ee:8f: 10:ff:08:85:b0:2d:a3:5c:ce:ac:02:cf:05:b3:5f: 00:95:12:c8:0e:ea:57:cc:24:04:1e:f0:fd:cf:0e: 4a:49:d9:80:08:83:9a:04:df:22:a9:cc:20:28:76: c2:59:98:46:58:90:55:7a:2a:ea:be:78:d0:b4:47: a4:5c:d7:4a:f5:9c:8b:bb:ee:e6:e2:ed:e7:08:34: a3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:88:1E:0B:10:A6:6B:2C:D1:43:1F:9C:AC:2E:E5:F7:FF:AD:38:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:92:a9:44:a1:e0:13:e8:f0:40:0d:d0:a8:d8:cb:14:2d:93: 66:ee:87:b9:76:93:a2:51:b7:49:95:dc:fa:a8:77:fa:c0:1d: 4e:13:e4:da:ae:f8:6d:24:40:b8:92:1e:84:2e:2c:17:a9:fe: b6:df:96:d8:b0:05:a5:a4:14:bc:0b:75:17:b8:db:47:98:98: 31:9c:80:9e:49:98:c7:62:41:e2:61:2a:60:65:3a:6b:c2:01: f1:c8:35:f1:e0:92:06:0f:e0:91:46:da:87:a1:f7:2e:b7:96: 8e:82:50:91:e0:17:d2:42:72:f0:88:4e:4e:e0:d9:9f:68:51: ee:fb:76:cd:ce:75:3d:c9:db:4e:12:16:d6:e9:95:bc:25:9e: e1:a8:68:47:c9:bd:a4:5a:f1:63:c7:60:d0:17:d6:5f:47:a4: 2a:86:cc:64:a8:43:52:52:95:88:d2:1a:be:28:54:7f:7e:b6: 05:3a:90:89:14:f2:6c:27:bb:01:4a:31:5c:64:a0:77:70:2c: e3:c4:12:fb:3e:6b:3c:e5:f9:a5:4e:28:f3:76:22:09:ec:4f: d8:9e:f2:f5:31:af:56:8f:e9:ff:51:a8:06:a4:d9:ae:68:3a: 21:76:aa:f5:04:20:de:df:12:e5:76:9f:34:7e:3d:31:b7:76: 75:ed:83:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs5hvlTSvLt/q1W5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDJmNWUyNjMtMTIzNy00MWFjLWI5MTEtNTFhZjEyNzUzZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sOrMTE4I3SDWkkZAAZ1qduE+pynq0O3JOqh Kx/2Z67I0+C/usCIEgtMXBZkmwz3WKQy6rDLVlBg8mumt6mET3X2kg/SmyhwYuR8 qu+uUuH02Y5u7ZebYCtt9q6IgTITdmCKZAka36vy32icfykTHrSzvrFwA8qMrU1d i2Z2Yq8j6LACdy7P9Qc4bVifgsM8AcW/ZeBKcj226IFVfxLmyFMP+BYbaGjeEhSJ Su2EqJSO7o8Q/wiFsC2jXM6sAs8Fs18AlRLIDupXzCQEHvD9zw5KSdmACIOaBN8i qcwgKHbCWZhGWJBVeirqvnjQtEekXNdK9ZyLu+7m4u3nCDSj6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNGIHgsQpmss0UMfnKwu5ff/rTjMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNDk5Yjg4NmEtYTVkMS0z ZjM3LWE5ZjMtMWY2ZjE2NGQxOTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqSqUSh4BPo8EAN0KjYyxQtk2buh7l2k6JRt0mV3Pqod/rAHU4T 5Nqu+G0kQLiSHoQuLBep/rbfltiwBaWkFLwLdRe420eYmDGcgJ5JmMdiQeJhKmBl OmvCAfHINfHgkgYP4JFG2oeh9y63lo6CUJHgF9JCcvCITk7g2Z9oUe77ds3OdT3J 204SFtbplbwlnuGoaEfJvaRa8WPHYNAX1l9HpCqGzGSoQ1JSlYjSGr4oVH9+tgU6 kIkU8mwnuwFKMVxkoHdwLOPEEvs+azzl+aVOKPN2IgnsT9ie8vUxr1aP6f9RqAak 2a5oOiF2qvUEIN7fEuV2nzR+PTG3dnXtg44= -----END CERTIFICATE-----Generated at Sat Oct 11 07:25:27 2025 by rpki-client