$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5c528b39-6eda-34af-a855-7283d61168cd.roa File: 5c528b39-6eda-34af-a855-7283d61168cd.roa (raw, json) Hash identifier: R+DdDTqS2uEWr/cnx/fjc2mv4Lnb3tG7aDv4Jsy8xnw= Subject key identifier: 24:63:FF:AB:3C:B0:B8:0A:C3:DA:A0:C2:45:A1:20:B9:63:29:B1:86 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B5B0747B050765048D09E6A30 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5c528b39-6eda-34af-a855-7283d61168cd.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 400097 IP address blocks: 2606:3d40:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:47:b0:50:76:50:48:d0:9e:6a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=c137ec49-08de-4891-a69a-2c5be3d85004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:e3:b8:16:0a:c0:83:ac:c5:1a:87:39:d6: 5f:72:31:e8:bc:ad:1d:d9:7e:53:a5:64:ca:13:e5: 55:8f:9b:85:3a:28:9c:70:77:d8:ff:60:b3:a3:b0: 76:3e:67:0e:c2:20:f8:0e:76:40:f2:ca:ba:8e:01: 23:3a:16:71:0b:8e:03:24:f1:24:d0:35:84:51:c2: 15:0e:24:d1:c2:f1:51:1d:72:84:2c:b9:10:1a:d7: 50:4c:a3:e7:4f:68:5d:e2:65:b0:aa:17:df:9b:8d: 03:7f:c4:2f:84:b3:48:e1:3c:98:cf:a2:e7:90:e1: 88:88:e6:f8:9d:dd:e5:b3:b8:2d:5b:e2:4f:b1:7f: d2:fd:5b:43:45:9f:78:35:14:4b:1c:73:80:36:a8: ff:0f:c8:39:33:63:28:c9:f3:90:4c:70:2b:40:f5: 94:d8:7b:f6:a1:d5:5a:90:22:9e:52:b0:fe:5b:47: 76:92:0b:46:67:a9:27:50:de:ea:e1:d9:90:97:bc: 76:9a:0f:00:42:66:c1:2f:2d:04:87:05:53:b8:18: 7b:a5:92:ab:c5:94:87:5d:f9:d6:2d:f9:b5:d9:12: c8:2a:f9:47:80:62:da:6e:d2:62:84:63:a1:0f:6f: ba:0e:a2:f0:0c:c3:ab:77:56:fc:f8:71:96:b8:4e: 77:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:63:FF:AB:3C:B0:B8:0A:C3:DA:A0:C2:45:A1:20:B9:63:29:B1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5c528b39-6eda-34af-a855-7283d61168cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c7:9c:b5:06:20:c0:33:52:33:13:dc:43:16:a9:f9:ce:24: 47:86:ea:a5:31:9b:8c:a0:4d:e9:27:df:35:78:4e:24:fe:50: 7c:f2:fd:e8:81:5c:4c:92:b4:ac:30:96:69:93:0c:31:92:1e: 6e:89:c8:fe:e1:55:3e:3b:60:16:8e:b5:4c:fd:9d:d9:14:7d: 84:cf:78:9b:33:78:86:fb:82:a9:c4:25:40:e1:28:00:37:99: a5:c6:1d:86:af:69:5b:8b:ba:85:be:30:62:29:0a:6c:0c:3d: d5:fe:5f:09:b7:7f:c1:02:41:2a:9a:57:5c:6e:ec:42:b3:7c: 8b:b4:92:c9:77:08:42:37:b1:99:cf:bc:a6:ac:ef:84:ba:13: f5:c4:c7:e4:20:73:a4:d5:bc:fe:0c:8d:59:d6:b0:be:8e:36: e8:fd:d6:a9:bc:2d:ca:09:77:47:86:ba:1d:34:45:11:f0:09: 7d:8b:cd:9b:c3:70:12:8c:53:7f:53:0b:02:6d:65:ed:6b:59: 0f:7f:59:fd:69:3a:c1:df:28:0d:13:bc:64:b8:8d:37:57:99: 7e:8b:4a:df:34:e8:8d:1d:5a:f9:08:9c:72:d6:50:34:9f:f4: 4b:cf:f0:d7:be:e5:96:d2:fc:ff:e8:c0:fb:58:40:09:a7:32: f9:c0:d5:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtbB0ewUHZQSNCeajAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YzEzN2VjNDktMDhkZS00ODkxLWE2OWEtMmM1YmUzZDg1MDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJrjuBYKwIOsxRqHOdZfcjHovK0d2X5TpWTK E+VVj5uFOiiccHfY/2Czo7B2PmcOwiD4DnZA8sq6jgEjOhZxC44DJPEk0DWEUcIV DiTRwvFRHXKELLkQGtdQTKPnT2hd4mWwqhffm40Df8QvhLNI4TyYz6LnkOGIiOb4 nd3ls7gtW+JPsX/S/VtDRZ94NRRLHHOANqj/D8g5M2MoyfOQTHArQPWU2Hv2odVa kCKeUrD+W0d2kgtGZ6knUN7q4dmQl7x2mg8AQmbBLy0EhwVTuBh7pZKrxZSHXfnW Lfm12RLIKvlHgGLabtJihGOhD2+6DqLwDMOrd1b8+HGWuE539wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCRj/6s8sLgKw9qgwkWhILljKbGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNWM1MjhiMzktNmVkYS0z NGFmLWE4NTUtNzI4M2Q2MTE2OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADnHnLUGIMAzUjMT3EMWqfnOJEeG6qUxm4ygTekn3zV4TiT+UHzy /eiBXEyStKwwlmmTDDGSHm6JyP7hVT47YBaOtUz9ndkUfYTPeJszeIb7gqnEJUDh KAA3maXGHYavaVuLuoW+MGIpCmwMPdX+Xwm3f8ECQSqaV1xu7EKzfIu0ksl3CEI3 sZnPvKas74S6E/XEx+Qgc6TVvP4MjVnWsL6ONuj91qm8LcoJd0eGuh00RRHwCX2L zZvDcBKMU39TCwJtZe1rWQ9/Wf1pOsHfKA0TvGS4jTdXmX6LSt806I0dWvkInHLW UDSf9EvP8Ne+5ZbS/P/owPtYQAmnMvnA1ds= -----END CERTIFICATE-----Generated at Sat Oct 11 07:30:57 2025 by rpki-client