$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/699733e3-c5a0-3029-8386-1ae847e92a86.roa File: 699733e3-c5a0-3029-8386-1ae847e92a86.roa (raw, json) Hash identifier: zPjGWxVBe7U5AnGe8e2KWEGh0MJ3s2pAm3BUzZ+YL0o= Subject key identifier: 5F:4D:5D:17:10:58:A0:66:87:3F:D7:AE:77:D1:C2:AB:BF:95:AB:E2 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B3986F96EECEF6BBB492E5F00 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/699733e3-c5a0-3029-8386-1ae847e92a86.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 400097 IP address blocks: 2606:3d40:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:f9:6e:ec:ef:6b:bb:49:2e:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=591642f6-b970-4ccf-bfb7-f70f9870aa40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:1a:8b:33:ac:3d:71:58:0a:62:7c:ed:63: 91:f3:3e:20:f0:f9:b3:59:95:ff:28:0c:3c:d8:88: 2f:a9:69:b4:e3:15:ce:f2:d5:0f:44:1b:63:0d:8e: 3e:f0:ac:e9:e3:01:39:01:34:7d:62:96:8d:45:2e: 80:52:8c:5a:2d:8c:2e:28:01:02:bc:58:39:9a:be: 81:b9:f6:6e:5d:e7:d7:10:6e:06:db:a6:75:7e:d8: 2a:6a:5e:6a:4e:fb:f9:1c:7e:87:8a:ee:7e:df:1f: 14:59:6e:45:21:c2:bd:79:f4:1c:ed:61:64:58:8b: b5:f8:e5:89:ad:7d:52:d2:60:03:3d:7f:ef:46:bd: 67:33:23:02:e4:f0:cf:b3:31:53:de:ac:6e:c5:e9: 0e:0b:38:87:fd:b2:a1:fd:c1:38:ba:f4:be:da:79: b3:1e:21:3b:a0:f0:98:4b:80:44:db:41:da:6c:38: 7b:58:83:cc:57:7f:9a:70:9c:f9:e9:8e:26:e5:80: 8e:8d:e0:04:fa:03:c7:ad:90:af:6a:fa:c6:32:c7: 10:b9:d6:7d:72:d9:ea:4f:81:68:e0:23:9b:c9:9a: e4:e1:df:c0:49:08:e7:26:cb:9f:2e:8c:a2:d3:1f: 8b:4d:45:03:a0:9c:ab:e3:83:e9:cd:88:f3:d2:5b: 8c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4D:5D:17:10:58:A0:66:87:3F:D7:AE:77:D1:C2:AB:BF:95:AB:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/699733e3-c5a0-3029-8386-1ae847e92a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:db:41:df:7e:38:29:9a:22:71:7a:22:1e:16:d2:2f:1f:37: 1d:95:00:c4:1f:83:50:6a:c6:83:b5:7a:ba:b8:76:75:42:8f: 3a:5a:56:9f:4a:b3:1b:20:17:97:44:27:01:f1:43:77:9c:9d: 8b:15:23:d7:e1:28:4c:3d:19:70:23:18:68:77:08:8c:15:5d: 48:f5:b5:f1:c8:4c:29:68:6f:20:11:7c:34:15:77:bb:9a:05: 7d:07:c3:3c:c6:c6:2b:a1:d9:02:33:e0:74:fb:57:d2:d7:88: ae:12:30:d2:3a:82:a8:ba:70:a9:0d:bd:e9:3e:00:ed:e6:02: d3:65:77:59:ea:d8:4b:f9:9b:7b:0b:58:fe:b5:17:78:86:75: cf:2c:0b:8d:5e:ef:e6:c4:65:07:89:cd:9f:73:c2:4a:1b:3a: 99:f1:83:50:58:12:94:d5:12:78:49:ad:c8:84:13:ba:92:73: 9d:b5:1e:7e:6e:5b:57:35:af:a8:18:8f:c5:72:35:ed:1e:12: 8e:71:6b:6a:1e:b2:e6:75:9f:36:49:37:32:2f:4f:55:4c:3a: 7e:55:e1:91:3b:1b:07:ac:cb:71:59:74:dc:35:03:b6:19:83: 54:1d:5f:97:22:1d:23:4a:1b:7c:e6:62:f1:2d:94:e4:80:e1: 6d:62:10:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs5hvlu7O9ru0kuXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NTkxNjQyZjYtYjk3MC00Y2NmLWJmYjctZjcwZjk4NzBhYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4caizOsPXFYCmJ87WOR8z4g8PmzWZX/KAw8 2IgvqWm04xXO8tUPRBtjDY4+8Kzp4wE5ATR9YpaNRS6AUoxaLYwuKAECvFg5mr6B ufZuXefXEG4G26Z1ftgqal5qTvv5HH6Hiu5+3x8UWW5FIcK9efQc7WFkWIu1+OWJ rX1S0mADPX/vRr1nMyMC5PDPszFT3qxuxekOCziH/bKh/cE4uvS+2nmzHiE7oPCY S4BE20HabDh7WIPMV3+acJz56Y4m5YCOjeAE+gPHrZCvavrGMscQudZ9ctnqT4Fo 4CObyZrk4d/ASQjnJsufLoyi0x+LTUUDoJyr44PpzYjz0luM1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF9NXRcQWKBmhz/XrnfRwqu/laviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNjk5NzMzZTMtYzVhMC0z MDI5LTgzODYtMWFlODQ3ZTkyYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHbQd9+OCmaInF6Ih4W0i8fNx2VAMQfg1BqxoO1erq4dnVCjzpa Vp9KsxsgF5dEJwHxQ3ecnYsVI9fhKEw9GXAjGGh3CIwVXUj1tfHITClobyARfDQV d7uaBX0HwzzGxiuh2QIz4HT7V9LXiK4SMNI6gqi6cKkNvek+AO3mAtNld1nq2Ev5 m3sLWP61F3iGdc8sC41e7+bEZQeJzZ9zwkobOpnxg1BYEpTVEnhJrciEE7qSc521 Hn5uW1c1r6gYj8VyNe0eEo5xa2oesuZ1nzZJNzIvT1VMOn5V4ZE7Gwesy3FZdNw1 A7YZg1QdX5ciHSNKG3zmYvEtlOSA4W1iEEg= -----END CERTIFICATE-----Generated at Sat Oct 11 07:30:59 2025 by rpki-client