$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/89ff1085-ba92-36eb-a445-62bd838995f5.roa File: 89ff1085-ba92-36eb-a445-62bd838995f5.roa (raw, json) Hash identifier: ewTk9tE8UBxwoeQWO+bT67iRRIia5ZRttfx8S9i2p9I= Subject key identifier: D9:66:89:A7:92:21:2D:59:0D:75:08:7E:33:6B:7D:22:9B:36:4C:C7 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B5B0747DA150CE3F3FE26B780 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/89ff1085-ba92-36eb-a445-62bd838995f5.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 400097 IP address blocks: 2606:3d40:5d03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:47:da:15:0c:e3:f3:fe:26:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=704f5a73-12f2-40b8-b263-ba98a6dea358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:12:b5:8d:65:98:df:f4:b1:e4:26:a2:6b:02: 16:89:c6:4b:f7:f7:3f:0e:3a:89:7a:bf:8c:3f:c5: 42:c1:47:d4:22:c6:2c:d4:30:b7:1f:50:47:3a:01: 08:76:4c:32:ee:5a:7b:ab:50:3e:61:3d:bd:6f:1b: 6e:96:e4:36:b0:b2:50:c1:22:16:e2:a9:c7:6d:95: b0:78:b2:42:77:a3:d1:56:df:69:b0:e1:7f:ad:97: 34:5d:d2:cb:37:3c:55:5d:86:84:78:93:16:36:69: f9:b8:27:a4:41:96:e6:08:3a:63:3c:03:f3:7e:64: 8b:b0:81:8c:ef:6f:e3:6f:2e:77:5b:fe:85:fa:d6: e8:4e:cf:3b:c9:a6:71:3c:50:ad:70:f7:6a:d7:f6: 0b:fb:bc:76:f9:37:e3:e7:35:a3:cd:22:fe:e9:79: 2b:85:45:ff:26:a5:c7:6c:78:e4:83:5e:12:3b:e6: bb:de:ae:bb:dd:f7:44:ed:44:e6:76:34:97:26:3c: 13:50:aa:b0:50:26:dd:b3:63:97:50:85:23:6f:2d: 0e:fe:e9:6f:5d:d3:a3:ae:30:26:17:9b:71:2a:80: 43:5b:39:23:55:a0:bc:c1:21:ab:8b:8a:61:3a:e3: c5:9e:54:d7:89:c6:ab:56:b3:bc:a1:7f:24:d3:aa: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:66:89:A7:92:21:2D:59:0D:75:08:7E:33:6B:7D:22:9B:36:4C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/89ff1085-ba92-36eb-a445-62bd838995f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:5d03::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:d3:24:e1:fd:b9:f3:14:cf:10:f9:05:55:bb:05:82:43:51: 3a:6a:b9:a8:7d:63:dc:f5:f2:e0:e1:f1:c5:c1:80:19:21:13: f2:f7:d0:2b:d7:c5:0f:5c:55:eb:44:bd:98:d6:a5:3c:9f:3c: e3:3b:31:e0:3e:fa:dd:3d:aa:64:38:a3:1b:b0:1a:66:e9:69: 54:ec:d3:a8:0c:16:ed:a6:b8:69:6b:43:1f:5f:60:1a:96:71: 5b:ff:7f:97:f4:d9:70:82:5b:ab:02:83:29:a2:74:bd:82:22: 15:0a:25:bd:7f:da:81:12:29:22:7d:e0:27:22:be:da:d1:17: dc:4a:3b:eb:c6:e0:ff:ae:66:31:99:2a:e6:ac:ba:2d:2f:a4: 63:4b:dd:41:64:6f:23:18:4a:b2:e0:d5:c9:df:41:ae:8c:c4: e6:29:6c:e3:90:b7:22:e5:cc:17:e2:7a:a2:6b:e6:c2:9b:4a: 94:93:ff:91:5a:d4:46:47:ac:9b:5f:cd:f4:96:18:db:f1:d9: a2:2c:a3:70:85:a7:fb:13:80:b1:34:dd:e4:8c:3a:3e:c7:34: 90:5e:41:02:4b:c4:63:2f:b8:08:7f:2f:83:13:18:1c:2b:9b: 03:85:e2:72:27:26:4e:4b:cb:93:e2:85:32:2d:ee:d1:05:f0: e8:81:54:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtbB0faFQzj8/4mt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NzA0ZjVhNzMtMTJmMi00MGI4LWIyNjMtYmE5OGE2ZGVhMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BK1jWWY3/Sx5CaiawIWicZL9/c/DjqJer+M P8VCwUfUIsYs1DC3H1BHOgEIdkwy7lp7q1A+YT29bxtuluQ2sLJQwSIW4qnHbZWw eLJCd6PRVt9psOF/rZc0XdLLNzxVXYaEeJMWNmn5uCekQZbmCDpjPAPzfmSLsIGM 72/jby53W/6F+tboTs87yaZxPFCtcPdq1/YL+7x2+Tfj5zWjzSL+6XkrhUX/JqXH bHjkg14SO+a73q673fdE7UTmdjSXJjwTUKqwUCbds2OXUIUjby0O/ulvXdOjrjAm F5txKoBDWzkjVaC8wSGri4phOuPFnlTXicarVrO8oX8k06pw1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNlmiaeSIS1ZDXUIfjNrfSKbNkzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvODlmZjEwODUtYmE5Mi0z NmViLWE0NDUtNjJiZDgzODk5NWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0D MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAXTJOH9ufMUzxD5BVW7BYJDUTpquah9Y9z18uDh8cXBgBkhE/L3 0CvXxQ9cVetEvZjWpTyfPOM7MeA++t09qmQ4oxuwGmbpaVTs06gMFu2muGlrQx9f YBqWcVv/f5f02XCCW6sCgymidL2CIhUKJb1/2oESKSJ94CcivtrRF9xKO+vG4P+u ZjGZKuasui0vpGNL3UFkbyMYSrLg1cnfQa6MxOYpbOOQtyLlzBfieqJr5sKbSpST /5Fa1EZHrJtfzfSWGNvx2aIso3CFp/sTgLE03eSMOj7HNJBeQQJLxGMvuAh/L4MT GBwrmwOF4nInJk5Ly5PihTIt7tEF8OiBVLw= -----END CERTIFICATE-----Generated at Sat Oct 11 07:34:13 2025 by rpki-client