$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa File: a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa (raw, json) Hash identifier: +kRI2QtxHK3GrhZKVfHSnR/+s60K030Y7uHIkVgasMU= Subject key identifier: C5:F3:88:99:E3:6B:D2:59:B9:FE:2F:75:D3:F9:16:54:8B:9A:A0:C9 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B4081A27061F20846F64B3300 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 400097 IP address blocks: 2606:3d40:5d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a2:70:61:f2:08:46:f6:4b:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=783cc05b-84ba-4fd5-9bf9-7d1cea9ca3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:e0:9a:c7:3e:dc:63:38:5a:c2:4d:3e:3e: 44:1c:2e:2e:30:09:6f:06:01:f2:25:82:ea:bf:ac: a2:fd:41:a1:2a:27:47:d1:52:85:82:b3:33:58:df: f1:ed:86:bc:1a:16:48:05:eb:a2:e4:44:ad:f9:f7: 7b:ce:e6:77:c2:7c:4d:8d:b6:47:8f:89:ac:b7:ae: 85:76:42:4b:12:e6:20:cc:8a:7a:38:52:26:b7:96: 9d:81:57:bb:7b:18:ef:34:9a:33:b8:2d:a0:95:67: da:19:1b:00:3f:69:ca:9b:13:b5:f4:97:80:c5:25: 49:f0:fc:e3:bf:f5:66:a5:44:4b:0d:ac:fa:5e:10: de:3e:8d:be:43:3f:92:f2:da:a8:9a:aa:76:a5:5c: 41:01:8e:8a:11:58:78:a9:50:ab:7f:63:b5:e5:81: 53:eb:ac:aa:e1:60:5b:24:5d:87:01:3b:6d:ba:a9: f5:96:09:7f:dc:b5:b8:45:50:9f:4a:dd:a8:a0:06: 73:f2:73:7d:1c:a7:28:48:f3:87:b5:6b:1e:52:cb: ff:49:b3:af:b4:4b:a8:d1:73:c9:e2:84:fc:5d:b0: 46:4c:f6:4b:2e:99:05:1e:b5:43:be:b1:32:9f:e1: af:b3:3e:ac:7f:ae:87:81:e7:45:c1:78:b3:78:a2: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F3:88:99:E3:6B:D2:59:B9:FE:2F:75:D3:F9:16:54:8B:9A:A0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:5d00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:e6:2f:d6:82:1d:f4:e6:27:07:48:fa:67:d1:33:6d:91:23: e5:80:d0:af:64:33:c6:cc:0a:c8:3b:d5:b1:2d:ec:00:81:0a: 5a:d0:b2:3f:c1:02:df:8a:19:f8:be:e2:2b:ef:a1:4a:aa:cb: 62:14:5d:9a:ef:3d:ba:44:ac:2f:e0:64:ff:90:15:9f:2e:15: 16:3a:83:aa:47:80:24:93:8a:c3:96:7f:f1:fe:3f:ae:ad:0a: c0:24:5a:d2:62:fc:f1:d7:1b:7a:33:7e:8c:b6:a5:f2:e8:a4: df:b2:fa:89:f8:8b:fa:a2:41:bb:e6:0c:f5:ad:6b:14:ae:e0: 81:89:01:10:c9:ae:65:4b:43:eb:18:75:3c:3f:56:62:eb:66: a1:c0:94:ea:46:a6:1b:bd:66:3f:ef:0f:14:00:f5:d0:1b:80: 0b:80:9a:6b:76:f5:98:82:6f:45:21:2d:9f:f9:a6:b1:b0:5b: 8c:b4:e3:34:81:c2:be:7f:61:bb:04:c0:c6:35:a1:62:6f:75: 73:93:ae:81:b8:30:f3:14:ec:35:53:11:d4:22:40:f8:07:df: a0:87:c4:96:5c:bc:84:82:ba:fb:d2:0b:68:a6:d4:39:19:b8: 75:e5:e7:53:8d:b1:fe:ea:43:12:69:2e:a0:b7:bc:26:9b:0e: cb:5e:c7:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgaJwYfIIRvZLMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NzgzY2MwNWItODRiYS00ZmQ1LTliZjktN2QxY2VhOWNhM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMjgmsc+3GM4WsJNPj5EHC4uMAlvBgHyJYLq v6yi/UGhKidH0VKFgrMzWN/x7Ya8GhZIBeui5ESt+fd7zuZ3wnxNjbZHj4mst66F dkJLEuYgzIp6OFImt5adgVe7exjvNJozuC2glWfaGRsAP2nKmxO19JeAxSVJ8Pzj v/VmpURLDaz6XhDePo2+Qz+S8tqomqp2pVxBAY6KEVh4qVCrf2O15YFT66yq4WBb JF2HATttuqn1lgl/3LW4RVCfSt2ooAZz8nN9HKcoSPOHtWseUsv/SbOvtEuo0XPJ 4oT8XbBGTPZLLpkFHrVDvrEyn+Gvsz6sf66HgedFwXizeKLP9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMXziJnja9JZuf4vddP5FlSLmqDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYTc3MTk3MTctZTI3Ni0z YmY2LWFiOWMtOTFjM2YwMGJjOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALHmL9aCHfTmJwdI+mfRM22RI+WA0K9kM8bMCsg71bEt7ACBClrQ sj/BAt+KGfi+4ivvoUqqy2IUXZrvPbpErC/gZP+QFZ8uFRY6g6pHgCSTisOWf/H+ P66tCsAkWtJi/PHXG3ozfoy2pfLopN+y+on4i/qiQbvmDPWtaxSu4IGJARDJrmVL Q+sYdTw/VmLrZqHAlOpGphu9Zj/vDxQA9dAbgAuAmmt29ZiCb0UhLZ/5prGwW4y0 4zSBwr5/YbsEwMY1oWJvdXOTroG4MPMU7DVTEdQiQPgH36CHxJZcvISCuvvSC2im 1DkZuHXl51ONsf7qQxJpLqC3vCabDstex+w= -----END CERTIFICATE-----Generated at Sat Oct 11 07:36:06 2025 by rpki-client