$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa File: a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa (raw, json) Hash identifier: yDEHww7i7VeV9B1h3gX9r/HEOos6bQd4F6Rd5jT/vKE= Subject key identifier: 0D:98:24:B1:C2:B6:F4:FB:BE:8F:9A:1A:E5:49:FF:D4:FB:4B:CF:6E Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B38219AD4FBD1AD6FD4443E80 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 400097 IP address blocks: 2606:3d40:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9a:d4:fb:d1:ad:6f:d4:44:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=924c39b1-fd6d-490c-b11b-31485e2e00f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:a8:28:34:f8:0d:c5:fb:90:a8:06:a7:9f: 55:ae:43:1a:9e:bd:7e:26:bf:dd:3c:8a:4f:e0:6d: df:25:da:aa:b6:21:7c:ae:22:cf:34:3f:a6:c6:8c: ef:68:1b:7f:75:1d:45:2c:aa:2c:5b:f7:a1:6e:a9: 61:2c:38:f3:e5:75:2e:ef:03:55:13:e4:50:ac:74: d9:c1:5f:35:62:e1:3f:2c:3a:e2:b9:39:d7:ab:f4: da:2b:61:66:d8:4a:d1:df:22:e6:03:e0:85:5d:e2: 1b:1e:5f:67:18:c0:66:39:99:4f:e0:5c:9e:38:14: 86:df:d6:a7:f8:cc:e4:6f:d8:25:ce:0d:b8:a7:ae: 14:71:8d:db:84:77:ab:9c:a0:e4:4f:fb:ce:82:ea: 0c:17:89:cf:63:ba:29:aa:1a:d5:e6:ad:d0:42:e3: a8:44:34:84:03:5d:85:9c:c4:d8:35:0e:b1:ee:22: 59:7d:b3:44:64:ab:aa:90:c3:6e:87:a0:a0:07:89: 4e:ba:ef:d3:64:82:27:b3:e3:2b:37:c3:f0:ea:8c: 5c:09:b4:66:be:83:71:96:e2:1f:17:50:51:6c:47: 6e:02:15:9c:72:b3:aa:22:c7:5e:87:09:6c:ac:f6: 58:75:d5:5c:4c:0c:f2:69:28:6a:78:29:6e:63:05: 55:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:98:24:B1:C2:B6:F4:FB:BE:8F:9A:1A:E5:49:FF:D4:FB:4B:CF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:2b:8b:0e:dd:0e:32:68:c0:35:87:b9:01:a7:9b:82:3b:e8: 17:19:9d:b4:9f:a3:10:92:16:1e:8e:ea:2d:5d:aa:c4:18:84: 13:06:ca:09:19:d3:5f:3d:fc:db:17:40:77:18:2e:85:b2:66: 78:f7:79:12:85:9a:1a:9b:3a:c1:78:cf:4a:a5:50:ea:d8:4b: 59:a8:af:39:b9:32:b8:b7:66:56:c9:4d:ee:38:99:45:98:f1: df:82:96:11:b7:c5:cd:75:38:04:d8:29:85:56:57:53:ee:6a: f1:f6:5a:e7:2f:9b:64:da:f6:e5:f8:27:b4:8a:ea:ac:b0:a6: 9d:3c:82:ae:a5:ca:0d:00:4f:8b:ee:5e:6d:24:a2:ac:8a:26: 21:28:f5:2f:de:91:2a:03:10:85:1f:e8:97:ba:9d:7d:13:2c: c1:b4:98:09:f6:1f:8e:15:44:6b:5d:2c:39:37:5d:59:75:9c: 30:6f:83:bc:18:b0:a5:fe:5a:9b:44:8d:6e:b3:f1:a0:a1:81: 47:70:37:a0:78:5b:f8:78:cf:00:0a:d6:4f:f3:c3:ac:0b:4c: 8d:4e:56:98:a4:84:42:1d:4d:42:7e:40:6e:4d:24:02:2c:91: 44:3f:6e:0d:de:48:ae:dd:d4:0c:9c:61:37:db:7f:9e:d0:87: 93:83:bd:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs4IZrU+9Gtb9REPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk OTI0YzM5YjEtZmQ2ZC00OTBjLWIxMWItMzE0ODVlMmUwMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiWoKDT4DcX7kKgGp59VrkManr1+Jr/dPIpP 4G3fJdqqtiF8riLPND+mxozvaBt/dR1FLKosW/ehbqlhLDjz5XUu7wNVE+RQrHTZ wV81YuE/LDriuTnXq/TaK2Fm2ErR3yLmA+CFXeIbHl9nGMBmOZlP4FyeOBSG39an +Mzkb9glzg24p64UcY3bhHernKDkT/vOguoMF4nPY7opqhrV5q3QQuOoRDSEA12F nMTYNQ6x7iJZfbNEZKuqkMNuh6CgB4lOuu/TZIIns+MrN8Pw6oxcCbRmvoNxluIf F1BRbEduAhWccrOqIsdehwlsrPZYddVcTAzyaShqeCluYwVVJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA2YJLHCtvT7vo+aGuVJ/9T7S89uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYThmZGMyNmYtOWEyMS0z NGRhLWJmMTAtNGFkNTk0OTVjMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKUriw7dDjJowDWHuQGnm4I76BcZnbSfoxCSFh6O6i1dqsQYhBMG ygkZ0189/NsXQHcYLoWyZnj3eRKFmhqbOsF4z0qlUOrYS1morzm5Mri3ZlbJTe44 mUWY8d+ClhG3xc11OATYKYVWV1PuavH2Wucvm2Ta9uX4J7SK6qywpp08gq6lyg0A T4vuXm0koqyKJiEo9S/ekSoDEIUf6Je6nX0TLMG0mAn2H44VRGtdLDk3XVl1nDBv g7wYsKX+WptEjW6z8aChgUdwN6B4W/h4zwAK1k/zw6wLTI1OVpikhEIdTUJ+QG5N JAIskUQ/bg3eSK7d1AycYTfbf57Qh5ODve4= -----END CERTIFICATE-----Generated at Sat Oct 11 07:28:52 2025 by rpki-client