$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa File: aa1e9760-1e22-38ea-9430-d287417cba9b.roa (raw, json) Hash identifier: oYr9taVyuTqcXhReYfQotlAXgEn1ta9NMSqQI78aDwg= Subject key identifier: 8E:E5:3F:C5:D7:02:93:0E:A7:D2:C3:D7:80:CB:F3:E0:E3:83:34:E2 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B38219AE87B5C29E8EA886C40 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 400097 IP address blocks: 2606:3d40:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9a:e8:7b:5c:29:e8:ea:88:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=4b37c6a3-778e-48a3-8afc-311f0589417e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6e:b6:31:fe:23:c0:62:c9:7c:b9:3c:1c:b7: 25:f9:b6:ab:cd:e6:b2:76:e8:d3:1d:7d:29:6c:3d: 7b:13:b7:59:48:1d:71:99:3c:70:be:cd:37:a7:ca: af:64:3f:e9:3b:3a:0e:69:fe:e5:f1:79:de:f8:c5: 4b:f2:c6:d3:19:45:04:c9:f0:bf:2d:3b:04:ab:bd: d0:5d:99:8d:67:ab:36:37:b9:e7:09:d3:3f:e2:17: ac:3c:bd:b0:b2:c9:01:15:76:3b:90:02:c1:1b:d5: e5:7b:69:7c:1f:0a:48:42:9d:9c:9c:22:7a:7e:ce: de:fc:48:0c:5f:97:9f:cb:cf:30:50:a4:2f:d3:39: 97:5f:5b:ed:8f:75:4a:47:5c:18:36:d4:3c:ce:cc: ba:d4:af:ba:a1:b8:49:42:01:e1:60:be:7e:ea:8d: ca:8c:43:4e:d2:15:3c:a0:47:1d:eb:c5:68:ea:6e: 99:2c:39:ae:d8:43:70:25:c4:44:8d:f6:73:c1:65: 72:a9:f0:22:44:99:79:5b:90:6e:8f:f3:f4:18:7e: 0a:8a:b4:5d:2d:39:c8:50:5b:95:d1:b0:ad:f1:c0: d3:86:80:28:1e:04:d9:10:9b:f5:cb:7a:fa:37:ca: b5:62:20:fc:51:c0:09:e0:fe:28:a4:3e:62:2f:07: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E5:3F:C5:D7:02:93:0E:A7:D2:C3:D7:80:CB:F3:E0:E3:83:34:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3a:e2:8c:f5:36:18:d6:87:fb:c2:32:49:b1:54:da:c2:8b: d2:48:55:13:68:8b:02:77:29:df:76:5b:31:29:1c:47:f6:b6: ce:e1:40:7e:75:be:72:90:22:04:00:7f:4f:5c:82:33:b1:ca: 2d:40:09:e9:01:93:23:7e:31:60:59:d6:5f:27:d1:a5:0e:66: 31:95:10:3e:13:44:35:9c:75:f0:a2:4a:27:55:ab:75:3e:98: 64:7a:82:bb:f8:9b:3e:2a:99:30:eb:89:3f:4a:46:51:6a:b2: b5:45:54:5a:1f:19:4f:1b:21:fe:cf:c9:8a:71:09:95:06:d2: 10:ed:7b:dd:9f:b8:56:4d:34:1c:7a:33:8e:ec:05:cd:f5:3e: 9d:80:45:20:f5:05:cb:00:a9:a1:25:b0:ed:04:55:98:c1:3c: 0b:09:b2:d9:3b:91:5e:4b:c0:88:38:19:51:0d:93:c0:05:c8: db:00:77:7b:56:72:9d:96:4d:11:84:30:b0:70:3e:f5:cb:de: fd:9e:71:bf:fb:b4:32:c7:7c:fd:06:c7:bb:ed:63:f8:ec:fe: 37:c9:03:43:e5:8f:8d:bc:2c:e1:3f:8b:2f:9c:c1:b0:9c:59: ff:10:2a:9c:b0:1b:db:f6:1e:dd:f8:d7:2f:36:15:56:1d:26: f2:f7:e0:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs4IZroe1wp6OqIbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk NGIzN2M2YTMtNzc4ZS00OGEzLThhZmMtMzExZjA1ODk0MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg262Mf4jwGLJfLk8HLcl+barzeaydujTHX0p bD17E7dZSB1xmTxwvs03p8qvZD/pOzoOaf7l8Xne+MVL8sbTGUUEyfC/LTsEq73Q XZmNZ6s2N7nnCdM/4hesPL2wsskBFXY7kALBG9Xle2l8HwpIQp2cnCJ6fs7e/EgM X5efy88wUKQv0zmXX1vtj3VKR1wYNtQ8zsy61K+6obhJQgHhYL5+6o3KjENO0hU8 oEcd68Vo6m6ZLDmu2ENwJcREjfZzwWVyqfAiRJl5W5Buj/P0GH4KirRdLTnIUFuV 0bCt8cDThoAoHgTZEJv1y3r6N8q1YiD8UcAJ4P4opD5iLwcwFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI7lP8XXApMOp9LD14DL8+DjgzTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYWExZTk3NjAtMWUyMi0z OGVhLTk0MzAtZDI4NzQxN2NiYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHA64oz1NhjWh/vCMkmxVNrCi9JIVRNoiwJ3Kd92WzEpHEf2ts7h QH51vnKQIgQAf09cgjOxyi1ACekBkyN+MWBZ1l8n0aUOZjGVED4TRDWcdfCiSidV q3U+mGR6grv4mz4qmTDriT9KRlFqsrVFVFofGU8bIf7PyYpxCZUG0hDte92fuFZN NBx6M47sBc31Pp2ARSD1BcsAqaElsO0EVZjBPAsJstk7kV5LwIg4GVENk8AFyNsA d3tWcp2WTRGEMLBwPvXL3v2ecb/7tDLHfP0Gx7vtY/js/jfJA0Plj428LOE/iy+c wbCcWf8QKpywG9v2Ht341y82FVYdJvL34Ng= -----END CERTIFICATE-----Generated at Sat Oct 11 07:28:50 2025 by rpki-client