$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa File: f37e12b1-762c-3d49-8b93-8ba5322717de.roa (raw, json) Hash identifier: dRo7C9vrjTad7gcToJ9F7w/JLInQ1mbJYXSVjE9kJZo= Subject key identifier: 8E:C8:FE:94:1E:D0:78:FF:BE:CD:FA:DF:80:30:00:CF:1A:8B:5B:23 Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Certificate serial: 010D0C9F4328584B328C33280BA58C6908AA7DC0 Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 395123 IP address blocks: 2606:db40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:33:28:0b:a5:8c:69:08:aa:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=f4384e60-91d6-45ce-8209-87d44f82b193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:29:0f:75:1d:36:e7:03:d6:cd:83:b3:88: f2:35:98:b1:79:7c:c3:72:cf:8b:0a:89:7c:90:f8: fa:54:cd:7f:c0:78:45:fc:7a:37:53:ff:5f:a9:92: a3:3a:8f:56:bb:96:8f:e1:ae:d2:57:a3:bd:76:e5: 7e:47:a1:96:d2:4c:05:c0:22:b3:04:f9:28:3d:87: 29:89:0d:99:f7:95:5f:d0:5f:6f:4b:9a:cc:7c:2b: 31:3b:79:29:fe:08:39:c9:98:2f:9c:81:b1:83:d7: 2d:9d:82:43:b6:ef:78:90:31:ad:1f:05:3b:ba:fc: ca:17:f9:42:88:3b:1d:4d:d6:53:f0:6a:88:47:23: df:4d:c5:dd:b0:05:1d:c0:da:f4:f6:45:6e:0e:b1: be:3e:8a:9d:f6:40:d8:e9:06:c7:51:ad:77:b9:6c: 7c:2f:ca:ba:79:55:72:7b:6f:8e:f7:5b:e0:74:8b: 01:c2:d1:6e:c0:e7:f4:68:a0:25:2a:9c:3d:55:ee: 98:7c:39:0f:86:81:26:a9:fb:f2:a7:75:98:25:97: 3f:7f:52:7f:a2:50:b6:ab:45:77:dd:4e:8f:7a:be: 9f:94:43:c9:3f:13:18:d2:ae:5d:30:7e:d1:4c:63: 79:41:bc:03:7d:c3:35:12:ee:cc:e4:56:ed:6a:af: dd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C8:FE:94:1E:D0:78:FF:BE:CD:FA:DF:80:30:00:CF:1A:8B:5B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl X509v3 Authority Key Identifier: keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer sbgp-ipAddrBlock: critical IPv6: 2606:db40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2e:2c:dc:40:cb:8e:e6:d8:56:d3:71:74:2f:10:be:59:98: 6f:33:06:71:69:1a:ae:b1:83:59:e9:4f:34:9f:b7:5a:ad:f1: 0d:0d:bf:75:26:ba:6e:6a:5e:15:77:8b:e9:9a:0f:ba:1d:73: 6d:98:eb:45:8d:96:4b:31:d2:f5:35:d8:5b:d5:a1:05:77:b1: 17:fe:a6:b1:a4:90:16:ca:c8:a3:68:5b:ac:fc:15:2e:b9:ad: 03:88:b4:e8:d7:f8:c6:c8:4a:af:41:0b:be:be:dc:b6:b9:cc: ab:fd:d8:8a:2e:83:f0:24:11:62:98:29:bf:43:31:ab:36:bf: 36:25:03:bd:ff:48:91:6c:82:b7:81:d6:b5:71:90:4c:ae:c6: 34:6c:44:ee:d6:a2:65:8b:b0:5c:44:11:50:7b:bf:48:dc:79: af:1d:c9:54:b7:64:27:12:7b:5f:7f:f1:01:7f:2d:98:04:72: 1d:43:d1:03:bc:f6:bd:17:8b:f9:66:4f:5a:95:cf:47:55:af: 8e:11:18:1c:07:89:fb:a0:e1:cf:75:c4:8c:02:ee:65:89:84: 36:fd:be:02:20:30:68:1c:2e:bb:b5:70:99:e7:e5:c7:f3:72: ca:eb:5a:39:b3:a9:15:3c:8b:56:a7:a3:f3:df:e7:90:41:7d: 14:46:eb:90 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsyjDMoC6WMaQiqfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl ZDI1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjQzODRlNjAtOTFkNi00NWNlLTgyMDktODdkNDRmODJiMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqgpD3UdNucD1s2Ds4jyNZixeXzDcs+LCol8 kPj6VM1/wHhF/Ho3U/9fqZKjOo9Wu5aP4a7SV6O9duV+R6GW0kwFwCKzBPkoPYcp iQ2Z95Vf0F9vS5rMfCsxO3kp/gg5yZgvnIGxg9ctnYJDtu94kDGtHwU7uvzKF/lC iDsdTdZT8GqIRyPfTcXdsAUdwNr09kVuDrG+Poqd9kDY6QbHUa13uWx8L8q6eVVy e2+O91vgdIsBwtFuwOf0aKAlKpw9Ve6YfDkPhoEmqfvyp3WYJZc/f1J/olC2q0V3 3U6Per6flEPJPxMY0q5dMH7RTGN5QbwDfcM1Eu7M5Fbtaq/dAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI7I/pQe0Hj/vs3634AwAM8ai1sjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvZjM3ZTEyYjEtNzYyYy0z ZDQ5LThiOTMtOGJhNTMyMjcxN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0 ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0 MmE4NGVkMjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbbQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJLizcQMuO5thW03F0LxC+WZhvMwZxaRqusYNZ6U80n7darfENDb91 Jrpual4Vd4vpmg+6HXNtmOtFjZZLMdL1Ndhb1aEFd7EX/qaxpJAWysijaFus/BUu ua0DiLTo1/jGyEqvQQu+vty2ucyr/diKLoPwJBFimCm/QzGrNr82JQO9/0iRbIK3 gda1cZBMrsY0bETu1qJli7BcRBFQe79I3HmvHclUt2QnEntff/EBfy2YBHIdQ9ED vPa9F4v5Zk9alc9HVa+OERgcB4n7oOHPdcSMAu5liYQ2/b4CIDBoHC67tXCZ5+XH 83LK61o5s6kVPItWp6Pz3+eQQX0URuuQ -----END CERTIFICATE-----Generated at Sat Oct 11 07:28:52 2025 by rpki-client