$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dc302fa6-4889-382d-aa84-e17c21a288f1.roa File: dc302fa6-4889-382d-aa84-e17c21a288f1.roa (raw, json) Hash identifier: EQhAI/IhFrEUgfsspDlWMRo2SDP81GjUeCAZkiF8UbQ= Subject key identifier: 41:D1:D0:2A:45:2A:F3:F3:C4:AB:08:FE:3A:35:D7:1F:D6:DF:F0:7E Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584B1AD1799A5713BB8BDEC38FC0 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dc302fa6-4889-382d-aa84-e17c21a288f1.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2620:147::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:79:9a:57:13:bb:8b:de:c3:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=5c628a92-06ed-4fd4-b89f-0665a07c7a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:43:c4:1e:b0:77:28:6e:a5:d1:22:17:36: a2:69:e8:25:aa:98:2c:9e:37:0e:92:5f:be:76:b3: af:1a:a0:52:4f:75:55:90:ab:a4:c7:4c:58:81:84: 90:c4:61:ad:31:1f:a4:2e:fc:48:b6:fd:45:77:ee: 4c:49:98:36:b5:db:fc:82:fe:7f:2b:59:5b:1a:f4: 82:b0:95:54:6d:b9:62:1f:5e:a9:f2:e2:d8:d0:20: 45:b1:c4:ab:e6:71:4b:87:98:b4:8c:14:40:98:18: eb:2e:18:88:64:7a:6d:97:a0:af:51:21:68:04:83: a3:f4:6a:ed:ad:c1:c7:de:ec:a0:20:8d:ea:81:bd: c5:9c:6c:da:4d:f2:4f:bc:a0:fc:53:91:af:73:3e: e9:37:e6:f4:96:94:f0:69:1d:69:db:e8:0e:a2:cd: 98:98:6b:f0:57:b9:d5:fb:21:8d:57:48:14:c4:01: ce:65:8e:91:d5:18:59:1c:b2:77:85:1b:6c:d3:74: 65:9b:a3:da:e9:69:e0:f0:4b:24:c9:0c:90:40:75: 4c:73:e1:b8:78:a3:29:0d:5f:f3:f6:b3:3e:b8:7d: d2:b0:d8:d7:27:50:d4:95:42:b4:9e:35:a4:43:b3: 15:52:05:f8:63:91:1f:fa:ff:f2:9f:af:a0:b5:3f: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D1:D0:2A:45:2A:F3:F3:C4:AB:08:FE:3A:35:D7:1F:D6:DF:F0:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dc302fa6-4889-382d-aa84-e17c21a288f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:eb:5c:10:3a:d0:f7:96:91:ea:95:69:72:dc:46:4e:cb:b7: 48:d3:5a:64:46:1e:f4:d1:14:2e:43:9d:6c:1a:fd:1a:76:1d: 97:d9:e0:6e:99:2a:0f:30:1a:17:e5:74:79:d2:42:03:34:14: 73:17:cc:58:99:60:93:66:9f:16:d7:04:82:93:db:8a:b8:35: 72:1c:3e:26:ad:0c:08:28:29:e3:94:3a:da:ce:09:39:8d:b8: 08:33:08:4e:d5:63:26:c9:79:cb:df:d1:41:b3:f3:65:be:6e: 37:6d:6b:0c:59:82:1e:99:a9:54:db:f6:de:61:16:f0:31:3a: 43:c4:0e:6f:46:a1:14:84:4b:77:7a:74:e6:cc:f8:d2:75:cd: 08:89:41:8d:48:10:bc:d8:da:ea:f4:7b:89:bf:ad:54:1a:75: 55:4e:65:07:f5:41:1b:2b:66:7b:fb:5c:85:f8:4d:d9:2d:34: 14:92:61:ef:10:0b:de:1e:f2:70:f4:17:58:5b:de:af:36:67: 11:06:9f:dc:81:8a:2c:3d:91:e3:fb:ab:05:f6:ba:79:68:f3: 37:90:45:c3:11:8b:18:77:ea:73:ed:3c:c8:cd:fc:af:6c:65: 76:32:6b:89:0e:11:9a:84:8c:ce:5e:90:fa:c4:b5:af:5d:30: ff:50:7b:ab -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsa0XmaVxO7i97Dj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NWM2MjhhOTItMDZlZC00ZmQ0LWI4OWYtMDY2NWEwN2M3YTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1RDxB6wdyhupdEiFzaiaeglqpgsnjcOkl++ drOvGqBST3VVkKukx0xYgYSQxGGtMR+kLvxItv1Fd+5MSZg2tdv8gv5/K1lbGvSC sJVUbbliH16p8uLY0CBFscSr5nFLh5i0jBRAmBjrLhiIZHptl6CvUSFoBIOj9Grt rcHH3uygII3qgb3FnGzaTfJPvKD8U5Gvcz7pN+b0lpTwaR1p2+gOos2YmGvwV7nV +yGNV0gUxAHOZY6R1RhZHLJ3hRts03Rlm6Pa6Wng8EskyQyQQHVMc+G4eKMpDV/z 9rM+uH3SsNjXJ1DUlUK0njWkQ7MVUgX4Y5Ef+v/yn6+gtT8WrQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEHR0CpFKvPzxKsI/jo11x/W3/B+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvZGMzMDJmYTYtNDg4OS0z ODJkLWFhODQtZTE3YzIxYTI4OGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABRwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbutcEDrQ95aR6pVpctxGTsu3SNNaZEYe9NEULkOdbBr9GnYdl9ng bpkqDzAaF+V0edJCAzQUcxfMWJlgk2afFtcEgpPbirg1chw+Jq0MCCgp45Q62s4J OY24CDMITtVjJsl5y9/RQbPzZb5uN21rDFmCHpmpVNv23mEW8DE6Q8QOb0ahFIRL d3p05sz40nXNCIlBjUgQvNja6vR7ib+tVBp1VU5lB/VBGytme/tchfhN2S00FJJh 7xAL3h7ycPQXWFverzZnEQaf3IGKLD2R4/urBfa6eWjzN5BFwxGLGHfqc+08yM38 r2xldjJriQ4RmoSMzl6Q+sS1r10w/1B7qw== -----END CERTIFICATE-----Generated at Sat Oct 11 04:29:46 2025 by rpki-client