$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa File: 54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa (raw, json) Hash identifier: yqo5nBA1w/Q3UX4h9s21XQrVkqGnsWzQNzOyQ25QgBQ= Subject key identifier: 21:AF:09:64:9B:EF:EB:E0:B3:76:33:EF:83:70:F5:C6:80:9F:5B:27 Certificate issuer: /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf Certificate serial: 010D0C9F4328584B48E1B664B5147FF833137360 Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 14939 IP address blocks: 2604:5000:1000::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b6:64:b5:14:7f:f8:33:13:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=3c688be3-87ac-418d-9be2-74fc3433e659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:dc:d0:f7:f8:24:05:98:de:4e:ab:f3:b3: 2a:2e:d1:a1:0e:a7:4b:b1:ab:ca:a4:b9:28:ec:7e: 7b:cd:04:70:93:e5:9b:d6:e4:3b:8e:3f:e2:65:88: a6:ba:8e:04:96:5b:73:4c:e2:95:a1:4d:2f:6d:cc: c2:6f:6e:1e:b2:b6:a9:3e:7b:de:53:1d:71:a1:97: 47:ae:f7:15:c4:6e:89:79:43:e4:5c:a6:4e:7d:fa: 7b:5a:f5:fc:99:32:70:41:21:2d:55:37:29:6e:94: fb:b1:ff:e1:69:f2:e6:6f:0e:65:73:33:30:db:c4: c4:50:15:ac:9e:22:96:81:0d:0f:a7:6d:af:b9:24: 55:fa:14:62:cc:4c:6b:b2:bd:0f:30:7d:ad:53:89: 9a:5f:48:22:8e:89:32:1a:9c:d3:61:83:6e:7b:0b: cd:b2:49:d5:18:80:31:59:67:53:03:c3:dc:f3:c5: 3c:f5:3a:3a:34:93:86:bd:e1:38:c1:5e:79:d6:19: 71:42:ab:4e:f0:85:56:98:d9:eb:23:08:fa:a9:08: 0f:55:ff:90:17:6b:ca:06:99:d9:a1:5a:ef:29:cf: 79:76:e2:c2:37:21:c1:fc:86:6e:61:0d:0d:6e:13: 11:46:6d:16:d1:b5:da:36:a1:38:bb:70:4c:11:bc: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AF:09:64:9B:EF:EB:E0:B3:76:33:EF:83:70:F5:C6:80:9F:5B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl X509v3 Authority Key Identifier: keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer sbgp-ipAddrBlock: critical IPv6: 2604:5000:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:87:eb:39:d4:c1:3f:11:92:39:dd:31:66:dc:a1:58:21:fe: c3:22:57:db:db:a6:f3:e2:f7:f8:d9:b7:b4:53:46:4c:75:f6: fc:f3:0a:48:a8:a8:81:87:e0:49:e7:24:52:e5:80:d5:b8:5c: 24:93:31:b2:da:3e:f0:a3:a9:21:25:84:d6:92:98:55:4f:16: 98:b8:15:05:1d:0b:93:70:80:59:5e:5d:e1:1a:19:32:59:aa: af:e7:3a:7a:2f:c7:d4:de:35:09:9b:1b:2d:54:1c:04:83:55: 46:6a:e6:1d:40:b8:5f:56:c8:cc:39:77:dc:5d:fd:8b:a3:02: 28:06:14:fc:c2:57:af:c2:16:ae:10:12:ec:2d:f4:bb:a1:a1: be:b7:f9:b5:fa:0d:c1:ad:d5:90:6f:37:91:63:f7:6c:1c:c1: 68:49:53:cf:3d:96:e0:f1:ae:9d:1b:53:b7:de:05:4e:ba:4d: 4a:f3:13:4f:1c:77:a9:81:63:34:55:3e:03:0b:95:bd:08:57: de:88:ec:66:09:c3:3a:74:43:7a:a2:f6:25:ff:8e:2e:b7:7f: b1:5b:45:31:70:0f:51:4a:a5:8b:62:d9:32:5e:dd:f3:9d:5a: 20:e3:88:e3:f2:66:02:65:c2:4b:de:b7:bc:aa:23:d4:fc:fb: 7a:7f:21:18 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtI4bZktRR/+DMTc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZiZDA5OGYtOWUwMS00YzI2LTkzOTUtZTViNjMzOTlh Y2FmMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk M2M2ODhiZTMtODdhYy00MThkLTliZTItNzRmYzM0MzNlNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeXc0Pf4JAWY3k6r87MqLtGhDqdLsavKpLko 7H57zQRwk+Wb1uQ7jj/iZYimuo4ElltzTOKVoU0vbczCb24esrapPnveUx1xoZdH rvcVxG6JeUPkXKZOffp7WvX8mTJwQSEtVTcpbpT7sf/hafLmbw5lczMw28TEUBWs niKWgQ0Pp22vuSRV+hRizExrsr0PMH2tU4maX0gijokyGpzTYYNuewvNsknVGIAx WWdTA8Pc88U89To6NJOGveE4wV551hlxQqtO8IVWmNnrIwj6qQgPVf+QF2vKBpnZ oVrvKc95duLCNyHB/IZuYQ0NbhMRRm0W0bXaNqE4u3BMEbwNwQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCGvCWSb7+vgs3Yz74Nw9caAn1snMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJk MDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2MzM5OWFjYWYvNTRhYzhlODEtNGU1Zi0z NmVjLWE2N2YtZWJiMWUxMzkyNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWZiZDA5OGYtOWUwMS00YzI2LTkz OTUtZTViNjMzOTlhY2FmLzlmYmQwOThmLTllMDEtNGMyNi05Mzk1LWU1YjYzMzk5 YWNhZi5jcmwwHwYDVR0jBBgwFoAUOFJoHvmhwRVyZ6MF4Rpo/COLcxAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJkMDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2 MzM5OWFjYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRQABAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA0YfrOdTBPxGSOd0xZtyhWCH+wyJX29um8+L3+Nm3tFNGTHX2/PMK SKiogYfgSeckUuWA1bhcJJMxsto+8KOpISWE1pKYVU8WmLgVBR0Lk3CAWV5d4RoZ Mlmqr+c6ei/H1N41CZsbLVQcBINVRmrmHUC4X1bIzDl33F39i6MCKAYU/MJXr8IW rhAS7C30u6Ghvrf5tfoNwa3VkG83kWP3bBzBaElTzz2W4PGunRtTt94FTrpNSvMT Txx3qYFjNFU+AwuVvQhX3ojsZgnDOnRDeqL2Jf+OLrd/sVtFMXAPUUqli2LZMl7d 851aIOOI4/JmAmXCS963vKoj1Pz7en8hGA== -----END CERTIFICATE-----Generated at Sat Oct 11 06:59:38 2025 by rpki-client