$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/137d7fa7-0cb6-336f-a1d4-c72889789e34.roa File: 137d7fa7-0cb6-336f-a1d4-c72889789e34.roa (raw, json) Hash identifier: U9oAWIVgJzHYwJT8S0UAVcbVLK+vohxPQv0jg7yiLyQ= Subject key identifier: 84:6F:BD:EE:A9:79:D5:E1:3B:6C:0D:38:F1:EA:0E:6D:A1:25:6F:E8 Certificate issuer: /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Certificate serial: 010D0C9F4328584B3DBA2C6896528EA5C2D3F360 Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/137d7fa7-0cb6-336f-a1d4-c72889789e34.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2601:5000:3000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:2c:68:96:52:8e:a5:c2:d3:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d7d6b991-b878-4fbb-89bb-b0c04784b1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:76:53:2f:4b:ee:2a:16:bd:7a:eb:a7:df:84: e3:0b:79:f5:be:c0:af:47:03:b7:a4:ea:2a:8e:71: 8c:23:72:fd:fa:c2:4e:7b:46:f1:32:d4:b2:01:8c: 2f:31:e6:02:5b:75:0a:be:38:ce:9b:9c:a0:78:e0: aa:a4:e7:cb:52:c5:8a:a0:a5:34:6a:b2:60:ac:2e: b2:84:72:8e:04:96:46:25:45:fa:51:38:a3:d0:a6: 30:3a:29:77:a2:f3:e7:25:c0:7e:14:e3:d4:9b:61: 0d:3b:1a:61:b8:a1:15:ef:4c:d5:e2:f3:cd:ae:86: 02:fc:e9:8d:b7:92:4d:87:d1:74:1d:f2:cd:af:a8: 3d:82:df:b5:c7:41:86:ae:5f:4d:a2:c8:da:75:ad: 5c:c8:83:e5:b4:23:2b:fe:61:94:c5:60:4e:2b:0c: c0:f3:e8:39:81:67:61:21:58:b8:bc:81:f0:ea:c3: c0:76:18:6d:a2:77:f5:20:99:e3:b7:d9:ca:84:d6: fe:b6:49:4a:1d:4d:fc:f9:4a:66:8f:4b:c5:dc:01: 69:70:4a:3e:5e:f7:f2:07:80:a2:8c:aa:c3:f7:ba: 5b:0d:ca:ee:fd:38:53:4e:29:8f:ec:2b:a6:1a:15: 98:8f:0d:4e:40:5c:8c:0e:50:86:c7:00:81:3c:aa: 83:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6F:BD:EE:A9:79:D5:E1:3B:6C:0D:38:F1:EA:0E:6D:A1:25:6F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/137d7fa7-0cb6-336f-a1d4-c72889789e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl X509v3 Authority Key Identifier: keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer sbgp-ipAddrBlock: critical IPv6: 2601:5000:3000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:30:88:03:b2:39:d9:5d:c3:aa:97:47:6c:b8:32:06:03:48: 01:c9:63:b4:8d:30:28:22:0a:fa:ff:d2:4e:fa:3d:27:b4:a5: 2d:3a:a0:0d:55:d2:43:e9:50:cd:13:fe:cf:52:bd:4a:77:9a: 65:28:95:57:bb:73:c8:27:3f:c3:93:38:29:62:b5:b4:d4:de: 32:b2:e3:6c:aa:1b:96:d4:3e:30:05:a7:7c:b0:25:7b:9f:52: 54:96:35:47:4e:c2:3c:fb:6d:0f:85:7c:04:01:b7:c1:e4:7a: 03:6c:92:aa:87:49:c7:7b:68:6d:ff:d2:da:a1:73:6f:2d:06: d8:0e:4f:d8:96:a9:bd:e1:16:0d:0d:da:b7:63:48:41:d1:6f: de:dd:61:c1:9f:4e:c5:a2:7a:52:3f:a2:36:7a:f1:ad:d7:af: d5:16:bf:d1:57:a3:4f:12:16:c3:61:73:5b:9a:08:35:a2:65: 21:c8:2c:c2:21:4c:6c:29:e4:89:6a:62:55:e3:75:ae:8a:b5: ec:67:12:3f:df:eb:35:e8:d9:1c:b3:c6:8c:72:8a:d1:e4:fe: 47:0e:76:93:0c:0a:16:97:9c:4b:d1:6b:d5:85:85:4a:42:b5: 8c:90:ca:e5:d7:08:87:28:a5:54:82:77:bf:0e:d2:fc:ac:11: ed:37:04:20 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs9uixollKOpcLT82AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0 MGRmMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDdkNmI5OTEtYjg3OC00ZmJiLTg5YmItYjBjMDQ3ODRiMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3ZTL0vuKha9euun34TjC3n1vsCvRwO3pOoq jnGMI3L9+sJOe0bxMtSyAYwvMeYCW3UKvjjOm5ygeOCqpOfLUsWKoKU0arJgrC6y hHKOBJZGJUX6UTij0KYwOil3ovPnJcB+FOPUm2ENOxphuKEV70zV4vPNroYC/OmN t5JNh9F0HfLNr6g9gt+1x0GGrl9Nosjada1cyIPltCMr/mGUxWBOKwzA8+g5gWdh IVi4vIHw6sPAdhhtonf1IJnjt9nKhNb+tklKHU38+Upmj0vF3AFpcEo+XvfyB4Ci jKrD97pbDcru/ThTTimP7CumGhWYjw1OQFyMDlCGxwCBPKqDiQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIRvve6pedXhO2wNOPHqDm2hJW/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvMTM3ZDdmYTctMGNiNi0z MzZmLWExZDQtYzcyODg5Nzg5ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk ODI2YTQwZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgFQADAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApjCIA7I52V3DqpdHbLgyBgNIAcljtI0wKCIK+v/STvo9J7SlLTqg DVXSQ+lQzRP+z1K9SneaZSiVV7tzyCc/w5M4KWK1tNTeMrLjbKobltQ+MAWnfLAl e59SVJY1R07CPPttD4V8BAG3weR6A2ySqodJx3tobf/S2qFzby0G2A5P2JapveEW DQ3at2NIQdFv3t1hwZ9OxaJ6Uj+iNnrxrdev1Ra/0VejTxIWw2FzW5oINaJlIcgs wiFMbCnkiWpiVeN1roq17GcSP9/rNejZHLPGjHKK0eT+Rw52kwwKFpecS9Fr1YWF SkK1jJDK5dcIhyilVIJ3vw7S/KwR7TcEIA== -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:31 2025 by rpki-client