$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa File: f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa (raw, json) Hash identifier: 4xXkLjSRHPvqLHqVyKFOKwBLxP75pzBk1E8XHQIpT1g= Subject key identifier: 9A:8C:41:02:11:E4:53:8C:3D:FA:FC:23:01:48:5C:C8:03:03:CE:44 Certificate issuer: /CN=13fecd24-0da7-4140-9636-71a72de851ec Certificate serial: 010D0C9F4328584B48E1BFA640656A959B48E280 Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396871 IP address blocks: 2604:d0c0::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bf:a6:40:65:6a:95:9b:48:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=2a0c9814-9c91-44bd-846c-c1c9dc6940b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:34:72:df:ce:8f:c6:a9:fd:98:f7:2e:06: aa:83:29:1d:14:75:9f:b4:f1:c1:0c:11:cf:7c:2c: d9:68:08:25:59:40:c6:91:7e:72:36:2d:85:51:d7: bf:c5:6d:99:96:0e:c7:b0:24:7e:36:47:7b:69:3c: 01:a3:d1:10:2f:85:51:10:2b:5b:40:6c:2f:3b:5b: 64:09:3e:e9:e7:ee:c5:c4:9e:0a:82:3a:8d:9f:af: 36:04:17:05:ff:2d:07:bf:da:35:10:b3:b1:99:2f: fe:e3:db:22:14:a8:5a:df:8c:d2:6a:ac:ba:1c:bb: 1d:3a:5c:d3:c0:47:5d:19:50:5e:85:03:93:b1:3f: 8e:0c:48:eb:c5:db:d1:c4:a9:a7:10:5f:ac:a9:38: 78:dc:13:5f:bd:27:a6:37:57:44:0d:ef:c1:78:e2: 4a:a8:ad:5b:e2:92:51:a7:db:1f:85:2d:14:9c:97: f8:50:e2:35:18:bf:81:f9:f0:29:c3:77:9f:e4:f0: ee:6f:9c:7f:a8:5e:64:30:87:ce:2c:71:0a:3b:ea: 1b:7d:aa:f2:68:eb:81:40:c6:29:d3:7d:79:b4:39: 7b:fe:fd:a5:b1:44:a7:2a:f7:40:41:2c:dc:c3:a2: 40:82:55:1c:a5:3b:a4:3e:e9:09:97:1e:35:86:80: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8C:41:02:11:E4:53:8C:3D:FA:FC:23:01:48:5C:C8:03:03:CE:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl X509v3 Authority Key Identifier: keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer sbgp-ipAddrBlock: critical IPv6: 2604:d0c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d6:a0:33:3c:21:8c:76:e3:f0:ad:29:18:b9:21:fe:94:8b: 69:be:1c:6a:f8:ac:9c:ae:ad:a7:79:1e:e5:80:70:a8:ac:38: d5:d2:3f:f8:e1:61:89:dd:ad:88:4e:5a:2f:8b:89:6e:39:76: 84:35:e8:bf:c7:7b:02:05:11:e6:86:7c:40:36:26:e1:cc:2d: 92:a8:57:a3:95:8b:bc:88:70:c4:b8:6a:c6:4b:c5:6e:f5:0e: 0c:8d:e7:b3:7c:fb:ff:9b:18:b4:a7:72:ef:7e:96:4a:8f:36: 3c:62:84:f0:81:0b:7b:a9:bb:8a:f1:6f:ae:39:10:c5:bb:bd: 90:39:0b:3b:cc:80:e1:d9:df:e7:96:e0:0e:81:43:e6:ad:a0: e6:9c:1b:44:0a:be:54:8d:76:06:9e:fb:36:4b:2c:45:c6:8a: 6c:ea:02:e2:ed:ca:30:e5:f4:86:b7:cc:cc:de:aa:11:28:d5: 0e:d8:7a:ce:40:20:37:02:63:67:05:8c:cf:2c:eb:9b:72:fd: 8f:d1:7d:65:11:ed:e0:1b:fe:a7:93:69:08:2a:d1:2c:06:ea: 7d:a9:b4:e8:42:b2:65:ae:d8:98:62:39:6b:fb:a5:03:c9:42: 59:80:66:c8:f0:3e:55:1f:b3:de:fa:b4:88:b0:9f:c3:d6:91: b8:c8:32:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtI4b+mQGVqlZtI4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1 MWVjMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MmEwYzk4MTQtOWM5MS00NGJkLTg0NmMtYzFjOWRjNjk0MGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAc0ct/Oj8ap/Zj3LgaqgykdFHWftPHBDBHP fCzZaAglWUDGkX5yNi2FUde/xW2Zlg7HsCR+Nkd7aTwBo9EQL4VRECtbQGwvO1tk CT7p5+7FxJ4KgjqNn682BBcF/y0Hv9o1ELOxmS/+49siFKha34zSaqy6HLsdOlzT wEddGVBehQOTsT+ODEjrxdvRxKmnEF+sqTh43BNfvSemN1dEDe/BeOJKqK1b4pJR p9sfhS0UnJf4UOI1GL+B+fApw3ef5PDub5x/qF5kMIfOLHEKO+obfaryaOuBQMYp 0315tDl7/v2lsUSnKvdAQSzcw6JAglUcpTukPukJlx41hoCl7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJqMQQIR5FOMPfr8IwFIXMgDA85EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xM2Zl Y2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvZjE3NzBlNGMtMTZjYi0z MDFhLWFhYzgtYmE3ZWM5OGI4ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTNmZWNkMjQtMGRhNy00MTQwLTk2 MzYtNzFhNzJkZTg1MWVjLzEzZmVjZDI0LTBkYTctNDE0MC05NjM2LTcxYTcyZGU4 NTFlYy5jcmwwHwYDVR0jBBgwFoAUcfsH7Jbduh5RSiTnSMg1VDbRFH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3 MmRlODUxZWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTQwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAw1qAzPCGMduPwrSkYuSH+lItpvhxq+Kycrq2neR7lgHCorDjV0j/4 4WGJ3a2ITlovi4luOXaENei/x3sCBRHmhnxANibhzC2SqFejlYu8iHDEuGrGS8Vu 9Q4MjeezfPv/mxi0p3LvfpZKjzY8YoTwgQt7qbuK8W+uORDFu72QOQs7zIDh2d/n luAOgUPmraDmnBtECr5UjXYGnvs2SyxFxops6gLi7cow5fSGt8zM3qoRKNUO2HrO QCA3AmNnBYzPLOubcv2P0X1lEe3gG/6nk2kIKtEsBup9qbToQrJlrtiYYjlr+6UD yUJZgGbI8D5VH7Pe+rSIsJ/D1pG4yDJY -----END CERTIFICATE-----Generated at Wed Oct 8 23:16:23 2025 by rpki-client