$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa File: a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa (raw, json) Hash identifier: X3KSt8IzKPWLKIQ0lsYcGb8I1/3CTLlwQSlhb9b7ufY= Subject key identifier: AE:80:28:69:B3:3C:0A:98:93:68:3B:0B:41:67:C1:43:0F:5A:38:00 Certificate issuer: /CN=39812a66-44de-45e0-a65d-fd3a7673a954 Certificate serial: 010D0C9F4328584B158C12EC77D510564C0DBE80 Authority key identifier: 8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa Signing time: Thu 04 Sep 2025 15:41:54 +0000 ROA not before: Thu 04 Sep 2025 15:41:54 +0000 ROA not after: Wed 03 Dec 2025 16:41:54 +0000 asID: 401574 IP address blocks: 2607:39c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:8c:12:ec:77:d5:10:56:4c:0d:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39812a66-44de-45e0-a65d-fd3a7673a954 Validity Not Before: Sep 4 15:41:54 2025 GMT Not After : Dec 3 16:41:54 2025 GMT Subject: CN=05dfa9dd-0786-46f3-b929-0cf5dde006fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:fa:be:ba:de:c6:b2:62:c9:8a:19:51:f7: 4b:8e:54:56:6d:c1:71:3e:fb:96:82:ac:1e:bf:b8: 37:fd:b9:f0:1a:73:6d:89:60:55:a1:91:8f:33:5b: 14:44:ff:06:85:c6:c8:3f:41:c3:05:4a:ba:46:0c: 3c:9c:87:9f:ed:ff:8a:b7:fc:62:0e:63:90:e3:69: f8:06:c4:1f:1d:91:5f:1b:2c:96:79:0c:54:28:4c: 27:5f:88:b5:f1:02:99:a9:c1:bc:64:7e:2f:b2:5d: 2e:eb:5f:f8:45:31:67:5c:34:a5:58:b7:2d:41:80: f8:20:73:fe:52:0e:ba:ab:34:fb:74:bf:10:66:c1: 52:f5:e9:c0:b1:cd:b4:98:59:1e:8e:6a:a3:7f:3f: f8:70:84:bf:aa:c2:d9:2c:27:15:4b:fa:cf:c3:c9: c8:28:58:d5:97:c5:65:fd:af:f7:0c:89:dd:72:7e: 59:ff:a6:d4:b3:29:43:17:ff:e3:19:8d:52:f8:10: 55:7a:1f:dc:c6:41:d2:db:aa:ec:f8:2a:1a:96:b8: 5c:91:d8:0c:2f:ea:3e:fc:d3:74:b6:81:9a:41:f9: 74:9c:3f:c0:0c:79:ba:b0:ec:63:ee:00:9f:d6:2e: ed:e3:f1:58:a3:89:1d:fb:eb:c3:15:23:28:52:10: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:80:28:69:B3:3C:0A:98:93:68:3B:0B:41:67:C1:43:0F:5A:38:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl X509v3 Authority Key Identifier: keyid:8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer sbgp-ipAddrBlock: critical IPv6: 2607:39c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8a:2a:b5:f0:fe:6d:da:72:39:d2:d1:cf:8f:a8:71:5f:3f: 3b:7e:f0:67:3d:e1:91:24:be:1b:02:ad:5c:06:f1:e6:2b:bb: 72:1f:2b:39:f9:7f:a6:8e:a0:21:c8:b1:03:f1:17:88:d8:07: 99:e8:94:cf:2a:e0:3a:65:cb:a9:1a:05:2c:19:67:c9:ee:18: 67:d9:f2:e5:b1:02:79:dd:42:29:9a:c6:64:2a:15:98:25:20: 16:7d:35:c3:0a:e5:1c:42:ad:b5:48:9f:7b:22:9f:0b:2b:cc: 49:b2:4f:b0:17:54:d8:de:39:46:84:63:21:aa:e0:59:32:01: a5:a3:78:d6:8b:00:db:14:07:06:6a:49:74:1a:02:03:18:bb: 7a:1a:11:3b:bb:1c:2e:a6:1a:bc:4d:a4:17:0a:8f:94:34:ba: 60:2f:2f:85:8a:71:29:8e:d2:e1:a2:d5:04:12:af:8a:cd:6b: c8:f9:09:d8:50:44:62:ed:4a:35:46:5c:ca:d2:73:dd:12:00: f4:f0:d7:3a:c3:32:0e:0d:ff:f2:f6:7f:22:00:72:9d:6e:1c: 3a:66:1d:36:56:34:2e:da:4e:8b:67:77:1d:3b:28:0e:94:8f: 4f:58:80:17:4b:01:ad:71:7d:2d:af:43:c2:9e:c6:ab:47:6c: 8e:f7:fb:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsVjBLsd9UQVkwNvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk4MTJhNjYtNDRkZS00NWUwLWE2NWQtZmQzYTc2NzNh OTU0MB4XDTI1MDkwNDE1NDE1NFoXDTI1MTIwMzE2NDE1NFowLzEtMCsGA1UEAxMk MDVkZmE5ZGQtMDc4Ni00NmYzLWI5MjktMGNmNWRkZTAwNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fj6vrrexrJiyYoZUfdLjlRWbcFxPvuWgqwe v7g3/bnwGnNtiWBVoZGPM1sURP8GhcbIP0HDBUq6Rgw8nIef7f+Kt/xiDmOQ42n4 BsQfHZFfGyyWeQxUKEwnX4i18QKZqcG8ZH4vsl0u61/4RTFnXDSlWLctQYD4IHP+ Ug66qzT7dL8QZsFS9enAsc20mFkejmqjfz/4cIS/qsLZLCcVS/rPw8nIKFjVl8Vl /a/3DIndcn5Z/6bUsylDF//jGY1S+BBVeh/cxkHS26rs+CoalrhckdgML+o+/NN0 toGaQfl0nD/ADHm6sOxj7gCf1i7t4/FYo4kd++vDFSMoUhAN4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK6AKGmzPAqYk2g7C0FnwUMPWjgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zOTgx MmE2Ni00NGRlLTQ1ZTAtYTY1ZC1mZDNhNzY3M2E5NTQvYTM5NDhkZmItY2Q2MS0z MTJjLWJmYTEtMjE5ZGIyZmEwYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzk4MTJhNjYtNDRkZS00NWUwLWE2 NWQtZmQzYTc2NzNhOTU0LzM5ODEyYTY2LTQ0ZGUtNDVlMC1hNjVkLWZkM2E3Njcz YTk1NC5jcmwwHwYDVR0jBBgwFoAUjLnNYQ1NL3KFK/AB0pu56Z3fmIcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zOTgxMmE2Ni00NGRlLTQ1ZTAtYTY1ZC1mZDNh NzY3M2E5NTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgc5wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRiiq18P5t2nI50tHPj6hxXz87fvBnPeGRJL4bAq1cBvHmK7tyHys5 +X+mjqAhyLED8ReI2AeZ6JTPKuA6ZcupGgUsGWfJ7hhn2fLlsQJ53UIpmsZkKhWY JSAWfTXDCuUcQq21SJ97Ip8LK8xJsk+wF1TY3jlGhGMhquBZMgGlo3jWiwDbFAcG akl0GgIDGLt6GhE7uxwuphq8TaQXCo+UNLpgLy+FinEpjtLhotUEEq+KzWvI+QnY UERi7Uo1RlzK0nPdEgD08Nc6wzIODf/y9n8iAHKdbhw6Zh02VjQu2k6LZ3cdOygO lI9PWIAXSwGtcX0tr0PCnsarR2yO9/ul -----END CERTIFICATE-----Generated at Sat Oct 11 00:02:11 2025 by rpki-client