$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/0c68ee81-fbdb-3efd-b416-b2bf418eec68.roa File: 0c68ee81-fbdb-3efd-b416-b2bf418eec68.roa (raw, json) Hash identifier: 6N2V5+ZJCdJWkdqFsPteBMKggSZl95x2q8ZdHlz00EA= Subject key identifier: AA:F8:C5:86:31:5A:3B:D8:1E:A5:9F:8F:2F:53:9B:72:4C:1D:88:CE Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584B16A15F9F393559B7478E0420 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/0c68ee81-fbdb-3efd-b416-b2bf418eec68.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 36850 IP address blocks: 2610:28:3090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5f:9f:39:35:59:b7:47:8e:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=c43f38b2-765b-495e-9357-9eb365a65b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:4e:7c:a2:4c:58:78:e6:98:54:a4:c6:7e: 05:09:88:2e:91:54:ad:9e:cf:c4:b8:86:ea:93:65: 61:7d:25:54:05:67:c0:b3:30:82:f6:45:5e:7c:82: 55:ae:cb:10:30:b1:67:ac:52:57:48:83:bc:a9:70: 46:06:f1:8d:3d:23:56:48:fb:4c:57:a3:4a:c2:c6: 5a:52:c2:cf:b4:be:8e:e9:d5:07:f6:24:68:9e:0e: ce:55:60:4e:33:8b:2d:38:dc:c0:cb:c3:63:c9:82: a6:c6:3b:49:04:34:e8:dc:84:67:3e:0d:f5:22:c0: f9:99:23:82:e4:3d:75:a9:47:14:11:e9:33:30:92: 9f:6a:20:1a:0a:30:26:86:b3:81:b7:03:22:78:ef: 9f:bb:a0:87:6d:d3:6d:eb:29:a6:80:81:73:e9:c8: 02:f4:3f:e2:24:e2:42:9d:88:b0:35:ee:64:ba:a5: 8a:5e:10:f3:2d:d0:ff:ce:03:59:d6:66:7f:ac:0c: 7c:be:54:12:b5:3e:39:f4:16:c2:44:a5:c9:85:2e: 4a:b4:ef:d7:59:b0:70:60:08:a8:3b:71:d5:8c:0a: 88:81:30:5e:39:17:d3:d7:2d:11:f6:f9:e1:98:5f: c9:39:75:ab:d6:a9:01:5e:47:0c:c3:b7:c3:07:64: 32:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F8:C5:86:31:5A:3B:D8:1E:A5:9F:8F:2F:53:9B:72:4C:1D:88:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/0c68ee81-fbdb-3efd-b416-b2bf418eec68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2610:28:3090::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:75:30:6e:fc:c1:77:56:bf:a6:b7:b5:31:c6:e4:00:0b:75: 81:5e:54:4f:3e:32:4a:f9:5e:9a:81:74:ca:2e:9e:e9:85:41: ca:bb:3d:85:f6:95:ab:5f:e1:ba:eb:0e:29:09:0e:6e:89:26: b8:fd:09:29:b0:fb:55:06:a4:25:9b:71:44:d7:44:18:11:55: 63:40:3e:4b:b1:84:7d:48:03:0a:46:59:e6:8d:19:bb:48:fb: 29:71:af:87:39:c9:7d:a8:63:98:ce:45:cb:eb:81:21:c9:9a: 3a:ff:d2:00:54:e8:8e:17:f4:89:90:bc:99:8f:47:85:00:59: 6b:2d:46:8c:e3:75:25:3f:8e:6d:37:5a:61:5e:8e:5c:a2:4d: 24:0f:ff:41:bc:56:fe:0e:a0:84:bc:8c:cc:57:68:52:f9:c1: 1a:14:cf:a1:06:a1:5e:37:87:19:ba:f0:d7:04:4c:d2:05:3d: aa:f0:d9:e2:43:90:93:8e:2d:fc:75:de:99:61:9a:a9:5d:90: 42:9e:9f:80:31:e6:3c:e6:56:8f:16:ea:a8:41:c5:ae:96:fd: e2:5a:0f:f2:c4:8e:60:c4:93:81:57:ae:6e:d1:56:b6:74:88: 50:7a:9b:57:24:cd:0e:dd:45:a7:2b:eb:9d:27:34:8b:1d:b0: 35:f9:8b:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsWoV+fOTVZt0eOBCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk YzQzZjM4YjItNzY1Yi00OTVlLTkzNTctOWViMzY1YTY1Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIBOfKJMWHjmmFSkxn4FCYgukVStns/EuIbq k2VhfSVUBWfAszCC9kVefIJVrssQMLFnrFJXSIO8qXBGBvGNPSNWSPtMV6NKwsZa UsLPtL6O6dUH9iRong7OVWBOM4stONzAy8NjyYKmxjtJBDTo3IRnPg31IsD5mSOC 5D11qUcUEekzMJKfaiAaCjAmhrOBtwMieO+fu6CHbdNt6ymmgIFz6cgC9D/iJOJC nYiwNe5kuqWKXhDzLdD/zgNZ1mZ/rAx8vlQStT459BbCRKXJhS5KtO/XWbBwYAio O3HVjAqIgTBeORfT1y0R9vnhmF/JOXWr1qkBXkcMw7fDB2QyGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKr4xYYxWjvYHqWfjy9Tm3JMHYjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvMGM2OGVlODEtZmJkYi0z ZWZkLWI0MTYtYjJiZjQxOGVlYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAKDCQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFF1MG78wXdWv6a3tTHG5AALdYFeVE8+Mkr5XpqBdMounumFQcq7 PYX2latf4brrDikJDm6JJrj9CSmw+1UGpCWbcUTXRBgRVWNAPkuxhH1IAwpGWeaN GbtI+ylxr4c5yX2oY5jORcvrgSHJmjr/0gBU6I4X9ImQvJmPR4UAWWstRozjdSU/ jm03WmFejlyiTSQP/0G8Vv4OoIS8jMxXaFL5wRoUz6EGoV43hxm68NcETNIFParw 2eJDkJOOLfx13plhmqldkEKen4Ax5jzmVo8W6qhBxa6W/eJaD/LEjmDEk4FXrm7R VrZ0iFB6m1ckzQ7dRacr650nNIsdsDX5i5c= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:17 2025 by rpki-client