$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/648c56c7-39a6-3722-9b61-2c88a1f3e2bd.roa File: 648c56c7-39a6-3722-9b61-2c88a1f3e2bd.roa (raw, json) Hash identifier: sUz/BLe3zMnuisqRoQzVYlz93lkO5zLSavMe97kdIlE= Subject key identifier: F2:B8:84:16:13:9C:DF:CF:1E:33:EA:BC:8C:85:A5:68:0E:75:CA:36 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584B16A15F4BC724823E35B26B00 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/648c56c7-39a6-3722-9b61-2c88a1f3e2bd.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 2610:28::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5f:4b:c7:24:82:3e:35:b2:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=049898f7-9b53-4758-bf1a-152ae8638b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:14:9b:a9:c0:69:8d:33:18:09:43:40:64: 6f:cd:11:6e:1e:d5:10:60:8c:59:a6:f5:91:57:ca: a5:55:db:42:51:35:6a:f3:7e:35:89:97:6e:ab:f9: d2:c4:b1:44:99:e2:6b:f2:3d:c6:84:74:fd:69:85: e5:e8:b9:48:45:d7:08:46:1e:e7:5f:1f:f1:ee:91: 08:99:39:91:9a:9a:56:c7:2a:94:aa:02:b7:61:86: bc:5f:66:4f:3b:25:74:ff:f4:2f:0b:0e:27:a9:2b: a9:19:2d:e0:ad:a2:f0:1e:d2:aa:46:47:57:71:f3: 73:85:8f:6b:3f:c1:75:f3:49:5a:44:67:f2:66:9a: 45:1b:c9:09:9c:25:b9:23:2f:f0:2b:a6:00:a1:6e: de:ea:1b:0f:aa:74:c3:f7:d2:e9:24:1b:ab:e5:f5: 2b:e8:91:86:c1:7a:12:91:a9:59:43:66:8b:08:da: ae:5d:99:8f:d3:6a:ac:67:9f:6e:3a:2b:fb:3b:88: ad:5e:cd:7e:11:59:1b:6e:98:9a:61:45:51:a5:1a: 74:2c:8c:dd:47:32:dc:ba:11:42:bb:3c:f4:aa:0e: 38:bc:7a:c9:1a:e5:98:97:f7:69:e4:df:17:b4:82: ff:de:d3:eb:d4:e4:77:e6:53:30:60:94:20:8a:16: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B8:84:16:13:9C:DF:CF:1E:33:EA:BC:8C:85:A5:68:0E:75:CA:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/648c56c7-39a6-3722-9b61-2c88a1f3e2bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2610:28::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6a:aa:51:3f:74:f8:dc:04:2b:09:7d:34:ed:b1:2d:f1:1d: 13:17:e4:39:42:0e:6a:6e:67:d5:76:57:dd:e0:70:4c:67:d9: 9c:64:09:ea:d8:2a:c2:8b:ca:60:80:9c:0d:0a:c7:d4:d5:7b: de:77:f2:74:8b:97:70:67:94:93:31:a6:30:83:e3:28:f9:9f: 56:f1:56:36:35:f1:a1:53:7c:fd:ef:21:a4:90:88:a3:26:b9: b8:0f:df:3d:e7:69:86:67:bc:79:20:8b:38:9e:b0:78:09:4f: e1:e6:14:d2:29:e3:8f:ed:37:ab:c2:95:ff:86:f9:c3:55:63: 70:c9:49:48:d1:42:8b:f7:a6:08:c4:a7:1e:a2:02:f0:74:21: 20:d3:dc:a8:f8:19:09:c2:e7:2b:ad:61:67:78:76:90:2a:ac: 36:6e:fc:3e:3c:7e:7e:99:a0:3d:6f:54:c0:f7:ab:78:ae:62: dc:62:2e:4c:23:b9:1c:c1:a6:0d:62:ee:17:84:76:86:66:6e: df:a4:29:13:e4:79:b1:c3:82:bd:a8:68:55:93:7e:60:03:b3: dc:3b:42:dc:2a:df:3b:b4:23:56:4e:a7:df:d2:ea:a2:ed:ed: 8a:ff:14:d1:84:5d:14:fb:be:aa:69:a3:fe:1f:c5:50:67:f2: 1e:d9:36:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsWoV9LxySCPjWyawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk MDQ5ODk4ZjctOWI1My00NzU4LWJmMWEtMTUyYWU4NjM4YjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirEUm6nAaY0zGAlDQGRvzRFuHtUQYIxZpvWR V8qlVdtCUTVq8341iZduq/nSxLFEmeJr8j3GhHT9aYXl6LlIRdcIRh7nXx/x7pEI mTmRmppWxyqUqgK3YYa8X2ZPOyV0//QvCw4nqSupGS3graLwHtKqRkdXcfNzhY9r P8F180laRGfyZppFG8kJnCW5Iy/wK6YAoW7e6hsPqnTD99LpJBur5fUr6JGGwXoS kalZQ2aLCNquXZmP02qsZ59uOiv7O4itXs1+EVkbbpiaYUVRpRp0LIzdRzLcuhFC uzz0qg44vHrJGuWYl/dp5N8XtIL/3tPr1OR35lMwYJQgihbInwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPK4hBYTnN/PHjPqvIyFpWgOdco2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvNjQ4YzU2YzctMzlhNi0z NzIyLTliNjEtMmM4OGExZjNlMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhAAKDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBiaqpRP3T43AQrCX007bEt8R0TF+Q5Qg5qbmfVdlfd4HBMZ9mcZAnq 2CrCi8pggJwNCsfU1Xved/J0i5dwZ5STMaYwg+Mo+Z9W8VY2NfGhU3z97yGkkIij Jrm4D98952mGZ7x5IIs4nrB4CU/h5hTSKeOP7TerwpX/hvnDVWNwyUlI0UKL96YI xKceogLwdCEg09yo+BkJwucrrWFneHaQKqw2bvw+PH5+maA9b1TA96t4rmLcYi5M I7kcwaYNYu4XhHaGZm7fpCkT5Hmxw4K9qGhVk35gA7PcO0LcKt87tCNWTqff0uqi 7e2K/xTRhF0U+76qaaP+H8VQZ/Ie2TYz -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:08 2025 by rpki-client