$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/ba7ce757-64bd-36f6-8b8e-c4a921c6f831.roa File: ba7ce757-64bd-36f6-8b8e-c4a921c6f831.roa (raw, json) Hash identifier: Qn4VXr5p2EKH6og4ODhdn8XXEIP/5N9/LARQ6Pd7Zo4= Subject key identifier: C3:2C:5B:69:FD:AA:0A:98:96:93:5D:22:4D:07:22:A3:17:CB:BF:69 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584B740D15F7CCFC824522469800 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/ba7ce757-64bd-36f6-8b8e-c4a921c6f831.roa Signing time: Wed 08 Oct 2025 12:07:50 +0000 ROA not before: Wed 08 Oct 2025 12:07:50 +0000 ROA not after: Tue 06 Jan 2026 13:07:50 +0000 asID: 14618 IP address blocks: 2620:1f7:c025::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:0d:15:f7:cc:fc:82:45:22:46:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Oct 8 12:07:50 2025 GMT Not After : Jan 6 13:07:50 2026 GMT Subject: CN=e4b25acb-8d90-4187-8f45-ef5e58ea2b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:54:99:9e:56:c2:c5:33:b8:44:e4:fa:b9: 6a:53:c7:17:6c:a4:75:ee:1d:87:77:57:d3:be:8c: 7f:b2:c9:6e:b3:71:1c:41:68:3d:97:14:0e:8b:50: a6:33:6f:5f:87:8c:b2:6c:ee:74:0f:f6:97:c0:96: 68:ab:4d:b6:ef:26:5e:43:b0:7a:ab:be:f6:e0:9c: cd:27:74:ba:7f:59:c1:a6:67:2f:25:2b:c3:54:0f: f8:9e:9a:8c:f5:c1:ba:a4:23:9a:a2:ce:82:bf:f5: c0:78:d4:45:cb:fa:42:f5:7f:6c:84:42:3e:b7:7d: f9:70:29:1c:9c:69:f5:dc:4b:89:00:d2:e5:85:85: 1f:a7:d7:71:31:f9:21:43:4a:8c:8e:65:96:eb:f4: aa:56:d5:16:cb:56:87:30:aa:72:1e:a7:7c:3a:ea: 5c:f2:a3:09:e1:fb:8c:5e:f2:19:e0:62:ae:f9:d4: 51:84:b1:88:51:81:3e:6d:1d:ba:57:12:97:65:1f: c4:ee:be:97:cd:f4:a3:48:91:3b:76:5d:0c:24:7c: cf:bf:3e:90:f5:14:53:08:f4:90:62:81:08:6e:8c: 48:ef:41:ba:be:18:aa:19:30:45:fc:1f:64:a2:0d: 68:8f:1e:eb:af:fb:1f:e8:c6:aa:0f:76:c9:71:c5: 62:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2C:5B:69:FD:AA:0A:98:96:93:5D:22:4D:07:22:A3:17:CB:BF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/ba7ce757-64bd-36f6-8b8e-c4a921c6f831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1f7:c025::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:75:30:7f:a5:ef:6e:e4:d6:2a:7a:38:f4:f9:8f:15:1e:27: cd:1f:00:c7:24:ca:79:92:ee:fd:b0:58:47:db:c6:5e:25:4a: 3b:e8:1f:13:35:7c:73:be:f6:49:bb:cc:b7:ec:1e:d1:fb:b9: 14:09:08:a5:76:d1:1c:e6:22:59:3f:0b:f9:83:79:96:b7:44: 88:d8:a1:d1:78:8a:cc:24:21:61:b2:1c:7c:ea:b1:4f:d0:df: 59:c6:8b:8a:83:bf:61:a9:99:30:d6:47:7d:60:0c:fa:25:cf: c3:d7:b1:3a:bf:fc:a3:13:23:1f:0b:e9:31:35:16:fa:72:6c: 69:e9:48:91:2e:a7:ef:9b:37:34:a1:9b:d9:43:03:36:f4:dc: a1:88:f1:84:cf:aa:33:22:94:eb:6a:df:42:07:1b:48:b2:50: 48:4b:73:79:f9:a0:af:0b:93:df:e8:46:2e:a5:27:4e:62:02: 34:23:c4:f4:b9:a2:94:54:05:d8:02:f1:eb:56:c6:9f:db:6f: 4a:48:59:53:74:cf:ee:4d:08:d6:5f:19:0e:5c:bb:d1:c4:4b: 08:81:0e:18:8c:e4:e7:91:e2:97:dd:d5:19:8f:d0:f0:17:16: 3a:30:b7:40:78:80:9c:18:78:38:9d:93:f3:d0:9e:d6:b3:1b: fe:5b:9c:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt0DRX3zPyCRSJGmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MTAwODEyMDc1MFoXDTI2MDEwNjEzMDc1MFowLzEtMCsGA1UEAxMk ZTRiMjVhY2ItOGQ5MC00MTg3LThmNDUtZWY1ZTU4ZWEyYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIxUmZ5WwsUzuETk+rlqU8cXbKR17h2Hd1fT vox/sslus3EcQWg9lxQOi1CmM29fh4yybO50D/aXwJZoq0227yZeQ7B6q7724JzN J3S6f1nBpmcvJSvDVA/4npqM9cG6pCOaos6Cv/XAeNRFy/pC9X9shEI+t335cCkc nGn13EuJANLlhYUfp9dxMfkhQ0qMjmWW6/SqVtUWy1aHMKpyHqd8Oupc8qMJ4fuM XvIZ4GKu+dRRhLGIUYE+bR26VxKXZR/E7r6XzfSjSJE7dl0MJHzPvz6Q9RRTCPSQ YoEIboxI70G6vhiqGTBF/B9kog1ojx7rr/sf6MaqD3bJccViLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMMsW2n9qgqYlpNdIk0HIqMXy79pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvYmE3Y2U3NTctNjRiZC0z NmY2LThiOGUtYzRhOTIxYzZmODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98Al MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACl1MH+l727k1ip6OPT5jxUeJ80fAMckynmS7v2wWEfbxl4lSjvo HxM1fHO+9km7zLfsHtH7uRQJCKV20RzmIlk/C/mDeZa3RIjYodF4iswkIWGyHHzq sU/Q31nGi4qDv2GpmTDWR31gDPolz8PXsTq//KMTIx8L6TE1FvpybGnpSJEup++b NzShm9lDAzb03KGI8YTPqjMilOtq30IHG0iyUEhLc3n5oK8Lk9/oRi6lJ05iAjQj xPS5opRUBdgC8etWxp/bb0pIWVN0z+5NCNZfGQ5cu9HESwiBDhiM5OeR4pfd1RmP 0PAXFjowt0B4gJwYeDidk/PQntazG/5bnGE= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:40 2025 by rpki-client