$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/93146727-9cad-3961-ae07-df0111f1b59e.roa File: 93146727-9cad-3961-ae07-df0111f1b59e.roa (raw, json) Hash identifier: MN6Jiw5x4DV6g3DuCziyMjybKCbpA9XaxJuQUJdwsfs= Subject key identifier: BA:AE:85:24:56:D5:90:9F:7D:F7:58:BA:38:6B:75:2C:69:C6:6C:6B Certificate issuer: /CN=951e7581-98f6-4e09-8091-345244dd8d9d Certificate serial: 010D0C9F4328584B477C71D72121C4B17A19F98C Authority key identifier: 9A:54:6F:01:C0:15:F3:A1:30:21:64:90:35:86:79:43:ED:07:11:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/93146727-9cad-3961-ae07-df0111f1b59e.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 101 IP address blocks: 2001:1860::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:71:d7:21:21:c4:b1:7a:19:f9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951e7581-98f6-4e09-8091-345244dd8d9d Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=d88bcbb7-4cca-4694-8cf8-51c523666b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:56:10:79:d9:9d:33:9d:98:0a:18:60:75: a7:d1:45:82:ec:08:d5:a3:52:b5:b1:9f:a1:97:0b: 77:a1:ae:9d:2f:98:88:2b:5c:fd:a8:02:31:15:ee: 5f:4c:7f:bb:e2:4e:dc:c4:d7:89:c3:c5:d7:d3:5a: 0d:2e:28:17:35:1c:17:74:75:d7:7d:9f:5e:59:11: 0f:a1:55:94:be:28:1c:80:af:cd:92:e0:b2:85:ae: 0f:81:d9:fc:9d:76:c1:e3:db:11:a2:35:20:1f:79: 62:85:d0:d6:24:28:ce:60:42:52:24:c0:5b:65:d7: 35:27:b9:fc:d9:fd:9a:44:9b:47:2d:0c:36:d7:ce: 6c:8c:e0:b9:52:da:3f:61:a4:43:01:38:c2:c4:1a: bb:0d:b6:60:97:8b:c7:4f:ed:eb:ec:4d:d7:60:e1: c8:9d:b6:dc:04:7c:43:09:75:ca:7e:84:6c:e7:82: f0:aa:9a:68:2e:c9:81:f9:26:c8:c6:d9:e7:c7:02: d2:53:a7:26:ac:e1:53:d2:18:72:5d:aa:66:bc:23: 9c:6a:f5:cf:ea:cf:02:6f:c7:3e:56:b9:11:68:2f: 7b:59:b7:e3:fc:a4:91:4c:10:79:b9:8f:e8:2a:e8: ae:09:c2:7d:ba:83:4e:21:8a:fe:cf:11:ee:da:a0: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AE:85:24:56:D5:90:9F:7D:F7:58:BA:38:6B:75:2C:69:C6:6C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/93146727-9cad-3961-ae07-df0111f1b59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.crl X509v3 Authority Key Identifier: keyid:9A:54:6F:01:C0:15:F3:A1:30:21:64:90:35:86:79:43:ED:07:11:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer sbgp-ipAddrBlock: critical IPv6: 2001:1860::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:fa:6c:c7:44:61:fc:92:87:ae:2e:b0:49:12:28:01:bb:63: 18:e8:16:29:8b:1b:62:58:83:17:1f:e7:48:5a:32:40:6b:90: 9f:ea:96:a1:4e:f6:43:40:3f:a5:c9:44:45:8b:bb:71:83:a5: 3e:08:df:25:0c:10:9f:6f:e3:5a:83:32:53:24:46:68:7d:a3: d6:25:3a:43:1a:f2:5f:23:26:a2:6b:8c:46:6b:5e:1a:43:ad: f6:00:76:f6:6d:95:85:1b:28:57:4d:7e:1d:80:c9:03:47:c9: 90:4e:70:9f:86:04:47:95:b1:a6:38:fb:59:0c:04:6f:6b:ea: 7c:9c:28:41:fc:e5:f2:2b:e0:37:ec:35:7c:04:34:17:80:b7: c8:de:23:04:82:72:8b:9a:dd:5d:87:8d:d7:f9:e0:5d:ce:b3: 65:93:27:ab:c3:6b:d3:db:67:df:51:8e:93:d5:15:e5:ac:43: a0:5d:31:ed:39:d6:8b:42:d5:2f:a2:bc:d8:17:bd:5c:aa:b8: a4:97:3b:09:7a:a9:5a:f4:d5:0b:03:0e:a6:a3:bb:3d:8d:7e: fc:5a:f3:a0:0c:10:c6:f4:84:25:d3:56:5f:6c:d4:2c:65:99: df:a3:f0:3f:59:d4:40:c5:2a:a9:af:64:90:9e:5a:5e:aa:8b: c9:61:25:22 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfHHXISHEsXoZ+YwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUxZTc1ODEtOThmNi00ZTA5LTgwOTEtMzQ1MjQ0ZGQ4 ZDlkMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZDg4YmNiYjctNGNjYS00Njk0LThjZjgtNTFjNTIzNjY2YjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgVWEHnZnTOdmAoYYHWn0UWC7AjVo1K1sZ+h lwt3oa6dL5iIK1z9qAIxFe5fTH+74k7cxNeJw8XX01oNLigXNRwXdHXXfZ9eWREP oVWUvigcgK/NkuCyha4Pgdn8nXbB49sRojUgH3lihdDWJCjOYEJSJMBbZdc1J7n8 2f2aRJtHLQw2185sjOC5Uto/YaRDATjCxBq7DbZgl4vHT+3r7E3XYOHInbbcBHxD CXXKfoRs54LwqppoLsmB+SbIxtnnxwLSU6cmrOFT0hhyXapmvCOcavXP6s8Cb8c+ VrkRaC97Wbfj/KSRTBB5uY/oKuiuCcJ9uoNOIYr+zxHu2qDz3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLquhSRW1ZCfffdYujhrdSxpxmxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NTFl NzU4MS05OGY2LTRlMDktODA5MS0zNDUyNDRkZDhkOWQvOTMxNDY3MjctOWNhZC0z OTYxLWFlMDctZGYwMTExZjFiNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTUxZTc1ODEtOThmNi00ZTA5LTgw OTEtMzQ1MjQ0ZGQ4ZDlkLzk1MWU3NTgxLTk4ZjYtNGUwOS04MDkxLTM0NTI0NGRk OGQ5ZC5jcmwwHwYDVR0jBBgwFoAUmlRvAcAV86EwIWSQNYZ5Q+0HEXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NTFlNzU4MS05OGY2LTRlMDktODA5MS0zNDUy NDRkZDhkOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAG+mzHRGH8koeuLrBJEigBu2MY6BYpixtiWIMXH+dIWjJAa5Cf6pah TvZDQD+lyURFi7txg6U+CN8lDBCfb+NagzJTJEZofaPWJTpDGvJfIyaia4xGa14a Q632AHb2bZWFGyhXTX4dgMkDR8mQTnCfhgRHlbGmOPtZDARva+p8nChB/OXyK+A3 7DV8BDQXgLfI3iMEgnKLmt1dh43X+eBdzrNlkyerw2vT22ffUY6T1RXlrEOgXTHt OdaLQtUvorzYF71cqriklzsJeqla9NULAw6mo7s9jX78WvOgDBDG9IQl01ZfbNQs ZZnfo/A/WdRAxSqpr2SQnlpeqovJYSUi -----END CERTIFICATE-----Generated at Fri Oct 10 20:15:04 2025 by rpki-client