$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/817509c3-a98c-3db3-bc07-f23436da7d1e.roa File: 817509c3-a98c-3db3-bc07-f23436da7d1e.roa (raw, json) Hash identifier: tTjWTpxVpWLYXnJInCFvpilLtplMImiiw70DRxDryKA= Subject key identifier: EA:EF:A5:51:CA:4B:CB:E8:C4:BE:E8:51:6B:37:9A:EA:27:91:FE:B8 Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F4328584B44B1BC8C024B9D12C6540280 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/817509c3-a98c-3db3-bc07-f23436da7d1e.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 7764 IP address blocks: 2610:20:2010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:bc:8c:02:4b:9d:12:c6:54:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=c3a154cb-cea6-4620-83ff-ac50ef00f8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:b9:01:80:f3:d2:ec:3b:c1:db:39:a1:7f: 40:f0:71:9c:bc:c2:45:aa:22:31:26:ba:a6:6d:33: 4f:54:ee:dc:4b:84:89:a6:76:54:09:c5:40:46:33: d0:60:e9:bb:b0:7c:7e:53:ac:3f:e0:7b:a9:73:6b: dc:e9:57:d5:af:fb:4c:60:15:54:10:a8:19:bd:b0: 31:6d:e2:7b:88:3c:65:e6:43:19:8c:20:8c:04:e1: fd:f3:94:8b:10:e3:a3:61:5f:64:4a:4b:7e:85:7f: d4:09:d9:a1:3f:09:a1:d2:82:36:20:34:dd:62:79: bf:3f:c0:93:7f:4c:b9:04:6f:0c:1f:12:15:bc:ec: c3:a2:ac:47:f1:5e:68:9c:8e:e2:7d:0d:52:a0:01: 24:6c:ea:87:7b:79:ca:68:77:4e:96:90:6d:95:07: 6f:50:3d:38:2e:04:d1:b9:c4:67:c4:33:ff:c0:c7: 81:f1:bf:1a:b3:47:56:02:de:9e:ed:00:2e:3a:32: 6b:76:7b:c3:17:5d:48:33:72:07:0b:e3:d8:5d:d7: 16:c2:45:5b:c9:7c:cf:7a:d3:de:59:9e:77:c2:a6: 61:ed:7b:b2:51:25:ca:08:2c:c5:9f:2e:f0:6d:72: 8e:15:11:f8:fd:5e:65:7f:04:be:fb:97:71:73:ce: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EF:A5:51:CA:4B:CB:E8:C4:BE:E8:51:6B:37:9A:EA:27:91:FE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/817509c3-a98c-3db3-bc07-f23436da7d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:2010::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:45:82:28:34:96:9a:ad:7a:fe:a0:29:f4:d7:96:ad:6a:c2: f3:29:34:e9:e8:91:63:8f:69:c6:77:c5:38:41:dd:c1:72:6c: 01:e5:19:d5:31:11:a0:97:b1:18:90:71:6b:b6:60:3a:84:25: 26:6c:3d:52:c7:a1:70:6d:7c:95:65:3d:95:13:ef:2e:5a:76: 22:23:c9:0d:36:88:81:28:31:0f:63:ae:73:30:74:5a:fb:d1: 09:d4:cb:65:36:4a:93:c2:d7:5b:08:1d:76:c8:51:e0:20:55: 03:07:bf:d5:6c:d4:f5:4d:85:78:20:78:77:c3:60:d7:8d:4e: 8c:18:1c:4d:6e:53:96:92:cf:b2:98:e8:a6:1d:da:e9:77:cf: 38:eb:64:6e:5c:ba:b9:da:61:30:ed:02:9b:bf:2e:5d:a1:48: 19:59:47:a2:6f:b9:7e:fe:1f:8d:6e:f7:43:63:9b:81:be:4a: 1d:95:34:6a:1d:ce:9f:91:6c:f2:cc:10:de:43:9a:37:5e:e3: 14:5a:c0:e5:c0:4b:99:f9:6e:96:db:74:47:b1:2e:fa:b5:a0: 1c:b2:4f:67:ce:f3:c0:a9:6a:ec:ce:f2:cc:ae:bc:74:3b:a5: 55:c8:f9:ea:a0:fc:ca:7c:40:7e:5d:6d:4c:85:19:49:4c:5e: 48:2f:89:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtEsbyMAkudEsZUAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk YzNhMTU0Y2ItY2VhNi00NjIwLTgzZmYtYWM1MGVmMDBmOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQy5AYDz0uw7wds5oX9A8HGcvMJFqiIxJrqm bTNPVO7cS4SJpnZUCcVARjPQYOm7sHx+U6w/4Hupc2vc6VfVr/tMYBVUEKgZvbAx beJ7iDxl5kMZjCCMBOH985SLEOOjYV9kSkt+hX/UCdmhPwmh0oI2IDTdYnm/P8CT f0y5BG8MHxIVvOzDoqxH8V5onI7ifQ1SoAEkbOqHe3nKaHdOlpBtlQdvUD04LgTR ucRnxDP/wMeB8b8as0dWAt6e7QAuOjJrdnvDF11IM3IHC+PYXdcWwkVbyXzPetPe WZ53wqZh7XuyUSXKCCzFny7wbXKOFRH4/V5lfwS++5dxc87DzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOrvpVHKS8voxL7oUWs3muonkf64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvODE3NTA5YzMtYTk4Yy0z ZGIzLWJjMDctZjIzNDM2ZGE3ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAICAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpFgig0lpqtev6gKfTXlq1qwvMpNOnokWOPacZ3xThB3cFybAHl GdUxEaCXsRiQcWu2YDqEJSZsPVLHoXBtfJVlPZUT7y5adiIjyQ02iIEoMQ9jrnMw dFr70QnUy2U2SpPC11sIHXbIUeAgVQMHv9Vs1PVNhXggeHfDYNeNTowYHE1uU5aS z7KY6KYd2ul3zzjrZG5curnaYTDtApu/Ll2hSBlZR6JvuX7+H41u90Njm4G+Sh2V NGodzp+RbPLMEN5Dmjde4xRawOXAS5n5bpbbdEexLvq1oByyT2fO88CpauzO8syu vHQ7pVXI+eqg/Mp8QH5dbUyFGUlMXkgvicU= -----END CERTIFICATE-----Generated at Sat Oct 11 12:35:21 2025 by rpki-client