$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa File: 7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa (raw, json) Hash identifier: XQJTnCSJV+12mNenW/+jzcJrpvTQPO9wwkS8JsAWHS0= Subject key identifier: 39:98:36:B6:09:90:82:5B:50:74:EF:EA:48:C1:30:46:C7:5B:39:40 Certificate issuer: /CN=4091c99f-9cd5-4db2-8733-67e22036ebb5 Certificate serial: 010D0C9F4328584B2FC1903DCF24C089AE4D6280 Authority key identifier: 9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 32274 IP address blocks: 2620:11b:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:90:3d:cf:24:c0:89:ae:4d:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4091c99f-9cd5-4db2-8733-67e22036ebb5 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=225742b1-95b8-4c0d-913e-0402ed7a9724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:2f:fa:94:75:dd:20:96:fc:f0:c2:bb:36: 7a:80:db:4e:50:ce:6d:a7:14:88:cf:a9:59:88:15: fd:07:56:69:99:1d:62:54:d2:96:b2:f3:84:73:61: 96:5c:f6:18:ec:e3:c6:3e:99:d0:2d:a1:1e:4a:33: 70:e6:24:83:ed:c9:5f:60:26:f9:6c:f5:72:14:a5: 7b:0d:f5:ea:7e:14:41:e0:a6:1b:ba:26:39:72:5a: 32:f3:e9:a8:ae:2a:0d:6c:c7:8e:20:fa:eb:1c:4c: 8d:04:9e:6c:42:52:83:0b:a6:6d:87:9c:22:d0:d5: e5:d4:8f:e7:46:50:b1:1d:d6:55:53:cd:77:de:e5: bf:9c:20:09:0a:fa:4c:19:b9:7e:b8:5e:50:33:c5: 80:d3:48:6a:bf:62:6b:11:2b:e2:af:c6:9a:86:d2: 1a:3a:bc:f4:d2:c3:87:a4:8a:29:63:c1:28:69:65: 8a:15:80:07:77:3e:71:e2:ff:b8:66:65:67:b0:34: 1b:0f:03:42:e9:02:37:00:8c:ce:95:e6:f6:e5:9d: 0d:b6:b5:ed:20:ce:62:cc:af:f7:d7:17:bc:55:82: 4f:4d:52:66:c7:2b:64:e3:b8:9f:ec:14:cc:18:2b: 1a:7e:06:55:36:54:85:8a:83:c0:5d:94:48:1c:e5: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:98:36:B6:09:90:82:5B:50:74:EF:EA:48:C1:30:46:C7:5B:39:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl X509v3 Authority Key Identifier: keyid:9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer sbgp-ipAddrBlock: critical IPv6: 2620:11b:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a1:71:15:2e:40:37:81:2d:62:31:6b:4d:6f:c4:86:d8:c9: 90:e0:f5:cc:82:5c:dc:57:c2:7d:0d:d3:40:32:cd:ab:fa:85: 4d:9a:3a:9f:05:05:04:28:ae:c0:60:08:54:d7:b4:fe:d0:9e: 4e:b6:4e:f6:1b:b5:63:76:dd:f8:32:3a:99:4d:33:6a:1d:29: 97:3f:1d:be:a7:57:58:18:f5:0a:8f:1a:09:eb:22:da:75:7e: 3e:7a:ea:68:e6:64:22:ef:0c:09:ab:e9:8f:94:45:8b:be:5b: 7d:2a:de:b4:e3:be:16:3b:3e:a4:f9:a2:42:03:9c:99:f9:b6: 7b:3f:8d:01:3c:9f:cd:35:9d:5c:3b:95:a2:8a:2c:5e:fa:4c: 4f:d5:53:ed:3f:a3:e2:4f:5c:42:96:2a:23:7c:b9:8f:19:f9: 01:2d:3c:cc:32:91:90:1f:3c:72:13:08:af:8c:cb:5b:1f:f8: 81:8d:3e:d5:2c:58:84:93:2b:fe:16:e6:6d:a8:00:16:89:68: 8e:af:58:87:8e:7a:39:08:6f:20:3a:f3:9b:92:59:91:14:56: 1d:31:ab:22:35:4d:9c:65:a3:33:2f:b8:75:03:f1:fb:9c:dd: bf:a1:7f:aa:96:63:34:26:f1:24:3b:a3:3a:49:5c:6c:3a:8f: 0a:32:cc:45 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsvwZA9zyTAia5NYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA5MWM5OWYtOWNkNS00ZGIyLTg3MzMtNjdlMjIwMzZl YmI1MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MjI1NzQyYjEtOTViOC00YzBkLTkxM2UtMDQwMmVkN2E5NzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxUv+pR13SCW/PDCuzZ6gNtOUM5tpxSIz6lZ iBX9B1ZpmR1iVNKWsvOEc2GWXPYY7OPGPpnQLaEeSjNw5iSD7clfYCb5bPVyFKV7 DfXqfhRB4KYbuiY5cloy8+morioNbMeOIPrrHEyNBJ5sQlKDC6Zth5wi0NXl1I/n RlCxHdZVU8133uW/nCAJCvpMGbl+uF5QM8WA00hqv2JrESvir8aahtIaOrz00sOH pIopY8EoaWWKFYAHdz5x4v+4ZmVnsDQbDwNC6QI3AIzOleb25Z0NtrXtIM5izK/3 1xe8VYJPTVJmxytk47if7BTMGCsafgZVNlSFioPAXZRIHOVoaQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDmYNrYJkIJbUHTv6kjBMEbHWzlAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MDkx Yzk5Zi05Y2Q1LTRkYjItODczMy02N2UyMjAzNmViYjUvN2MzYzFkYTEtMjFmZC0z OTBjLThlYzEtNzM4MGM5MTQyOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDA5MWM5OWYtOWNkNS00ZGIyLTg3 MzMtNjdlMjIwMzZlYmI1LzQwOTFjOTlmLTljZDUtNGRiMi04NzMzLTY3ZTIyMDM2 ZWJiNS5jcmwwHwYDVR0jBBgwFoAUne4x2r4g6iqWpU02gfpSq75yJXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MDkxYzk5Zi05Y2Q1LTRkYjItODczMy02N2Uy MjAzNmViYjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABGxAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPaFxFS5AN4EtYjFrTW/EhtjJkOD1zIJc3FfCfQ3TQDLNq/qFTZo6 nwUFBCiuwGAIVNe0/tCeTrZO9hu1Y3bd+DI6mU0zah0plz8dvqdXWBj1Co8aCesi 2nV+PnrqaOZkIu8MCavpj5RFi75bfSretOO+Fjs+pPmiQgOcmfm2ez+NATyfzTWd XDuVooosXvpMT9VT7T+j4k9cQpYqI3y5jxn5AS08zDKRkB88chMIr4zLWx/4gY0+ 1SxYhJMr/hbmbagAFolojq9Yh456OQhvIDrzm5JZkRRWHTGrIjVNnGWjMy+4dQPx +5zdv6F/qpZjNCbxJDujOklcbDqPCjLMRQ== -----END CERTIFICATE-----Generated at Sat Oct 11 11:28:23 2025 by rpki-client