$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa File: d08ce755-af65-3768-957e-3d777b184fec.roa (raw, json) Hash identifier: g5mvn7DBlR8yBxRUdeeTOSCF/1012rEfLq/j/CwPw/8= Subject key identifier: 05:6B:EE:BF:E8:5A:89:F2:E1:AD:58:4F:B9:78:B6:CD:12:B0:8C:AD Certificate issuer: /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Certificate serial: 010D0C9F4328584B328C35FAA807C2E917B29DC0 Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2620:135:7020::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:35:fa:a8:07:c2:e9:17:b2:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=3de02f23-f261-4bff-9991-07b4d9e84b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8d:c6:eb:18:66:f1:d1:ad:77:3b:c1:e8:da: 2b:9a:7c:3f:86:2d:6e:a5:1d:c5:0d:60:46:ec:56: c6:8f:48:70:87:0f:15:d9:87:4b:e2:6d:4f:fa:5a: 6b:b7:2b:90:da:1c:55:28:ef:0c:33:bc:6b:ff:25: cf:fc:35:75:5e:02:16:3e:bd:51:0d:e4:81:f9:3d: 28:1c:47:5a:88:f5:cb:98:83:6c:36:dc:d9:d5:d9: 0c:ab:85:f6:6b:22:19:69:f9:13:cc:bc:1c:1b:35: 3e:88:b1:e4:27:50:55:d0:9b:33:4e:10:2d:eb:f4: 35:89:fd:c8:1e:db:8f:9a:3a:95:75:a9:62:0d:e4: 55:93:20:ed:a5:85:83:ab:f0:3a:c6:dc:37:0d:82: 3f:5d:af:83:ad:32:e5:b4:50:fb:74:14:9b:c3:7c: 60:1a:18:86:47:a2:49:12:f7:20:f1:60:f9:33:ff: 2a:75:6f:01:2c:3a:7e:9c:6b:fb:03:13:d4:1a:4a: 19:ff:b7:e1:f1:ef:ff:1c:df:2f:aa:51:1a:c6:1e: 2d:b1:f6:b1:05:bc:6f:00:8b:2f:f7:6c:df:24:6f: 4f:41:38:ed:a9:0c:60:04:2f:78:95:40:a3:3f:f4: bd:22:e8:a5:c2:07:bc:c0:62:8f:0b:e5:cc:25:ce: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6B:EE:BF:E8:5A:89:F2:E1:AD:58:4F:B9:78:B6:CD:12:B0:8C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl X509v3 Authority Key Identifier: keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:7020::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:21:2c:84:52:b4:81:39:c4:fb:9d:e3:36:65:95:9f:d2:67: e8:89:7a:86:87:9c:02:d6:87:c9:b6:97:33:01:80:bb:ac:7c: 77:31:6d:06:a4:0d:dd:a2:54:a8:21:18:dc:5c:1e:91:09:f0: 17:1b:d9:60:78:3a:69:81:6b:5f:98:7c:e5:f9:62:3b:c5:01: 8d:9f:7a:24:cd:8e:21:cb:79:f5:51:39:78:f5:88:62:d9:eb: 01:ca:69:cb:42:c5:04:e4:c2:00:35:20:12:c4:d3:16:1b:bd: 19:bd:4f:90:16:83:92:56:c6:68:ca:53:06:47:36:05:e4:13: cb:1d:28:4a:90:ea:f4:06:c3:bb:29:4a:17:9a:6d:19:b1:2c: be:8e:40:87:ed:10:63:72:98:55:42:d2:11:1b:ad:a0:de:01: 89:38:f5:7a:5a:44:9c:8e:4c:0a:a8:bf:0d:a5:90:30:37:65: 15:a4:17:6b:b9:c4:b4:f1:ae:cf:b6:e0:3a:e4:87:3d:ac:d4: 61:1e:6f:06:71:3a:73:8e:90:48:c7:2a:be:d0:36:0c:83:78: 7e:78:56:35:9f:25:d1:64:f0:2e:a5:e7:c5:5d:60:da:9e:c5: 78:d6:ba:d0:10:48:39:1f:c7:79:c9:96:06:1b:72:f8:59:03: f5:2e:c5:98 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEsyjDX6qAfC6ReyncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh YWZiMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk M2RlMDJmMjMtZjI2MS00YmZmLTk5OTEtMDdiNGQ5ZTg0Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho3G6xhm8dGtdzvB6Normnw/hi1upR3FDWBG 7FbGj0hwhw8V2YdL4m1P+lprtyuQ2hxVKO8MM7xr/yXP/DV1XgIWPr1RDeSB+T0o HEdaiPXLmINsNtzZ1dkMq4X2ayIZafkTzLwcGzU+iLHkJ1BV0JszThAt6/Q1if3I HtuPmjqVdaliDeRVkyDtpYWDq/A6xtw3DYI/Xa+DrTLltFD7dBSbw3xgGhiGR6JJ Evcg8WD5M/8qdW8BLDp+nGv7AxPUGkoZ/7fh8e//HN8vqlEaxh4tsfaxBbxvAIsv 92zfJG9PQTjtqQxgBC94lUCjP/S9Iuilwge8wGKPC+XMJc61EwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFAVr7r/oWony4a1YT7l4ts0SsIytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4 MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvZDA4Y2U3NTUtYWY2NS0z NzY4LTk1N2UtM2Q3NzdiMTg0ZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4 NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4 NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAg ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAkISyEUrSBOcT7neM2ZZWf0mfoiXqGh5wC1ofJtpczAYC7rHx3 MW0GpA3dolSoIRjcXB6RCfAXG9lgeDppgWtfmHzl+WI7xQGNn3okzY4hy3n1UTl4 9Yhi2esBymnLQsUE5MIANSASxNMWG70ZvU+QFoOSVsZoylMGRzYF5BPLHShKkOr0 BsO7KUoXmm0ZsSy+jkCH7RBjcphVQtIRG62g3gGJOPV6WkScjkwKqL8NpZAwN2UV pBdrucS08a7PtuA65Ic9rNRhHm8GcTpzjpBIxyq+0DYMg3h+eFY1nyXRZPAupefF XWDansV41rrQEEg5H8d5yZYGG3L4WQP1LsWY -----END CERTIFICATE-----Generated at Wed Oct 8 23:36:56 2025 by rpki-client