$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa File: fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa (raw, json) Hash identifier: W330F6MGdV4LeGIsWjPy1Ddk5xZBhH3aUJjuKnTdglI= Subject key identifier: C0:59:B8:5D:67:55:ED:AC:76:45:98:7D:72:EF:C1:A7:EC:03:A2:7E Certificate issuer: /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Certificate serial: 010D0C9F4328584B434C5CF81EF7C872BA960480 Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 2620:135:7017::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5c:f8:1e:f7:c8:72:ba:96:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c3f8c9f5-19e4-46d5-b9a5-ff07eb09e8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e2:2a:b1:2b:08:58:52:30:c9:93:bc:75:68: da:03:9e:47:b7:21:8a:f0:42:32:54:cb:0d:93:8a: 4c:aa:6f:7c:9f:31:f5:a5:91:db:08:2e:bc:28:d6: cb:64:7c:35:e5:fa:22:aa:8f:ed:0a:28:86:49:4f: 50:0c:67:82:e4:7f:21:62:45:ae:21:07:27:ff:3e: 01:df:21:36:b9:a2:b9:98:e2:9d:7a:56:b0:de:06: 3a:1f:f8:9d:07:ec:b5:6c:eb:af:3c:22:87:85:df: b1:41:96:d2:cd:82:06:aa:74:0f:b5:a8:73:e7:a6: 75:a6:8c:a1:8d:56:9e:15:1d:bb:e2:4a:06:33:99: 39:73:05:33:f5:01:cf:7a:d8:4b:2c:96:2c:36:fe: 15:c0:11:57:4f:ad:e4:1d:a5:3e:52:e4:89:47:5d: c5:5b:3d:5a:e5:05:3a:37:67:42:3e:09:7c:47:b7: 1f:a2:95:2b:83:32:88:f1:9e:dd:99:03:5a:35:1a: 3b:80:33:47:51:f5:e9:c3:4a:ff:8a:70:7c:f0:20: f4:4b:cf:03:6b:66:00:f7:99:9f:f4:55:69:3b:88: 7f:7f:82:13:0b:9c:ca:22:bc:1e:e0:a8:81:c8:8e: 98:d7:d7:9d:15:32:b8:a6:d6:5e:36:13:62:37:bb: c5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:59:B8:5D:67:55:ED:AC:76:45:98:7D:72:EF:C1:A7:EC:03:A2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl X509v3 Authority Key Identifier: keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:7017::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:13:45:5c:97:8a:5f:11:5c:9b:b8:fe:a3:c3:ed:56:11:b0: 05:e5:bb:ab:8a:99:b7:ba:0c:68:16:dc:33:29:eb:4e:3b:4e: 2c:19:b6:37:0f:75:0e:97:ce:28:6b:80:de:dd:39:10:7f:58: fb:93:1d:2c:5f:93:f4:01:df:b6:9b:7f:25:69:fc:10:09:99: 6a:ee:c8:64:fc:f8:40:66:03:f2:47:83:22:b4:34:a3:d3:ae: 56:ab:79:4d:4a:bd:bf:9f:55:16:c2:a9:dc:16:52:96:dc:65: 59:b5:31:be:4d:de:9c:5b:f0:41:34:ff:e0:67:d2:1b:61:4e: 8b:be:aa:2d:3c:6e:2b:a0:50:d1:49:6c:28:e5:30:0b:7a:55: 8a:9a:30:e3:cb:9a:3e:f8:7c:c8:d3:ca:d4:4b:7b:ff:a9:b4: 0b:71:c9:7a:fb:45:cf:50:82:93:54:8f:b9:6d:dc:ea:87:ee: 3b:e0:96:97:22:3b:b1:b8:57:cf:ff:80:5b:6c:6b:83:bc:b8: 4f:cc:6a:5a:6a:ed:61:e2:bb:83:01:43:43:86:29:4b:d6:48: e7:a6:e9:41:15:16:b8:56:77:12:85:29:a0:a2:67:07:92:9c: 76:76:6e:b9:fa:27:5e:12:44:9c:d9:ef:7d:92:a1:95:dc:ab: e6:50:d3:0f -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEtDTFz4HvfIcrqWBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh YWZiMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YzNmOGM5ZjUtMTllNC00NmQ1LWI5YTUtZmYwN2ViMDllOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uIqsSsIWFIwyZO8dWjaA55HtyGK8EIyVMsN k4pMqm98nzH1pZHbCC68KNbLZHw15foiqo/tCiiGSU9QDGeC5H8hYkWuIQcn/z4B 3yE2uaK5mOKdelaw3gY6H/idB+y1bOuvPCKHhd+xQZbSzYIGqnQPtahz56Z1poyh jVaeFR274koGM5k5cwUz9QHPethLLJYsNv4VwBFXT63kHaU+UuSJR13FWz1a5QU6 N2dCPgl8R7cfopUrgzKI8Z7dmQNaNRo7gDNHUfXpw0r/inB88CD0S88Da2YA95mf 9FVpO4h/f4ITC5zKIrwe4KiByI6Y19edFTK4ptZeNhNiN7vFeQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFMBZuF1nVe2sdkWYfXLvwafsA6J+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4 MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvZmQ0YTMwOTktNDNiMC0z OGFjLTgyMTItMWEzY2NiNGJlYmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4 NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4 NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAX ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAyE0Vcl4pfEVybuP6jw+1WEbAF5buripm3ugxoFtwzKetOO04s GbY3D3UOl84oa4De3TkQf1j7kx0sX5P0Ad+2m38lafwQCZlq7shk/PhAZgPyR4Mi tDSj065Wq3lNSr2/n1UWwqncFlKW3GVZtTG+Td6cW/BBNP/gZ9IbYU6LvqotPG4r oFDRSWwo5TALelWKmjDjy5o++HzI08rUS3v/qbQLccl6+0XPUIKTVI+5bdzqh+47 4JaXIjuxuFfP/4BbbGuDvLhPzGpaau1h4ruDAUNDhilL1kjnpulBFRa4VncShSmg omcHkpx2dm65+ideEkSc2e99kqGV3KvmUNMP -----END CERTIFICATE-----Generated at Wed Oct 8 23:34:48 2025 by rpki-client