$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa File: 4738a0db-ee50-3a8a-9636-ac0584f52f61.roa (raw, json) Hash identifier: joy9CbNeiW6NiX3uTKNFsG/NJJcr51qVU+q0Q4RSi7I= Subject key identifier: 2B:C4:33:0E:13:83:14:D8:A1:03:F9:76:CB:D5:B5:FB:82:E4:89:7B Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F4328584B5B0733340C5701BA4F8F2240 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 14325 IP address blocks: 2604:a700::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:33:34:0c:57:01:ba:4f:8f:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=bdf09b30-0e03-46b6-b774-49d5be0616c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f7:0a:df:11:92:4d:ab:06:0f:12:5c:e6:80: bc:1c:ff:5d:4d:2a:30:fe:66:f0:b1:68:9b:ee:79: 98:8e:55:4f:1d:36:d8:9a:44:bb:48:77:e0:cb:fc: c7:16:fe:4e:db:fd:02:e7:35:9f:c1:e7:ed:6f:64: 40:72:6d:42:12:66:82:3c:c4:8c:5b:d0:9a:5b:b5: 1d:a9:85:91:72:7a:c1:03:3f:d5:8c:9a:ab:69:66: ab:bc:f3:9d:f8:4a:b5:cf:26:4b:3a:b9:5a:f6:6b: 30:c1:2a:de:f5:71:a1:4e:39:5e:6f:30:f5:aa:c1: 4d:ce:96:d6:7b:b4:4e:51:7f:0d:d3:8b:40:86:cc: 1b:09:a7:22:28:a0:97:4a:40:8d:a6:a3:3f:c1:4f: 95:90:4e:70:63:e5:36:e2:b8:0f:dd:c9:5e:d9:06: dc:b9:72:1e:6d:d4:f2:32:02:eb:7c:e4:3b:e6:e9: a9:f3:a0:f3:55:c9:c8:70:62:04:9c:46:e0:31:3c: 22:50:49:4b:36:70:4d:a9:d3:15:d2:fe:60:bc:6c: eb:3d:3a:64:03:04:a7:ad:2b:89:35:8b:e3:ee:d3: 77:22:3e:bf:a5:b1:1b:72:a6:39:95:f8:2b:65:77: 0b:75:49:c0:8a:7b:a9:b8:3d:16:15:bb:9d:54:aa: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C4:33:0E:13:83:14:D8:A1:03:F9:76:CB:D5:B5:FB:82:E4:89:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv6: 2604:a700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:38:31:50:11:ef:fb:14:dd:c0:57:7a:b8:0f:fb:74:26:00: 53:33:8d:92:b4:44:b1:b7:42:3d:df:52:43:e9:0e:11:41:92: d8:d9:b1:c6:df:c3:8a:2a:97:79:22:fc:13:12:20:c1:5d:d5: 78:1e:a9:69:86:2b:a3:65:0b:c1:73:ef:c8:39:2f:64:12:31: 1b:4c:50:30:46:2c:22:4c:1b:10:46:1b:41:c3:ac:97:14:6c: a8:a7:4b:53:d1:9f:0b:36:9e:2a:94:36:9d:ab:50:65:6e:9e: 5c:85:27:0c:9d:a4:55:7e:f7:bd:8b:86:1d:69:89:f7:4f:5c: 56:f9:bf:3a:11:27:61:1e:12:00:c5:f7:b9:13:91:c7:c8:07: 65:93:47:47:b4:f0:97:23:51:3e:57:8b:61:3b:a7:4f:4c:36: 65:e9:61:78:d2:94:4f:35:24:44:bf:57:11:26:6c:d2:3a:e9: 7f:2d:61:b4:1f:68:2a:e9:21:1d:5b:52:96:ed:b4:c7:1f:80: 96:10:85:3d:66:6a:1f:ea:5f:f7:62:57:19:e5:57:36:87:d9: a7:a0:7f:fd:6a:a7:89:93:88:76:3c:51:b5:23:9b:1e:0a:19: e2:95:7e:3e:b6:b2:3c:52:ec:b1:88:9f:77:f2:84:9d:cd:53: 80:e0:12:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtbBzM0DFcBuk+PIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YmRmMDliMzAtMGUwMy00NmI2LWI3NzQtNDlkNWJlMDYxNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/cK3xGSTasGDxJc5oC8HP9dTSow/mbwsWib 7nmYjlVPHTbYmkS7SHfgy/zHFv5O2/0C5zWfweftb2RAcm1CEmaCPMSMW9CaW7Ud qYWRcnrBAz/VjJqraWarvPOd+Eq1zyZLOrla9mswwSre9XGhTjlebzD1qsFNzpbW e7ROUX8N04tAhswbCaciKKCXSkCNpqM/wU+VkE5wY+U24rgP3cle2QbcuXIebdTy MgLrfOQ75ump86DzVcnIcGIEnEbgMTwiUElLNnBNqdMV0v5gvGzrPTpkAwSnrSuJ NYvj7tN3Ij6/pbEbcqY5lfgrZXcLdUnAinupuD0WFbudVKrdaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCvEMw4TgxTYoQP5dsvVtfuC5Il7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvNDczOGEwZGItZWU1MC0z YThhLTk2MzYtYWMwNTg0ZjUyZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8ODFQEe/7FN3AV3q4D/t0JgBTM42StESxt0I931JD6Q4RQZLY2bHG 38OKKpd5IvwTEiDBXdV4HqlphiujZQvBc+/IOS9kEjEbTFAwRiwiTBsQRhtBw6yX FGyop0tT0Z8LNp4qlDadq1Blbp5chScMnaRVfve9i4YdaYn3T1xW+b86ESdhHhIA xfe5E5HHyAdlk0dHtPCXI1E+V4thO6dPTDZl6WF40pRPNSREv1cRJmzSOul/LWG0 H2gq6SEdW1KW7bTHH4CWEIU9Zmof6l/3YlcZ5Vc2h9mnoH/9aqeJk4h2PFG1I5se ChnilX4+trI8UuyxiJ938oSdzVOA4BKK -----END CERTIFICATE-----Generated at Sat Oct 11 07:36:11 2025 by rpki-client