$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/4659dcbb-7df6-333e-8ed5-cf8c8a65127e.roa File: 4659dcbb-7df6-333e-8ed5-cf8c8a65127e.roa (raw, json) Hash identifier: 2JwqXbuzGG0YEd09MlKYZJGOfTyK8BDy871LxJyAWZU= Subject key identifier: B4:3A:8E:8C:E9:78:58:EA:66:CF:B6:FF:30:A0:84:11:45:0E:A9:A1 Certificate issuer: /CN=111c4633-f730-480a-8516-3382e9a5eda3 Certificate serial: 010D0C9F4328584B153C276D5FEBAC0DAD185E00 Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/4659dcbb-7df6-333e-8ed5-cf8c8a65127e.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 13538 IP address blocks: 2001:504:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:27:6d:5f:eb:ac:0d:ad:18:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=5c3dfdb9-f89c-42a0-83fe-8693773ebf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4f:28:97:ab:58:cb:1a:b0:b0:7d:33:bc:f4: e5:e8:38:63:b2:1f:38:aa:67:37:8c:24:31:69:43: d9:c4:fc:ad:24:43:f8:e6:25:b0:fa:34:d9:ff:65: f6:4c:b2:99:d3:32:a6:f1:be:ea:4d:7e:67:31:39: 63:96:e9:64:0c:57:74:36:91:83:7a:11:85:a4:0d: aa:d3:92:09:72:32:2d:8c:96:e1:a6:49:06:2a:56: 5e:72:89:e6:d1:eb:d4:69:58:21:7c:46:07:61:a8: 8a:51:18:84:e6:0f:57:9c:2b:46:84:43:5b:64:27: 11:16:ea:99:6f:8f:9f:62:c3:f7:fd:f7:0c:3e:ec: 1e:12:66:75:0f:56:6e:84:d2:b1:2f:b2:c0:3c:fd: f9:a5:ea:ae:8b:75:08:aa:08:56:8f:08:af:91:76: 70:ef:8a:de:a5:31:2e:81:22:e7:1b:a1:e3:12:10: 30:2f:a7:05:82:48:30:31:6b:dc:58:fc:ee:21:5e: b2:cb:14:60:87:52:ed:7c:d4:0a:ec:ff:6d:2a:71: 76:b1:36:95:bf:a5:8c:30:d8:f6:1b:19:d7:53:6a: 44:67:b8:94:19:ac:68:5d:0f:14:5a:df:8e:6b:76: 6f:46:ab:d7:b9:07:a8:87:96:b7:b1:be:67:1d:6b: 38:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3A:8E:8C:E9:78:58:EA:66:CF:B6:FF:30:A0:84:11:45:0E:A9:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/4659dcbb-7df6-333e-8ed5-cf8c8a65127e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl X509v3 Authority Key Identifier: keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e4:63:f0:42:48:b2:f6:b8:80:8a:7f:f6:3b:a2:33:30:8e: 77:56:f6:c7:58:e0:aa:17:d6:f0:59:0a:2e:6e:66:3a:a1:fb: 69:ff:cd:fb:ec:43:19:9c:4d:88:26:71:0e:58:57:5b:ee:42: 6c:09:cc:1e:b1:96:00:3a:a4:b5:81:25:84:09:53:73:8a:08: 3b:37:47:b6:86:b5:fd:a7:44:65:21:45:c7:59:47:4a:a0:67: 6f:45:90:36:eb:fc:04:58:2f:74:b6:a7:de:51:a9:99:bc:b5: 78:30:3f:1f:d2:f4:5b:79:72:c6:a8:ab:75:b5:00:42:19:a4: 09:98:a3:5c:47:99:ea:76:43:47:c0:d5:c1:2a:0e:08:bb:6f: 20:98:cf:97:4f:98:06:63:62:bd:ac:47:bd:e8:99:cb:15:47: f8:03:f6:11:4a:5d:41:73:b2:4f:40:66:fc:0a:89:3c:6a:f1: 46:bc:1c:86:03:ab:bb:97:5d:e7:45:1f:d6:06:56:09:8d:c1: e6:e4:bd:53:e0:8f:7a:ae:76:eb:54:84:f0:a4:66:c6:d8:91: 1e:bf:85:fe:ae:b6:66:27:90:57:6f:26:02:3b:8d:d3:8d:e5: bd:4c:cf:3c:56:c8:b8:e6:48:83:96:83:5a:ae:97:16:95:b2: 25:d2:63:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsVPCdtX+usDa0YXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExYzQ2MzMtZjczMC00ODBhLTg1MTYtMzM4MmU5YTVl ZGEzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NWMzZGZkYjktZjg5Yy00MmEwLTgzZmUtODY5Mzc3M2ViZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7k8ol6tYyxqwsH0zvPTl6Dhjsh84qmc3jCQx aUPZxPytJEP45iWw+jTZ/2X2TLKZ0zKm8b7qTX5nMTljlulkDFd0NpGDehGFpA2q 05IJcjItjJbhpkkGKlZeconm0evUaVghfEYHYaiKURiE5g9XnCtGhENbZCcRFuqZ b4+fYsP3/fcMPuweEmZ1D1ZuhNKxL7LAPP35pequi3UIqghWjwivkXZw74repTEu gSLnG6HjEhAwL6cFgkgwMWvcWPzuIV6yyxRgh1LtfNQK7P9tKnF2sTaVv6WMMNj2 GxnXU2pEZ7iUGaxoXQ8UWt+Oa3ZvRqvXuQeoh5a3sb5nHWs4wQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQ6jozpeFjqZs+2/zCghBFFDqmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMTFj NDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgyZTlhNWVkYTMvNDY1OWRjYmItN2RmNi0z MzNlLThlZDUtY2Y4YzhhNjUxMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTExYzQ2MzMtZjczMC00ODBhLTg1 MTYtMzM4MmU5YTVlZGEzLzExMWM0NjMzLWY3MzAtNDgwYS04NTE2LTMzODJlOWE1 ZWRhMy5jcmwwHwYDVR0jBBgwFoAUTe3HwLDrCjnMZRcyMMi2U4gjbEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMTFjNDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgy ZTlhNWVkYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAATkY/BCSLL2uICKf/Y7ojMwjndW9sdY4KoX1vBZCi5uZjqh+2n/ zfvsQxmcTYgmcQ5YV1vuQmwJzB6xlgA6pLWBJYQJU3OKCDs3R7aGtf2nRGUhRcdZ R0qgZ29FkDbr/ARYL3S2p95RqZm8tXgwPx/S9Ft5csaoq3W1AEIZpAmYo1xHmep2 Q0fA1cEqDgi7byCYz5dPmAZjYr2sR73omcsVR/gD9hFKXUFzsk9AZvwKiTxq8Ua8 HIYDq7uXXedFH9YGVgmNwebkvVPgj3qudutUhPCkZsbYkR6/hf6utmYnkFdvJgI7 jdON5b1MzzxWyLjmSIOWg1qulxaVsiXSY8U= -----END CERTIFICATE-----Generated at Sat Oct 11 00:15:36 2025 by rpki-client