$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa File: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (raw, json) Hash identifier: hFfPoYhCJXqDPp6e7NItDcOmMQ+GZn7lcTUddxbvvJk= Subject key identifier: D4:D8:EA:B0:11:17:82:64:40:F1:87:36:31:A1:2E:B6:AC:AD:49:66 Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F4328584AFC1BFCB37E43519F27CFB280 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 25968 IP address blocks: 2620:7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fc:b3:7e:43:51:9f:27:cf:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=e3a401c4-0c52-4d1d-a42d-74036e374711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:b4:8f:92:1d:f4:a8:fe:24:0b:53:49:a0: 5b:8d:5d:3c:40:90:c9:82:49:42:4d:f8:89:c1:e5: e0:20:96:86:47:60:d0:16:20:c6:6b:ec:df:1b:e1: 59:6a:c5:05:e9:a4:b8:16:0e:f9:aa:2c:93:71:8e: e9:c8:e2:80:b1:36:7f:fc:f4:a5:37:d2:ba:2e:76: 84:39:53:ba:49:0f:cc:9a:94:b2:76:bc:57:10:f1: 44:b8:68:77:a4:8f:20:0c:f3:31:db:31:af:0b:8a: 93:b6:c6:74:66:37:18:db:ad:8a:7c:0a:f1:a9:32: d5:31:5b:42:85:a3:41:49:02:70:36:82:cd:fe:61: 27:cf:47:63:92:f3:7c:74:6b:7e:0a:c1:1b:dc:a8: 98:33:43:ba:73:84:82:6e:f8:13:53:e9:09:6e:50: f4:eb:4b:25:6e:60:73:fd:1d:c7:a4:55:d3:60:a4: 2b:55:92:ad:ef:5b:51:6f:52:ee:6b:ec:08:d8:21: 5a:70:45:9e:ad:74:bf:9d:bd:6f:45:94:76:e2:37: b7:e3:c5:8f:e1:ae:1c:e6:58:16:d8:58:d4:49:bc: 96:25:9c:a9:81:58:fe:ab:de:5f:d9:eb:09:54:0c: a8:76:fe:c5:b4:7d:fd:83:f6:4d:48:19:9c:2c:78: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D8:EA:B0:11:17:82:64:40:F1:87:36:31:A1:2E:B6:AC:AD:49:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv6: 2620:7b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c6:c4:5d:9d:86:a6:90:21:a0:93:62:6e:ee:b7:36:db:85: 8b:35:fd:85:3c:fc:f0:1d:94:b0:6f:7b:f4:ed:90:fa:98:bf: e4:39:b8:78:26:a2:5e:f5:77:cf:fe:37:0e:d0:8a:f7:01:b8: aa:70:f2:57:60:13:71:74:11:47:b3:7a:79:9b:ce:db:71:70: 7c:59:63:31:47:7e:90:29:a9:85:1f:38:2c:50:5c:32:c3:54: 20:5c:21:ed:00:9e:4c:62:6a:11:4a:44:14:a2:6c:2e:01:95: 6f:70:ef:2e:96:d2:ac:bf:4e:eb:d2:1b:d4:57:10:0f:06:ab: 28:0f:bf:91:9e:db:88:3a:af:5e:ad:6a:78:9a:ef:e3:c5:3a: cd:e0:43:21:4d:cf:93:f1:5e:bb:12:14:03:1f:bd:73:77:9d: 65:97:9e:3a:03:b5:bf:e0:3f:07:ac:4c:2a:bf:c7:4a:e5:c5: 93:43:c6:f4:c7:3d:37:05:de:e5:25:aa:eb:cc:b3:df:9a:e2: 6a:fa:09:35:1e:36:a6:14:57:dc:d9:10:c3:b6:aa:98:67:ac: 16:43:57:75:80:42:6e:ad:db:1b:45:aa:23:66:58:b4:5f:9c: 2f:ee:2b:2d:28:f1:e3:94:99:f1:3d:36:82:d7:d8:2d:8b:12: e9:ca:eb:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8G/yzfkNRnyfPsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTNhNDAxYzQtMGM1Mi00ZDFkLWE0MmQtNzQwMzZlMzc0NzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqG0j5Id9Kj+JAtTSaBbjV08QJDJgklCTfiJ weXgIJaGR2DQFiDGa+zfG+FZasUF6aS4Fg75qiyTcY7pyOKAsTZ//PSlN9K6LnaE OVO6SQ/MmpSydrxXEPFEuGh3pI8gDPMx2zGvC4qTtsZ0ZjcY262KfArxqTLVMVtC haNBSQJwNoLN/mEnz0djkvN8dGt+CsEb3KiYM0O6c4SCbvgTU+kJblD060slbmBz /R3HpFXTYKQrVZKt71tRb1Lua+wI2CFacEWerXS/nb1vRZR24je348WP4a4c5lgW 2FjUSbyWJZypgVj+q95f2esJVAyodv7FtH39g/ZNSBmcLHgGnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNTY6rARF4JkQPGHNjGhLrasrUlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvYzMyMmJjYjItMWVkOC0z MTMyLTk5OWEtYjIxOWU5ZjZmOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAewAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACjGxF2dhqaQIaCTYm7utzbbhYs1/YU8/PAdlLBve/TtkPqYv+Q5 uHgmol71d8/+Nw7QivcBuKpw8ldgE3F0EUezenmbzttxcHxZYzFHfpApqYUfOCxQ XDLDVCBcIe0AnkxiahFKRBSibC4BlW9w7y6W0qy/TuvSG9RXEA8GqygPv5Ge24g6 r16tania7+PFOs3gQyFNz5PxXrsSFAMfvXN3nWWXnjoDtb/gPwesTCq/x0rlxZND xvTHPTcF3uUlquvMs9+a4mr6CTUeNqYUV9zZEMO2qphnrBZDV3WAQm6t2xtFqiNm WLRfnC/uKy0o8eOUmfE9NoLX2C2LEunK65A= -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:59 2025 by rpki-client