$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/3f3c8526-8d65-3a4e-9945-5019eb0457a2.roa File: 3f3c8526-8d65-3a4e-9945-5019eb0457a2.roa (raw, json) Hash identifier: 5yT7FGyvkNCJZop1M0p/X6okPJAmlP6lHHO6VDXfX6s= Subject key identifier: CD:C7:09:12:8F:0E:A4:A7:E6:DC:45:78:19:1F:05:FC:1D:49:BE:DD Certificate issuer: /CN=d057304d-4312-43aa-92a7-91bbd7043aab Certificate serial: 010D0C9F4328584B2B919A5A3BE727D2A80A0CC0 Authority key identifier: 91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/3f3c8526-8d65-3a4e-9945-5019eb0457a2.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 53266 IP address blocks: 2605:f40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:9a:5a:3b:e7:27:d2:a8:0a:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d057304d-4312-43aa-92a7-91bbd7043aab Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=8131c41f-faae-4e55-96a5-4d6cc081813e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:8a:b6:6d:9d:ec:4a:0f:62:61:46:2f:a2: 86:8c:92:e0:1f:bd:4f:8a:83:0a:08:4d:d6:cd:d9: a0:42:86:78:d2:4c:c7:a1:f5:69:f5:fb:4c:e3:9d: 38:d3:02:7e:44:c9:ef:16:3c:d6:0e:8e:d3:20:99: dd:2f:6b:a8:03:f6:49:01:5f:b9:6f:bf:a1:13:2d: e9:8d:6e:42:2d:94:0d:77:08:8a:03:15:5a:43:1d: fc:5b:dc:52:7b:39:ff:60:9f:03:a8:29:04:f5:5b: 80:23:a5:f5:cb:63:3e:74:97:4a:92:6e:4c:5a:ee: 18:05:53:e7:20:a0:99:26:e8:02:68:7a:1e:f3:91: 26:b7:2b:39:2d:c3:73:0a:c7:d9:9a:85:b9:fa:d4: 1b:fb:aa:c1:2e:78:5a:54:c5:72:53:50:49:da:cd: 51:9e:56:a5:79:fc:ab:ab:5c:d1:0d:20:77:8e:a5: 7c:7c:af:98:02:40:3a:24:f8:7d:8a:97:8c:6e:7d: 94:dc:16:4b:ce:28:46:5a:8c:9e:4a:03:1b:09:f7: 32:36:80:63:06:02:90:d9:66:35:5c:62:8f:f1:ee: 86:db:4a:0b:c8:57:69:cd:4b:ea:c6:70:12:11:34: 61:e9:43:26:71:cf:fe:5f:0d:a1:1b:aa:2f:40:a8: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C7:09:12:8F:0E:A4:A7:E6:DC:45:78:19:1F:05:FC:1D:49:BE:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/3f3c8526-8d65-3a4e-9945-5019eb0457a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.crl X509v3 Authority Key Identifier: keyid:91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer sbgp-ipAddrBlock: critical IPv6: 2605:f40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:bb:65:8e:fc:e6:7a:be:85:24:fd:a4:38:dd:d0:1f:02:20: 8c:e2:08:e6:4e:b8:ff:c8:30:a1:4d:ee:12:59:7a:d3:85:12: 4b:07:8a:4f:06:93:14:c0:be:81:73:de:91:cb:2a:c7:a0:f4: 66:9b:90:8b:6a:58:11:b6:2e:0f:89:6b:a9:f2:1f:8c:04:f5: ef:82:cd:25:c7:2b:b9:c0:82:8c:ab:88:1a:c2:0c:06:00:17: d5:47:cf:b8:26:29:4f:d3:5f:69:13:d4:0d:a9:6a:f8:31:12: c4:90:69:2c:55:65:d1:67:24:ed:15:33:b4:fe:e4:ba:54:63: ea:75:79:0d:4a:fa:4d:1d:6d:91:12:15:3c:8a:1a:7c:43:f1: 24:94:b0:5a:01:23:1c:1f:6d:e8:bb:b0:b6:23:1a:12:f5:54: 6c:7f:ca:de:72:35:a6:35:04:b4:10:49:c3:a4:a7:a0:48:df: 29:cb:cf:dd:60:8b:0f:91:bf:ef:60:cc:4d:6f:a3:33:40:cf: 39:85:f4:8e:df:a3:11:a2:4f:49:10:92:ac:a5:b9:ab:99:6c: 50:31:0b:8d:74:21:96:dc:64:6d:cc:0e:90:b8:84:0e:2a:9b: 3e:fd:e3:ee:fe:6e:17:4a:eb:35:2c:c6:ff:a4:f3:ee:2e:99: 5d:15:7e:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsrkZpaO+cn0qgKDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA1NzMwNGQtNDMxMi00M2FhLTkyYTctOTFiYmQ3MDQz YWFiMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk ODEzMWM0MWYtZmFhZS00ZTU1LTk2YTUtNGQ2Y2MwODE4MTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjciKtm2d7EoPYmFGL6KGjJLgH71PioMKCE3W zdmgQoZ40kzHofVp9ftM45040wJ+RMnvFjzWDo7TIJndL2uoA/ZJAV+5b7+hEy3p jW5CLZQNdwiKAxVaQx38W9xSezn/YJ8DqCkE9VuAI6X1y2M+dJdKkm5MWu4YBVPn IKCZJugCaHoe85Emtys5LcNzCsfZmoW5+tQb+6rBLnhaVMVyU1BJ2s1Rnlalefyr q1zRDSB3jqV8fK+YAkA6JPh9ipeMbn2U3BZLzihGWoyeSgMbCfcyNoBjBgKQ2WY1 XGKP8e6G20oLyFdpzUvqxnASETRh6UMmcc/+Xw2hG6ovQKgrPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM3HCRKPDqSn5txFeBkfBfwdSb7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMDU3 MzA0ZC00MzEyLTQzYWEtOTJhNy05MWJiZDcwNDNhYWIvM2YzYzg1MjYtOGQ2NS0z YTRlLTk5NDUtNTAxOWViMDQ1N2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDA1NzMwNGQtNDMxMi00M2FhLTky YTctOTFiYmQ3MDQzYWFiL2QwNTczMDRkLTQzMTItNDNhYS05MmE3LTkxYmJkNzA0 M2FhYi5jcmwwHwYDVR0jBBgwFoAUkT5oeCq3jCfMSweZXPG88/sRaXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMDU3MzA0ZC00MzEyLTQzYWEtOTJhNy05MWJi ZDcwNDNhYWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUPQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzu2WO/OZ6voUk/aQ43dAfAiCM4gjmTrj/yDChTe4SWXrThRJLB4pP BpMUwL6Bc96RyyrHoPRmm5CLalgRti4PiWup8h+MBPXvgs0lxyu5wIKMq4gawgwG ABfVR8+4JilP019pE9QNqWr4MRLEkGksVWXRZyTtFTO0/uS6VGPqdXkNSvpNHW2R EhU8ihp8Q/EklLBaASMcH23ou7C2IxoS9VRsf8recjWmNQS0EEnDpKegSN8py8/d YIsPkb/vYMxNb6MzQM85hfSO36MRok9JEJKspbmrmWxQMQuNdCGW3GRtzA6QuIQO Kps+/ePu/m4XSus1LMb/pPPuLpldFX4f -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:23 2025 by rpki-client