$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ab4c1e0-0c35-3ae4-bd1d-5e891a45e155.roa File: 3ab4c1e0-0c35-3ae4-bd1d-5e891a45e155.roa (raw, json) Hash identifier: 6nPS8AysCie9Utdk6yDqQopEUI1iVqsCRTP48ftBStY= Subject key identifier: EA:B6:BE:F7:25:C5:64:01:D9:DA:21:85:DB:7A:34:F3:09:08:CA:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE350812F329E517E4B380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ab4c1e0-0c35-3ae4-bd1d-5e891a45e155.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2001:4860:4827::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:35:08:12:f3:29:e5:17:e4:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=00968319-35cd-4621-97c4-7fb4e5fb136c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:b4:e1:09:67:64:8c:dd:0c:b1:da:b6:d9: df:a0:2d:b5:a4:69:df:0d:0f:b1:03:46:68:49:1e: 86:59:51:93:9d:0d:c7:3a:d3:a8:b7:b4:3a:b1:f8: df:cb:a3:20:ba:20:40:b0:36:93:7b:b9:8b:54:31: 6e:b6:59:69:42:8e:25:ce:2b:d0:2b:2a:6e:bd:b2: 07:cd:32:e9:90:84:c1:05:80:f1:3f:7d:cc:c3:48: 62:55:1c:92:9c:31:5e:11:2b:fd:03:b9:3b:0e:57: 65:74:29:cc:92:cc:df:8e:ac:c6:41:c9:aa:1c:9c: 84:44:aa:d6:b4:18:86:fa:e3:6c:ca:d1:12:ba:dd: 67:72:91:03:5b:06:d7:f6:c6:47:4c:e3:a6:4d:7f: 44:f8:19:23:84:79:a3:fb:9b:90:47:81:4e:a3:71: ee:2d:c1:b2:1b:27:54:65:48:b5:97:70:1f:f3:34: 73:bf:8f:0d:0b:90:22:cf:97:f7:f5:f8:b6:80:d2: 0e:bd:d3:27:bb:41:ce:ab:cf:fb:46:d4:8e:91:e0: 34:f2:15:5e:b4:8b:49:5b:7f:ba:ce:06:4f:61:c4: 9e:e9:2a:be:d3:2d:d3:c1:32:84:2d:de:4e:70:bd: ec:f1:9c:83:0e:03:e7:5d:6c:73:7e:40:83:e0:bd: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B6:BE:F7:25:C5:64:01:D9:DA:21:85:DB:7A:34:F3:09:08:CA:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ab4c1e0-0c35-3ae4-bd1d-5e891a45e155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4827::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a6:a9:04:26:7e:24:b7:2f:d3:08:32:15:fc:92:1c:b0:b1: ef:d2:fc:b4:57:45:5d:83:00:4e:4c:f9:27:fd:31:a4:0d:d6: ab:3a:9f:38:5f:6a:25:cb:9c:22:68:e4:42:85:ee:77:92:41: aa:6b:2e:e1:20:af:1f:a3:58:21:11:54:bd:6c:bf:af:31:a9: 2c:49:a7:7f:82:39:ff:3a:fa:21:87:06:33:2e:c3:43:60:9a: 6c:f4:d4:27:49:4d:b7:19:82:e6:af:13:58:ff:18:43:f0:eb: a1:6c:2e:da:cc:74:5f:9c:37:3b:46:18:10:f6:f5:d5:3b:f8: 71:f2:43:66:b5:77:e5:23:6d:cc:21:a8:1f:e4:96:df:06:27: d3:64:3f:77:18:ee:3b:2f:01:c9:18:cc:1d:64:ee:7b:95:d2: d4:8a:4a:f3:f6:8b:a2:4e:21:e8:7a:7a:14:a5:83:55:43:0f: 6f:58:c8:d3:14:36:74:2f:41:7d:bc:bb:f7:4e:5a:10:39:62: 5c:de:3c:49:e4:11:b5:53:3a:4e:83:58:d4:0a:81:dc:1c:59: 4b:d4:8c:71:fa:ca:35:23:33:39:f2:55:54:23:4a:5b:42:e6: 4e:ac:c8:b2:ee:da:54:15:9d:74:ee:94:0d:57:d3:88:de:f3: 65:2a:10:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzjUIEvMp5Rfks4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDA5NjgzMTktMzVjZC00NjIxLTk3YzQtN2ZiNGU1ZmIxMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsru04QlnZIzdDLHattnfoC21pGnfDQ+xA0Zo SR6GWVGTnQ3HOtOot7Q6sfjfy6MguiBAsDaTe7mLVDFutllpQo4lzivQKypuvbIH zTLpkITBBYDxP33Mw0hiVRySnDFeESv9A7k7DldldCnMkszfjqzGQcmqHJyERKrW tBiG+uNsytESut1ncpEDWwbX9sZHTOOmTX9E+BkjhHmj+5uQR4FOo3HuLcGyGydU ZUi1l3Af8zRzv48NC5Aiz5f39fi2gNIOvdMnu0HOq8/7RtSOkeA08hVetItJW3+6 zgZPYcSe6Sq+0y3TwTKELd5OcL3s8ZyDDgPnXWxzfkCD4L32UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOq2vvclxWQB2dohhdt6NPMJCMq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FiNGMxZTAtMGMzNS0z YWU0LWJkMWQtNWU4OTFhNDVlMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFimqQQmfiS3L9MIMhX8khywse/S/LRXRV2DAE5M+Sf9MaQN1qs6 nzhfaiXLnCJo5EKF7neSQaprLuEgrx+jWCERVL1sv68xqSxJp3+COf86+iGHBjMu w0Ngmmz01CdJTbcZguavE1j/GEPw66FsLtrMdF+cNztGGBD29dU7+HHyQ2a1d+Uj bcwhqB/klt8GJ9NkP3cY7jsvAckYzB1k7nuV0tSKSvP2i6JOIeh6ehSlg1VDD29Y yNMUNnQvQX28u/dOWhA5YlzePEnkEbVTOk6DWNQKgdwcWUvUjHH6yjUjMznyVVQj SltC5k6syLLu2lQVnXTulA1X04je82UqEFs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:37 2025 by rpki-client