$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0078af02-4d25-3c67-8607-d4f0071f9140.roa File: 0078af02-4d25-3c67-8607-d4f0071f9140.roa (raw, json) Hash identifier: gU71DVVYqqJu/BPYnQdCx+ryDwQ/Q5mUaFPMaH54PoY= Subject key identifier: 53:3E:D1:C6:14:6D:9C:CE:3E:E3:E8:E1:4A:52:3A:82:B2:1E:E8:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8A4E74681A2CA7F243A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0078af02-4d25-3c67-8607-d4f0071f9140.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 2603:3015:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:a4:e7:46:81:a2:ca:7f:24:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=352d0085-7773-4d84-a6cf-173da7fe1450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:96:e9:f2:ce:e8:fc:41:cc:39:a3:f1:59: a0:88:93:fc:e5:53:08:3c:6d:6a:5b:c1:21:d4:cc: 53:8d:64:19:fd:06:39:ba:ef:14:a0:60:ac:05:00: 5b:3c:26:a3:0c:fe:86:52:85:cb:a5:e0:04:b5:3f: cb:bd:96:58:6b:4d:38:23:99:27:e3:65:dc:c0:5c: 8d:a5:ab:37:79:25:2a:6e:b3:b7:a3:03:14:0c:2c: 22:2a:d8:cb:89:20:ec:32:8b:26:29:9b:fb:2d:51: fd:dd:12:09:e2:be:fc:2c:5d:f4:d1:f8:45:df:32: cd:bd:b7:81:c8:7d:c4:b1:14:45:e7:7e:d3:b9:38: e9:ed:74:e1:bd:59:64:69:58:58:78:c0:88:30:39: 50:b5:f9:72:f4:18:e6:1f:84:25:1c:c9:09:4b:dd: 8d:4f:89:af:80:a1:58:2a:05:63:43:eb:b7:6f:80: e8:19:ee:57:60:60:a5:ea:70:56:8f:b6:0a:45:01: 86:22:28:fc:59:db:69:7f:ae:6c:a2:fe:31:cd:dd: b4:d2:a5:ae:65:2d:d7:63:57:67:09:ea:d9:00:15: f3:12:dd:0b:6b:d6:3e:b6:a2:a4:7b:ed:6d:b2:e1: f0:f6:5f:3b:4e:f3:bf:2b:8f:de:7f:4c:f4:66:e6: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3E:D1:C6:14:6D:9C:CE:3E:E3:E8:E1:4A:52:3A:82:B2:1E:E8:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0078af02-4d25-3c67-8607-d4f0071f9140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3015:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:d8:ca:6a:7a:e4:39:d2:5f:75:1c:db:1a:59:f3:a6:d5:16: 8b:14:61:8b:29:ea:74:4d:24:10:69:79:a4:c2:f6:90:67:ed: c8:04:d1:fb:e3:8c:bb:ac:58:5f:e2:07:ab:83:a1:b5:ac:91: 8f:c5:02:d3:82:8c:43:7f:6f:8c:53:f9:d9:97:11:3d:80:59: 19:d5:8c:04:f2:b1:80:73:85:f7:4e:8e:cc:dc:a8:0f:27:6c: f5:45:3f:28:53:bb:fd:76:10:55:55:9c:61:5d:b1:8b:3a:20: 0d:fd:3b:ca:26:28:51:8d:a1:3f:9c:a9:b6:4b:6f:4e:aa:c7: ea:2d:c7:63:8b:68:46:f8:0b:90:91:82:66:25:9b:1c:a6:0d: 07:6a:3b:8b:8e:b1:db:db:60:23:e1:77:95:89:31:55:1e:9c: 28:e2:13:51:d1:09:d0:1c:e0:5e:54:f4:b0:ad:f0:be:92:20: 0b:fb:b4:90:6d:86:45:bb:fd:b5:cc:8d:42:01:08:56:41:11: 22:29:b5:d9:b5:d7:5d:ad:1e:a3:e8:53:f1:6d:c7:fc:2c:f2: de:2e:90:99:1e:07:3f:f1:46:11:f0:1f:de:79:e4:1d:33:68: a8:95:7d:db:31:ab:cf:53:12:91:ab:db:95:a4:ac:7d:e0:cc: 64:76:50:f2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqKTnRoGiyn8kOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MzUyZDAwODUtNzc3My00ZDg0LWE2Y2YtMTczZGE3ZmUxNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTCW6fLO6PxBzDmj8VmgiJP85VMIPG1qW8Eh 1MxTjWQZ/QY5uu8UoGCsBQBbPCajDP6GUoXLpeAEtT/LvZZYa004I5kn42XcwFyN pas3eSUqbrO3owMUDCwiKtjLiSDsMosmKZv7LVH93RIJ4r78LF300fhF3zLNvbeB yH3EsRRF537TuTjp7XThvVlkaVhYeMCIMDlQtfly9BjmH4QlHMkJS92NT4mvgKFY KgVjQ+u3b4DoGe5XYGCl6nBWj7YKRQGGIij8Wdtpf65sov4xzd200qWuZS3XY1dn CerZABXzEt0La9Y+tqKke+1tsuHw9l87TvO/K4/ef0z0ZuZsewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFM+0cYUbZzOPuPo4UpSOoKyHui0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDA3OGFmMDItNGQyNS0z YzY3LTg2MDctZDRmMDA3MWY5MTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFSAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAq9jKanrkOdJfdRzbGlnzptUWixRhiynqdE0kEGl5pML2kGftyATR ++OMu6xYX+IHq4OhtayRj8UC04KMQ39vjFP52ZcRPYBZGdWMBPKxgHOF906OzNyo Dyds9UU/KFO7/XYQVVWcYV2xizogDf07yiYoUY2hP5yptktvTqrH6i3HY4toRvgL kJGCZiWbHKYNB2o7i46x29tgI+F3lYkxVR6cKOITUdEJ0BzgXlT0sK3wvpIgC/u0 kG2GRbv9tcyNQgEIVkERIim12bXXXa0eo+hT8W3H/Czy3i6QmR4HP/FGEfAf3nnk HTNoqJV92zGrz1MSkavblaSsfeDMZHZQ8g== -----END CERTIFICATE-----Generated at Tue Oct 21 21:38:50 2025 by rpki-client