$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b82ce5-eb95-3927-93b9-e4be49875295.roa File: 08b82ce5-eb95-3927-93b9-e4be49875295.roa (raw, json) Hash identifier: bcoV57aRJVZyM69bnqQbA1JDC9aw023H3ujIQ2Am5jQ= Subject key identifier: 48:5A:4B:47:D5:A7:6C:A3:1E:9F:B4:2E:0B:F5:45:95:DF:A9:2F:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8A0C85B6FCDE7C54EFB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b82ce5-eb95-3927-93b9-e4be49875295.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 2601:407:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:a0:c8:5b:6f:cd:e7:c5:4e:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4703c99a-95e6-4605-ba55-8460b939e024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:1d:39:de:bf:48:08:94:b0:06:2e:92:42: 3e:f6:a3:76:3a:f4:f5:8f:9b:53:8b:41:c2:8f:66: a3:6c:39:4a:d9:7d:ad:f0:bb:b2:bb:c7:14:07:e9: a7:d0:f8:5d:39:c6:3f:e7:65:55:d1:07:ad:ec:1e: 5b:02:0c:b1:97:7e:49:68:62:9a:ea:04:bc:66:11: c9:7b:16:49:be:3d:89:a2:be:ca:2a:e8:0b:61:72: e6:e8:fd:43:e2:3d:5b:27:ac:48:99:d6:d8:d0:81: 7a:20:66:c0:d9:34:b7:97:b7:69:eb:9e:58:4a:ab: 07:b8:53:5c:0f:c4:a5:49:e3:0a:43:3d:8f:76:a0: 98:ed:86:71:c5:c8:7d:e4:56:4f:d0:82:70:e8:96: dd:6c:d6:b1:9c:19:f6:e6:24:3a:d1:90:90:70:0c: 46:d0:35:24:c6:c9:8e:1b:26:6f:27:0c:0a:2b:e1: 57:8e:b5:d1:c6:dd:28:f1:81:25:b5:69:a0:57:b7: 1b:d6:f1:dc:58:71:c5:95:ee:bb:f7:5c:77:8c:36: a4:b3:71:06:04:23:61:b7:95:2b:55:26:66:a8:85: 15:04:02:00:3a:94:a4:24:7f:d2:72:e9:1b:61:07: 7f:bb:f4:a3:06:b9:4c:b4:02:0c:2d:af:12:18:66: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5A:4B:47:D5:A7:6C:A3:1E:9F:B4:2E:0B:F5:45:95:DF:A9:2F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b82ce5-eb95-3927-93b9-e4be49875295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:407:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:97:b8:00:71:03:6b:4d:30:88:ce:a5:9e:36:17:24:d3:93: 98:96:9a:01:e8:7b:69:0f:7a:de:a8:09:c5:0f:53:a0:d3:e5: ac:f0:16:b7:f2:bf:d6:42:a5:c8:a6:dc:54:0b:55:67:36:8f: 01:19:ba:4d:77:c8:1d:85:bc:8d:1e:35:23:6a:f2:8f:d6:7f: 4b:7f:ff:e5:eb:a5:07:7b:21:3b:87:ea:17:65:9b:8e:ca:25: d1:76:cd:30:1c:21:2d:77:c4:95:18:b9:96:10:bd:c3:6b:c5: 64:cf:ef:1e:fa:78:2c:d2:d1:0c:8a:e0:12:ff:0e:54:69:e2: 96:8e:bd:53:2a:9e:e9:d7:86:a9:2e:a5:11:01:46:81:37:41: d9:e5:dd:46:73:7f:6b:a7:b8:ab:d4:36:fe:f5:81:3c:12:06: ce:f7:25:27:77:f2:08:92:db:37:fb:8c:77:59:c1:a9:0e:84: c7:c1:d3:b6:ab:d8:d3:f4:3a:00:76:f9:c4:44:f8:59:38:d3: 73:4e:47:48:43:6b:1e:60:a7:fb:44:7c:8b:3a:ef:87:52:05: fd:5b:0a:8f:fe:7f:ed:66:f9:e5:3a:43:9e:25:e5:0a:db:c9: 58:0a:2e:e2:75:90:ac:2e:fa:04:d7:c9:84:ed:d1:aa:5f:69: ce:14:d9:59 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqKDIW2/N58VO+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDcwM2M5OWEtOTVlNi00NjA1LWJhNTUtODQ2MGI5MzllMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjgdOd6/SAiUsAYukkI+9qN2OvT1j5tTi0HC j2ajbDlK2X2t8Luyu8cUB+mn0PhdOcY/52VV0Qet7B5bAgyxl35JaGKa6gS8ZhHJ exZJvj2Jor7KKugLYXLm6P1D4j1bJ6xImdbY0IF6IGbA2TS3l7dp655YSqsHuFNc D8SlSeMKQz2PdqCY7YZxxch95FZP0IJw6JbdbNaxnBn25iQ60ZCQcAxG0DUkxsmO GyZvJwwKK+FXjrXRxt0o8YEltWmgV7cb1vHcWHHFle6791x3jDaks3EGBCNht5Ur VSZmqIUVBAIAOpSkJH/ScukbYQd/u/SjBrlMtAIMLa8SGGaMwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEhaS0fVp2yjHp+0Lgv1RZXfqS/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDhiODJjZTUtZWI5NS0z OTI3LTkzYjktZTRiZTQ5ODc1Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEEB0Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAope4AHEDa00wiM6lnjYXJNOTmJaaAeh7aQ963qgJxQ9ToNPlrPAW t/K/1kKlyKbcVAtVZzaPARm6TXfIHYW8jR41I2ryj9Z/S3//5eulB3shO4fqF2Wb jsol0XbNMBwhLXfElRi5lhC9w2vFZM/vHvp4LNLRDIrgEv8OVGnilo69Uyqe6deG qS6lEQFGgTdB2eXdRnN/a6e4q9Q2/vWBPBIGzvclJ3fyCJLbN/uMd1nBqQ6Ex8HT tqvY0/Q6AHb5xET4WTjTc05HSENrHmCn+0R8izrvh1IF/VsKj/5/7Wb55TpDniXl CtvJWAou4nWQrC76BNfJhO3Rql9pzhTZWQ== -----END CERTIFICATE-----Generated at Tue Oct 21 21:57:42 2025 by rpki-client