$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15a95c4b-18a4-3583-b25c-3f6e40198670.roa File: 15a95c4b-18a4-3583-b25c-3f6e40198670.roa (raw, json) Hash identifier: Ivqi+MoOjoZnK5FfcZKqwTy3sy3UxK2xnOAWfN/HZl0= Subject key identifier: 60:F3:9E:9A:B6:D3:7B:53:FE:90:1A:D6:12:55:FF:C4:10:12:3B:2A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7AD3A9A249A3F2AAE6C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15a95c4b-18a4-3583-b25c-3f6e40198670.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 2603:21c1:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:ad:3a:9a:24:9a:3f:2a:ae:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4f75f8a9-d1e0-4a26-8d1c-5749aeb703da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:2e:57:03:10:e1:a0:69:35:5f:74:b3:18: ac:45:b9:19:0f:ce:fe:51:26:37:76:f5:d5:6a:dd: 62:8a:fa:d9:7e:4f:86:8c:9b:78:65:7c:4b:d9:52: 7b:ce:b2:28:de:d8:7b:d7:c4:fe:38:ff:75:7d:d4: 75:03:ed:96:b6:2e:59:49:ea:4d:bb:d9:b4:e3:9f: 4b:67:fa:fa:e0:a4:d4:20:5d:4e:19:a8:32:03:64: c7:eb:c7:8e:36:14:c6:bd:d4:68:1d:10:69:bc:18: 4f:eb:24:59:5e:e2:69:f9:49:81:1f:07:64:a5:b0: a4:38:0e:5e:74:b7:ca:a6:12:3f:10:1f:b5:84:3b: 71:4e:ca:45:99:89:89:fb:85:57:57:c8:8e:b4:60: 92:9a:38:01:02:f2:bd:ed:89:a6:5d:af:de:9a:1c: 43:36:91:22:6a:7c:bb:05:3f:0e:2e:f3:d2:c3:08: 3a:40:c5:a5:0e:53:e8:85:a7:a4:17:96:1c:8a:94: 1b:14:62:b1:8c:f2:db:49:65:cb:d9:94:a1:f3:29: 5c:bf:9f:7f:95:02:e3:74:fe:c0:cc:75:f6:26:18: b8:6d:21:b6:eb:bc:9b:98:dd:3c:0f:0b:5b:0a:b8: d1:be:13:fb:de:dc:60:a3:79:3e:e4:e8:70:cb:55: 11:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F3:9E:9A:B6:D3:7B:53:FE:90:1A:D6:12:55:FF:C4:10:12:3B:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15a95c4b-18a4-3583-b25c-3f6e40198670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:21c1:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:54:b2:5a:78:c1:91:5d:16:74:9a:8e:43:85:90:0a:a3:45: c1:f5:a3:1a:3b:dc:6e:c7:94:1f:e4:b5:1c:5c:9a:34:30:11: 22:82:a6:fd:74:d7:a9:76:bb:6a:b8:6d:2d:10:0e:3c:32:be: f4:cd:18:54:e4:b3:7a:79:6c:c7:82:9c:6d:77:e2:dd:07:b3: 0b:0e:14:ae:c7:4b:5c:c3:ac:99:33:34:cc:bf:29:b7:e6:f9: 2d:49:94:e2:0a:40:23:6e:2e:e3:71:8a:88:55:7b:d7:5f:32: 49:a7:73:e2:1d:5f:44:b4:65:40:47:ea:86:93:b8:3a:7b:0a: 79:ba:1c:58:8b:d2:72:2d:70:b1:2e:9f:77:c0:04:e0:03:8d: 26:aa:37:67:89:44:84:28:26:fe:3f:37:89:59:93:1f:c4:0f: 5e:5b:c0:93:07:4f:56:4a:62:a5:80:5f:f2:17:5b:64:61:cc: 0f:1d:e5:9f:0c:4d:99:2b:2b:8c:30:0a:61:f8:27:39:79:d4: de:bb:a5:43:1a:42:f4:80:1e:1f:44:73:28:2a:ff:ed:01:47: f6:4d:40:01:5f:a9:dc:8e:9a:ab:e0:ec:24:64:01:00:e9:b3: 7d:7f:69:00:1d:f2:93:09:43:a1:28:74:3a:11:dc:c7:57:3d: 6f:21:0c:ab -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVp606miSaPyqubIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGY3NWY4YTktZDFlMC00YTI2LThkMWMtNTc0OWFlYjcwM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFQuVwMQ4aBpNV90sxisRbkZD87+USY3dvXV at1iivrZfk+GjJt4ZXxL2VJ7zrIo3th718T+OP91fdR1A+2Wti5ZSepNu9m0459L Z/r64KTUIF1OGagyA2TH68eONhTGvdRoHRBpvBhP6yRZXuJp+UmBHwdkpbCkOA5e dLfKphI/EB+1hDtxTspFmYmJ+4VXV8iOtGCSmjgBAvK97YmmXa/emhxDNpEiany7 BT8OLvPSwwg6QMWlDlPohaekF5YcipQbFGKxjPLbSWXL2ZSh8ylcv59/lQLjdP7A zHX2Jhi4bSG267ybmN08DwtbCrjRvhP73txgo3k+5Ohwy1URHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGDznpq203tT/pAa1hJV/8QQEjsqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTVhOTVjNGItMThhNC0z NTgzLWIyNWMtM2Y2ZTQwMTk4NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMhwYAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYlSyWnjBkV0WdJqOQ4WQCqNFwfWjGjvcbseUH+S1HFyaNDARIoKm /XTXqXa7arhtLRAOPDK+9M0YVOSzenlsx4KcbXfi3QezCw4UrsdLXMOsmTM0zL8p t+b5LUmU4gpAI24u43GKiFV7118ySadz4h1fRLRlQEfqhpO4OnsKebocWIvSci1w sS6fd8AE4AONJqo3Z4lEhCgm/j83iVmTH8QPXlvAkwdPVkpipYBf8hdbZGHMDx3l nwxNmSsrjDAKYfgnOXnU3rulQxpC9IAeH0RzKCr/7QFH9k1AAV+p3I6aq+DsJGQB AOmzfX9pAB3ykwlDoSh0OhHcx1c9byEMqw== -----END CERTIFICATE-----Generated at Wed Oct 22 00:27:44 2025 by rpki-client