$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3522f608-5884-3d30-b294-1f14cb7f4f4d.roa File: 3522f608-5884-3d30-b294-1f14cb7f4f4d.roa (raw, json) Hash identifier: 5hppyvdewDJY1bfYWjGMvZDd6qlH9XwEks6oWpPpLck= Subject key identifier: 70:2F:40:53:A8:18:B7:50:2E:BE:33:39:A6:AE:53:07:76:06:B4:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A80E83D03A1BCE18C6B880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3522f608-5884-3d30-b294-1f14cb7f4f4d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 2603:3005:5700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:0e:83:d0:3a:1b:ce:18:c6:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=84a1faf9-4445-4e7e-8e4a-b90558402e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:50:33:03:38:5c:eb:30:fd:b5:c6:57:a8: 51:92:53:54:a8:f7:21:4e:d8:00:fb:0d:62:ef:07: d0:38:44:66:da:b0:a9:90:81:a5:de:9b:f7:4b:c3: 46:ec:23:1e:4a:d0:5a:eb:c5:e4:22:1e:b6:e7:f1: ae:e2:44:72:d1:a7:fc:a0:b0:ed:93:7a:57:b3:7d: 05:dc:67:29:51:f4:58:47:a0:4c:a9:ee:90:b7:de: 5a:aa:59:95:77:55:9e:0c:8f:43:d4:ca:e6:24:da: 51:08:f8:fe:c9:21:31:0e:72:80:c8:c1:1e:b3:67: bf:6d:50:6e:41:cc:13:81:13:bd:c2:fa:b4:10:9c: 12:bc:23:a0:86:eb:93:4d:78:40:99:67:43:06:38: 43:bc:23:58:ac:06:78:e1:5b:51:23:23:81:6c:ea: bc:39:ee:9e:33:67:fc:83:7a:13:18:c2:86:86:64: 51:61:d8:51:65:f2:72:ec:96:b7:6b:00:fb:9a:50: 2b:41:93:47:b1:80:c3:d0:89:f0:ee:2f:21:1c:1b: 51:7f:55:18:9c:39:b2:91:85:7a:ce:aa:71:2a:1d: 31:bf:7c:80:e1:b6:65:06:e7:2d:70:ab:c3:fd:91: 87:ce:b8:9e:bc:37:31:4b:37:bd:51:f6:a0:4e:c5: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2F:40:53:A8:18:B7:50:2E:BE:33:39:A6:AE:53:07:76:06:B4:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3522f608-5884-3d30-b294-1f14cb7f4f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3005:5700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7a:56:64:e6:ff:b0:f2:62:06:db:e6:c5:ea:00:9a:fb:5e: 08:ef:7a:c5:27:8d:0c:64:b9:f2:61:84:7f:07:9e:db:74:ba: 23:8b:08:48:c1:60:f3:0b:1f:73:80:75:d5:2c:04:b1:11:ca: 3d:30:3c:22:de:0e:43:de:0f:b1:be:ee:8f:01:e3:8d:26:7d: 2c:63:a3:cb:1e:82:96:f3:b1:18:71:0a:92:c3:84:af:d4:02: 38:86:86:a8:93:42:32:3a:09:68:f7:f4:13:87:db:ca:9e:c2: 6d:82:18:c3:2d:03:04:52:2c:c0:26:d8:61:52:1d:d2:f7:d4: 8c:5d:7a:92:09:3f:64:1c:70:35:2c:c9:d0:84:99:83:f7:a0: 5f:e6:00:0d:51:b4:e7:3e:e1:9e:16:39:22:14:fd:1f:35:ec: f3:50:3c:3f:9c:4d:97:0c:ce:b2:fd:e6:e4:49:86:7c:ca:0b: b5:20:e0:71:00:92:4c:1f:13:d6:52:f5:95:dd:a7:75:39:54: f3:f9:27:4f:35:70:69:e9:b9:cf:07:97:bb:66:df:be:0b:73: 0e:80:5e:dc:09:76:9f:9b:dc:20:68:ef:cc:94:7b:b2:eb:1c: 0f:54:f9:e7:68:7c:89:11:50:a3:19:58:04:aa:46:8a:0d:75: e0:25:cc:d6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqA6D0DobzhjGuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODRhMWZhZjktNDQ0NS00ZTdlLThlNGEtYjkwNTU4NDAyZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEdQMwM4XOsw/bXGV6hRklNUqPchTtgA+w1i 7wfQOERm2rCpkIGl3pv3S8NG7CMeStBa68XkIh625/Gu4kRy0af8oLDtk3pXs30F 3GcpUfRYR6BMqe6Qt95aqlmVd1WeDI9D1MrmJNpRCPj+ySExDnKAyMEes2e/bVBu QcwTgRO9wvq0EJwSvCOghuuTTXhAmWdDBjhDvCNYrAZ44VtRIyOBbOq8Oe6eM2f8 g3oTGMKGhmRRYdhRZfJy7Ja3awD7mlArQZNHsYDD0Inw7i8hHBtRf1UYnDmykYV6 zqpxKh0xv3yA4bZlBuctcKvD/ZGHzrievDcxSze9UfagTsXQXwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHAvQFOoGLdQLr4zOaauUwd2BrRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzUyMmY2MDgtNTg4NC0z ZDMwLWIyOTQtMWYxNGNiN2Y0ZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBVcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdnpWZOb/sPJiBtvmxeoAmvteCO96xSeNDGS58mGEfwee23S6I4sI SMFg8wsfc4B11SwEsRHKPTA8It4OQ94Psb7ujwHjjSZ9LGOjyx6ClvOxGHEKksOE r9QCOIaGqJNCMjoJaPf0E4fbyp7CbYIYwy0DBFIswCbYYVId0vfUjF16kgk/ZBxw NSzJ0ISZg/egX+YADVG05z7hnhY5IhT9HzXs81A8P5xNlwzOsv3m5EmGfMoLtSDg cQCSTB8T1lL1ld2ndTlU8/knTzVwaem5zweXu2bfvgtzDoBe3Al2n5vcIGjvzJR7 suscD1T552h8iRFQoxlYBKpGig114CXM1g== -----END CERTIFICATE-----Generated at Wed Oct 22 02:47:22 2025 by rpki-client