$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43da4a32-79b1-3d3f-94d4-1bbe62f2694f.roa File: 43da4a32-79b1-3d3f-94d4-1bbe62f2694f.roa (raw, json) Hash identifier: sR+GNsWIhUkKAeyHdBmdfkoEESJG78DLZWl5nhBU6O0= Subject key identifier: E1:58:FC:56:C1:A9:3A:73:43:CB:13:56:93:EE:BB:67:4F:2E:0C:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAA041D299A5A1C01BA900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43da4a32-79b1-3d3f-94d4-1bbe62f2694f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 2603:300c:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:a0:41:d2:99:a5:a1:c0:1b:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3f9ebf33-cf89-48c1-a9b2-9ffd921a0baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:28:79:80:19:7d:6e:1c:dd:71:4f:eb:b8: 27:6b:38:34:6b:87:78:33:a7:cc:39:fd:33:a4:f7: d8:63:1a:f4:5c:06:bd:91:23:91:f2:23:5b:56:3a: df:66:65:d9:31:bd:85:78:40:fb:0b:78:21:32:ef: cf:6b:5d:d2:12:e3:dc:7b:12:ce:73:5a:47:06:ad: e5:75:0e:38:44:0d:a8:9f:f1:83:28:52:f9:78:b4: bb:28:8e:67:9a:b7:45:c9:12:5e:d5:f6:98:1d:02: 9f:d9:9d:27:8a:1b:38:14:05:21:8a:07:5d:2b:d1: 6a:55:76:c7:f7:24:a3:5d:81:54:6b:9b:5b:c6:2a: f7:f9:59:18:1d:c4:c2:19:2e:5b:6e:0d:22:00:9e: b4:77:43:1d:7f:67:ae:0b:9b:5c:5b:88:c7:74:c4: 5e:bf:f6:f3:a7:1b:0a:bd:3a:40:da:15:01:2f:f6: f7:fe:b1:83:3a:f4:a5:ac:f0:3f:88:5f:0e:b2:14: e7:f1:a7:f0:a8:96:1c:81:ca:40:da:7e:52:fa:cb: cd:28:cd:25:cd:5c:97:40:1d:a1:0a:e1:52:42:4f: 7a:64:2d:78:84:7b:3f:f7:99:51:60:9c:26:51:43: 22:9c:62:68:51:45:4a:d9:04:3d:09:ff:66:b1:dd: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:58:FC:56:C1:A9:3A:73:43:CB:13:56:93:EE:BB:67:4F:2E:0C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43da4a32-79b1-3d3f-94d4-1bbe62f2694f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:300c:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:db:97:0f:c1:12:5e:1d:82:a9:87:5a:df:b5:de:fa:63:5d: d2:8f:14:6f:0b:37:b1:da:90:cc:77:31:10:6f:f3:b6:13:9d: 77:0d:78:b5:79:33:6a:f2:29:2e:13:d5:17:88:b9:72:38:85: 86:65:9d:91:8e:58:ce:a1:49:b9:5c:6e:39:e9:59:3b:dc:3b: 11:3a:62:41:68:24:84:9c:13:e3:47:f8:68:3e:28:ef:92:45: 2e:d4:1c:a0:d1:13:cb:7c:b4:68:e0:57:02:bf:de:cb:2b:83: 3c:2f:81:e8:f6:e9:7c:1c:6c:76:a2:56:ee:6e:c0:72:76:a3: ae:74:42:f4:eb:bf:9e:f0:e2:65:b2:9c:ed:ff:96:97:37:be: 27:da:8f:58:96:51:17:75:dc:c9:8a:c2:78:52:cc:65:ae:b9: 96:e6:6a:89:f6:99:74:97:00:d6:27:87:17:42:fe:d9:d7:4a: 5a:a8:d0:d8:1a:6c:06:53:91:34:84:32:56:1e:31:3b:f5:d6: af:36:f3:0d:2d:85:36:71:1e:ee:23:ec:62:ed:6e:ca:97:8f: 72:58:be:2d:c1:45:56:c1:e9:b0:99:17:d7:01:dc:cd:27:3c: 0f:14:99:06:9d:fb:90:f9:a1:c9:ad:3a:20:66:9e:96:dd:16: 32:d0:8f:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqqBB0pmlocAbqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk M2Y5ZWJmMzMtY2Y4OS00OGMxLWE5YjItOWZmZDkyMWEwYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttUoeYAZfW4c3XFP67gnazg0a4d4M6fMOf0z pPfYYxr0XAa9kSOR8iNbVjrfZmXZMb2FeED7C3ghMu/Pa13SEuPcexLOc1pHBq3l dQ44RA2on/GDKFL5eLS7KI5nmrdFyRJe1faYHQKf2Z0nihs4FAUhigddK9FqVXbH 9ySjXYFUa5tbxir3+VkYHcTCGS5bbg0iAJ60d0Mdf2euC5tcW4jHdMRev/bzpxsK vTpA2hUBL/b3/rGDOvSlrPA/iF8OshTn8afwqJYcgcpA2n5S+svNKM0lzVyXQB2h CuFSQk96ZC14hHs/95lRYJwmUUMinGJoUUVK2QQ9Cf9msd3j7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOFY/FbBqTpzQ8sTVpPuu2dPLgxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNkYTRhMzItNzliMS0z ZDNmLTk0ZDQtMWJiZTYyZjI2OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAa9uXD8ESXh2CqYda37Xe+mNd0o8Ubws3sdqQzHcxEG/zthOddw14 tXkzavIpLhPVF4i5cjiFhmWdkY5YzqFJuVxuOelZO9w7ETpiQWgkhJwT40f4aD4o 75JFLtQcoNETy3y0aOBXAr/eyyuDPC+B6PbpfBxsdqJW7m7AcnajrnRC9Ou/nvDi ZbKc7f+Wlze+J9qPWJZRF3XcyYrCeFLMZa65luZqifaZdJcA1ieHF0L+2ddKWqjQ 2BpsBlORNIQyVh4xO/XWrzbzDS2FNnEe7iPsYu1uypePcli+LcFFVsHpsJkX1wHc zSc8DxSZBp37kPmhya06IGaelt0WMtCPcA== -----END CERTIFICATE-----Generated at Tue Oct 21 19:21:07 2025 by rpki-client