$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77e76d3-5d8e-3331-953f-c037265a6643.roa File: d77e76d3-5d8e-3331-953f-c037265a6643.roa (raw, json) Hash identifier: N8vvvfDLdnfQhvSIwN3pgUriCnFKiAQbgGEoreUw3uY= Subject key identifier: 4F:15:A1:E4:ED:D8:1C:77:53:76:9C:CF:39:D6:06:62:9D:CC:A5:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA9DFED7EFB7E8C4EF94C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77e76d3-5d8e-3331-953f-c037265a6643.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 2601:2c1:8f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:9d:fe:d7:ef:b7:e8:c4:ef:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=0f58318d-bd36-457c-9ca8-a11a0d00caa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a5:84:a8:8b:12:ab:f4:7f:12:fe:d6:e8:ee: 36:66:46:5a:17:ac:e9:db:af:7b:10:dc:8e:1f:73: 88:e6:62:c3:10:3c:8d:0d:8a:ba:8e:0a:b0:5b:26: f0:38:48:d4:34:af:f4:26:75:6a:2e:3a:8d:43:3f: b6:8e:7a:57:f4:8c:8b:b9:4f:fd:24:a1:20:59:bc: 30:94:73:0d:44:5f:ca:a5:a2:d5:7b:c2:7a:7e:23: eb:ad:b6:cb:cd:2e:ad:e2:1b:24:a2:5e:0e:bc:1d: e2:69:34:6f:68:85:5f:00:fe:7f:06:36:f6:4b:c3: 1d:05:45:cf:d1:ff:d7:54:f0:ce:81:8a:f3:f2:a8: 31:4f:ea:c7:4d:e4:1f:8b:f9:63:46:9d:12:6a:04: 46:f7:48:5e:57:bf:cf:75:f0:28:1a:36:b7:bf:54: 1f:81:51:c1:b4:52:00:82:82:48:fa:51:d4:24:67: 09:8c:5b:a6:d9:ab:1d:2c:4f:f4:9d:65:08:ed:ba: 09:e1:8e:1e:43:cb:36:3f:b6:b7:87:49:71:ae:72: a6:73:59:ab:cc:80:cd:0a:c9:4d:24:e0:18:7c:dc: fc:8a:17:08:64:b0:34:73:11:7c:61:a4:ea:87:4b: 86:ea:23:c6:93:6e:85:77:1b:ca:7b:cb:1c:62:96: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:A1:E4:ED:D8:1C:77:53:76:9C:CF:39:D6:06:62:9D:CC:A5:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77e76d3-5d8e-3331-953f-c037265a6643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:2c1:8f00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:a6:ad:76:ad:a7:a6:50:02:f7:cb:df:db:29:18:ad:12:e0: f5:e5:97:86:44:b2:1e:17:94:74:12:98:04:d5:bf:d4:f3:10: 34:40:12:c0:f2:8b:e3:eb:5f:19:20:3d:2c:2d:6d:7f:ed:2d: 12:99:df:8c:ca:3a:35:6a:f3:e7:49:c6:47:73:08:d3:0d:01: 76:cb:6d:8f:1e:1d:e4:a9:38:db:cc:91:d5:2a:97:55:9a:0f: 40:3e:bb:06:36:d9:2e:4d:6e:a7:a1:4a:92:a3:a4:62:bf:bf: 3a:70:cb:e0:8d:a5:79:fe:0d:56:83:ba:09:e0:01:07:59:3e: f6:ab:99:34:25:ee:31:51:c9:4f:1e:82:43:37:5c:57:7c:5b: ea:a8:ee:11:c0:f9:39:65:a7:c3:cb:56:93:cc:3c:e5:42:79: 34:fc:4f:96:8d:b6:e3:74:45:d5:be:05:d1:c0:d2:13:7b:4e: 0f:c1:55:3c:33:72:cb:58:5d:e7:c8:eb:b5:da:a8:ae:83:98: 52:75:61:a0:23:ae:3c:1e:c0:8b:2a:4b:d1:f4:40:a1:22:94: fe:c4:18:25:63:0c:04:e5:1b:dd:d9:3d:f7:39:fc:6a:81:31: 6a:40:75:53:f6:7d:01:69:e5:a6:3f:3f:20:84:ec:07:95:06: f5:2f:e4:96 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqp3+1++36MTvlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MGY1ODMxOGQtYmQzNi00NTdjLTljYTgtYTExYTBkMDBjYWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6WEqIsSq/R/Ev7W6O42ZkZaF6zp2697ENyO H3OI5mLDEDyNDYq6jgqwWybwOEjUNK/0JnVqLjqNQz+2jnpX9IyLuU/9JKEgWbww lHMNRF/KpaLVe8J6fiPrrbbLzS6t4hskol4OvB3iaTRvaIVfAP5/Bjb2S8MdBUXP 0f/XVPDOgYrz8qgxT+rHTeQfi/ljRp0SagRG90heV7/PdfAoGja3v1QfgVHBtFIA goJI+lHUJGcJjFum2asdLE/0nWUI7boJ4Y4eQ8s2P7a3h0lxrnKmc1mrzIDNCslN JOAYfNz8ihcIZLA0cxF8YaTqh0uG6iPGk26FdxvKe8scYpaw6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE8VoeTt2Bx3U3aczznWBmKdzKV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDc3ZTc2ZDMtNWQ4ZS0z MzMxLTk1M2YtYzAzNzI2NWE2NjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgECwY8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAuKatdq2nplAC98vf2ykYrRLg9eWXhkSyHheUdBKYBNW/1PMQNEAS wPKL4+tfGSA9LC1tf+0tEpnfjMo6NWrz50nGR3MI0w0Bdsttjx4d5Kk428yR1SqX VZoPQD67BjbZLk1up6FKkqOkYr+/OnDL4I2lef4NVoO6CeABB1k+9quZNCXuMVHJ Tx6CQzdcV3xb6qjuEcD5OWWnw8tWk8w85UJ5NPxPlo2243RF1b4F0cDSE3tOD8FV PDNyy1hd58jrtdqoroOYUnVhoCOuPB7AiypL0fRAoSKU/sQYJWMMBOUb3dk99zn8 aoExakB1U/Z9AWnlpj8/IITsB5UG9S/klg== -----END CERTIFICATE-----Generated at Tue Oct 21 21:58:13 2025 by rpki-client