$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de05c027-3c72-3de8-9617-1bdd0e023ab8.roa File: de05c027-3c72-3de8-9617-1bdd0e023ab8.roa (raw, json) Hash identifier: 1g3grAcrUUg74VksIxuqQ/q06W0fNay0sJ8oVo3Xbbw= Subject key identifier: C4:1B:A1:9C:C3:93:63:88:26:41:EF:A1:C2:45:DC:A8:D5:9C:EE:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8A26D05BFDF60F40F4980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de05c027-3c72-3de8-9617-1bdd0e023ab8.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 2601:40f:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:a2:6d:05:bf:df:60:f4:0f:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b5548a9d-f2fd-4645-8160-401ff1d68f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:5d:03:01:f7:13:cb:03:05:f8:b9:04:00: 6b:67:c8:9e:3a:1f:8a:55:39:c0:f6:78:8f:5c:81: 36:3b:4f:af:c4:24:59:3f:98:1b:53:46:69:27:15: 67:a6:f1:17:2a:fd:12:a3:21:3b:a8:39:43:9e:ca: bd:8e:02:35:03:0b:f6:73:05:f5:76:99:56:70:1b: 77:c5:c0:10:f9:d2:87:1f:82:52:d3:76:79:15:46: c4:c0:9b:6a:7d:ce:54:d3:96:81:5e:d6:9e:0f:0a: 32:47:11:1a:51:e6:45:8b:72:42:7e:3a:89:47:be: cc:11:b2:0a:c1:01:2c:ab:17:a8:dd:98:56:0c:ca: 2b:2e:91:01:bc:06:c7:ac:89:23:7d:9d:c9:5a:07: 38:ca:5a:18:b5:ca:e1:9b:68:7b:a5:80:8d:dd:2e: 1f:56:c0:cf:16:b7:25:99:c8:33:e3:06:d1:e2:61: bd:70:ec:b0:33:e9:e4:2d:de:53:09:cb:72:ed:75: d4:95:8a:50:fd:41:cd:ef:fa:de:a5:18:2d:db:4b: 60:b6:76:e4:94:50:80:08:b8:ee:77:bd:09:19:cc: 37:ef:e1:3b:ba:33:b3:ea:2a:e5:a1:95:7c:15:ae: e0:31:dd:ce:36:d4:2e:ca:88:33:21:e6:05:00:7b: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1B:A1:9C:C3:93:63:88:26:41:EF:A1:C2:45:DC:A8:D5:9C:EE:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de05c027-3c72-3de8-9617-1bdd0e023ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:40f:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ed:df:36:d8:d9:62:78:57:76:96:e8:82:30:dc:8c:ce:fd: ab:f0:50:01:ae:62:cd:eb:1a:50:36:96:ec:bd:8f:2f:3f:5b: 35:05:1a:f8:8b:62:cb:a2:b5:c0:55:17:70:8a:1e:b6:07:7b: 44:f3:4e:4b:6b:70:d9:39:63:c0:15:db:b6:8b:93:26:ea:d0: 7b:57:84:f4:a5:51:9c:d4:c0:25:17:95:05:eb:bd:d2:b1:6d: f5:7b:5f:f7:e8:c6:b7:9d:b4:44:e3:94:37:0e:25:44:19:8e: 31:d5:eb:f3:7d:6a:03:34:47:79:39:db:2b:62:ba:b8:61:f5: d1:49:38:b3:e0:82:2b:7c:bc:ae:4b:51:57:e8:dc:f2:09:bc: 30:c9:a9:78:11:6c:e2:93:fc:88:3f:b5:81:0e:b9:53:95:2b: 85:2c:26:29:42:75:9c:54:20:94:19:15:3e:1b:cd:8e:91:6e: cf:c4:74:83:67:87:7b:c7:7c:bb:14:f8:fb:e7:f1:a4:57:06: 69:13:23:09:60:f9:11:0c:41:92:a9:d3:3d:ea:1a:48:f8:f7: 4d:fa:19:ea:d1:df:48:c0:6e:2e:40:f5:0b:6b:57:47:a4:74: 0d:b1:09:2d:4d:69:33:14:6e:da:28:5e:06:b6:81:df:1a:ee: e7:78:36:f7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqKJtBb/fYPQPSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjU1NDhhOWQtZjJmZC00NjQ1LTgxNjAtNDAxZmYxZDY4ZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bldAwH3E8sDBfi5BABrZ8ieOh+KVTnA9niP XIE2O0+vxCRZP5gbU0ZpJxVnpvEXKv0SoyE7qDlDnsq9jgI1Awv2cwX1dplWcBt3 xcAQ+dKHH4JS03Z5FUbEwJtqfc5U05aBXtaeDwoyRxEaUeZFi3JCfjqJR77MEbIK wQEsqxeo3ZhWDMorLpEBvAbHrIkjfZ3JWgc4yloYtcrhm2h7pYCN3S4fVsDPFrcl mcgz4wbR4mG9cOywM+nkLd5TCcty7XXUlYpQ/UHN7/repRgt20tgtnbklFCACLju d70JGcw37+E7ujOz6irloZV8Fa7gMd3ONtQuyogzIeYFAHvngwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMQboZzDk2OIJkHvocJF3KjVnO6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGUwNWMwMjctM2M3Mi0z ZGU4LTk2MTctMWJkZDBlMDIzYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEED8Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAI+3fNtjZYnhXdpbogjDcjM79q/BQAa5izesaUDaW7L2PLz9bNQUa +Itiy6K1wFUXcIoetgd7RPNOS2tw2TljwBXbtouTJurQe1eE9KVRnNTAJReVBeu9 0rFt9Xtf9+jGt520ROOUNw4lRBmOMdXr831qAzRHeTnbK2K6uGH10Uk4s+CCK3y8 rktRV+jc8gm8MMmpeBFs4pP8iD+1gQ65U5UrhSwmKUJ1nFQglBkVPhvNjpFuz8R0 g2eHe8d8uxT4++fxpFcGaRMjCWD5EQxBkqnTPeoaSPj3TfoZ6tHfSMBuLkD1C2tX R6R0DbEJLU1pMxRu2iheBraB3xru53g29w== -----END CERTIFICATE-----Generated at Tue Oct 21 19:39:36 2025 by rpki-client