$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9a7aa3a-1baa-3c7f-90e4-3c319577379e.roa File: f9a7aa3a-1baa-3c7f-90e4-3c319577379e.roa (raw, json) Hash identifier: 7wwgVUE0W6gKMLhBM0Arm9jHK8Y4x7GYUYbU1xOXKHA= Subject key identifier: 8E:32:FC:08:9F:C3:C7:4D:39:17:EC:F2:C7:86:59:53:C7:F1:D2:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9AE48760BEA800ED4D8C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9a7aa3a-1baa-3c7f-90e4-3c319577379e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 2603:2181:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:ae:48:76:0b:ea:80:0e:d4:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c8f4047b-0723-432a-9159-1d1e8dccba4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:aa:56:78:ec:8a:b1:18:5b:26:1e:42:83: b3:e5:43:2c:3d:31:51:f7:a1:49:fc:8a:a8:58:f1: 2b:15:eb:e0:fc:72:42:7a:fb:12:10:b7:c7:2f:28: 86:11:9b:a0:a5:2e:41:cd:6c:a3:fe:b1:45:91:a6: b1:fc:69:f3:8f:9f:1e:cb:fc:74:57:e0:4a:6f:74: 72:87:bf:64:7e:5b:77:70:b0:a1:ad:38:c0:bb:c9: e6:62:00:17:36:93:90:a3:24:a7:b0:67:b6:90:f3: 93:bd:df:7d:5e:7b:89:4e:66:ab:ab:d3:29:21:f4: 42:6f:23:01:70:51:13:f7:4e:cc:89:29:60:36:5c: ba:f4:2f:46:ce:01:b4:51:94:bf:d8:ed:2f:dd:50: f9:3e:58:eb:19:23:70:35:4a:b0:7d:45:82:b4:b1: 70:f6:cd:56:88:5e:6f:5a:66:1b:e6:03:ab:00:7f: 31:2c:2f:21:00:ea:b1:f7:3a:8e:68:fc:eb:e4:ca: 72:4b:5e:12:e0:32:c6:d1:63:5b:9c:96:3c:b6:89: 43:53:8b:de:b9:c6:5f:f2:ba:80:56:29:33:11:8e: 06:ab:36:b8:c6:43:2f:17:f1:92:8e:39:9b:a8:47: 15:03:f8:5e:24:5a:c7:40:09:bf:00:1a:54:e8:76: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:32:FC:08:9F:C3:C7:4D:39:17:EC:F2:C7:86:59:53:C7:F1:D2:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9a7aa3a-1baa-3c7f-90e4-3c319577379e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2181:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:cb:c4:1e:4b:42:38:fa:2b:8b:89:bb:90:33:b4:e1:4f:cb: 2a:81:ea:3a:bc:87:65:48:45:93:4a:c3:cd:f4:51:6a:14:f2: 31:a6:0f:6a:dd:32:f2:70:6a:71:30:c0:10:ab:ed:cd:a0:22: 72:8f:58:d5:8e:81:76:1a:2d:85:d1:e8:64:78:c4:5a:b3:a8: aa:bd:9f:f2:5d:33:80:e3:59:75:8a:29:3d:34:b4:b5:cf:de: e9:ed:4c:70:41:c7:b7:8b:8d:1a:b1:9b:c2:a6:56:78:d4:de: d8:9c:e8:1a:72:8d:4f:fa:50:19:55:91:95:34:e5:0c:a7:1c: 4f:8c:5f:3b:42:b2:e1:e8:92:cf:5e:95:08:18:dc:9a:6a:cf: 7a:53:ec:4e:73:2a:92:23:7f:ad:3f:d9:da:67:d8:47:76:12: 4c:e8:6b:ff:a7:e0:0f:1b:5c:5d:69:33:fe:b2:81:7c:be:60: 60:d5:bd:ef:9a:77:84:df:ae:e9:0d:bc:4e:dd:fb:5e:9b:9a: 79:5b:7b:44:1b:d5:5a:56:9a:ef:d9:6d:0c:ab:bc:86:b5:46: c0:5c:7a:5c:a0:a1:83:c0:d0:eb:db:5b:71:fe:49:a4:6d:ff: 38:2d:99:79:28:da:46:0c:ad:8b:63:f7:96:92:2d:1a:f4:12: c9:97:a4:0a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqa5IdgvqgA7U2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzhmNDA0N2ItMDcyMy00MzJhLTkxNTktMWQxZThkY2NiYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmWqVnjsirEYWyYeQoOz5UMsPTFR96FJ/Iqo WPErFevg/HJCevsSELfHLyiGEZugpS5BzWyj/rFFkaax/Gnzj58ey/x0V+BKb3Ry h79kflt3cLChrTjAu8nmYgAXNpOQoySnsGe2kPOTvd99XnuJTmarq9MpIfRCbyMB cFET907MiSlgNly69C9GzgG0UZS/2O0v3VD5PljrGSNwNUqwfUWCtLFw9s1WiF5v WmYb5gOrAH8xLC8hAOqx9zqOaPzr5MpyS14S4DLG0WNbnJY8tolDU4veucZf8rqA VikzEY4Gqza4xkMvF/GSjjmbqEcVA/heJFrHQAm/ABpU6HauQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI4y/Aifw8dNORfs8seGWVPH8dK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjlhN2FhM2EtMWJhYS0z YzdmLTkwZTQtM2MzMTk1NzczNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMhgUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA28vEHktCOPori4m7kDO04U/LKoHqOryHZUhFk0rDzfRRahTyMaYP at0y8nBqcTDAEKvtzaAico9Y1Y6BdhothdHoZHjEWrOoqr2f8l0zgONZdYopPTS0 tc/e6e1McEHHt4uNGrGbwqZWeNTe2JzoGnKNT/pQGVWRlTTlDKccT4xfO0Ky4eiS z16VCBjcmmrPelPsTnMqkiN/rT/Z2mfYR3YSTOhr/6fgDxtcXWkz/rKBfL5gYNW9 75p3hN+u6Q28Tt37XpuaeVt7RBvVWlaa79ltDKu8hrVGwFx6XKChg8DQ69tbcf5J pG3/OC2ZeSjaRgyti2P3lpItGvQSyZekCg== -----END CERTIFICATE-----Generated at Tue Oct 21 19:35:41 2025 by rpki-client