$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa File: 79a75857-a8dd-342c-933c-947c4710fda2.roa (raw, json) Hash identifier: aiQcbnnZBGnr7B9yt6eqdKVL2ME+pmdh4IVbHse5420= Subject key identifier: C7:A3:09:20:72:37:CB:80:AE:2C:D8:AA:2A:B5:B4:9F:5F:91:44:12 Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Certificate serial: 010D0C9F4328584B2CF6E9CAC41A5771BA137000 Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 49791 IP address blocks: 2606:2040:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e9:ca:c4:1a:57:71:ba:13:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=c981d6d6-2c38-4795-b26c-369988c8cbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:c4:d2:f0:82:e2:e6:ac:99:90:f7:3f:52: f0:7f:bd:0a:71:78:ae:3c:76:ea:95:3c:7d:a9:89: b5:43:79:a2:5c:0c:80:e5:38:03:b9:1b:d8:07:73: 48:0e:5f:4d:63:df:05:b8:8a:f3:f5:01:ba:8f:33: d3:5a:28:aa:e8:b7:42:83:80:0f:a5:1b:bf:18:dd: da:ae:54:0b:be:f6:60:0f:3e:e6:fb:ee:82:3f:7c: 10:b4:90:92:41:59:8e:17:af:ca:46:62:ad:95:d8: d1:87:cb:9b:d7:eb:86:92:33:1b:91:45:eb:04:af: b7:78:bf:d5:46:17:ea:d7:9a:5b:7e:f2:b4:2e:88: 76:a0:6b:9b:a8:dd:4a:4a:06:65:b6:53:4e:99:30: d5:c1:d6:4b:c9:61:e6:40:66:2f:26:8c:e4:5b:91: fe:93:50:85:ae:e6:2f:5f:23:73:97:76:4f:1e:13: 92:09:4a:3f:6a:84:ff:b8:96:ca:d6:cd:fc:5a:be: 76:db:50:3d:55:46:77:94:6e:93:3e:e5:2b:e7:e1: 96:40:b0:17:70:44:02:4d:27:bc:5a:9f:35:17:9f: f5:28:26:c2:4d:11:22:4a:d6:5a:a6:85:28:48:e5: 5d:a0:42:b1:42:f2:34:cb:7a:73:cd:9a:16:26:d9: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A3:09:20:72:37:CB:80:AE:2C:D8:AA:2A:B5:B4:9F:5F:91:44:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl X509v3 Authority Key Identifier: keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer sbgp-ipAddrBlock: critical IPv6: 2606:2040:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:44:d3:3b:93:1d:12:38:c6:81:80:1e:f1:38:7e:9b:49:34: 9b:21:10:f0:01:b2:3b:ce:23:a2:75:1a:1a:ff:5a:3c:62:3e: af:dd:75:c1:66:18:e0:f9:c6:30:a6:3e:db:24:25:7b:ce:35: da:65:67:61:e8:da:d1:a6:d6:0a:d3:8a:61:4d:fa:b3:c3:83: 4b:cc:8b:99:73:11:32:a4:ff:4b:d6:9d:2a:bf:a9:f3:35:fc: bc:43:9b:22:7f:4b:a5:28:85:dd:20:63:55:e1:cc:48:c5:bd: d5:41:73:7d:19:a3:01:08:5d:06:bb:1c:68:c4:3c:64:1a:e6: 8e:69:53:64:7b:af:68:71:80:9d:67:ae:e8:24:00:e8:ad:e9: 92:81:e2:bf:8f:8f:a4:94:af:aa:9e:09:01:6f:99:76:a5:e4: 7a:39:ef:04:e9:a8:12:51:4e:e3:1f:5a:76:74:78:65:94:34: fe:a8:99:2d:80:c2:0d:62:9f:0f:32:8f:ee:db:ef:e2:65:da: 60:72:0a:f6:f4:21:ca:45:27:53:6e:94:77:2e:23:72:53:dd: f2:5f:f5:a4:38:ed:9a:05:fd:d9:be:32:24:e4:1a:0b:b0:84: bc:a6:d3:a1:75:4b:13:c8:d5:b7:12:b5:27:cc:18:f5:9b:11: 57:ef:26:80 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEss9unKxBpXcboTcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1 ODU0MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk Yzk4MWQ2ZDYtMmMzOC00Nzk1LWIyNmMtMzY5OTg4YzhjYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNTE0vCC4uasmZD3P1Lwf70KcXiuPHbqlTx9 qYm1Q3miXAyA5TgDuRvYB3NIDl9NY98FuIrz9QG6jzPTWiiq6LdCg4APpRu/GN3a rlQLvvZgDz7m++6CP3wQtJCSQVmOF6/KRmKtldjRh8ub1+uGkjMbkUXrBK+3eL/V Rhfq15pbfvK0Loh2oGubqN1KSgZltlNOmTDVwdZLyWHmQGYvJozkW5H+k1CFruYv XyNzl3ZPHhOSCUo/aoT/uJbK1s38Wr5221A9VUZ3lG6TPuUr5+GWQLAXcEQCTSe8 Wp81F5/1KCbCTREiStZapoUoSOVdoEKxQvI0y3pzzZoWJtlTgwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMejCSByN8uArizYqiq1tJ9fkUQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvNzlhNzU4NTctYThkZC0z NDJjLTkzM2MtOTQ3YzQ3MTBmZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3 NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3 MmFkNzU4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgYgQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqETTO5MdEjjGgYAe8Th+m0k0myEQ8AGyO84jonUaGv9aPGI+r911 wWYY4PnGMKY+2yQle8412mVnYeja0abWCtOKYU36s8ODS8yLmXMRMqT/S9adKr+p 8zX8vEObIn9LpSiF3SBjVeHMSMW91UFzfRmjAQhdBrscaMQ8ZBrmjmlTZHuvaHGA nWeu6CQA6K3pkoHiv4+PpJSvqp4JAW+ZdqXkejnvBOmoElFO4x9adnR4ZZQ0/qiZ LYDCDWKfDzKP7tvv4mXaYHIK9vQhykUnU26Udy4jclPd8l/1pDjtmgX92b4yJOQa C7CEvKbToXVLE8jVtxK1J8wY9ZsRV+8mgA== -----END CERTIFICATE-----Generated at Mon Oct 27 22:38:06 2025 by rpki-client