$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa File: 922fa9c7-bd18-3321-a549-97584b01d98d.roa (raw, json) Hash identifier: idxS3RFdO4KUmY49w+mRX7rWvtHB8rg/69Yk9NMv/MI= Subject key identifier: DE:91:93:DD:2D:8B:FF:14:D1:32:D8:48:65:BD:B8:5E:47:53:2C:41 Certificate issuer: /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88 Certificate serial: 010D0C9F4328584B9E07D0B6311ECB7159CA9180 Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 2607:1c0:1320::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d0:b6:31:1e:cb:71:59:ca:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=6c593336-49c4-4cb3-bfd5-7367afcdaa08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:b6:60:86:1c:9b:99:fd:3e:f6:ce:64:d9: 11:95:1a:f2:f4:48:50:9e:14:fc:a5:76:67:53:75: 11:01:f8:52:ac:cc:08:55:08:8f:f7:ee:23:f3:ef: 53:41:5f:e7:ad:7d:cd:2c:1b:d2:40:c9:49:dc:40: c0:3e:a5:da:ea:be:c1:16:f4:d8:6d:f5:39:28:2c: 5a:46:6e:1a:00:ba:a7:9b:09:b1:50:c7:28:bc:e6: af:f3:05:d3:b8:89:7c:f9:43:31:85:91:35:8e:73: 8f:22:0f:c8:82:d9:66:82:8d:9c:95:c9:28:ac:19: d6:8c:e7:9c:be:ab:5e:e2:b9:6d:49:ed:0c:b1:e0: e6:0c:c1:ec:35:df:ca:e8:c0:25:72:5b:dd:f7:5a: bc:17:8e:f0:16:3f:72:ed:f2:7f:69:22:0d:6a:96: 2a:42:07:1d:af:5e:b9:d7:a2:5b:08:07:a1:b2:da: 36:56:59:67:8f:9b:66:dc:ca:86:db:56:a8:53:aa: 05:30:ac:9a:50:d9:fc:81:e5:c9:11:94:67:93:26: 40:ee:c8:64:44:a4:4a:e2:9c:08:6f:30:92:58:73: 6c:05:a1:84:0c:ab:88:35:5d:fe:df:7f:5d:ad:18: b9:12:ce:4d:8c:8c:1b:f6:6e:a0:50:cd:7c:98:dc: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:91:93:DD:2D:8B:FF:14:D1:32:D8:48:65:BD:B8:5E:47:53:2C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl X509v3 Authority Key Identifier: keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer sbgp-ipAddrBlock: critical IPv6: 2607:1c0:1320::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:75:a1:11:55:4c:e5:62:63:3a:8f:ab:a1:39:81:fe:9f:8c: d9:5e:12:98:76:fc:2a:c1:f9:9f:02:a7:9f:0a:d3:50:a7:d7: c6:28:03:8f:d5:6f:59:32:b8:f5:26:c2:fc:8c:d5:21:79:d4: 0a:5f:5d:c7:a9:06:aa:9d:29:16:b9:8c:e7:30:23:e5:76:6a: d5:7c:e3:cc:2a:94:82:6c:0c:a5:48:e1:f5:aa:93:7f:8e:82: f9:6f:4c:31:e5:5e:e8:e7:21:f1:14:8c:1c:b4:59:23:9b:5c: b6:f3:42:07:50:32:3f:e4:b2:22:f7:86:9d:a8:bb:29:a9:76: a4:4e:3b:8e:95:5e:70:65:62:94:f3:2f:05:da:3b:62:dc:b3: 80:1a:a4:57:63:61:90:f9:c6:11:1a:05:e9:36:bc:c1:9b:0d: ed:3e:21:2e:d5:ea:a0:94:25:24:af:b4:7f:da:4f:4a:4f:e3: 7c:32:d1:19:df:35:e0:84:18:54:26:e0:ab:21:0c:24:e6:55: dc:39:f4:49:98:5a:bf:4c:5b:b6:df:7f:02:51:d5:d8:e1:03: d7:6e:6d:36:e4:0e:74:4d:7b:bb:45:f3:bf:bf:17:f5:53:c4: fc:25:3c:a6:f5:cc:17:ba:d3:e6:21:2b:e7:58:71:64:84:ec: 11:07:f5:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB9C2MR7LcVnKkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjMTdkYjctMjA0Yy00MWUyLTg1Y2EtNmE1YTQ0OGE4 Yjg4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NmM1OTMzMzYtNDljNC00Y2IzLWJmZDUtNzM2N2FmY2RhYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAu2YIYcm5n9PvbOZNkRlRry9EhQnhT8pXZn U3URAfhSrMwIVQiP9+4j8+9TQV/nrX3NLBvSQMlJ3EDAPqXa6r7BFvTYbfU5KCxa Rm4aALqnmwmxUMcovOav8wXTuIl8+UMxhZE1jnOPIg/Igtlmgo2clckorBnWjOec vqte4rltSe0MseDmDMHsNd/K6MAlclvd91q8F47wFj9y7fJ/aSINapYqQgcdr165 16JbCAehsto2Vllnj5tm3MqG21aoU6oFMKyaUNn8geXJEZRnkyZA7shkRKRK4pwI bzCSWHNsBaGEDKuINV3+339drRi5Es5NjIwb9m6gUM18mNxnywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN6Rk90ti/8U0TLYSGW9uF5HUyxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2Mx N2RiNy0yMDRjLTQxZTItODVjYS02YTVhNDQ4YThiODgvOTIyZmE5YzctYmQxOC0z MzIxLWE1NDktOTc1ODRiMDFkOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNjMTdkYjctMjA0Yy00MWUyLTg1 Y2EtNmE1YTQ0OGE4Yjg4L2MzYzE3ZGI3LTIwNGMtNDFlMi04NWNhLTZhNWE0NDhh OGI4OC5jcmwwHwYDVR0jBBgwFoAUfS26/0Pb6XKW6UWHlVxFclTUa4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2MxN2RiNy0yMDRjLTQxZTItODVjYS02YTVh NDQ4YThiODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgcBwBMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACp1oRFVTOViYzqPq6E5gf6fjNleEph2/CrB+Z8Cp58K01Cn18Yo A4/Vb1kyuPUmwvyM1SF51ApfXcepBqqdKRa5jOcwI+V2atV848wqlIJsDKVI4fWq k3+OgvlvTDHlXujnIfEUjBy0WSObXLbzQgdQMj/ksiL3hp2ouympdqROO46VXnBl YpTzLwXaO2Lcs4AapFdjYZD5xhEaBek2vMGbDe0+IS7V6qCUJSSvtH/aT0pP43wy 0RnfNeCEGFQm4KshDCTmVdw59EmYWr9MW7bffwJR1djhA9dubTbkDnRNe7tF87+/ F/VTxPwlPKb1zBe60+YhK+dYcWSE7BEH9fI= -----END CERTIFICATE-----Generated at Mon Nov 3 21:52:07 2025 by rpki-client