$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1ab8efee-de03-3f35-a1ac-70a17bd23c84.roa File: 1ab8efee-de03-3f35-a1ac-70a17bd23c84.roa (raw, json) Hash identifier: qNYejBID5buILdMFcS+cusLE6V8RZxXoc080MRntiBQ= Subject key identifier: C7:BE:5D:DA:E3:F5:AA:D7:82:8A:96:0C:FE:A7:C2:52:BD:57:52:99 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73AA5EA31EBF401A09D00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1ab8efee-de03-3f35-a1ac-70a17bd23c84.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:568:fff4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3a:a5:ea:31:eb:f4:01:a0:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=f53f5383-ff80-4c61-8ad0-e46635699e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:d9:6a:8e:9e:37:45:44:80:25:9b:de:1c: c8:6b:c4:66:a9:a5:55:70:df:01:65:c5:08:21:c0: 6d:a2:b3:bf:9d:84:c2:d7:ba:94:4e:73:50:63:36: 38:aa:60:46:80:df:f7:10:00:4f:60:4d:b0:8c:3d: 8b:3f:80:35:19:7c:17:14:88:b0:29:57:7e:24:25: 90:d3:9b:cd:14:b5:31:71:2a:03:18:28:8e:3a:06: 42:80:5c:29:95:cb:d3:ae:24:21:c3:40:aa:42:27: da:89:51:18:54:82:16:73:12:51:23:34:22:70:81: 68:15:b6:62:48:20:99:5b:d4:69:78:8f:6b:02:25: f6:55:b5:9a:06:43:6b:82:1a:72:d9:5f:c2:2b:28: d3:41:64:57:c2:72:fd:a4:33:06:28:04:09:c3:62: 13:14:10:1b:b3:36:2c:5c:17:5e:d1:35:23:09:3c: 9f:9f:8f:cc:52:0b:0e:98:69:5d:6c:75:18:59:81: 62:7b:bb:7d:05:67:64:a2:14:79:70:4a:40:61:73: 10:9b:90:2d:5c:d8:13:c6:31:fc:79:08:c7:90:cb: 49:11:9f:80:fd:f9:1a:14:2f:77:51:5f:ef:59:a1: 33:ac:eb:38:f2:d9:a5:1c:ca:96:1d:f2:20:87:17: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BE:5D:DA:E3:F5:AA:D7:82:8A:96:0C:FE:A7:C2:52:BD:57:52:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1ab8efee-de03-3f35-a1ac-70a17bd23c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:fff4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:d3:d3:4c:31:b9:3d:a5:6f:82:4e:6f:f5:72:5c:21:88:58: 3e:bc:47:46:2e:a4:34:d4:a8:95:1a:4d:82:e1:b5:6f:e3:3e: 2d:ca:b1:66:08:73:4e:21:35:39:0c:b6:4a:c5:85:2e:4f:c9: 4b:5c:f9:95:de:c7:8e:c4:68:6f:ee:00:95:83:aa:00:df:f4: 0a:94:7f:ab:bf:b3:e9:ed:bf:cb:01:4d:cb:00:8f:95:2e:0c: 8a:d1:76:63:ee:5a:2f:27:68:74:50:70:94:28:a4:b5:c0:b2: 3b:88:8a:1a:d8:e5:64:af:cb:7c:ff:56:c4:3a:5d:68:ff:d7: c1:70:85:c4:6c:be:7f:7e:b4:51:59:c5:99:c0:99:a0:74:b9: 0a:62:bb:7c:31:d8:c2:64:49:25:26:38:b4:34:03:ab:df:3d: 67:6c:a6:73:41:c4:8d:cc:a7:dd:61:99:28:a6:90:0d:84:60: ba:44:e5:42:4b:ff:a1:2b:bc:e9:d6:b2:d1:49:74:02:a8:ce: 18:31:5c:df:a8:f3:72:c3:9d:e0:8f:07:93:b5:d3:48:03:1d: 92:11:d9:bc:54:5c:01:96:b7:d0:37:64:51:4a:bd:b0:07:f0: 87:23:7a:70:af:1f:d9:2f:bb:b7:0e:4c:a0:98:b4:9a:9b:0d: 34:0c:71:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzql6jHr9AGgnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZjUzZjUzODMtZmY4MC00YzYxLThhZDAtZTQ2NjM1Njk5ZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA317Zao6eN0VEgCWb3hzIa8RmqaVVcN8BZcUI IcBtorO/nYTC17qUTnNQYzY4qmBGgN/3EABPYE2wjD2LP4A1GXwXFIiwKVd+JCWQ 05vNFLUxcSoDGCiOOgZCgFwplcvTriQhw0CqQifaiVEYVIIWcxJRIzQicIFoFbZi SCCZW9RpeI9rAiX2VbWaBkNrghpy2V/CKyjTQWRXwnL9pDMGKAQJw2ITFBAbszYs XBde0TUjCTyfn4/MUgsOmGldbHUYWYFie7t9BWdkohR5cEpAYXMQm5AtXNgTxjH8 eQjHkMtJEZ+A/fkaFC93UV/vWaEzrOs48tmlHMqWHfIghxc9iwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMe+Xdrj9arXgoqWDP6nwlK9V1KZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWFiOGVmZWUtZGUwMy0z ZjM1LWExYWMtNzBhMTdiZDIzYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaP/0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANrT00wxuT2lb4JOb/VyXCGIWD68R0YupDTUqJUaTYLhtW/jPi3K sWYIc04hNTkMtkrFhS5PyUtc+ZXex47EaG/uAJWDqgDf9AqUf6u/s+ntv8sBTcsA j5UuDIrRdmPuWi8naHRQcJQopLXAsjuIihrY5WSvy3z/VsQ6XWj/18FwhcRsvn9+ tFFZxZnAmaB0uQpiu3wx2MJkSSUmOLQ0A6vfPWdspnNBxI3Mp91hmSimkA2EYLpE 5UJL/6ErvOnWstFJdAKozhgxXN+o83LDneCPB5O100gDHZIR2bxUXAGWt9A3ZFFK vbAH8IcjenCvH9kvu7cOTKCYtJqbDTQMcUU= -----END CERTIFICATE-----Generated at Fri Oct 24 08:27:04 2025 by rpki-client