$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/207c8a94-e8cd-3236-a3df-59a05570c4ee.roa File: 207c8a94-e8cd-3236-a3df-59a05570c4ee.roa (raw, json) Hash identifier: gbINiIhwxqjdEPZd7S3ca3lSXhpmsho8BG4onTasTKI= Subject key identifier: E2:6D:0A:7D:D1:FD:F1:26:C6:E8:36:78:4E:F0:3F:E5:90:5E:B3:7A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5141B83605916E81ECEFBA80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/207c8a94-e8cd-3236-a3df-59a05570c4ee.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 7861 IP address blocks: 2001:56a:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:b8:36:05:91:6e:81:ec:ef:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=fd1a7004-d302-4da0-922d-37a7ee00a573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6e:5d:08:fc:3b:d3:c2:36:71:56:6d:c7:f1: 06:10:be:b3:b0:f2:19:24:3c:95:56:3f:a1:65:18: 08:c0:b3:50:79:0c:da:bc:57:8c:ba:df:32:a1:b5: 44:f3:47:18:4f:24:24:13:7d:4d:ea:89:a6:b9:0f: ae:31:75:14:6b:71:1b:e6:62:73:b7:e5:e6:72:30: 99:ac:af:f7:f4:39:13:48:46:92:19:c0:80:92:2f: d4:db:4f:68:16:fa:f5:40:fb:58:59:8b:a0:7f:3c: 40:25:d2:64:34:b0:4b:4e:f6:c5:a7:5a:0a:eb:a0: 3f:4e:c6:48:86:18:6d:30:c4:f0:d3:e3:be:c9:c6: 11:dd:e5:1c:c0:45:f1:86:5d:8d:7a:92:fd:4e:ec: 26:35:0c:2f:9d:88:46:76:7e:55:68:1c:d0:31:cf: f9:72:f0:28:16:63:fa:2f:09:2b:8a:bb:68:ee:1a: b1:28:59:98:9a:10:33:2f:29:d5:97:07:4d:33:46: bc:87:8b:30:6b:00:2f:0a:34:ae:77:fb:b5:a8:70: b6:3d:c4:5e:1e:d8:cf:ae:07:a4:0a:56:64:71:9f: 9f:83:9c:87:d1:8a:81:1f:da:7d:21:7a:ea:17:68: a0:eb:71:9a:46:73:4e:bc:19:ec:ac:c9:9a:29:55: 14:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6D:0A:7D:D1:FD:F1:26:C6:E8:36:78:4E:F0:3F:E5:90:5E:B3:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/207c8a94-e8cd-3236-a3df-59a05570c4ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:21:d5:19:93:f5:88:5b:75:8c:80:12:e8:fb:7b:1e:6b:dc: 8e:eb:1a:6b:7c:93:38:3f:61:c3:b5:3a:7a:7d:e9:b6:53:65: f1:7d:db:1a:24:fc:93:64:f0:ad:6b:2a:90:32:eb:7f:fa:24: a2:35:2a:a4:5f:c6:bc:11:b6:5e:d5:ee:08:d7:0e:40:fd:a4: 44:84:e3:d9:14:f1:01:52:b1:ab:9d:98:30:13:f4:5d:a1:ec: 6f:13:85:6a:67:39:03:5d:1f:6e:3d:29:75:93:76:29:00:54: 6d:57:a0:79:07:48:3f:85:fb:ec:15:c3:5d:4a:fa:62:1d:60: 1a:03:dc:33:f3:12:ba:ea:ab:70:8c:b3:c7:17:d2:dd:5d:c0: da:e9:f9:14:06:d7:ed:48:b2:50:b6:51:b9:89:ca:df:3f:9c: e1:ed:de:ef:09:5e:53:b9:7b:cd:7e:ce:6d:1f:bb:a0:dd:63: 2d:3d:f5:95:78:18:61:34:da:ba:fb:4c:8b:96:e0:b7:f2:f2: 18:50:9d:df:5d:59:25:c5:62:9c:b0:68:6f:f0:1c:51:ff:49: 35:df:e4:58:c1:2c:95:20:d4:8e:0d:b6:96:2f:0b:ed:f9:50: d9:b8:9d:55:dd:07:e8:fb:da:97:97:14:ce:d0:80:c0:11:25: 48:2f:6c:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtRQbg2BZFugezvuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ZmQxYTcwMDQtZDMwMi00ZGEwLTkyMmQtMzdhN2VlMDBhNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW5dCPw708I2cVZtx/EGEL6zsPIZJDyVVj+h ZRgIwLNQeQzavFeMut8yobVE80cYTyQkE31N6ommuQ+uMXUUa3Eb5mJzt+XmcjCZ rK/39DkTSEaSGcCAki/U209oFvr1QPtYWYugfzxAJdJkNLBLTvbFp1oK66A/TsZI hhhtMMTw0+O+ycYR3eUcwEXxhl2NepL9TuwmNQwvnYhGdn5VaBzQMc/5cvAoFmP6 Lwkrirto7hqxKFmYmhAzLynVlwdNM0a8h4swawAvCjSud/u1qHC2PcReHtjPrgek ClZkcZ+fg5yH0YqBH9p9IXrqF2ig63GaRnNOvBnsrMmaKVUUnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOJtCn3R/fEmxug2eE7wP+WQXrN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjA3YzhhOTQtZThjZC0z MjM2LWEzZGYtNTlhMDU1NzBjNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFagAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkh1RmT9YhbdYyAEuj7ex5r3I7rGmt8kzg/YcO1Onp96bZTZfF9 2xok/JNk8K1rKpAy63/6JKI1KqRfxrwRtl7V7gjXDkD9pESE49kU8QFSsaudmDAT 9F2h7G8ThWpnOQNdH249KXWTdikAVG1XoHkHSD+F++wVw11K+mIdYBoD3DPzErrq q3CMs8cX0t1dwNrp+RQG1+1IslC2UbmJyt8/nOHt3u8JXlO5e81+zm0fu6DdYy09 9ZV4GGE02rr7TIuW4Lfy8hhQnd9dWSXFYpywaG/wHFH/STXf5FjBLJUg1I4NtpYv C+35UNm4nVXdB+j72peXFM7QgMARJUgvbKI= -----END CERTIFICATE-----Generated at Fri Oct 24 08:22:18 2025 by rpki-client