$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa File: 67ad4caf-49f0-33da-b621-fa3822cdc420.roa (raw, json) Hash identifier: 9z8mA/m3fs7m8KjXc6JkmCPKxv436JNSYR9YOdhr3Jw= Subject key identifier: 2D:67:2B:D1:E9:9E:9E:73:25:CA:84:1D:DE:58:49:1F:45:27:51:D6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73ABB171A27AA2E4D9480 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:568:203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3a:bb:17:1a:27:aa:2e:4d:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=8415c5ec-bd69-4201-8db0-ebbd3dfa67e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ec:b7:82:49:5f:0f:fb:72:76:90:3b:38:61: 99:f4:83:8c:e7:08:b3:6a:d6:33:95:7e:f9:0b:f4: 03:fd:7c:e7:3e:1e:45:43:22:51:22:a9:11:32:e6: 05:48:2c:30:4d:48:ec:04:bd:9d:8e:63:3a:ab:da: 64:22:e4:f3:86:9a:6b:2e:96:04:73:eb:8b:35:54: f1:41:a9:e4:06:d0:67:b3:28:99:71:c3:26:2e:8b: e0:e4:84:6e:c9:20:a6:15:27:d9:39:d5:1f:a6:40: 58:8b:e9:50:7d:b7:de:0b:00:0d:dd:87:83:5c:5a: bc:2e:f3:7e:62:a2:63:90:fc:7b:a7:fd:c2:29:90: b7:98:5c:66:15:cd:60:90:1a:84:9a:e3:90:92:e4: 72:12:58:d4:13:12:46:f3:7f:69:32:2c:38:b6:e9: 04:be:c2:80:00:a1:d4:f6:fc:84:9b:6f:cb:23:b6: 3e:53:22:62:1a:35:a1:fb:5f:68:47:9f:70:a6:8f: fa:2f:c8:12:7f:a0:62:a0:f9:ed:fe:51:ed:3f:33: 68:8f:79:e8:92:ad:73:06:c3:79:61:09:88:09:e8: d1:39:cc:ed:82:b7:c3:24:3f:d5:1a:2b:16:72:5a: 29:e6:8f:f1:d4:41:b4:f6:de:61:c5:c8:54:04:1b: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:67:2B:D1:E9:9E:9E:73:25:CA:84:1D:DE:58:49:1F:45:27:51:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:203::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3f:fa:0e:4f:d9:d6:bb:19:d6:f4:ab:fb:8f:6e:0e:88:97: d2:61:f5:d8:08:c6:43:0b:c6:3d:f5:f8:a0:81:1d:34:8f:13: 21:5d:ba:54:04:f1:6c:0d:76:cc:f9:32:10:cb:b6:61:86:ca: c9:fc:4f:10:37:1f:1a:57:6c:2e:16:95:6e:04:b1:28:d8:ee: 8f:48:81:f9:70:8c:c7:76:42:9b:e7:df:f3:09:5f:d1:14:b5: fb:72:45:65:e0:d5:10:5b:08:4c:ef:0a:69:05:b1:4d:e6:8f: f1:f0:f4:90:7c:3c:b2:5c:57:14:4f:a1:43:31:b6:75:b7:a8: 19:78:fa:91:88:e4:3b:09:21:93:f2:2e:26:30:5e:5e:da:7e: 26:8d:82:d3:d4:80:bc:bf:f9:eb:87:6f:46:2b:f9:67:cc:71: 5b:a5:cf:a3:40:10:b1:ef:cb:f6:e5:a6:31:92:ca:2d:4c:04: de:a2:05:7f:01:ad:89:4f:6a:1f:20:f1:bf:80:cf:40:08:6e: c8:18:a6:f9:8c:d8:0f:c8:c1:79:96:ef:41:fb:fc:79:10:4e: bb:38:90:b6:5f:62:58:45:29:5a:43:17:87:3d:02:0b:b8:a8: 07:e5:a5:26:88:d4:2e:d5:81:aa:d2:52:18:44:5e:3b:8f:eb: b8:18:16:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzq7Fxonqi5NlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ODQxNWM1ZWMtYmQ2OS00MjAxLThkYjAtZWJiZDNkZmE2N2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOy3gklfD/tydpA7OGGZ9IOM5wizatYzlX75 C/QD/XznPh5FQyJRIqkRMuYFSCwwTUjsBL2djmM6q9pkIuTzhpprLpYEc+uLNVTx QankBtBnsyiZccMmLovg5IRuySCmFSfZOdUfpkBYi+lQfbfeCwAN3YeDXFq8LvN+ YqJjkPx7p/3CKZC3mFxmFc1gkBqEmuOQkuRyEljUExJG839pMiw4tukEvsKAAKHU 9vyEm2/LI7Y+UyJiGjWh+19oR59wpo/6L8gSf6BioPnt/lHtPzNoj3nokq1zBsN5 YQmICejROcztgrfDJD/VGisWclop5o/x1EG09t5hxchUBBtTZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC1nK9Hpnp5zJcqEHd5YSR9FJ1HWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjdhZDRjYWYtNDlmMC0z M2RhLWI2MjEtZmEzODIyY2RjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAID MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFo/+g5P2da7Gdb0q/uPbg6Il9Jh9dgIxkMLxj31+KCBHTSPEyFd ulQE8WwNdsz5MhDLtmGGysn8TxA3HxpXbC4WlW4EsSjY7o9IgflwjMd2Qpvn3/MJ X9EUtftyRWXg1RBbCEzvCmkFsU3mj/Hw9JB8PLJcVxRPoUMxtnW3qBl4+pGI5DsJ IZPyLiYwXl7afiaNgtPUgLy/+euHb0Yr+WfMcVulz6NAELHvy/blpjGSyi1MBN6i BX8BrYlPah8g8b+Az0AIbsgYpvmM2A/IwXmW70H7/HkQTrs4kLZfYlhFKVpDF4c9 Agu4qAflpSaI1C7VgarSUhhEXjuP67gYFoM= -----END CERTIFICATE-----Generated at Fri Oct 24 08:30:31 2025 by rpki-client