$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa File: a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa (raw, json) Hash identifier: 9HbG78DGSl/QDbvxUaL7jjh1W8Qt8OOUr3XLrT9mk1w= Subject key identifier: FE:B9:D4:DB:20:AE:58:4E:44:C2:43:D1:6C:3F:96:50:04:26:1B:00 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73AF48A51FF5D5FB6C900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:56b:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3a:f4:8a:51:ff:5d:5f:b6:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=354ace0e-86ac-40f6-8fcd-295f69e9e800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:68:4a:25:42:7e:21:9b:31:30:7c:b6:6a: 23:55:3b:bb:84:43:ca:cf:90:27:32:42:a5:4f:af: 61:bb:f1:c2:68:91:fc:83:d2:7a:f5:81:31:32:a7: 86:12:11:c7:ff:9e:ce:d0:4c:08:8f:ff:cf:31:d7: 9a:cb:5c:73:8e:f9:ac:70:1a:60:a5:55:3d:74:87: 43:e4:94:6a:36:7a:54:1f:64:50:fb:83:2c:c2:e7: 55:78:94:6d:4f:ed:a0:f7:89:30:3e:93:b3:e5:79: 9f:c8:b0:e5:0c:39:8c:7e:c9:68:da:de:85:4e:c6: 9f:39:04:29:d5:06:f2:b9:e9:98:04:d6:5f:1b:10: a5:14:51:61:3b:cd:e6:37:e9:43:10:1b:91:71:c1: f4:47:56:fc:f7:81:5b:e1:18:93:69:84:5b:6c:5f: be:cc:b4:43:16:a4:c5:d2:88:d3:fb:99:74:cb:cc: b3:96:36:91:9b:dc:14:f4:37:9b:30:80:10:dc:76: 0b:5e:96:1c:a5:19:15:ce:18:84:ea:ec:f9:9b:55: ca:46:87:67:d8:9a:a3:59:d2:16:51:e1:2c:93:15: a4:1f:61:48:b6:72:c6:3a:30:06:1b:8e:ee:85:87: 57:70:fd:65:3b:8b:56:73:e4:36:04:d7:11:4b:d5: 00:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B9:D4:DB:20:AE:58:4E:44:C2:43:D1:6C:3F:96:50:04:26:1B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:2a:fa:1b:fb:db:19:b5:27:0f:58:dc:2a:1f:10:d5:bc:03: 50:90:c7:11:70:48:51:6b:29:8a:94:e9:5f:89:3f:33:2a:33: 59:6c:bf:ba:67:b0:d5:36:05:b9:f3:92:b6:cb:2f:04:e0:9a: d5:95:ef:02:98:59:6c:d2:eb:44:31:42:8a:e3:68:27:8b:d6: 96:4e:e5:00:45:48:67:3c:0b:a6:d8:43:79:e1:a0:d1:7c:5d: 1d:57:2e:52:0f:15:58:00:05:70:47:c8:e7:30:db:8a:e8:1f: b7:37:d4:f7:95:3c:13:c1:ea:b4:a5:8f:a1:9b:99:4e:15:35: 19:5c:50:7c:49:b2:cf:e8:50:d5:5e:3c:3d:b3:f0:d5:d3:24: b5:3c:52:1f:58:6b:fa:b7:a5:55:36:54:7d:07:d5:16:5d:84: 78:45:bb:c7:ad:0a:8a:a6:8f:06:ed:fd:b1:c8:c6:6d:9a:e7: e3:3d:ed:04:ff:bc:e5:29:2b:87:2a:d2:2c:87:83:0b:c5:3f: 74:22:73:31:05:f9:b6:3b:1b:2c:99:f6:04:94:6d:0e:26:a7: b8:51:f0:93:96:bd:95:d8:23:0c:94:9f:bd:84:da:ba:3d:c5: 4c:64:30:42:f1:b0:0c:26:4b:e1:30:18:50:b6:d8:c0:20:f9: 8e:1e:fa:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzr0ilH/XV+2yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MzU0YWNlMGUtODZhYy00MGY2LThmY2QtMjk1ZjY5ZTllODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhpoSiVCfiGbMTB8tmojVTu7hEPKz5AnMkKl T69hu/HCaJH8g9J69YExMqeGEhHH/57O0EwIj//PMdeay1xzjvmscBpgpVU9dIdD 5JRqNnpUH2RQ+4MswudVeJRtT+2g94kwPpOz5XmfyLDlDDmMfslo2t6FTsafOQQp 1QbyuemYBNZfGxClFFFhO83mN+lDEBuRccH0R1b894Fb4RiTaYRbbF++zLRDFqTF 0ojT+5l0y8yzljaRm9wU9DebMIAQ3HYLXpYcpRkVzhiE6uz5m1XKRodn2JqjWdIW UeEskxWkH2FItnLGOjAGG47uhYdXcP1lO4tWc+Q2BNcRS9UAewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP651NsgrlhORMJD0Ww/llAEJhsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTRhNGJiMTEtMjZkYS0z MzBhLWJiNWItZGUyODAyZmU3NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFawAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAN8q+hv72xm1Jw9Y3CofENW8A1CQxxFwSFFrKYqU6V+JPzMqM1ls v7pnsNU2BbnzkrbLLwTgmtWV7wKYWWzS60QxQorjaCeL1pZO5QBFSGc8C6bYQ3nh oNF8XR1XLlIPFVgABXBHyOcw24roH7c31PeVPBPB6rSlj6GbmU4VNRlcUHxJss/o UNVePD2z8NXTJLU8Uh9Ya/q3pVU2VH0H1RZdhHhFu8etCoqmjwbt/bHIxm2a5+M9 7QT/vOUpK4cq0iyHgwvFP3QiczEF+bY7GyyZ9gSUbQ4mp7hR8JOWvZXYIwyUn72E 2ro9xUxkMELxsAwmS+EwGFC22MAg+Y4e+vA= -----END CERTIFICATE-----Generated at Fri Oct 24 10:49:55 2025 by rpki-client