$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa File: db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa (raw, json) Hash identifier: xHblGBNPFBAA0+TbKeetKDCGzA9elUm4c21WyEl1HHk= Subject key identifier: 46:53:C1:5B:9A:40:72:AB:25:CD:1F:F1:0F:F3:9E:43:8F:57:BD:BA Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73BE0DE108E9789103340 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:56b:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3b:e0:de:10:8e:97:89:10:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=e324c3b1-e4e2-44a9-867c-c154f05f660d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e7:4f:35:f0:31:cf:1e:c6:46:48:76:9f:7f: 73:69:0d:cd:47:d9:52:da:d7:b0:8d:36:05:c1:fa: bc:af:e1:13:26:b5:5f:22:bd:5a:d8:d7:0b:01:a1: 49:ad:d5:ee:bf:4c:b1:25:c5:9a:57:ed:ed:79:72: 0d:88:2d:e1:9f:0b:64:b2:ed:08:2a:00:02:50:f5: 73:3f:ba:a8:95:15:7e:9b:94:c6:ba:60:82:df:b1: 8f:57:19:c7:8e:06:75:4b:e5:6b:54:50:da:58:f9: a9:a5:25:73:0d:ce:5f:19:2c:bd:2b:39:25:01:14: 8a:49:cf:e7:9c:c9:68:f5:be:b1:b6:62:b0:a5:e7: 18:98:10:c1:58:d8:ec:53:80:9c:3a:2f:f1:bd:65: 7a:dc:62:f3:c8:53:46:6f:53:6a:34:b0:3c:94:4a: 39:34:f0:0b:be:b8:87:ea:b2:de:ec:6f:c6:13:6d: 65:05:6e:71:84:88:ea:a4:ba:3b:1d:09:b5:17:92: aa:84:4e:7e:bc:08:42:2a:37:3c:f5:fd:c9:13:f1: 9a:f6:96:28:d0:1e:01:da:95:4b:a2:b4:a0:59:43: cf:61:33:20:e0:fa:24:ca:3d:9a:12:bd:6b:ca:e3: 34:8d:d1:4c:21:62:e1:79:63:30:2d:47:c4:16:01: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:53:C1:5B:9A:40:72:AB:25:CD:1F:F1:0F:F3:9E:43:8F:57:BD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:5000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:97:65:26:9f:d4:43:6e:75:0d:de:2a:3e:64:8e:0e:7b:62: 1f:e6:da:ef:05:7f:c6:3e:ca:89:f9:f8:c5:b8:c3:88:f2:bd: 49:fd:dc:44:c5:c0:c2:3d:a3:30:31:43:9b:50:72:77:ee:fa: 0a:83:b8:77:f3:e9:09:04:84:27:1d:da:75:f0:7e:21:e3:78: 89:62:1e:46:f9:62:84:bc:21:e3:eb:25:8c:fd:d1:48:ab:34: 4f:46:ae:62:dd:3f:40:a0:5b:dc:9a:7d:98:4e:c5:f3:49:f9: 39:ee:ca:69:06:4c:98:0e:31:55:ff:8d:40:c7:d7:c5:33:98: 07:bc:73:e6:fb:60:0b:c3:11:c9:c1:9b:78:e0:cd:c0:5c:f3: 3a:88:e5:a8:70:e5:50:1b:9d:4a:76:d0:4e:7a:af:3b:90:b8: 3f:41:d3:be:65:61:29:0f:ae:91:1b:14:35:a0:db:b0:87:0e: 41:03:23:fb:fd:82:8b:d6:a4:e5:b6:0e:02:83:1d:0f:51:1f: de:18:4c:57:01:f7:72:aa:27:cf:30:b0:ff:41:9c:e6:51:55: 2f:c5:e0:0b:04:b1:87:5f:53:00:5b:ef:0e:5a:4a:2d:f0:b3: b8:58:ba:1c:85:51:55:ff:5a:4b:ae:46:11:c9:4b:69:5a:83: 64:e8:23:c2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtSpzvg3hCOl4kQM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZTMyNGMzYjEtZTRlMi00NGE5LTg2N2MtYzE1NGYwNWY2NjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4edPNfAxzx7GRkh2n39zaQ3NR9lS2tewjTYF wfq8r+ETJrVfIr1a2NcLAaFJrdXuv0yxJcWaV+3teXINiC3hnwtksu0IKgACUPVz P7qolRV+m5TGumCC37GPVxnHjgZ1S+VrVFDaWPmppSVzDc5fGSy9KzklARSKSc/n nMlo9b6xtmKwpecYmBDBWNjsU4CcOi/xvWV63GLzyFNGb1NqNLA8lEo5NPALvriH 6rLe7G/GE21lBW5xhIjqpLo7HQm1F5KqhE5+vAhCKjc89f3JE/Ga9pYo0B4B2pVL orSgWUPPYTMg4Pokyj2aEr1ryuM0jdFMIWLheWMwLUfEFgG0MwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEZTwVuaQHKrJc0f8Q/znkOPV726MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGI0Zjc2NDgtZWQyNy0z MjBlLWI5YmQtM2JjNjMwZTFiNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEIAEFa1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJpdlJp/UQ251Dd4qPmSODntiH+ba7wV/xj7Kifn4xbjDiPK9Sf3c RMXAwj2jMDFDm1Byd+76CoO4d/PpCQSEJx3adfB+IeN4iWIeRvlihLwh4+sljP3R SKs0T0auYt0/QKBb3Jp9mE7F80n5Oe7KaQZMmA4xVf+NQMfXxTOYB7xz5vtgC8MR ycGbeODNwFzzOojlqHDlUBudSnbQTnqvO5C4P0HTvmVhKQ+ukRsUNaDbsIcOQQMj +/2Ci9ak5bYOAoMdD1Ef3hhMVwH3cqonzzCw/0Gc5lFVL8XgCwSxh19TAFvvDlpK LfCzuFi6HIVRVf9aS65GEclLaVqDZOgjwg== -----END CERTIFICATE-----Generated at Fri Oct 24 08:22:08 2025 by rpki-client