$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/91a6b8e0-6501-3351-9a16-39a5680163e6.roa File: 91a6b8e0-6501-3351-9a16-39a5680163e6.roa (raw, json) Hash identifier: A2DT2dDOzTN3Z6KNQx+q8kKOnzzqUcGXbkRZAax9UgY= Subject key identifier: 75:67:90:9C:E0:E1:E5:7D:AB:A0:23:F7:DA:5E:07:B6:A5:5C:CB:0E Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584B33F1A79574FACF2F86BAAD00 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/91a6b8e0-6501-3351-9a16-39a5680163e6.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 7850 IP address blocks: 2001:1818::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a7:95:74:fa:cf:2f:86:ba:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=ff4e61fd-5d22-4577-9c9c-afdd7ec821b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:17:c8:a1:27:df:69:84:df:39:76:c3:f7:20: 76:c3:1e:c9:b1:80:ba:cd:0b:88:9f:5a:ce:e4:c4: 9b:49:be:5b:96:c6:c0:78:7a:aa:20:e5:3f:5c:4d: b2:39:f4:a6:e0:a6:44:9c:20:4a:fc:b7:e5:e2:f2: 81:7a:e4:78:fe:cb:90:8b:74:d3:0c:6f:d0:c4:7b: ca:c0:e7:44:ea:46:73:3b:78:74:db:49:ee:f4:54: be:12:0a:2a:2b:03:f8:b4:15:28:7a:34:fc:54:fd: e5:18:36:cf:a0:7f:aa:b7:f2:ff:3a:68:f8:21:fd: 5f:9a:c1:fe:f1:16:65:c3:0a:d0:a1:62:5f:cb:3d: 70:c0:74:97:69:17:47:7e:dd:f3:5c:c7:b9:3d:94: 0a:48:d2:a5:74:3d:4e:f7:23:37:be:5c:55:bb:6d: 54:bb:d7:03:43:43:df:9e:f1:fe:01:b0:8f:c8:ca: 5e:8b:62:4e:5b:13:2d:a8:19:ce:b3:da:f2:97:d2: 0c:c9:e1:4b:86:ff:8b:ae:7b:8f:4d:73:4b:ac:b4: 77:bf:81:82:65:e6:e3:24:49:88:7f:2e:63:27:8d: 68:ee:62:74:6b:11:f6:ea:0b:70:7b:8a:d3:a7:f1: 60:7d:9b:fd:25:78:a4:5b:07:1f:32:eb:06:9c:65: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:67:90:9C:E0:E1:E5:7D:AB:A0:23:F7:DA:5E:07:B6:A5:5C:CB:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/91a6b8e0-6501-3351-9a16-39a5680163e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv6: 2001:1818::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:07:4c:5e:f1:ff:55:06:0f:21:65:a8:b8:6a:04:c2:df:93: 25:63:05:0c:6c:01:54:4e:79:a4:26:b1:1b:99:51:58:db:f5: 3d:db:85:51:ed:15:f3:32:b1:95:94:6f:cf:64:8c:79:23:cd: ae:52:9b:33:1c:26:df:87:5d:07:cd:10:bb:95:85:40:3f:1f: 84:b8:3b:c4:c0:8a:64:37:3e:94:7f:e9:89:03:f8:9e:1d:9d: 00:34:5b:6f:f0:03:70:a1:b5:5a:53:72:2d:3b:c3:3d:5e:b9: 2b:8c:77:96:de:31:04:04:39:4f:26:c6:e7:69:e0:d6:e5:9d: 68:96:ac:75:7a:91:54:38:f6:db:e1:1d:dd:bd:38:44:de:9f: e6:a0:69:1e:d3:98:87:5e:6f:e0:5e:01:8d:8d:29:4f:5a:a8: 63:d7:44:40:15:e3:d6:56:b6:af:de:af:dc:80:8f:46:c2:8a: 42:0f:6f:91:15:ae:90:43:db:b2:b7:d1:50:bb:ac:c2:06:d4: 7a:71:f7:b5:a8:2f:d9:d8:ad:68:c5:75:3a:52:4d:5d:e6:77: 76:77:1a:a2:be:a6:31:09:21:83:c3:07:91:8d:c0:98:03:72: cd:e8:bf:08:7d:9e:67:2c:fa:e3:8f:80:c5:06:c9:19:54:30: 24:33:fd:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8aeVdPrPL4a6rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk ZmY0ZTYxZmQtNWQyMi00NTc3LTljOWMtYWZkZDdlYzgyMWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhfIoSffaYTfOXbD9yB2wx7JsYC6zQuIn1rO 5MSbSb5blsbAeHqqIOU/XE2yOfSm4KZEnCBK/Lfl4vKBeuR4/suQi3TTDG/QxHvK wOdE6kZzO3h020nu9FS+EgoqKwP4tBUoejT8VP3lGDbPoH+qt/L/Omj4If1fmsH+ 8RZlwwrQoWJfyz1wwHSXaRdHft3zXMe5PZQKSNKldD1O9yM3vlxVu21Uu9cDQ0Pf nvH+AbCPyMpei2JOWxMtqBnOs9ryl9IMyeFLhv+LrnuPTXNLrLR3v4GCZebjJEmI fy5jJ41o7mJ0axH26gtwe4rTp/FgfZv9JXikWwcfMusGnGVmlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHVnkJzg4eV9q6Aj99peB7alXMsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvOTFhNmI4ZTAtNjUwMS0z MzUxLTlhMTYtMzlhNTY4MDE2M2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYGDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0B0xe8f9VBg8hZai4agTC35MlYwUMbAFUTnmkJrEbmVFY2/U924VR 7RXzMrGVlG/PZIx5I82uUpszHCbfh10HzRC7lYVAPx+EuDvEwIpkNz6Uf+mJA/ie HZ0ANFtv8ANwobVaU3ItO8M9XrkrjHeW3jEEBDlPJsbnaeDW5Z1olqx1epFUOPbb 4R3dvThE3p/moGke05iHXm/gXgGNjSlPWqhj10RAFePWVrav3q/cgI9GwopCD2+R Fa6QQ9uyt9FQu6zCBtR6cfe1qC/Z2K1oxXU6Uk1d5nd2dxqivqYxCSGDwweRjcCY A3LN6L8IfZ5nLPrjj4DFBskZVDAkM/1G -----END CERTIFICATE-----Generated at Tue Sep 16 11:22:18 2025 by rpki-client