$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa File: d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa (raw, json) Hash identifier: SnS/EzcJRn8Re8yAolbC5iz2VobchMk/J/x/cr+6U7M= Subject key identifier: 19:E5:1D:33:A0:83:8C:0D:1E:0C:1C:AD:AC:8A:65:0E:3A:80:D0:73 Certificate issuer: /CN=7334a22a-f222-4457-889f-5478966ecf96 Certificate serial: 010D0C9F4328584B1806C363F0651658E8BE1E80 Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 397085 IP address blocks: 2620:13c:1000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c3:63:f0:65:16:58:e8:be:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=493a102e-8e2b-49f2-b60f-28c25a9ad18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:7e:e8:1d:90:f4:2b:8a:c1:d0:ec:8d:cd: 56:3e:99:fb:e0:d3:bb:20:30:9f:a2:48:cf:35:14: 4e:a2:c6:75:9b:38:82:36:b4:63:ab:cf:61:cb:95: 01:bf:26:bb:c9:4e:13:b6:2d:00:16:24:63:90:1b: 5c:4b:03:8e:21:08:f6:72:38:82:27:a0:b6:c4:5e: 36:ed:db:f8:d6:3e:0f:b4:08:43:c9:85:67:da:69: 03:6a:97:fb:e3:94:7b:ac:ae:a8:f4:bf:74:a4:d5: d8:d0:bb:0c:bb:8c:02:ad:49:b3:c8:8d:4a:39:6c: f2:96:6c:9a:64:83:fe:dc:4a:5f:16:ed:15:09:5f: 7d:15:9e:a8:05:e9:0f:12:be:b6:fd:41:45:8a:d4: a8:f1:89:85:34:36:6b:1f:9a:41:a3:48:80:35:7b: c6:07:4e:18:b9:f9:2c:4d:82:40:3a:d5:b1:fd:e1: 9f:9c:99:e2:dc:fe:e7:01:e5:29:f7:58:e0:a3:c0: 60:fd:c5:fc:28:f7:63:5e:a2:06:09:9e:be:1a:39: ed:50:9d:d7:45:6b:40:86:41:08:8c:37:44:aa:63: f7:97:27:8d:ab:9c:9a:99:73:e2:49:89:75:b9:d5: 16:a6:a1:a0:db:00:1b:93:96:ef:c3:16:38:dc:2c: cb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E5:1D:33:A0:83:8C:0D:1E:0C:1C:AD:AC:8A:65:0E:3A:80:D0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl X509v3 Authority Key Identifier: keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer sbgp-ipAddrBlock: critical IPv6: 2620:13c:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:27:b4:18:2c:a7:4a:13:df:78:87:6f:09:19:75:19:bf:4f: f7:62:3b:c1:18:d0:5a:80:2f:5f:cd:19:1d:d0:bb:96:3c:ae: 06:d2:61:ee:f1:37:0c:01:50:58:6f:7d:b2:a5:64:28:07:3b: 17:23:7b:5d:c4:99:13:81:36:c0:d9:99:08:db:fb:e6:b9:78: ee:b1:31:3c:42:bf:64:df:5e:07:96:f1:80:1a:ac:67:d4:aa: 52:2a:4a:25:f8:4e:d8:5b:6c:c5:0c:90:d8:c2:7e:dc:86:e9: fd:a2:9c:cf:96:00:3e:27:8d:dd:55:3f:ed:6a:77:ea:31:b2: 02:95:f2:52:40:82:1b:06:62:73:32:be:e8:1f:c9:c3:c9:68: 20:00:75:5e:24:90:34:82:38:95:d1:b3:39:3d:6a:5f:f5:f6: 32:e0:16:ee:0c:5d:81:88:40:57:df:56:43:97:78:a8:c8:4e: 4a:6b:7b:67:aa:a4:80:d6:a0:28:54:5f:52:cd:a3:3b:9a:c2: 04:a3:6c:9a:29:ec:78:c5:dc:48:57:45:e1:b4:e1:c0:7a:76: f6:b8:9d:bb:96:b5:c7:ea:1b:6c:13:c9:46:1e:b2:34:63:0e: f1:61:f5:79:8f:bf:c0:0c:bc:ba:ac:02:2f:1c:3f:80:7f:38: b2:b2:ea:96 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsYBsNj8GUWWOi+HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzNGEyMmEtZjIyMi00NDU3LTg4OWYtNTQ3ODk2NmVj Zjk2MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NDkzYTEwMmUtOGUyYi00OWYyLWI2MGYtMjhjMjVhOWFkMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig1+6B2Q9CuKwdDsjc1WPpn74NO7IDCfokjP NRROosZ1mziCNrRjq89hy5UBvya7yU4Tti0AFiRjkBtcSwOOIQj2cjiCJ6C2xF42 7dv41j4PtAhDyYVn2mkDapf745R7rK6o9L90pNXY0LsMu4wCrUmzyI1KOWzylmya ZIP+3EpfFu0VCV99FZ6oBekPEr62/UFFitSo8YmFNDZrH5pBo0iANXvGB04Yufks TYJAOtWx/eGfnJni3P7nAeUp91jgo8Bg/cX8KPdjXqIGCZ6+GjntUJ3XRWtAhkEI jDdEqmP3lyeNq5yamXPiSYl1udUWpqGg2wAbk5bvwxY43CzLXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBnlHTOgg4wNHgwcrayKZQ46gNBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0 YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4OTY2ZWNmOTYvZDA5NDM1YzktYzY2ZS0z YTY5LWEyY2MtNDJkMjlhOWMzNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMzNGEyMmEtZjIyMi00NDU3LTg4 OWYtNTQ3ODk2NmVjZjk2LzczMzRhMjJhLWYyMjItNDQ1Ny04ODlmLTU0Nzg5NjZl Y2Y5Ni5jcmwwHwYDVR0jBBgwFoAUxD6lHNb69S8W1kOiw33sM4//SG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4 OTY2ZWNmOTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABPBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcye0GCynShPfeIdvCRl1Gb9P92I7wRjQWoAvX80ZHdC7ljyuBtJh 7vE3DAFQWG99sqVkKAc7FyN7XcSZE4E2wNmZCNv75rl47rExPEK/ZN9eB5bxgBqs Z9SqUipKJfhO2FtsxQyQ2MJ+3Ibp/aKcz5YAPieN3VU/7Wp36jGyApXyUkCCGwZi czK+6B/Jw8loIAB1XiSQNII4ldGzOT1qX/X2MuAW7gxdgYhAV99WQ5d4qMhOSmt7 Z6qkgNagKFRfUs2jO5rCBKNsminseMXcSFdF4bThwHp29ridu5a1x+obbBPJRh6y NGMO8WH1eY+/wAy8uqwCLxw/gH84srLqlg== -----END CERTIFICATE-----Generated at Sat Sep 20 09:01:44 2025 by rpki-client