$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa File: 3526d53a-51ac-37b2-9014-a3209df5c50b.roa (raw, json) Hash identifier: F7F+gyZWmvAmOlyZ81l6n3lHWhYEgRbXq7a5kMT3DLU= Subject key identifier: E2:C5:2F:B5:E6:92:E9:56:B4:7E:B4:CB:9A:60:72:85:E0:40:8A:BC Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B4FDC743A47878B8B6D8A1280 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 174 IP address blocks: 2001:49f0:d0ad::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:74:3a:47:87:8b:8b:6d:8a:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=641658b3-0bf5-4d61-b5dc-7efa1d68f4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ae:9c:3d:5b:50:7a:a9:01:94:64:a1:03:8d: fc:5f:0a:fa:a6:8a:aa:ca:22:4d:31:7b:73:56:2e: 8e:f7:3b:5e:b1:45:c3:1e:4b:ce:dc:1a:01:f3:82: 75:d1:75:b2:5a:8c:58:e2:2b:c5:f0:99:a9:55:3d: 9e:c0:36:c5:e6:9f:37:e4:c8:80:e1:20:f9:33:68: a2:68:6d:c8:76:b0:99:20:cc:9f:83:c1:fc:ec:9a: 8f:49:db:64:ad:15:fb:1e:f4:ee:67:29:9c:3c:81: 25:59:c2:e2:66:2a:4b:b7:d2:5d:ea:8d:4e:2e:ec: 94:6d:4c:0d:61:e0:e2:79:0c:87:9d:1e:ab:db:70: e7:f5:62:76:b8:04:40:0b:9a:d4:44:66:a6:2b:89: e7:6c:c3:98:e7:e3:27:4a:f8:bf:02:fe:f2:75:c2: c1:d5:67:e7:c9:79:49:c4:bc:54:8d:a3:b3:ea:36: 56:cb:2a:93:90:cc:6e:13:ad:e9:3b:af:d1:bc:77: 97:e9:b6:21:2f:e1:2e:e1:c4:a7:8c:79:09:8a:9d: 2c:8b:96:1b:dc:91:f3:7f:9c:51:02:da:25:70:ff: 02:a1:78:5b:94:76:12:74:32:54:a6:f3:7f:5b:90: ec:9b:42:3b:31:8d:64:7b:8b:36:d7:d2:28:2c:39: 1c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C5:2F:B5:E6:92:E9:56:B4:7E:B4:CB:9A:60:72:85:E0:40:8A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d0ad::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:08:7f:43:7c:f9:b7:b8:02:82:be:7d:d5:77:29:6c:cf:6f: d6:63:50:ce:5f:83:c3:f1:f9:bc:88:ae:6a:2b:ab:a7:c4:b2: fb:fc:35:17:a5:f4:2c:fc:5b:66:40:33:f7:d8:fc:3f:3e:74: b8:00:53:77:d8:87:46:f0:d0:76:5c:8e:5a:be:92:c2:bf:8e: bb:7b:7f:f9:66:b5:a5:92:05:4f:f9:f7:11:27:48:00:21:48: 96:bf:b4:83:ac:d1:ac:04:91:ed:fd:c5:22:c0:2a:86:1e:a5: a0:25:f7:53:fe:c2:d1:46:1e:d2:9a:57:cc:9d:44:1a:7c:2f: 0b:a7:a4:43:c1:8b:0e:00:68:e5:d2:c5:b3:97:f7:40:ab:4d: 8c:63:7e:68:1b:b2:2c:14:34:5e:69:50:64:0b:42:35:77:18: 70:9b:6f:3a:21:47:c6:a7:ae:01:13:03:fa:c9:a3:a5:5f:67: cb:d6:e5:60:92:0c:7f:7c:5a:f9:0c:88:12:26:d0:9b:a7:1c: f6:7f:2f:df:3a:ee:37:c4:91:33:0d:9e:8b:58:a8:99:4c:7d: 4e:1c:4e:79:b5:19:f9:e1:25:b4:cb:e8:03:d8:5e:7d:f7:bc: 0c:b5:64:01:67:f4:cd:cd:35:61:aa:a0:fe:80:a5:c1:aa:8a: eb:25:2c:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtP3HQ6R4eLi22KEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk NjQxNjU4YjMtMGJmNS00ZDYxLWI1ZGMtN2VmYTFkNjhmNGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK6cPVtQeqkBlGShA438Xwr6poqqyiJNMXtz Vi6O9ztesUXDHkvO3BoB84J10XWyWoxY4ivF8JmpVT2ewDbF5p835MiA4SD5M2ii aG3IdrCZIMyfg8H87JqPSdtkrRX7HvTuZymcPIElWcLiZipLt9Jd6o1OLuyUbUwN YeDieQyHnR6r23Dn9WJ2uARAC5rURGamK4nnbMOY5+MnSvi/Av7ydcLB1WfnyXlJ xLxUjaOz6jZWyyqTkMxuE63pO6/RvHeX6bYhL+Eu4cSnjHkJip0si5Yb3JHzf5xR AtolcP8CoXhblHYSdDJUpvN/W5Dsm0I7MY1ke4s219IoLDkczQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLFL7XmkulWtH60y5pgcoXgQIq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzUyNmQ1M2EtNTFhYy0z N2IyLTkwMTQtYTMyMDlkZjVjNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJ8NCt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMIf0N8+be4AoK+fdV3KWzPb9ZjUM5fg8Px+byIrmorq6fEsvv8 NRel9Cz8W2ZAM/fY/D8+dLgAU3fYh0bw0HZcjlq+ksK/jrt7f/lmtaWSBU/59xEn SAAhSJa/tIOs0awEke39xSLAKoYepaAl91P+wtFGHtKaV8ydRBp8LwunpEPBiw4A aOXSxbOX90CrTYxjfmgbsiwUNF5pUGQLQjV3GHCbbzohR8anrgETA/rJo6VfZ8vW 5WCSDH98WvkMiBIm0JunHPZ/L9867jfEkTMNnotYqJlMfU4cTnm1GfnhJbTL6APY Xn33vAy1ZAFn9M3NNWGqoP6ApcGqiuslLHk= -----END CERTIFICATE-----Generated at Fri Oct 24 08:46:18 2025 by rpki-client