$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa File: 2909e0dc-bd8d-38dc-bae9-335626f3845e.roa (raw, json) Hash identifier: jz4xCBOTzTA6xfFKs7tWANw+o5JjeSOXW0kD7oKv3o0= Subject key identifier: 6A:E6:1B:F1:54:E6:B6:DA:06:1B:0E:7C:82:93:1C:65:5E:33:39:E1 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584B59A1C836408A1E0750F34300 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 36007 IP address blocks: 2604:bc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c8:36:40:8a:1e:07:50:f3:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=bb229d97-c559-4166-ae30-30f0e232147c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:76:40:29:50:37:7e:92:06:d7:43:97:df: 17:db:70:58:a5:88:99:23:50:c5:24:70:45:e5:e9: b7:cf:ef:1e:29:4c:87:9b:4c:a4:97:6c:3f:e1:ad: a9:a6:9b:f5:05:f5:06:8e:de:f6:e1:47:ae:a0:ef: c3:98:a3:3e:21:c8:71:77:6e:e0:36:4f:8b:81:65: b9:fc:62:0f:c1:81:35:0f:4d:39:b6:f4:9f:97:c2: ff:28:c9:0d:fe:d3:0f:2b:3a:1c:df:3f:9b:63:08: dd:80:83:bb:a3:64:74:3a:32:cd:60:d1:9e:62:98: 92:af:78:40:54:dc:1d:91:f5:ea:43:a8:97:52:0c: 49:dc:8c:d1:a0:85:99:6a:5f:29:13:4b:8d:a3:52: 12:08:df:e4:11:d9:d3:ec:bb:5b:59:ee:d8:83:8d: c0:c2:02:0e:e0:68:18:6d:a6:bd:ef:88:6e:a1:92: 8f:d5:1d:d4:54:93:2a:42:84:e8:5a:45:79:20:f0: 5e:de:3d:dc:c7:fd:74:ae:b4:78:1a:6c:e9:6d:97: 5c:28:3b:de:58:f9:e0:99:aa:89:b3:95:ca:31:a3: bf:e3:11:7c:c0:b5:8f:a2:0e:74:25:74:94:c2:5f: 9b:43:43:fe:26:e2:49:84:02:54:64:58:09:78:a7: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E6:1B:F1:54:E6:B6:DA:06:1B:0E:7C:82:93:1C:65:5E:33:39:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv6: 2604:bc0:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d5:94:c4:e2:7b:84:c4:db:52:6f:81:67:c4:3c:3d:b9:5c: 43:3f:31:79:fd:6e:2c:98:2f:44:6a:67:da:5e:26:14:e4:48: 1a:b1:6f:dd:ef:d5:15:3d:52:ec:98:fa:ee:7c:6d:9b:1f:bb: 5f:7e:3d:65:9e:2f:f8:f6:07:b5:88:e6:99:0d:e5:86:8c:03: f1:17:43:fb:14:e2:90:91:53:27:49:8f:47:d1:c5:ae:7e:3d: 31:78:19:ed:cc:83:86:f2:3e:ba:39:e4:2b:f1:85:68:dd:4d: f3:47:d7:af:2b:f5:0f:f6:c5:bf:df:8b:82:8a:e8:77:a6:66: 82:fd:22:40:21:8b:e4:f7:c3:c6:c2:be:fe:99:43:47:a1:ac: 29:7e:b9:2d:a0:c1:8b:fd:7f:90:17:81:6d:78:76:8b:c1:4b: 95:5e:44:85:96:c3:ca:20:d8:6f:bd:02:80:51:b4:44:02:15: 0e:85:55:72:0e:61:6f:21:58:75:7e:11:c5:1c:55:1f:36:b7: eb:b7:40:fc:94:ca:67:6b:69:fe:e5:fb:1e:6b:ae:d8:0b:7b: 49:0c:f6:be:0d:27:58:b8:fd:5e:90:76:40:99:7c:a1:2b:4a: f4:7e:75:44:1f:7c:3c:2e:4a:89:5a:8c:f7:64:8b:68:91:42: bc:70:7e:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtZocg2QIoeB1DzQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk YmIyMjlkOTctYzU1OS00MTY2LWFlMzAtMzBmMGUyMzIxNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsR2QClQN36SBtdDl98X23BYpYiZI1DFJHBF 5em3z+8eKUyHm0ykl2w/4a2pppv1BfUGjt724UeuoO/DmKM+Ichxd27gNk+LgWW5 /GIPwYE1D005tvSfl8L/KMkN/tMPKzoc3z+bYwjdgIO7o2R0OjLNYNGeYpiSr3hA VNwdkfXqQ6iXUgxJ3IzRoIWZal8pE0uNo1ISCN/kEdnT7LtbWe7Yg43AwgIO4GgY baa974huoZKP1R3UVJMqQoToWkV5IPBe3j3cx/10rrR4GmzpbZdcKDveWPngmaqJ s5XKMaO/4xF8wLWPog50JXSUwl+bQ0P+JuJJhAJUZFgJeKfhEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGrmG/FU5rbaBhsOfIKTHGVeMznhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvMjkwOWUwZGMtYmQ4ZC0z OGRjLWJhZTktMzM1NjI2ZjM4NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQLwAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJzVlMTie4TE21JvgWfEPD25XEM/MXn9biyYL0RqZ9peJhTkSBqx b93v1RU9UuyY+u58bZsfu19+PWWeL/j2B7WI5pkN5YaMA/EXQ/sU4pCRUydJj0fR xa5+PTF4Ge3Mg4byPro55CvxhWjdTfNH168r9Q/2xb/fi4KK6HemZoL9IkAhi+T3 w8bCvv6ZQ0ehrCl+uS2gwYv9f5AXgW14dovBS5VeRIWWw8og2G+9AoBRtEQCFQ6F VXIOYW8hWHV+EcUcVR82t+u3QPyUymdraf7l+x5rrtgLe0kM9r4NJ1i4/V6QdkCZ fKErSvR+dUQffDwuSolajPdki2iRQrxwfrc= -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:15 2025 by rpki-client