$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/024857e3-4f35-3b28-bf21-f1f7dea1a391.roa File: 024857e3-4f35-3b28-bf21-f1f7dea1a391.roa (raw, json) Hash identifier: 2W9Jb6FK3KSYnwvhK+2z58Gl3uAY47CLmVPtsaLPp1s= Subject key identifier: 6C:6D:C1:3E:CB:98:A8:B5:41:17:7B:9E:EF:83:E5:A1:55:22:55:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD0CADD27E27A5E7FA3720 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/024857e3-4f35-3b28-bf21-f1f7dea1a391.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 2603:3014:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:0c:ad:d2:7e:27:a5:e7:fa:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=8137986b-0172-4e80-b278-723d4dc0eb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:49:c6:6a:83:01:bd:1f:3f:32:08:e8:e4:f5: 46:3c:63:f5:3b:72:0e:8e:f2:79:c3:b7:45:4f:e0: 85:98:40:46:de:6e:44:65:7b:de:2e:4a:0b:e5:5f: d1:f9:70:d5:36:78:ae:88:bf:17:4b:58:97:c2:a2: a1:ff:8e:90:bd:47:d2:e7:4b:cf:61:a6:74:14:c7: b5:26:c1:60:fa:da:38:d8:c4:52:c5:aa:b8:9f:66: f9:3f:ac:e9:74:cf:e2:46:89:7d:d8:f1:af:43:50: 34:dd:0d:05:19:2b:eb:19:be:38:39:58:cf:a3:1c: 30:6e:5f:40:4d:f5:32:c9:43:90:85:76:48:09:a7: b6:fe:cb:1e:f1:89:74:e5:35:22:06:aa:b8:30:e7: 9b:ff:94:42:39:b6:5c:53:29:0f:6f:dc:87:d4:45: c4:44:39:69:5f:f5:ae:d2:2e:54:01:09:09:fe:68: 4f:cc:c4:bc:58:c6:bb:bd:41:09:53:fe:71:9c:2a: bc:f5:a2:f2:2d:3c:ed:5a:55:da:fc:88:d6:40:35: 9e:6e:67:96:02:fd:aa:d6:e2:7c:54:e9:71:c8:89: 7c:bf:dd:3d:f4:2b:63:4e:58:bb:50:63:d0:17:dc: 81:c0:e2:c3:e2:ee:96:f5:b9:ca:4e:d8:81:53:71: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6D:C1:3E:CB:98:A8:B5:41:17:7B:9E:EF:83:E5:A1:55:22:55:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/024857e3-4f35-3b28-bf21-f1f7dea1a391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3014:2800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0a:eb:52:47:92:1c:b7:fa:92:b7:1e:ca:fd:39:b1:10:78: 46:b7:9e:b6:32:74:9c:ea:41:81:77:ca:9f:5e:c6:09:e7:93: 9d:5c:a1:bd:0e:cb:41:55:3e:e0:9a:05:69:f4:0e:e8:b0:f0: df:7b:ba:34:99:45:0a:d2:f9:45:e4:39:75:27:42:8d:8a:38: 8f:58:2b:ab:ad:50:98:e1:e2:e5:e6:2f:3f:1c:b4:74:bc:7b: e5:7a:4f:6e:6b:e9:08:52:dc:f9:19:05:23:3f:0b:f0:c8:a9: 06:c9:13:e6:dc:98:a6:f9:da:b6:63:f9:31:af:a0:25:90:18: 2f:05:a8:18:5a:76:9d:72:51:a4:d4:75:0f:ef:b2:33:95:5b: c1:a7:4d:0b:8d:9e:1d:ae:68:33:4b:83:b8:00:5d:99:88:22: 46:d0:00:a6:d6:41:ac:1e:af:17:99:13:c0:5a:5f:13:e5:76: a9:cb:8e:b3:25:3a:b4:0f:64:4d:d9:1d:00:b4:0c:7d:d7:e8: 7c:63:15:9f:59:a4:31:64:65:33:c5:32:ac:22:18:92:10:bf: 0c:9f:d7:06:8f:97:9c:00:aa:a1:9d:a6:db:ec:1d:11:0b:3a: 3f:68:9f:07:5c:d7:08:fd:91:c7:60:5e:d6:ba:9d:e2:99:c8: 3d:9a:d3:20 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuS3Qyt0n4npef6NyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ODEzNzk4NmItMDE3Mi00ZTgwLWIyNzgtNzIzZDRkYzBlYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEnGaoMBvR8/Mgjo5PVGPGP1O3IOjvJ5w7dF T+CFmEBG3m5EZXveLkoL5V/R+XDVNniuiL8XS1iXwqKh/46QvUfS50vPYaZ0FMe1 JsFg+to42MRSxaq4n2b5P6zpdM/iRol92PGvQ1A03Q0FGSvrGb44OVjPoxwwbl9A TfUyyUOQhXZICae2/sse8Yl05TUiBqq4MOeb/5RCObZcUykPb9yH1EXERDlpX/Wu 0i5UAQkJ/mhPzMS8WMa7vUEJU/5xnCq89aLyLTztWlXa/IjWQDWebmeWAv2q1uJ8 VOlxyIl8v9099CtjTli7UGPQF9yBwOLD4u6W9bnKTtiBU3EA9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGxtwT7LmKi1QRd7nu+D5aFVIlW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDI0ODU3ZTMtNGYzNS0z YjI4LWJmMjEtZjFmN2RlYTFhMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFCgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoArrUkeSHLf6krceyv05sRB4RreetjJ0nOpBgXfKn17GCeeTnVyh vQ7LQVU+4JoFafQO6LDw33u6NJlFCtL5ReQ5dSdCjYo4j1grq61QmOHi5eYvPxy0 dLx75XpPbmvpCFLc+RkFIz8L8MipBskT5tyYpvnatmP5Ma+gJZAYLwWoGFp2nXJR pNR1D++yM5VbwadNC42eHa5oM0uDuABdmYgiRtAAptZBrB6vF5kTwFpfE+V2qcuO syU6tA9kTdkdALQMfdfofGMVn1mkMWRlM8UyrCIYkhC/DJ/XBo+XnACqoZ2m2+wd EQs6P2ifB1zXCP2Rx2Be1rqd4pnIPZrTIA== -----END CERTIFICATE-----Generated at Mon Oct 20 03:36:43 2025 by rpki-client