$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dbcca89-f48c-3b6d-a969-a7d727cec676.roa File: 2dbcca89-f48c-3b6d-a969-a7d727cec676.roa (raw, json) Hash identifier: qYxMmmSlmP0sF2xpKxZvMWRyIzpBBh8CG48DTsuZ2Cc= Subject key identifier: B6:A4:43:4E:71:38:A7:C3:2A:C2:C1:85:FE:D4:7E:74:5E:89:3B:3B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8261B6588E214ECCEBD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dbcca89-f48c-3b6d-a969-a7d727cec676.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 2603:2445::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:26:1b:65:88:e2:14:ec:ce:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=ba73c3d2-26d9-4c3d-8847-40792648867a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:ff:c0:1e:6c:57:8c:2d:1f:5d:24:dd:ff: 17:0d:5b:63:32:36:a1:dc:4c:1b:75:d5:26:14:67: cb:7d:f8:7c:7d:74:ef:46:51:81:6d:0a:ee:af:93: 7a:1d:86:f8:44:89:de:62:46:d7:8a:45:72:8e:df: c3:3e:ce:a4:da:2a:a9:1c:6b:ba:f2:39:58:61:09: fe:52:22:cd:8f:50:3b:35:ec:80:70:2d:44:4e:7e: 15:83:59:a5:4e:cf:9f:3f:7a:d9:1a:29:af:7a:67: 67:65:01:60:84:11:19:47:a6:f8:00:3a:42:f3:d6: 2b:48:04:c4:00:ef:b7:0f:97:c3:8f:06:33:08:4d: a8:9d:b6:88:5e:15:62:f4:21:cb:e8:5a:3e:3c:50: e7:e0:47:16:66:02:ff:43:f1:95:bc:33:38:50:92: f2:8d:00:3f:63:53:42:a0:c6:ab:08:e9:b0:ef:bd: 57:96:96:46:00:7d:f2:7b:91:c6:f0:6c:0e:e2:4d: 3b:05:c8:39:fb:8b:7d:5c:32:e7:45:a2:58:49:c5: e9:85:63:8d:89:30:75:57:15:f0:4f:55:28:58:5f: 22:67:fc:c1:69:9a:9b:c3:5a:bf:cb:e7:3e:b6:12: 3b:57:6d:9b:86:74:40:0a:d4:53:0a:f6:81:f7:8f: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A4:43:4E:71:38:A7:C3:2A:C2:C1:85:FE:D4:7E:74:5E:89:3B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dbcca89-f48c-3b6d-a969-a7d727cec676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2445::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:45:a3:40:46:8a:d1:c3:a2:7e:b6:22:8f:46:1d:0d:4e:e5: 27:09:cf:f9:1b:c3:cd:85:5b:52:eb:05:8d:16:68:4a:60:c4: 96:8d:8b:e0:b9:21:8d:f0:cf:e7:0e:36:0d:0a:a8:3f:20:10: 76:f1:78:db:d8:8b:1b:2b:db:74:7a:4e:1a:2d:0f:1b:ff:f7: cf:90:a3:d8:54:5f:bb:6c:b9:9b:1a:52:0b:2e:f9:56:88:9a: 8e:f0:41:47:70:00:84:86:1e:a4:fe:43:f8:29:c7:d7:49:32: 4a:29:8b:1d:43:23:a2:7e:e7:b7:5a:e6:a6:23:e6:6c:bb:2d: f6:16:15:17:4f:c5:a7:96:f5:8a:c6:0c:bb:ca:a7:cc:69:ef: 0b:26:ff:d0:a7:a2:1f:a0:9b:3c:a8:6c:40:23:bd:c5:da:1b: bb:46:66:cb:4e:fa:0c:95:7f:d7:4b:e1:d3:3a:eb:c5:7c:00: 3b:7d:b1:ad:50:f4:52:ab:82:c3:d4:d0:f8:a3:57:c6:e6:9f: 12:b9:f2:93:f2:58:66:38:49:72:00:8c:e4:84:09:06:1a:af: 45:4d:9e:76:8a:77:04:e3:2b:4b:2d:45:df:e4:a1:76:27:a1: 4c:cf:10:d7:10:22:f3:b3:9a:10:f8:f9:eb:42:b2:2f:02:26: e4:d6:e5:ca -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs9uCYbZYjiFOzOvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YmE3M2MzZDItMjZkOS00YzNkLTg4NDctNDA3OTI2NDg4NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRL/wB5sV4wtH10k3f8XDVtjMjah3EwbddUm FGfLffh8fXTvRlGBbQrur5N6HYb4RIneYkbXikVyjt/DPs6k2iqpHGu68jlYYQn+ UiLNj1A7NeyAcC1ETn4Vg1mlTs+fP3rZGimvemdnZQFghBEZR6b4ADpC89YrSATE AO+3D5fDjwYzCE2onbaIXhVi9CHL6Fo+PFDn4EcWZgL/Q/GVvDM4UJLyjQA/Y1NC oMarCOmw771XlpZGAH3ye5HG8GwO4k07Bcg5+4t9XDLnRaJYScXphWONiTB1VxXw T1UoWF8iZ/zBaZqbw1q/y+c+thI7V22bhnRACtRTCvaB948M/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLakQ05xOKfDKsLBhf7UfnReiTs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRiY2NhODktZjQ4Yy0z YjZkLWE5NjktYTdkNzI3Y2VjNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMkRQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPUWjQEaK0cOifrYij0YdDU7lJwnP+RvDzYVbUusFjRZoSmDElo2L 4LkhjfDP5w42DQqoPyAQdvF429iLGyvbdHpOGi0PG//3z5Cj2FRfu2y5mxpSCy75 VoiajvBBR3AAhIYepP5D+CnH10kySimLHUMjon7nt1rmpiPmbLst9hYVF0/Fp5b1 isYMu8qnzGnvCyb/0KeiH6CbPKhsQCO9xdobu0Zmy076DJV/10vh0zrrxXwAO32x rVD0UquCw9TQ+KNXxuafErnyk/JYZjhJcgCM5IQJBhqvRU2edop3BOMrSy1F3+Sh diehTM8Q1xAi87OaEPj560KyLwIm5Nblyg== -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:35 2025 by rpki-client