$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/325dfee4-e1cd-3a57-a93d-cea8f6b590f2.roa File: 325dfee4-e1cd-3a57-a93d-cea8f6b590f2.roa (raw, json) Hash identifier: NUk1uVw8LNAkGpPmOqsvQfOCWM8mZTd6oNbGcHbNYRY= Subject key identifier: 37:E9:BF:09:E5:48:07:26:71:84:34:8E:AB:F8:4B:F4:83:64:63:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB86998B1C46D6FA20884C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/325dfee4-e1cd-3a57-a93d-cea8f6b590f2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2603:3003::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:69:98:b1:c4:6d:6f:a2:08:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=4904774c-7703-4b3d-bcf6-8baaadbde0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:17:f1:e9:0e:e6:d9:27:f1:fa:88:be:ba: 59:5f:d5:43:a0:b7:94:08:3d:c9:87:61:21:86:5d: 00:73:4e:fa:40:8d:57:d1:3c:27:6f:92:f8:f2:47: d8:e6:ba:ac:04:da:24:44:e6:fb:5a:e9:85:01:bb: e9:fb:98:41:3e:5b:b3:dd:28:78:46:ca:e6:a0:85: 14:40:14:53:30:d2:43:09:a4:cd:1d:e8:1b:e1:c9: 67:f6:53:4c:61:55:0b:c5:a6:1b:dc:e0:22:75:c3: 62:3d:d0:98:1e:30:c0:ca:a1:4e:31:ba:7b:c4:72: e3:7f:1b:45:85:55:38:97:8b:7c:8e:ef:aa:51:32: 5d:dc:64:01:d2:22:62:de:85:71:2c:11:78:a1:75: f8:4c:df:2b:c3:c0:c7:9c:86:a4:8f:67:10:a9:9f: ae:89:37:f2:15:4b:33:77:5b:c3:05:b2:66:f2:48: f3:6a:79:e2:ff:1b:a1:88:04:ac:71:b6:b7:6a:11: 1a:c8:78:97:87:ba:e7:d0:08:7b:70:13:86:9f:e5: 69:0a:06:ab:d9:16:ea:6a:7e:d2:24:ba:59:99:72: b0:73:0c:85:6e:6d:91:95:59:90:b3:df:1e:b6:55: 51:31:25:d4:d6:89:bb:b3:a4:7a:b8:de:5a:45:0d: aa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E9:BF:09:E5:48:07:26:71:84:34:8E:AB:F8:4B:F4:83:64:63:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/325dfee4-e1cd-3a57-a93d-cea8f6b590f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3003::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:0c:5f:fe:0d:d5:66:c4:e3:57:17:f4:a6:ef:18:11:20:28: d4:84:9f:f2:d0:89:1c:67:26:31:ba:f2:06:cd:1d:a3:31:c5: 95:0f:75:74:4d:29:9b:b0:0d:b0:1c:0b:6a:7f:88:13:bf:5d: 2e:dc:c2:ec:4c:e5:c0:08:56:5e:20:a1:3b:5e:83:48:34:71: 55:66:11:71:60:23:cf:82:bd:47:36:e3:0b:70:77:47:75:4e: b2:51:94:73:5c:a9:a3:d5:78:9d:91:43:d0:70:32:91:c2:d5: 4a:be:b6:9a:1c:9f:b9:92:dd:23:ed:e3:71:50:ef:84:f6:6d: 34:0a:56:a9:a4:51:a1:11:57:9e:d6:a0:41:95:ed:38:72:f0: 22:47:3a:ec:f6:c9:1d:47:63:8c:40:c2:7a:c6:81:b3:68:09: a2:9c:1d:c6:9d:ec:f3:21:31:e8:f9:8c:2f:2e:8c:a1:a0:f1: 4e:73:90:f0:fe:c7:d7:11:88:e9:33:c2:bb:0f:f4:36:18:e6: b4:fe:f3:85:0c:66:b4:a0:ba:72:fe:01:0c:7d:a2:bd:d1:ef: 17:82:45:d4:1a:c4:5d:bf:85:55:39:83:3a:f2:a8:33:95:dd: 9e:9b:d9:c5:2f:18:fd:9b:22:2a:c1:cb:cd:d1:97:8d:34:b5: 23:6d:96:22 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs9uGmYscRtb6IIhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NDkwNDc3NGMtNzcwMy00YjNkLWJjZjYtOGJhYWFkYmRlMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A0X8ekO5tkn8fqIvrpZX9VDoLeUCD3Jh2Eh hl0Ac076QI1X0Twnb5L48kfY5rqsBNokROb7WumFAbvp+5hBPluz3Sh4RsrmoIUU QBRTMNJDCaTNHegb4cln9lNMYVULxaYb3OAidcNiPdCYHjDAyqFOMbp7xHLjfxtF hVU4l4t8ju+qUTJd3GQB0iJi3oVxLBF4oXX4TN8rw8DHnIakj2cQqZ+uiTfyFUsz d1vDBbJm8kjzanni/xuhiASscba3ahEayHiXh7rn0Ah7cBOGn+VpCgar2Rbqan7S JLpZmXKwcwyFbm2RlVmQs98etlVRMSXU1om7s6R6uN5aRQ2qEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDfpvwnlSAcmcYQ0jqv4S/SDZGNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI1ZGZlZTQtZTFjZC0z YTU3LWE5M2QtY2VhOGY2YjU5MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgMwAzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCRDF/+DdVmxONXF/Sm7xgRICjUhJ/y0IkcZyYxuvIGzR2jMcWVD3V0 TSmbsA2wHAtqf4gTv10u3MLsTOXACFZeIKE7XoNINHFVZhFxYCPPgr1HNuMLcHdH dU6yUZRzXKmj1XidkUPQcDKRwtVKvraaHJ+5kt0j7eNxUO+E9m00ClappFGhEVee 1qBBle04cvAiRzrs9skdR2OMQMJ6xoGzaAminB3GnezzITHo+YwvLoyhoPFOc5Dw /sfXEYjpM8K7D/Q2GOa0/vOFDGa0oLpy/gEMfaK90e8XgkXUGsRdv4VVOYM68qgz ld2em9nFLxj9myIqwcvN0ZeNNLUjbZYi -----END CERTIFICATE-----Generated at Mon Oct 20 03:21:17 2025 by rpki-client