$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851d5bf4-46d4-3d0a-b46a-39a545e0c6a4.roa File: 851d5bf4-46d4-3d0a-b46a-39a545e0c6a4.roa (raw, json) Hash identifier: Hr9bTTgMqmQJ2Gmw+rgkNuimvstiyCjm54Q7VCHGVLY= Subject key identifier: A6:89:46:5D:97:05:76:EB:6C:01:1D:1D:5E:95:BA:87:DF:E4:51:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8A13C55221538878DB200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851d5bf4-46d4-3d0a-b46a-39a545e0c6a4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 2601:409:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:a1:3c:55:22:15:38:87:8d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b17b8f95-9a8e-4d02-a9a8-1a6fd9efff65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:c7:a3:f8:d0:15:df:ba:8b:00:61:4d:28: 6e:74:7e:73:44:af:d2:82:5c:c8:6a:96:c6:cd:d5: 4e:94:0a:4e:b2:43:ec:32:4b:49:ed:b8:61:86:22: 12:8e:71:84:31:99:2f:9f:9c:2d:a2:98:5e:2c:35: 05:23:f8:6f:22:cd:33:44:b4:ea:21:ed:72:93:99: 38:3e:a1:65:e4:17:f0:81:89:38:d1:aa:88:41:07: df:fd:2e:9e:9b:51:62:ca:c7:5e:6d:48:8d:28:eb: ee:bf:62:97:b1:2a:d6:48:30:32:72:19:88:2b:3f: 3d:16:e0:ef:22:1f:2b:ae:a4:24:f5:8b:58:a9:51: 40:6c:4b:1e:0c:87:44:07:a9:47:11:28:62:96:13: 9c:32:75:f0:d5:9c:a4:79:dd:1d:a8:a9:3f:28:4d: fc:2b:25:d6:91:3b:de:8a:5e:a7:d8:7e:e2:21:cf: e3:83:28:82:ef:b9:23:e2:ea:69:39:4f:35:62:ae: 12:04:2e:34:6b:27:10:1d:c0:8a:90:91:e6:1d:7d: 19:2f:f8:c1:db:1c:a4:04:68:8b:e1:0c:5c:de:db: c6:46:a6:a5:23:ab:c2:af:75:80:0f:d3:77:7d:99: b0:4d:3d:c6:3d:4e:b1:73:b9:bb:17:c6:d8:35:3c: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:89:46:5D:97:05:76:EB:6C:01:1D:1D:5E:95:BA:87:DF:E4:51:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851d5bf4-46d4-3d0a-b46a-39a545e0c6a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:409:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d4:06:07:59:14:b8:a0:90:de:de:37:d4:32:e1:2f:fb:f4: bb:d8:27:15:71:04:47:69:c4:50:58:22:a3:82:b5:82:9d:b8: fe:d0:00:34:dd:ef:bf:11:a6:5a:e8:94:41:a8:56:db:0a:7c: 5d:d4:49:6a:6f:7f:52:2b:56:ae:c7:14:4b:b5:1b:59:44:ee: 1b:e0:75:4d:9a:52:8b:1b:d1:33:1d:f1:7a:1a:89:f5:df:21: 44:89:d5:b3:a5:eb:84:27:15:80:b4:98:b9:f4:42:50:16:06: 61:83:a8:f6:8b:39:2c:4c:1d:04:83:e5:84:e8:f6:54:f8:f4: 2a:ef:57:d8:33:a5:e4:96:61:53:71:af:be:3a:c5:bd:0c:c3: 9b:75:ab:1d:b6:1b:25:93:89:f5:97:bd:0a:57:85:75:4c:ea: 20:85:85:23:bf:96:7d:41:fd:6c:a1:4a:2e:12:40:60:40:fd: cf:1a:54:9b:9a:4b:dc:3c:39:af:97:03:a7:e2:2c:87:fa:87: 08:9a:67:60:dc:e8:81:8f:ff:d4:3e:66:fc:f3:3f:3b:f0:e7: 55:33:df:74:54:f6:c9:7a:8f:2b:e9:6f:57:89:8b:3e:14:9e: af:a1:de:cd:3b:b4:48:46:ca:46:4c:3e:81:b5:2d:a1:90:3b: a4:e7:34:13 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqKE8VSIVOIeNsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjE3YjhmOTUtOWE4ZS00ZDAyLWE5YTgtMWE2ZmQ5ZWZmZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc7Ho/jQFd+6iwBhTShudH5zRK/SglzIapbG zdVOlApOskPsMktJ7bhhhiISjnGEMZkvn5wtopheLDUFI/hvIs0zRLTqIe1yk5k4 PqFl5BfwgYk40aqIQQff/S6em1FiysdebUiNKOvuv2KXsSrWSDAychmIKz89FuDv Ih8rrqQk9YtYqVFAbEseDIdEB6lHEShilhOcMnXw1Zyked0dqKk/KE38KyXWkTve il6n2H7iIc/jgyiC77kj4uppOU81Yq4SBC40aycQHcCKkJHmHX0ZL/jB2xykBGiL 4Qxc3tvGRqalI6vCr3WAD9N3fZmwTT3GPU6xc7m7F8bYNTyPewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKaJRl2XBXbrbAEdHV6Vuoff5FEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODUxZDViZjQtNDZkNC0z ZDBhLWI0NmEtMzlhNTQ1ZTBjNmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEECUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALtQGB1kUuKCQ3t431DLhL/v0u9gnFXEER2nEUFgio4K1gp24/tAA NN3vvxGmWuiUQahW2wp8XdRJam9/UitWrscUS7UbWUTuG+B1TZpSixvRMx3xehqJ 9d8hRInVs6XrhCcVgLSYufRCUBYGYYOo9os5LEwdBIPlhOj2VPj0Ku9X2DOl5JZh U3GvvjrFvQzDm3WrHbYbJZOJ9Ze9CleFdUzqIIWFI7+WfUH9bKFKLhJAYED9zxpU m5pL3Dw5r5cDp+Ish/qHCJpnYNzogY//1D5m/PM/O/DnVTPfdFT2yXqPK+lvV4mL PhSer6HezTu0SEbKRkw+gbUtoZA7pOc0Ew== -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:23 2025 by rpki-client