$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c842c4-4b3f-3303-ac60-92700e73f011.roa File: a8c842c4-4b3f-3303-ac60-92700e73f011.roa (raw, json) Hash identifier: ek42jJKca588R+hvipkeGF7NvjeQiLW7yfgoUt+900c= Subject key identifier: B7:4E:91:62:32:5A:D0:05:0A:C5:63:68:98:A5:4F:A2:8C:47:6B:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9C1EF3C56178FC2DAF780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c842c4-4b3f-3303-ac60-92700e73f011.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 2601:448:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:c1:ef:3c:56:17:8f:c2:da:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=3b6ae3b4-c129-47d8-8eb9-15bf7bc9532c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:10:e6:e6:35:27:ba:cc:01:79:5f:b6:4b: 4d:52:3e:10:c4:26:d5:53:d0:57:ce:27:ee:36:16: 8d:ce:99:cb:83:e4:fc:31:64:ee:00:b8:7d:9f:91: e4:e2:34:f8:64:2f:9b:f8:db:ab:4c:35:f9:49:e2: f3:d8:09:b2:4d:85:df:f8:66:77:17:0f:63:01:8c: a9:e0:52:61:75:3f:14:c7:2b:65:14:a5:d1:02:af: 4a:23:74:63:35:02:f9:31:11:5a:a9:84:18:47:cc: 0a:ac:ad:43:84:64:99:d1:67:19:eb:a4:37:a5:08: 12:07:c2:02:6b:ce:89:54:7b:3d:a0:ca:cd:3a:76: 41:06:37:1d:33:cb:b5:1f:93:2e:53:26:a2:4b:3f: b6:1f:06:11:7b:05:cd:e2:bc:ed:e4:5c:52:f0:c4: c9:09:c5:db:8e:d6:cb:87:d3:6e:dd:87:16:84:99: e6:76:a0:38:47:a2:25:da:e5:68:fa:45:5d:d5:cb: 93:85:45:e3:55:98:2d:19:f0:f1:4c:e0:bc:4a:22: e9:32:b5:a9:b0:9e:8b:af:ae:db:37:18:7d:cb:34: dc:2a:84:76:7a:3b:59:07:dc:32:83:6e:1d:10:c9: 64:a8:16:4b:17:74:ed:c1:80:40:74:72:a0:99:d5: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4E:91:62:32:5A:D0:05:0A:C5:63:68:98:A5:4F:A2:8C:47:6B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c842c4-4b3f-3303-ac60-92700e73f011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:448:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:df:ae:66:1d:a6:f5:e1:b7:86:11:1e:95:24:26:e5:c6:37: 7d:21:12:58:42:f5:9f:49:a8:85:39:82:da:af:03:d0:35:99: 7b:fa:21:97:ad:3e:c7:5a:ea:01:cc:b2:5f:17:0e:75:8d:99: cc:29:e3:38:54:9d:16:d5:e3:da:3f:3c:3f:c6:32:6f:9f:fb: 7e:ba:cf:57:9a:63:1a:af:39:c6:b0:82:1f:bb:1d:24:97:d5: 9b:01:1f:83:93:18:d8:f5:73:84:c9:45:b1:5f:67:2f:f3:29: eb:90:21:3b:0f:da:df:98:c5:57:f6:89:e2:b1:94:09:6f:23: c9:db:a6:0f:2d:d2:9d:db:ce:f1:d7:d8:40:e3:0b:46:52:24: 7c:51:e4:a4:92:2d:5e:5e:8b:d1:32:3d:c3:ad:52:89:2e:55: 7f:45:d3:b6:e3:5b:a4:17:e2:d8:f1:80:c3:91:b0:1b:11:5a: d9:05:94:aa:5d:a8:e6:a3:a0:81:0b:24:9e:10:3a:4c:b9:59: 45:43:50:d2:86:0d:9f:e3:9c:87:7e:83:21:89:66:c8:0e:59: 96:55:35:6c:d3:f3:9c:45:80:33:ee:37:1e:4b:f3:77:90:f5: a7:ab:2f:7a:0f:b8:f8:a5:b0:c4:c5:e6:dc:cd:e6:e6:fe:da: fa:c7:e6:99 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs9ucHvPFYXj8La94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk M2I2YWUzYjQtYzEyOS00N2Q4LThlYjktMTViZjdiYzk1MzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI4Q5uY1J7rMAXlftktNUj4QxCbVU9BXzifu NhaNzpnLg+T8MWTuALh9n5Hk4jT4ZC+b+NurTDX5SeLz2AmyTYXf+GZ3Fw9jAYyp 4FJhdT8UxytlFKXRAq9KI3RjNQL5MRFaqYQYR8wKrK1DhGSZ0WcZ66Q3pQgSB8IC a86JVHs9oMrNOnZBBjcdM8u1H5MuUyaiSz+2HwYRewXN4rzt5FxS8MTJCcXbjtbL h9Nu3YcWhJnmdqA4R6Il2uVo+kVd1cuThUXjVZgtGfDxTOC8SiLpMrWpsJ6Lr67b Nxh9yzTcKoR2ejtZB9wyg24dEMlkqBZLF3TtwYBAdHKgmdWpywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLdOkWIyWtAFCsVjaJilT6KMR2uFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYThjODQyYzQtNGIzZi0z MzAzLWFjNjAtOTI3MDBlNzNmMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEESIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAwd+uZh2m9eG3hhEelSQm5cY3fSESWEL1n0mohTmC2q8D0DWZe/oh l60+x1rqAcyyXxcOdY2ZzCnjOFSdFtXj2j88P8Yyb5/7frrPV5pjGq85xrCCH7sd JJfVmwEfg5MY2PVzhMlFsV9nL/Mp65AhOw/a35jFV/aJ4rGUCW8jydumDy3SndvO 8dfYQOMLRlIkfFHkpJItXl6L0TI9w61SiS5Vf0XTtuNbpBfi2PGAw5GwGxFa2QWU ql2o5qOggQsknhA6TLlZRUNQ0oYNn+Och36DIYlmyA5ZllU1bNPznEWAM+43Hkvz d5D1p6sveg+4+KWwxMXm3M3m5v7a+sfmmQ== -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:42 2025 by rpki-client