$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ea1272-2c66-3796-aebe-2b899cab9ab6.roa File: b2ea1272-2c66-3796-aebe-2b899cab9ab6.roa (raw, json) Hash identifier: MSSXVw2YzaAKjMPhElwhtMXaIpXVJMBCSn+Lwz13Ur8= Subject key identifier: 38:7F:77:BB:1C:13:21:B6:17:E5:25:44:F6:01:EA:03:69:5A:9C:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD0BCF8E9C50C3CA56D9E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ea1272-2c66-3796-aebe-2b899cab9ab6.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7016 IP address blocks: 2603:3007:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:0b:cf:8e:9c:50:c3:ca:56:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=b69aa6f0-40a0-4efe-9fea-ec6d269c1bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2b:9b:7a:6f:07:67:32:b2:85:27:dd:f2:40: 9f:33:d3:56:c4:fa:a9:0c:54:a9:e2:31:81:55:5c: 84:66:ba:3e:bb:01:87:83:a1:c5:f0:f9:55:92:5a: 47:4f:9a:36:d2:72:53:bb:39:8f:8f:73:4e:f7:ad: 7f:ab:85:38:65:b9:17:54:c5:a6:c2:9c:41:d2:e1: 09:fa:2f:8d:67:7c:c1:00:79:03:e9:7b:22:22:1c: a1:0e:e6:53:58:07:bc:5e:84:17:12:b2:14:a8:ab: 42:39:74:e7:b1:fc:86:71:4b:a2:74:35:12:2a:72: dd:72:82:1a:1b:c1:b3:39:a5:c0:29:e4:2b:d1:c1: 7a:de:9e:72:99:74:a0:cc:e1:34:bf:10:d4:f8:27: 71:30:5a:1e:f6:71:95:23:0e:68:94:5e:cc:fa:4f: f3:3c:25:96:79:a6:d2:1a:b4:5f:dd:23:39:8b:04: 35:17:b5:cb:90:80:57:c3:1b:1b:40:6f:db:9a:35: c6:d1:47:d1:78:fe:05:fa:49:ae:ea:25:58:d9:87: fc:85:bb:89:31:0e:46:d9:bd:f3:4e:51:6c:5b:3a: 9c:1b:cc:5e:58:11:60:16:98:af:ee:b3:92:46:9a: 1a:bf:d6:38:f5:bd:ec:53:96:dd:97:3e:90:19:2a: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7F:77:BB:1C:13:21:B6:17:E5:25:44:F6:01:EA:03:69:5A:9C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ea1272-2c66-3796-aebe-2b899cab9ab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3007:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:cb:01:2a:d6:78:46:19:04:e7:07:4c:6a:45:30:32:f0:7d: 3f:f7:fe:df:22:4b:c2:52:ec:a6:c9:0b:62:14:4c:9d:8e:de: e5:32:66:50:8b:9f:d3:8a:fb:0a:c5:ed:f8:a6:89:46:0e:01: 54:91:6b:e4:ab:45:cb:02:84:15:72:a6:da:4e:2f:ed:01:2a: 4b:e9:12:d5:57:8f:be:8e:96:f9:e6:04:6e:e7:f3:b0:74:35: f8:f9:6d:d9:68:62:1a:1d:31:8e:ec:1f:c8:ef:46:15:74:5c: 4e:91:41:95:33:16:28:b0:09:ed:42:d1:9c:8f:a2:ca:ef:02: 1d:34:b4:17:e2:4e:92:56:58:2f:33:26:52:ad:b8:53:4c:a5: c3:23:a9:78:85:c3:a9:ce:49:3a:73:9a:d1:f3:40:55:45:22: 18:a2:51:fe:07:81:81:66:48:0d:f1:7f:bc:8a:e7:83:a9:09: 83:b3:e1:37:2e:19:b2:5c:7e:c2:73:7d:a6:ee:6e:d0:c6:df: d3:62:d7:a5:4a:b6:f7:71:02:d6:a8:f9:1d:eb:2c:d0:4a:f6: 46:f6:05:3b:70:ca:be:94:2e:10:4e:62:66:d5:ef:52:39:9f: 6f:26:06:77:33:24:6d:8c:0c:f1:16:8c:79:57:76:2a:af:e4: 58:20:60:d8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuS3QvPjpxQw8pW2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YjY5YWE2ZjAtNDBhMC00ZWZlLTlmZWEtZWM2ZDI2OWMxYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cubem8HZzKyhSfd8kCfM9NWxPqpDFSp4jGB VVyEZro+uwGHg6HF8PlVklpHT5o20nJTuzmPj3NO961/q4U4ZbkXVMWmwpxB0uEJ +i+NZ3zBAHkD6XsiIhyhDuZTWAe8XoQXErIUqKtCOXTnsfyGcUuidDUSKnLdcoIa G8GzOaXAKeQr0cF63p5ymXSgzOE0vxDU+CdxMFoe9nGVIw5olF7M+k/zPCWWeabS GrRf3SM5iwQ1F7XLkIBXwxsbQG/bmjXG0UfReP4F+kmu6iVY2Yf8hbuJMQ5G2b3z TlFsWzqcG8xeWBFgFpiv7rOSRpoav9Y49b3sU5bdlz6QGSojtQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDh/d7scEyG2F+UlRPYB6gNpWpxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJlYTEyNzItMmM2Ni0z Nzk2LWFlYmUtMmI4OTljYWI5YWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBwUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhssBKtZ4RhkE5wdMakUwMvB9P/f+3yJLwlLspskLYhRMnY7e5TJm UIuf04r7CsXt+KaJRg4BVJFr5KtFywKEFXKm2k4v7QEqS+kS1VePvo6W+eYEbufz sHQ1+Plt2WhiGh0xjuwfyO9GFXRcTpFBlTMWKLAJ7ULRnI+iyu8CHTS0F+JOklZY LzMmUq24U0ylwyOpeIXDqc5JOnOa0fNAVUUiGKJR/geBgWZIDfF/vIrng6kJg7Ph Ny4Zslx+wnN9pu5u0Mbf02LXpUq293EC1qj5Hess0Er2RvYFO3DKvpQuEE5iZtXv UjmfbyYGdzMkbYwM8RaMeVd2Kq/kWCBg2A== -----END CERTIFICATE-----Generated at Mon Oct 20 10:05:02 2025 by rpki-client