$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/c8e3155a-cda7-369b-bd52-09077eb2faa8.roa File: c8e3155a-cda7-369b-bd52-09077eb2faa8.roa (raw, json) Hash identifier: XFJV3NBHjzRW55Iwq9D64wXCq9u2rOsIg8iYHJSieig= Subject key identifier: B9:8C:9E:E8:01:D8:13:D6:3D:D5:A7:EE:ED:08:A4:93:BF:01:F3:53 Certificate issuer: /CN=633665d1-105e-4258-8cc6-d23d617ef3cf Certificate serial: 010D0C9F4328584B821CC451F2C369DC264D6EC0 Authority key identifier: 28:E6:44:7C:71:D9:6A:E2:E4:4B:D0:2C:91:32:FC:81:96:1A:0C:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/c8e3155a-cda7-369b-bd52-09077eb2faa8.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 33470 IP address blocks: 2604:d200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/633665d1-105e-4258-8cc6-d23d617ef3cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/633665d1-105e-4258-8cc6-d23d617ef3cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c4:51:f2:c3:69:dc:26:4d:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633665d1-105e-4258-8cc6-d23d617ef3cf Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=736025e3-eef9-4514-a16b-9465ae1e3e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:7f:3e:ad:fd:54:03:98:ed:bc:41:21:a8: 96:70:91:3a:c9:8d:30:40:0e:3f:fb:e5:78:5c:f7: af:b4:35:23:f9:0f:02:1a:c1:6d:49:77:33:fa:db: 15:de:0e:10:27:3a:57:df:34:5a:61:e9:1d:36:05: f9:c9:a4:c5:66:c9:4d:e8:36:43:e8:4e:e2:be:67: 83:c7:bb:45:48:43:fb:6f:b1:d3:9c:b0:ec:0a:dc: 66:c9:f7:a9:14:81:ee:93:7b:e6:65:55:2e:4f:33: 5d:49:4f:f5:81:3a:c6:3e:df:20:28:42:fa:79:99: cf:31:6c:b6:f0:ed:19:bf:76:49:2f:7f:8b:21:04: 87:df:e9:9e:b8:a1:77:8f:eb:2a:2f:06:4e:59:e9: de:15:6f:92:b0:89:23:4a:53:90:53:1b:0a:1c:1d: 46:c3:8b:1c:75:27:f6:de:c9:2e:7d:9e:c3:b6:a4: 9c:ac:4c:c5:b1:56:8c:d7:10:98:78:f3:fc:20:11: 9b:02:63:d8:f4:3a:24:9c:49:df:df:5e:a1:75:02: aa:28:ac:3a:a9:c0:48:9e:cd:6b:89:66:83:5f:75: eb:ce:5b:5b:7e:2f:b7:90:8a:00:89:0d:87:0b:93: 00:2c:f5:ca:38:00:93:bb:48:a5:84:44:6d:3a:05: 04:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8C:9E:E8:01:D8:13:D6:3D:D5:A7:EE:ED:08:A4:93:BF:01:F3:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/c8e3155a-cda7-369b-bd52-09077eb2faa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/633665d1-105e-4258-8cc6-d23d617ef3cf.crl X509v3 Authority Key Identifier: keyid:28:E6:44:7C:71:D9:6A:E2:E4:4B:D0:2C:91:32:FC:81:96:1A:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf.cer sbgp-ipAddrBlock: critical IPv6: 2604:d200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:74:13:1f:d6:53:b6:68:5e:a0:fe:ac:61:2d:cd:36:27:98: b6:4b:14:bf:01:ff:67:79:d1:79:4b:51:3d:f9:8b:a3:57:82: b0:27:82:22:44:8d:a7:b3:ad:ee:40:a4:4a:f6:55:98:77:0d: e0:b7:39:93:dc:18:5e:c5:e5:d1:f6:12:6a:e1:6a:78:96:41: 0f:3f:e0:b1:f1:a1:f9:04:8d:65:dc:97:aa:c8:36:44:9e:ed: bb:20:85:c4:57:60:ae:9f:60:9f:56:7c:2c:f7:7e:91:56:5f: 8c:06:15:64:84:7c:76:ca:3a:21:97:34:4c:94:6c:c7:23:50: 8a:7f:94:52:3f:ec:9e:4a:b0:8f:e0:d2:7b:26:99:9e:96:39: 08:66:5f:05:08:c9:55:44:70:d7:bc:a5:60:51:2c:aa:ce:03: 23:00:82:12:f8:fb:08:78:cd:52:eb:b9:4f:78:10:b9:c5:09: 2e:fe:ea:1d:d8:41:9e:87:58:73:ae:c3:9f:d6:2e:cf:4f:f4: 9d:ef:2d:0a:3f:36:d7:2d:fd:21:ca:5f:ef:d8:6f:3a:67:ae: 8a:a8:ef:a7:b4:ee:dd:3a:2b:31:8b:29:38:fd:fc:cc:cf:7e: 44:94:d7:02:be:8b:61:93:ed:09:a9:6e:53:4d:21:9e:aa:d2: 9f:55:5b:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuCHMRR8sNp3CZNbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNjY1ZDEtMTA1ZS00MjU4LThjYzYtZDIzZDYxN2Vm M2NmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NzM2MDI1ZTMtZWVmOS00NTE0LWExNmItOTQ2NWFlMWUzZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbd/Pq39VAOY7bxBIaiWcJE6yY0wQA4/++V4 XPevtDUj+Q8CGsFtSXcz+tsV3g4QJzpX3zRaYekdNgX5yaTFZslN6DZD6E7ivmeD x7tFSEP7b7HTnLDsCtxmyfepFIHuk3vmZVUuTzNdSU/1gTrGPt8gKEL6eZnPMWy2 8O0Zv3ZJL3+LIQSH3+meuKF3j+sqLwZOWeneFW+SsIkjSlOQUxsKHB1Gw4scdSf2 3skufZ7DtqScrEzFsVaM1xCYePP8IBGbAmPY9DoknEnf316hdQKqKKw6qcBIns1r iWaDX3Xrzltbfi+3kIoAiQ2HC5MALPXKOACTu0ilhERtOgUEzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLmMnugB2BPWPdWn7u0IpJO/AfNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzM2 NjVkMS0xMDVlLTQyNTgtOGNjNi1kMjNkNjE3ZWYzY2YvYzhlMzE1NWEtY2RhNy0z NjliLWJkNTItMDkwNzdlYjJmYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjMzNjY1ZDEtMTA1ZS00MjU4LThj YzYtZDIzZDYxN2VmM2NmLzYzMzY2NWQxLTEwNWUtNDI1OC04Y2M2LWQyM2Q2MTdl ZjNjZi5jcmwwHwYDVR0jBBgwFoAUKOZEfHHZauLkS9AskTL8gZYaDEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzM2NjVkMS0xMDVlLTQyNTgtOGNjNi1kMjNk NjE3ZWYzY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTSADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZdBMf1lO2aF6g/qxhLc02J5i2SxS/Af9nedF5S1E9+YujV4KwJ4Ii RI2ns63uQKRK9lWYdw3gtzmT3BhexeXR9hJq4Wp4lkEPP+Cx8aH5BI1l3JeqyDZE nu27IIXEV2Cun2CfVnws936RVl+MBhVkhHx2yjohlzRMlGzHI1CKf5RSP+yeSrCP 4NJ7JpmeljkIZl8FCMlVRHDXvKVgUSyqzgMjAIIS+PsIeM1S67lPeBC5xQku/uod 2EGeh1hzrsOf1i7PT/Sd7y0KPzbXLf0hyl/v2G86Z66KqO+ntO7dOisxiyk4/fzM z35ElNcCvothk+0JqW5TTSGeqtKfVVvi -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:51 2025 by rpki-client