$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa File: cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa (raw, json) Hash identifier: Gqae1VypWj45mCZE1Py4GTtw0mvlKYvLj4UZRNzvip4= Subject key identifier: 2F:22:9B:64:5E:EF:D4:64:0F:CF:AF:3A:46:7D:12:64:8D:48:A1:21 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584B477C70F3790BE99B0D226140 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 399728 IP address blocks: 2620:98:e005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:70:f3:79:0b:e9:9b:0d:22:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=ca3bbb64-2dbe-4c76-a495-339932e5da38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:03:e0:2e:ef:f8:15:27:71:6b:8e:be:87: ed:e4:45:3e:5e:fc:2d:c6:c4:3e:72:df:7e:8a:bf: dd:38:39:c4:b2:84:8c:91:cc:14:95:f2:6a:2e:0a: e0:3d:59:46:bd:0b:33:26:9f:39:e0:a1:74:72:ac: 3d:08:5b:bf:b0:dc:84:24:06:c0:e9:f2:a4:8b:ad: a7:71:8e:1b:d8:e8:b1:94:cb:30:62:e0:35:df:fc: 8b:e2:f7:06:c6:6e:c1:4e:94:b3:e9:b0:56:a4:d2: 00:b3:b9:43:74:98:3d:18:20:d9:a4:06:ee:96:2b: fe:1e:69:34:a0:8e:0b:48:6d:5a:4e:4a:63:1b:91: 53:f2:7c:e0:29:e5:da:af:dc:9e:04:cb:26:fb:e4: af:6f:6a:5c:8c:73:c0:61:c3:73:4d:0f:3b:40:92: 07:4f:0a:9f:f0:d5:8c:00:99:92:3e:7f:27:d8:c7: cc:f3:2d:8d:1d:74:f4:34:e6:b7:8c:ba:27:49:2b: f4:7b:d9:fb:11:53:e0:dd:cc:b9:8e:00:d4:71:96: 43:7a:0d:6d:5a:d0:76:a0:b7:f3:7f:18:8f:a6:51: 6f:29:84:11:b5:53:c6:05:cc:81:60:54:7c:1e:dc: f3:7c:cc:b4:f0:d9:7d:9f:ab:6d:4d:37:62:4d:ca: 30:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:22:9B:64:5E:EF:D4:64:0F:CF:AF:3A:46:7D:12:64:8D:48:A1:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e005::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:29:7e:0f:09:f3:0d:b8:d7:1f:1d:d3:4b:af:d8:0c:99:9d: dc:0d:13:4c:2a:53:58:f3:20:9d:7a:c3:12:8f:e8:ef:3e:7e: 9f:80:ed:c7:cb:d7:70:09:84:03:29:c8:ca:64:34:51:d8:24: f9:a5:fe:57:1b:8d:af:12:a9:8b:b8:cf:74:bb:8b:f2:66:a4: b1:bd:bd:d7:06:25:ba:16:29:d0:53:51:4c:15:95:aa:51:ed: 7d:80:a7:55:46:67:ea:4c:55:b6:3e:e5:29:07:f5:64:52:d3: 85:00:80:a6:e8:ed:01:c9:f8:c5:02:0d:24:f5:1f:c7:37:93: f4:0d:a4:69:b4:01:b1:6f:db:8b:58:23:8c:fe:5a:e7:a6:39: 46:3a:2b:03:29:9a:a6:bf:1b:e6:04:0a:9c:73:96:9d:b6:7c: c1:81:05:66:51:0b:ba:2a:dd:14:b7:e7:a8:7b:e5:b5:6e:08: 15:f3:1b:41:84:fc:80:8b:07:ad:38:36:54:ba:e8:db:80:4f: eb:12:19:c5:c8:4b:43:13:3c:fc:02:36:0b:39:da:52:75:6b: 62:25:91:da:c6:62:ba:42:f3:d3:23:5f:66:87:d3:60:be:36: 76:5a:2e:c6:5a:87:d3:cd:9d:35:2f:f5:71:c3:d6:a8:21:d0: 78:6f:80:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfHDzeQvpmw0iYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk Y2EzYmJiNjQtMmRiZS00Yzc2LWE0OTUtMzM5OTMyZTVkYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIsD4C7v+BUncWuOvoft5EU+XvwtxsQ+ct9+ ir/dODnEsoSMkcwUlfJqLgrgPVlGvQszJp854KF0cqw9CFu/sNyEJAbA6fKki62n cY4b2OixlMswYuA13/yL4vcGxm7BTpSz6bBWpNIAs7lDdJg9GCDZpAbuliv+Hmk0 oI4LSG1aTkpjG5FT8nzgKeXar9yeBMsm++Svb2pcjHPAYcNzTQ87QJIHTwqf8NWM AJmSPn8n2MfM8y2NHXT0NOa3jLonSSv0e9n7EVPg3cy5jgDUcZZDeg1tWtB2oLfz fxiPplFvKYQRtVPGBcyBYFR8HtzzfMy08Nl9n6ttTTdiTcowqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC8im2Re79RkD8+vOkZ9EmSNSKEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvY2YzZDliYWEtNjU3Yi0z M2NmLWI1NzgtZWQwZmU3M2U0NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4pfg8J8w241x8d00uv2AyZndwNE0wqU1jzIJ16wxKP6O8+fp+A 7cfL13AJhAMpyMpkNFHYJPml/lcbja8SqYu4z3S7i/JmpLG9vdcGJboWKdBTUUwV lapR7X2Ap1VGZ+pMVbY+5SkH9WRS04UAgKbo7QHJ+MUCDST1H8c3k/QNpGm0AbFv 24tYI4z+WuemOUY6KwMpmqa/G+YECpxzlp22fMGBBWZRC7oq3RS356h75bVuCBXz G0GE/ICLB604NlS66NuAT+sSGcXIS0MTPPwCNgs52lJ1a2IlkdrGYrpC89MjX2aH 02C+NnZaLsZah9PNnTUv9XHD1qgh0HhvgFU= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:06 2025 by rpki-client