$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa File: 3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa (raw, json) Hash identifier: 5W3rIY/OYmipqpSXM8MiR+V1BnwiGKcmHZyqSXy25Bw= Subject key identifier: 90:66:B9:40:70:AB:B3:0E:DD:C3:0C:C0:51:13:1E:B2:9E:70:70:E7 Certificate issuer: /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e Certificate serial: 010D0C9F4328584B2CF6E4CE153467973616E5A0 Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 945 IP address blocks: 2001:4858:aaaf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e4:ce:15:34:67:97:36:16:e5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=e1e72854-b28f-4dd5-bbfc-f112528b71a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fb:da:10:62:fc:2b:d0:14:3b:cb:59:9c:49: 77:05:90:c6:0b:85:44:01:da:e8:71:e0:71:c4:92: e3:54:ad:98:01:f4:d8:6a:b5:dd:d6:76:83:96:f8: f3:06:88:8f:ff:f6:19:a7:4a:d6:fd:32:61:11:2d: f0:2b:27:02:7b:18:53:e6:1c:a4:48:f5:10:86:93: b0:9d:2d:7d:f5:5f:ef:c9:78:da:72:16:80:9c:38: 3e:2e:c7:8b:6a:2d:84:37:0c:90:53:44:48:31:55: 73:34:3f:a7:80:e7:05:88:75:d0:7c:53:64:41:f7: b5:5a:93:8b:93:1b:80:18:73:4d:d1:4a:c2:2b:2d: 1a:0c:d5:3e:47:46:06:05:ea:cd:2b:3b:cf:41:01: ec:60:2c:d4:b0:6e:b2:54:73:c1:47:18:a9:34:09: f0:fd:9b:cb:f3:bc:0f:b0:70:bd:c8:7f:d4:3f:bd: 92:38:22:3b:49:d7:50:60:d7:ab:6f:58:af:69:76: 88:ef:17:82:e9:ab:6c:a0:f0:b5:fc:18:41:28:1f: 16:d8:d9:c9:0a:43:63:a2:8a:8d:32:61:4e:7e:64: d7:4f:a8:ad:cb:46:3d:4c:3e:d7:77:7c:a4:f8:51: 6e:e4:c7:e5:c4:e8:1d:bd:eb:52:3b:9d:7c:e1:5d: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:66:B9:40:70:AB:B3:0E:DD:C3:0C:C0:51:13:1E:B2:9E:70:70:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl X509v3 Authority Key Identifier: keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer sbgp-ipAddrBlock: critical IPv6: 2001:4858:aaaf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8f:bb:4e:51:87:06:eb:0d:24:90:95:5d:96:44:f6:49:6c: c2:89:f6:88:54:c9:2e:3b:cf:1e:98:3e:5a:0b:b2:a0:41:2a: 56:f3:72:10:3f:da:9c:45:6a:d6:68:f4:a7:ff:07:2f:ca:e0: 00:d2:99:6d:fb:3c:37:1a:a9:bb:31:f7:f0:fb:77:61:7d:d5: 36:e9:c4:9e:46:f5:f9:5b:fc:dd:a5:d0:6e:a1:90:5f:45:af: 91:0f:39:30:7a:b0:29:1d:f1:a0:b3:94:85:68:5a:87:f1:1f: b3:1e:d2:5e:0f:96:05:f7:5e:78:44:42:82:b8:4e:54:b8:6e: 98:98:8a:01:33:bb:f4:40:f0:3c:7a:95:f8:17:8b:a1:df:82: b4:35:40:67:18:fe:e5:73:f1:2b:2e:44:96:97:24:9f:35:1c: 65:1f:ec:aa:e0:28:05:7e:9e:22:f4:09:86:6f:68:bf:e7:db: 95:7b:15:48:a7:64:b3:73:29:16:7e:d2:0a:95:e9:fd:40:b0: c6:dc:b8:4b:c4:79:c0:a8:3a:7f:2e:bc:d7:31:f4:e2:87:0a: 15:60:fc:38:6a:fd:13:75:e8:db:e6:90:dc:0e:58:77:32:47: fb:0b:30:2b:45:cf:4d:0e:a7:b3:dc:08:26:ec:46:15:71:4a: ad:2e:e6:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9uTOFTRnlzYW5aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ5MWI3MmMtYjgzYS00MzFjLTljZmQtNjBiNzk3ZjMx MTNlMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTFlNzI4NTQtYjI4Zi00ZGQ1LWJiZmMtZjExMjUyOGI3MWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvvaEGL8K9AUO8tZnEl3BZDGC4VEAdroceBx xJLjVK2YAfTYarXd1naDlvjzBoiP//YZp0rW/TJhES3wKycCexhT5hykSPUQhpOw nS199V/vyXjachaAnDg+LseLai2ENwyQU0RIMVVzND+ngOcFiHXQfFNkQfe1WpOL kxuAGHNN0UrCKy0aDNU+R0YGBerNKzvPQQHsYCzUsG6yVHPBRxipNAnw/ZvL87wP sHC9yH/UP72SOCI7SddQYNerb1ivaXaI7xeC6atsoPC1/BhBKB8W2NnJCkNjooqN MmFOfmTXT6ity0Y9TD7Xd3yk+FFu5MflxOgdvetSO5184V0MxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJBmuUBwq7MO3cMMwFETHrKecHDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDkx YjcyYy1iODNhLTQzMWMtOWNmZC02MGI3OTdmMzExM2UvM2M1YmY2OGItODg3NS0z NzQ0LTljNmEtZjBiOTI0Y2UyM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWQ5MWI3MmMtYjgzYS00MzFjLTlj ZmQtNjBiNzk3ZjMxMTNlLzlkOTFiNzJjLWI4M2EtNDMxYy05Y2ZkLTYwYjc5N2Yz MTEzZS5jcmwwHwYDVR0jBBgwFoAUPjNm+hrAnQiv1exytdf7JMy2qUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDkxYjcyYy1iODNhLTQzMWMtOWNmZC02MGI3 OTdmMzExM2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIWKqv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHmPu05RhwbrDSSQlV2WRPZJbMKJ9ohUyS47zx6YPloLsqBBKlbz chA/2pxFatZo9Kf/By/K4ADSmW37PDcaqbsx9/D7d2F91TbpxJ5G9flb/N2l0G6h kF9Fr5EPOTB6sCkd8aCzlIVoWofxH7Me0l4PlgX3XnhEQoK4TlS4bpiYigEzu/RA 8Dx6lfgXi6HfgrQ1QGcY/uVz8SsuRJaXJJ81HGUf7KrgKAV+niL0CYZvaL/n25V7 FUinZLNzKRZ+0gqV6f1AsMbcuEvEecCoOn8uvNcx9OKHChVg/Dhq/RN16NvmkNwO WHcyR/sLMCtFz00Op7PcCCbsRhVxSq0u5gY= -----END CERTIFICATE-----Generated at Mon Oct 20 21:21:15 2025 by rpki-client