$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2b5f910b-7d7d-3334-9361-98cb0de97f81.roa File: 2b5f910b-7d7d-3334-9361-98cb0de97f81.roa (raw, json) Hash identifier: JNAqM8rmtfdOJYWAvezB0saxChwcJj1+V+JOF586QfI= Subject key identifier: 73:84:3C:57:39:FE:BB:1C:43:9D:E8:0D:05:A7:0E:83:0F:F5:61:B6 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584B2CF6E75D83EF5DFA5C75EC00 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2b5f910b-7d7d-3334-9361-98cb0de97f81.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 26967 IP address blocks: 2620:125:b00f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e7:5d:83:ef:5d:fa:5c:75:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=6a65a540-f03b-4614-9f7c-f410a8d64228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a2:37:36:d6:f0:12:93:ae:fa:b2:0e:5e:fc: cf:cd:f5:f1:cf:53:d2:fd:5f:2c:5f:21:1c:f4:11: ef:68:90:0e:5a:37:9e:63:f4:97:17:a4:1d:74:e5: 58:12:92:27:e2:5b:c3:8f:75:b1:af:96:c5:85:b5: 41:b2:94:2e:ff:0c:e0:01:08:0f:70:ef:a4:0e:36: f8:e6:d5:28:bb:62:15:b0:4f:dd:f4:67:21:cb:da: 0e:52:84:cf:d6:8d:19:9e:8a:32:20:13:ac:44:db: 98:53:be:c4:cc:b2:5f:81:d0:6a:39:58:3a:94:1e: 71:9d:3a:1b:78:06:95:a7:02:82:23:df:66:dc:b4: ce:de:b1:dc:a3:67:96:93:61:df:f5:1d:70:47:ec: 5f:4f:a2:e8:08:05:15:0e:ce:88:22:54:54:bd:7e: b7:ee:01:85:72:5c:fd:d5:11:eb:12:92:85:42:24: dd:f9:f5:6d:b0:a4:f6:25:f8:f7:d4:b0:7e:0c:2b: 10:34:b4:c2:fe:86:65:c4:d1:49:61:d2:cf:dd:83: 2f:73:02:cf:cd:f6:d7:f8:41:f2:67:cb:3a:4c:53: c4:97:72:db:fe:ac:73:b4:29:2d:00:43:bc:b0:d9: 34:98:55:99:3e:b6:38:b7:9b:96:8f:80:a6:c3:bb: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:84:3C:57:39:FE:BB:1C:43:9D:E8:0D:05:A7:0E:83:0F:F5:61:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2b5f910b-7d7d-3334-9361-98cb0de97f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv6: 2620:125:b00f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c3:8e:42:1f:fb:24:e1:37:5c:1b:d3:de:88:da:61:8d:48: 8b:9a:14:34:e8:52:9d:50:45:c8:3e:46:88:d4:2f:ff:3f:da: dd:d8:97:b5:b1:36:86:28:cb:65:db:8d:c6:5f:98:36:94:0c: d0:75:56:a3:49:70:ba:8f:19:22:2c:5f:1b:bd:11:f0:6a:95: 35:ab:23:e4:59:e1:ea:d6:43:4b:85:2e:62:e9:8c:0d:b1:92: d9:e4:88:26:44:a3:52:4f:a9:aa:d5:21:b6:08:39:8e:d5:71: 71:ac:89:7b:f9:18:68:0c:be:63:aa:97:32:1f:fc:36:ed:9c: 92:30:24:91:8c:40:74:94:78:38:b5:69:bd:25:02:88:23:65: c8:ba:83:ad:f2:0d:72:17:15:c0:95:8e:85:9f:63:40:9f:6f: 83:12:d9:8e:05:57:9c:e7:82:c7:35:ba:7b:67:31:34:bf:23: bc:4d:a9:7f:f2:5d:fe:a1:9b:53:4e:10:9d:91:e5:5b:70:ab: e6:c0:43:15:5f:d2:f3:43:b0:28:14:a6:76:87:a8:63:03:46: 00:2d:ec:fb:19:1e:b3:63:af:c2:a4:84:c9:b2:04:dd:4e:72: b8:34:01:23:d3:12:e6:37:00:0b:ec:8f:c5:00:f0:43:27:af: 79:96:5e:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9uddg+9d+lx17AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NmE2NWE1NDAtZjAzYi00NjE0LTlmN2MtZjQxMGE4ZDY0MjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqI3NtbwEpOu+rIOXvzPzfXxz1PS/V8sXyEc 9BHvaJAOWjeeY/SXF6QddOVYEpIn4lvDj3Wxr5bFhbVBspQu/wzgAQgPcO+kDjb4 5tUou2IVsE/d9Gchy9oOUoTP1o0ZnooyIBOsRNuYU77EzLJfgdBqOVg6lB5xnTob eAaVpwKCI99m3LTO3rHco2eWk2Hf9R1wR+xfT6LoCAUVDs6IIlRUvX637gGFclz9 1RHrEpKFQiTd+fVtsKT2Jfj31LB+DCsQNLTC/oZlxNFJYdLP3YMvcwLPzfbX+EHy Z8s6TFPEl3Lb/qxztCktAEO8sNk0mFWZPrY4t5uWj4Cmw7sTpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHOEPFc5/rscQ53oDQWnDoMP9WG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMmI1ZjkxMGItN2Q3ZC0z MzM0LTkzNjEtOThjYjBkZTk3ZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABJbAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADDDjkIf+yThN1wb096I2mGNSIuaFDToUp1QRcg+RojUL/8/2t3Y l7WxNoYoy2XbjcZfmDaUDNB1VqNJcLqPGSIsXxu9EfBqlTWrI+RZ4erWQ0uFLmLp jA2xktnkiCZEo1JPqarVIbYIOY7VcXGsiXv5GGgMvmOqlzIf/DbtnJIwJJGMQHSU eDi1ab0lAogjZci6g63yDXIXFcCVjoWfY0Cfb4MS2Y4FV5zngsc1untnMTS/I7xN qX/yXf6hm1NOEJ2R5Vtwq+bAQxVf0vNDsCgUpnaHqGMDRgAt7PsZHrNjr8KkhMmy BN1Ocrg0ASPTEuY3AAvsj8UA8EMnr3mWXr8= -----END CERTIFICATE-----Generated at Mon Oct 20 05:23:28 2025 by rpki-client