$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa File: a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa (raw, json) Hash identifier: i6YXkUOBXgCpfUVGc2lvgATwykEL5vveE8bieEWL2UU= Subject key identifier: 32:1B:C8:7A:76:4B:FC:62:71:A8:35:BF:33:0A:43:21:A2:7D:58:09 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584B4081B1B9CCFE20D42335F480 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 17378 IP address blocks: 2001:19b8::/32 maxlen: 48 2001:4970::/32 maxlen: 48 2600:2c00::/30 maxlen: 48 2604:7e00::/32 maxlen: 48 2604:7f80::/32 maxlen: 48 2606:a700::/32 maxlen: 48 2607:f1d0::/32 maxlen: 48 2607:f3f8::/32 maxlen: 48 2607:fc38::/32 maxlen: 48 2607:fdb8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b1:b9:cc:fe:20:d4:23:35:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=95cd1447-4659-4e83-a56e-a720fde7926a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:a8:42:16:97:be:33:a8:e7:e3:6a:2e:65: 6d:20:31:57:44:a8:78:b8:f7:5c:d6:f6:b6:ce:e2: d3:1a:d2:1c:f4:bf:a6:07:8c:3a:12:63:b3:bf:74: 56:05:57:7a:34:1c:b8:92:eb:2c:04:07:0e:3d:28: e8:fb:06:32:fb:86:92:5c:d7:f0:8a:57:62:73:6b: c3:28:8f:26:19:ca:c6:20:ff:06:2e:32:c6:9a:00: 41:7f:f9:4d:49:f0:04:a2:8c:0e:2c:67:e1:99:ee: fd:ce:ff:9e:2b:a9:12:53:37:70:29:6d:99:cb:62: fc:4d:3e:46:8c:54:84:5d:c9:84:e2:d5:ff:14:5f: 95:f3:70:6f:f5:b5:45:30:7e:e4:14:0c:2b:5f:9b: 46:97:a1:e1:cf:7b:cc:ef:c0:cc:82:83:d4:6c:38: 46:f3:96:01:bf:6c:04:7e:73:7f:2a:fe:bc:c8:49: 81:22:9b:21:c6:19:a7:64:aa:d9:7c:3f:0e:84:89: c7:ac:d0:77:a9:5d:8d:97:b2:0b:d5:61:3c:5a:12: e9:1b:1a:48:f5:e6:7a:88:2f:44:01:be:49:9f:7b: 4f:fc:22:d5:b3:e3:1a:14:db:9e:a1:d7:27:db:5a: 80:9c:22:cd:35:45:74:a8:55:fa:c2:53:17:b6:a9: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1B:C8:7A:76:4B:FC:62:71:A8:35:BF:33:0A:43:21:A2:7D:58:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b8::/32 2001:4970::/32 2600:2c00::/30 2604:7e00::/32 2604:7f80::/32 2606:a700::/32 2607:f1d0::/32 2607:f3f8::/32 2607:fc38::/32 2607:fdb8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:dc:e8:50:b9:fb:5f:d3:15:f1:1e:22:50:d2:47:bd:76:20: ad:e6:93:51:f0:01:0b:96:fb:a6:db:98:7a:ca:3e:96:81:70: bc:94:f3:53:2b:4c:9d:45:30:a6:d6:c5:98:01:44:ad:8d:83: ad:7c:ff:d4:a5:bb:3d:9b:3a:89:12:86:59:c8:0a:e4:ba:27: 12:3f:bf:ea:73:64:aa:2e:84:b9:1c:fd:0f:95:3f:d8:e0:9d: 0c:09:00:f8:e1:f6:c3:57:8d:ca:41:bf:ab:32:cf:00:96:03: 0b:89:8b:18:94:3d:48:2f:2b:47:8b:54:28:6d:96:6e:d7:a8: ec:c5:1e:01:4f:60:95:c4:ea:0e:b7:90:da:c5:ee:e8:20:d2: ee:20:e2:ec:18:66:2a:b9:34:7f:03:74:f6:03:b8:d1:52:fa: 2f:39:5d:b9:16:2d:24:ca:96:1f:06:4f:d8:47:09:68:d9:ba: a6:66:7d:1c:bd:82:6a:90:b8:81:42:52:1a:a1:f4:fb:0e:fb: 27:fe:ea:e9:9f:67:bb:87:1e:ff:f1:51:ac:16:e3:3d:22:fb: 19:75:94:70:2e:6b:74:43:37:55:ba:8b:c8:39:1a:85:dd:ea: 26:63:9a:69:1f:78:b6:55:9d:e2:92:fd:47:e3:4b:3c:94:a7: a7:99:3f:c2 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEtAgbG5zP4g1CM19IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OTVjZDE0NDctNDY1OS00ZTgzLWE1NmUtYTcyMGZkZTc5MjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1eoQhaXvjOo5+NqLmVtIDFXRKh4uPdc1va2 zuLTGtIc9L+mB4w6EmOzv3RWBVd6NBy4kussBAcOPSjo+wYy+4aSXNfwildic2vD KI8mGcrGIP8GLjLGmgBBf/lNSfAEoowOLGfhme79zv+eK6kSUzdwKW2Zy2L8TT5G jFSEXcmE4tX/FF+V83Bv9bVFMH7kFAwrX5tGl6Hhz3vM78DMgoPUbDhG85YBv2wE fnN/Kv68yEmBIpshxhmnZKrZfD8OhInHrNB3qV2Nl7IL1WE8WhLpGxpI9eZ6iC9E Ab5Jn3tP/CLVs+MaFNueodcn21qAnCLNNUV0qFX6wlMXtqnpMwIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFDIbyHp2S/xicag1vzMKQyGifVgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTQyY2Q1ZGMtYzlmYi0z MDY1LWJmZDMtMTdjZTY0ZWI4OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUAIAEZuAMF ACABSXADBQImACwAAwUAJgR+AAMFACYEf4ADBQAmBqcAAwUAJgfx0AMFACYH8/gD BQAmB/w4AwUAJgf9uDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH3OhQuftf0xXxHiJQ0ke9diCt5pNR8AEL lvum25h6yj6WgXC8lPNTK0ydRTCm1sWYAUStjYOtfP/Upbs9mzqJEoZZyArkuicS P7/qc2SqLoS5HP0PlT/Y4J0MCQD44fbDV43KQb+rMs8AlgMLiYsYlD1ILytHi1Qo bZZu16jsxR4BT2CVxOoOt5Daxe7oINLuIOLsGGYquTR/A3T2A7jRUvovOV25Fi0k ypYfBk/YRwlo2bqmZn0cvYJqkLiBQlIaofT7Dvsn/urpn2e7hx7/8VGsFuM9IvsZ dZRwLmt0QzdVuovIORqF3eomY5ppH3i2VZ3ikv1H40s8lKenmT/C -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:40 2025 by rpki-client