$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa File: 2189e87f-7779-3596-9c34-f01904d2e2a0.roa (raw, json) Hash identifier: QhpQ7a/gVniLDgwWhFzK0GznZU8p0c6P4QS7gegJR/I= Subject key identifier: 6C:27:E9:F1:02:02:4D:73:DB:07:E9:EE:53:C6:31:F6:3D:67:D0:19 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A737F71C5C024912704E80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:56b:3f60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:37:f7:1c:5c:02:49:12:70:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=31eaecb6-e146-4626-a378-7f5cb13aad15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:0e:88:1a:a7:a1:0f:ef:1c:f4:de:b3:6b: 05:b5:85:0d:0b:25:04:68:3c:cc:90:ad:4c:87:5c: e8:8b:c6:ba:b9:e1:91:7d:f2:47:de:a0:6a:85:3e: 9c:75:d8:87:1b:37:f6:a7:a9:4e:1e:d9:ff:3b:2b: b5:31:f8:6c:09:d3:5a:c4:a6:61:09:83:e8:bf:45: 26:ac:6d:f7:af:4b:e4:5d:d8:c1:c8:a2:3c:98:7c: 4d:a6:79:ba:8a:57:78:f8:6c:b3:be:1e:ea:ba:ad: 0f:ac:5d:8a:96:3a:d1:ba:e4:6a:a6:e6:82:2f:27: 6e:66:be:37:31:71:d8:b2:60:b7:25:1e:f2:47:75: 9f:ba:55:b1:f4:78:b2:d6:e9:8b:c0:ff:03:40:f3: 8c:92:88:05:cf:1f:95:d9:c4:00:f3:2e:08:58:3c: ac:e1:fa:31:ed:d1:eb:85:ef:bb:d9:84:c7:23:be: 67:e1:00:51:13:35:06:7f:91:25:6e:c0:a8:16:92: 8c:d0:fb:0a:41:38:aa:6b:15:9f:d2:80:65:91:d6: bb:9d:9f:e9:d1:cf:e1:12:67:11:51:85:a3:87:b2: a1:0f:3c:57:ac:75:ef:37:41:4e:d0:2c:49:9c:4d: 02:72:ea:d0:e2:96:97:c7:ad:bb:c8:5b:70:ce:e9: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:27:E9:F1:02:02:4D:73:DB:07:E9:EE:53:C6:31:F6:3D:67:D0:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:3f60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:3a:4c:c8:25:e3:33:ee:59:4c:c5:68:82:bf:a6:c8:9d:d9: 9e:17:b1:c2:c2:8f:9f:ab:d3:40:ac:69:bb:d9:2a:45:8e:eb: 4b:92:2e:d5:cd:28:4e:d9:16:69:b3:47:92:5e:0a:b7:61:85: e9:b5:e2:dc:75:fa:56:10:0c:5d:4e:21:84:f5:e6:11:9c:50: ca:36:79:2d:3a:30:4d:67:b3:53:a1:e6:73:3c:c9:c7:e5:fc: c5:fd:49:f6:ca:7d:02:79:52:cf:fe:0c:83:3c:15:b3:26:35: 9f:57:07:39:51:94:8e:58:a0:d9:a9:50:f0:b1:8b:8c:24:91: ba:e2:de:df:25:db:3e:4d:6a:b5:ca:fc:44:f7:e9:68:cd:84: 7f:ab:b9:ca:b2:76:13:5a:52:13:40:9d:70:9d:f7:95:21:57: df:c7:69:c1:ec:af:20:07:b7:14:59:ce:32:0c:1d:d0:d0:3a: 8c:c0:36:91:46:e8:aa:81:a9:4f:e8:46:7a:87:b5:bb:9a:c1: f2:6c:58:71:1d:bb:5e:ad:2d:9a:c1:eb:f9:20:3c:16:65:16: c2:95:6d:b9:95:3b:c1:e8:dd:cf:3c:d6:36:2e:5e:f3:f0:4a: cb:67:56:b3:be:19:2d:2e:a6:65:9e:ed:98:44:f0:18:c7:d7: a5:ff:5a:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzf3HFwCSRJwToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MzFlYWVjYjYtZTE0Ni00NjI2LWEzNzgtN2Y1Y2IxM2FhZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqagOiBqnoQ/vHPTes2sFtYUNCyUEaDzMkK1M h1zoi8a6ueGRffJH3qBqhT6cddiHGzf2p6lOHtn/Oyu1MfhsCdNaxKZhCYPov0Um rG33r0vkXdjByKI8mHxNpnm6ild4+Gyzvh7quq0PrF2KljrRuuRqpuaCLyduZr43 MXHYsmC3JR7yR3WfulWx9Hiy1umLwP8DQPOMkogFzx+V2cQA8y4IWDys4fox7dHr he+72YTHI75n4QBREzUGf5ElbsCoFpKM0PsKQTiqaxWf0oBlkda7nZ/p0c/hEmcR UYWjh7KhDzxXrHXvN0FO0CxJnE0CcurQ4paXx627yFtwzulpMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGwn6fECAk1z2wfp7lPGMfY9Z9AZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjE4OWU4N2YtNzc3OS0z NTk2LTljMzQtZjAxOTA0ZDJlMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFaz9g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMo6TMgl4zPuWUzFaIK/psid2Z4XscLCj5+r00CsabvZKkWO60uS LtXNKE7ZFmmzR5JeCrdhhem14tx1+lYQDF1OIYT15hGcUMo2eS06ME1ns1Oh5nM8 ycfl/MX9SfbKfQJ5Us/+DIM8FbMmNZ9XBzlRlI5YoNmpUPCxi4wkkbri3t8l2z5N arXK/ET36WjNhH+rucqydhNaUhNAnXCd95UhV9/HacHsryAHtxRZzjIMHdDQOozA NpFG6KqBqU/oRnqHtbuawfJsWHEdu16tLZrB6/kgPBZlFsKVbbmVO8Ho3c881jYu XvPwSstnVrO+GS0upmWe7ZhE8BjH16X/Wg8= -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:09 2025 by rpki-client