$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305253d6-82e2-3de4-a457-451a62a8841a.roa File: 305253d6-82e2-3de4-a457-451a62a8841a.roa (raw, json) Hash identifier: OO0jJfGeGzO1yUQeC1lpQXC+PiU5o9astzqtoJtgkPc= Subject key identifier: D0:11:68:81:CB:BE:76:D7:87:32:80:F0:21:C4:A1:0F:F1:3B:48:2F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A738F43FECBBB12542C580 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305253d6-82e2-3de4-a457-451a62a8841a.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:569:6fd0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:38:f4:3f:ec:bb:b1:25:42:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=2cfc4a2f-7e1d-4730-83cd-f0187b3d35fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:43:c7:02:a8:29:9b:b2:36:5e:2b:1a:38: d9:37:72:8e:52:3a:68:f7:2d:2f:6f:3d:3b:ea:69: 7f:60:04:fc:b4:c8:0f:99:6d:c0:55:7f:08:6b:06: cf:2a:d0:7e:fc:c6:5d:15:bc:31:a1:ad:3c:f5:91: d8:af:e6:b5:1c:77:4e:9c:98:29:a5:fe:e7:e9:64: 5c:4e:e5:41:99:bd:91:2c:75:02:7f:9f:61:2c:0a: e3:30:e8:ca:c9:1c:8e:d0:2f:e9:b4:3b:e1:13:5a: 03:97:46:78:a5:a5:2e:a9:86:76:5f:f9:25:64:52: 4e:56:68:6e:ea:da:ec:ef:a7:2c:8a:d7:a2:3d:7a: 65:91:59:55:3c:67:f3:59:60:ca:a3:9c:58:bc:90: 79:cd:c2:35:72:69:ce:af:ca:57:d4:2f:b4:ff:25: d3:36:5e:5a:c8:f6:c8:55:06:f6:8c:38:c0:ec:a9: 9b:ea:dc:e7:80:00:19:54:a1:e1:af:28:61:65:ee: 4d:de:9f:e5:8f:26:1c:4d:1c:1e:59:1d:e0:3a:64: 4d:48:d7:c1:5a:41:88:96:a1:dc:1c:60:07:68:cd: e5:7d:c1:31:35:78:16:25:dc:37:02:3d:30:dd:41: fd:5c:2c:26:75:ca:27:51:fe:d4:ad:d6:f6:9f:b4: 9c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:11:68:81:CB:BE:76:D7:87:32:80:F0:21:C4:A1:0F:F1:3B:48:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305253d6-82e2-3de4-a457-451a62a8841a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:569:6fd0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a2:77:73:92:cc:81:24:ba:18:4a:f7:a2:97:9d:7f:71:57: 19:fc:3b:7e:f7:21:0b:33:ec:e1:7a:c1:18:27:81:3a:46:4c: 01:ef:f0:d2:43:d3:14:8c:ee:ca:94:93:f9:3f:42:ca:f1:e7: df:a6:2e:1d:7e:ef:3e:81:6d:9d:e3:11:fb:2f:6b:97:9f:2c: 7c:6e:aa:fc:22:4f:9e:82:b3:ce:12:ae:81:60:6c:8e:17:cb: e0:0a:eb:cf:3b:dc:6d:04:46:41:9c:49:f0:68:e7:c7:c9:46: 29:79:89:ce:4a:8f:77:f8:ac:07:cb:a8:74:73:e7:33:9c:96: 3b:c5:31:d4:00:37:c8:2f:48:eb:fa:2e:cc:80:62:35:ae:f6: 92:ef:1c:7e:ef:27:2e:7a:0c:00:26:eb:35:47:23:bc:90:01: 28:ea:4e:00:dc:4d:58:e8:3f:69:0c:39:a5:c8:be:86:43:01: 38:bc:c7:c3:ca:50:eb:7a:e8:94:f6:19:05:cc:08:be:f5:d9: 22:6e:03:25:f0:d0:9e:15:48:34:ee:dc:87:1d:35:b0:21:30: 1f:0d:70:a8:aa:c4:bd:cb:d1:36:85:09:69:0d:c7:f5:67:4b: 8f:87:dd:62:53:68:b9:19:1b:9e:5b:eb:0a:91:57:5f:7b:f2: 05:9c:f9:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzj0P+y7sSVCxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MmNmYzRhMmYtN2UxZC00NzMwLTgzY2QtZjAxODdiM2QzNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstJDxwKoKZuyNl4rGjjZN3KOUjpo9y0vbz07 6ml/YAT8tMgPmW3AVX8IawbPKtB+/MZdFbwxoa089ZHYr+a1HHdOnJgppf7n6WRc TuVBmb2RLHUCf59hLArjMOjKyRyO0C/ptDvhE1oDl0Z4paUuqYZ2X/klZFJOVmhu 6trs76csiteiPXplkVlVPGfzWWDKo5xYvJB5zcI1cmnOr8pX1C+0/yXTNl5ayPbI VQb2jDjA7Kmb6tzngAAZVKHhryhhZe5N3p/ljyYcTRweWR3gOmRNSNfBWkGIlqHc HGAHaM3lfcExNXgWJdw3Aj0w3UH9XCwmdconUf7Urdb2n7Sc7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNARaIHLvnbXhzKA8CHEoQ/xO0gvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzA1MjUzZDYtODJlMi0z ZGU0LWE0NTctNDUxYTYyYTg4NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFaW/Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH6id3OSzIEkuhhK96KXnX9xVxn8O373IQsz7OF6wRgngTpGTAHv 8NJD0xSM7sqUk/k/Qsrx59+mLh1+7z6BbZ3jEfsva5efLHxuqvwiT56Cs84SroFg bI4Xy+AK68873G0ERkGcSfBo58fJRil5ic5Kj3f4rAfLqHRz5zOcljvFMdQAN8gv SOv6LsyAYjWu9pLvHH7vJy56DAAm6zVHI7yQASjqTgDcTVjoP2kMOaXIvoZDATi8 x8PKUOt66JT2GQXMCL712SJuAyXw0J4VSDTu3IcdNbAhMB8NcKiqxL3L0TaFCWkN x/VnS4+H3WJTaLkZG55b6wqRV1978gWc+VY= -----END CERTIFICATE-----Generated at Sun Oct 19 20:09:26 2025 by rpki-client