$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f1fd396-1f26-3eef-9293-9c0c69e87315.roa File: 3f1fd396-1f26-3eef-9293-9c0c69e87315.roa (raw, json) Hash identifier: xTrPBnftmHV6fYHFv3O4j2lgTmU9RMLhH6DDqTWcvsQ= Subject key identifier: AF:2C:2B:D5:4B:25:8D:0A:41:07:B8:2B:5D:19:F0:59:F9:AB:E9:BB Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73B7FDA5BFCD1B1339E40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f1fd396-1f26-3eef-9293-9c0c69e87315.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:56b:5f60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3b:7f:da:5b:fc:d1:b1:33:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=42f9008f-c1ba-4514-903c-b91d69431049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:67:33:c7:14:c4:e9:52:4f:45:18:7a:56: 2e:b1:cf:85:2c:0b:b5:52:80:cf:3d:b9:70:1b:d0: 9c:2e:4c:f5:ab:60:6a:0c:7e:2c:f7:dd:df:75:fd: 8f:08:bc:f8:cf:e5:69:16:c8:ca:79:24:bf:5f:34: 0d:92:5a:b7:c6:d4:2b:7d:8a:44:df:ae:23:fa:fd: 31:f0:99:7a:10:29:55:13:03:d3:89:bd:ac:4c:ad: b0:ad:d1:bf:a8:54:fb:3a:a4:b0:9b:fb:96:7b:45: 96:2c:2e:ce:c8:62:d3:cc:58:9b:70:6f:ea:12:11: d8:98:68:9e:52:5e:ae:13:51:df:e6:fa:85:2d:a2: e6:7c:4d:de:00:b5:e4:88:0a:e6:25:6e:cb:09:3f: 62:d9:4b:ae:ac:56:68:3d:27:55:00:bf:ff:b9:75: 19:f8:2f:99:a8:de:72:84:11:32:0d:1f:45:8b:df: e9:2d:64:48:47:34:59:90:bb:53:2a:c8:db:65:ea: 6b:1d:32:3e:20:78:a7:61:ad:33:0c:2c:ee:54:53: 9f:0b:26:47:b6:f3:f9:ee:0a:26:11:bf:4b:31:90: 9e:a0:22:b7:76:7c:81:44:89:37:e1:74:e6:d3:84: 6b:5d:32:3e:20:dd:aa:df:31:a6:a9:7f:00:59:95: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2C:2B:D5:4B:25:8D:0A:41:07:B8:2B:5D:19:F0:59:F9:AB:E9:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f1fd396-1f26-3eef-9293-9c0c69e87315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:5f60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:62:67:81:97:c5:4b:43:22:66:54:92:86:e0:8d:c9:b0:d1: eb:68:65:bd:32:42:4c:2a:ea:17:2f:a1:8b:ab:69:55:3b:30: f2:25:c7:c6:f0:6a:3a:73:3f:06:aa:21:4c:2f:4e:cd:76:f0: 7f:d0:e8:95:b0:09:bb:e7:c2:c4:f5:8b:0b:06:11:d6:73:43: 08:e1:6e:96:32:91:1f:62:9d:4c:9b:35:10:66:12:9b:55:cc: 53:9b:7b:1e:01:3f:89:ce:b3:9f:a9:f6:82:c9:35:54:de:e5: 8f:1a:a0:5e:96:f8:0d:53:34:b0:d2:03:7c:2c:dd:f4:94:1c: f3:3f:c8:01:6e:08:ab:a6:0e:7a:67:ce:f5:9a:30:41:8f:3d: 24:72:f1:28:12:a5:25:81:13:9d:2c:54:44:9e:48:c0:95:d2: 2a:33:0e:07:2a:b3:f6:48:d7:f9:d5:11:df:41:5a:4b:d0:e5: 07:e6:ed:70:73:80:2d:49:c7:4e:15:e5:e1:1a:7d:2b:5a:16: a3:0c:cc:69:40:98:3a:57:ec:3a:40:be:0e:38:70:0c:f3:97: c4:1a:c6:2d:93:be:ee:7a:37:7f:d4:85:11:a4:9f:2c:f7:ac: 0b:06:4c:a7:76:57:37:36:4e:87:63:57:30:64:cd:ab:e4:47: 19:a7:5d:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzt/2lv80bEznkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NDJmOTAwOGYtYzFiYS00NTE0LTkwM2MtYjkxZDY5NDMxMDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdZnM8cUxOlST0UYelYusc+FLAu1UoDPPblw G9CcLkz1q2BqDH4s993fdf2PCLz4z+VpFsjKeSS/XzQNklq3xtQrfYpE364j+v0x 8Jl6EClVEwPTib2sTK2wrdG/qFT7OqSwm/uWe0WWLC7OyGLTzFibcG/qEhHYmGie Ul6uE1Hf5vqFLaLmfE3eALXkiArmJW7LCT9i2UuurFZoPSdVAL//uXUZ+C+ZqN5y hBEyDR9Fi9/pLWRIRzRZkLtTKsjbZeprHTI+IHinYa0zDCzuVFOfCyZHtvP57gom Eb9LMZCeoCK3dnyBRIk34XTm04RrXTI+IN2q3zGmqX8AWZV1BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK8sK9VLJY0KQQe4K10Z8Fn5q+m7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2YxZmQzOTYtMWYyNi0z ZWVmLTkyOTMtOWMwYzY5ZTg3MzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFa19g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAN1iZ4GXxUtDImZUkobgjcmw0etoZb0yQkwq6hcvoYuraVU7MPIl x8bwajpzPwaqIUwvTs128H/Q6JWwCbvnwsT1iwsGEdZzQwjhbpYykR9inUybNRBm EptVzFObex4BP4nOs5+p9oLJNVTe5Y8aoF6W+A1TNLDSA3ws3fSUHPM/yAFuCKum DnpnzvWaMEGPPSRy8SgSpSWBE50sVESeSMCV0iozDgcqs/ZI1/nVEd9BWkvQ5Qfm 7XBzgC1Jx04V5eEafStaFqMMzGlAmDpX7DpAvg44cAzzl8Qaxi2Tvu56N3/UhRGk nyz3rAsGTKd2Vzc2TodjVzBkzavkRxmnXQE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:57 2025 by rpki-client