$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa File: c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa (raw, json) Hash identifier: 5kB8WcAWLxXoxOtRcyZ8Ddu91O/LzNuiHF6op6sa/Xo= Subject key identifier: 39:D7:F9:B7:CA:5E:6E:66:31:06:DD:9F:5F:F8:C2:22:DD:30:E7:AC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5DD1DF4C4DF068DB32D8E640 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 852 IP address blocks: 2001:569:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:df:4c:4d:f0:68:db:32:d8:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=cc6f404d-dfe9-485f-9abf-381bc0218fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:1b:07:52:b9:10:e7:d4:e2:97:a3:12:63: be:e9:36:c2:3b:74:8e:5c:fd:f1:be:a6:76:d3:d7: 68:15:e5:1a:10:ec:56:3f:3a:2c:a9:04:2f:68:ac: e4:34:49:bf:f0:b2:84:97:32:69:a8:cb:4c:ef:1f: 6d:b1:8b:ec:5b:40:54:33:d9:09:fa:21:8c:ea:29: c8:f9:fd:cb:87:ca:97:c1:14:f5:68:6d:a2:4f:fd: 8a:6a:c0:59:85:9d:b2:ce:cf:5e:14:87:99:7f:ca: b6:47:e9:0b:17:aa:2e:02:18:67:28:9d:37:59:9e: 46:5d:9f:b6:b2:55:16:5f:1d:e9:a0:0f:fc:fe:e6: 9c:92:75:0c:36:4b:d6:80:70:5d:94:88:ab:e3:2e: 2c:9e:f7:17:a7:bf:de:87:58:08:4f:cd:df:af:9c: d6:ef:e0:63:90:75:d2:67:b4:4a:8b:0a:62:36:f8: f2:83:7e:2f:97:d4:66:47:b1:cf:21:c5:11:9f:8f: 90:ee:c4:3d:2f:92:a4:4a:d5:e1:77:02:83:8f:42: a6:6d:8e:8e:d5:fc:76:df:70:b4:30:79:b6:b2:f4: 54:17:2b:f7:5c:d2:9e:c8:bb:95:25:af:49:fc:09: 98:d4:df:e5:29:5a:5c:49:1f:de:c5:d4:72:e7:3a: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D7:F9:B7:CA:5E:6E:66:31:06:DD:9F:5F:F8:C2:22:DD:30:E7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:569:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:97:0b:54:a6:50:59:e1:49:64:8a:86:4a:1c:9b:82:4c:79: 03:3e:0b:49:73:fe:99:cc:f3:25:79:d2:f9:c4:a5:b1:10:99: 85:a3:1f:1c:b9:73:d3:2d:ec:9b:94:d2:fe:78:e9:41:21:17: 8b:a9:96:68:af:95:b4:10:7c:12:0b:b0:f5:a4:61:99:51:a2: ec:0f:bd:89:8d:8f:1e:7d:b8:51:bd:a9:ac:be:22:4d:f5:ce: 65:20:4c:0a:b8:6a:8c:1c:70:76:0d:f4:19:6b:c7:49:1d:71: 3c:4c:d4:bc:15:7b:d3:ab:37:6c:50:b8:0a:99:41:af:5f:e2: 94:e7:cd:83:83:5a:af:09:56:80:78:37:0e:84:79:e1:c1:06: 39:cf:da:39:14:01:e2:86:1b:3b:49:2b:ed:50:42:88:8e:2c: 3c:51:9f:ed:05:06:54:e2:6d:57:d7:5e:5d:bb:5f:7d:b8:20: f9:50:69:2b:4e:7a:85:9d:14:a8:c6:d4:60:3b:93:61:98:58: 2f:62:e0:c6:42:a3:03:1f:7a:6f:ff:55:4c:f2:59:f2:a2:bf: 11:70:49:9c:3b:21:14:29:44:43:60:cf:2a:fe:f4:4a:7b:43: 84:7e:76:52:de:c0:16:f9:4c:21:ab:48:4f:97:3e:08:a2:74: 3f:d2:54:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtd0d9MTfBo2zLY5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2M2ZjQwNGQtZGZlOS00ODVmLTlhYmYtMzgxYmMwMjE4ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxYbB1K5EOfU4pejEmO+6TbCO3SOXP3xvqZ2 09doFeUaEOxWPzosqQQvaKzkNEm/8LKElzJpqMtM7x9tsYvsW0BUM9kJ+iGM6inI +f3Lh8qXwRT1aG2iT/2KasBZhZ2yzs9eFIeZf8q2R+kLF6ouAhhnKJ03WZ5GXZ+2 slUWXx3poA/8/uacknUMNkvWgHBdlIir4y4snvcXp7/eh1gIT83fr5zW7+BjkHXS Z7RKiwpiNvjyg34vl9RmR7HPIcURn4+Q7sQ9L5KkStXhdwKDj0KmbY6O1fx233C0 MHm2svRUFyv3XNKeyLuVJa9J/AmY1N/lKVpcSR/exdRy5zpEeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDnX+bfKXm5mMQbdn1/4wiLdMOesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzFkYzI3YTAtZGJjMi0z N2Y5LWJhYjctZTMzYzFlN2E2NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaQAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMWXC1SmUFnhSWSKhkocm4JMeQM+C0lz/pnM8yV50vnEpbEQmYWj Hxy5c9Mt7JuU0v546UEhF4uplmivlbQQfBILsPWkYZlRouwPvYmNjx59uFG9qay+ Ik31zmUgTAq4aowccHYN9Blrx0kdcTxM1LwVe9OrN2xQuAqZQa9f4pTnzYODWq8J VoB4Nw6EeeHBBjnP2jkUAeKGGztJK+1QQoiOLDxRn+0FBlTibVfXXl27X324IPlQ aStOeoWdFKjG1GA7k2GYWC9i4MZCowMfem//VUzyWfKivxFwSZw7IRQpRENgzyr+ 9Ep7Q4R+dlLewBb5TCGrSE+XPgiidD/SVO8= -----END CERTIFICATE-----Generated at Sun Oct 19 22:26:17 2025 by rpki-client