$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c20badee-9057-3bd2-9eae-6e452c4e55e9.roa File: c20badee-9057-3bd2-9eae-6e452c4e55e9.roa (raw, json) Hash identifier: 0s4tk+XAD3LYOH/zW3vIAIaBU3rXgziaJUXggiGV1IY= Subject key identifier: F6:AE:4B:29:14:32:1A:31:7E:B3:1C:34:97:7C:3A:84:98:47:F6:EF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73AE2AA87E6E2C2B80780 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c20badee-9057-3bd2-9eae-6e452c4e55e9.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:568:201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3a:e2:aa:87:e6:e2:c2:b8:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=9fc9c988-632d-4085-9626-12a7b979437d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:80:c9:05:1e:a3:32:5f:7a:23:32:12:88: 8b:49:1a:38:da:63:e4:d0:06:b5:0a:b7:62:8b:44: 86:7a:c7:ef:6f:e1:49:6e:86:bb:dd:88:94:b0:75: 1a:84:90:1e:49:b4:fc:50:d1:79:c5:9b:51:df:d8: b5:69:c0:6c:33:6f:e3:79:3d:5d:98:62:ca:a9:01: 87:fb:5a:e4:21:3d:eb:54:ba:49:10:26:75:37:a8: ad:89:d1:cf:5b:d7:7e:b1:6f:94:02:c5:85:4c:6e: 7d:83:13:3d:ca:1b:43:84:bd:61:a8:a1:f9:2e:44: e2:26:f3:29:f6:4c:bb:4c:1d:38:8a:5a:58:3e:b1: a6:57:8f:44:07:08:fb:c4:b7:c7:1d:07:29:31:00: 1c:78:7e:ed:af:b2:b8:ba:ed:18:9e:ab:0c:59:3e: 93:ca:82:41:20:0b:2e:ae:d7:fb:52:d2:ba:96:10: 57:60:df:c7:a1:ef:8a:58:17:bf:c2:58:61:40:1f: a9:3b:f3:8c:14:ce:db:03:4f:b9:e1:fa:63:90:2a: 7f:ff:1a:33:4d:29:b1:7c:2d:61:5c:86:59:65:b3: e4:21:09:54:d5:d3:23:d7:50:73:5a:bb:47:b3:4d: 68:5a:4c:73:60:3a:97:3e:49:ea:1b:d5:3e:b2:6a: a4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AE:4B:29:14:32:1A:31:7E:B3:1C:34:97:7C:3A:84:98:47:F6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c20badee-9057-3bd2-9eae-6e452c4e55e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:201::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:55:35:48:d1:e0:8d:18:58:33:68:a4:b6:cd:26:8f:74:76: 90:88:a4:ff:39:39:27:d7:61:70:0d:2a:e4:f7:2b:c2:53:0f: 7b:2b:57:63:2c:0f:27:19:7c:da:24:89:27:15:32:15:8d:4f: e6:97:2b:73:0b:78:20:22:11:1c:66:13:ec:46:86:40:84:07: a0:f1:21:db:e5:01:c4:f6:5a:47:90:31:43:74:18:d3:5f:d1: 0c:8f:c5:fe:64:68:84:64:80:2b:b0:66:61:61:43:66:cd:96: 3c:85:14:f5:da:cb:60:dc:07:b8:99:ab:dc:13:30:3b:44:81: 83:a7:a0:bb:da:77:ff:85:d7:b8:b2:05:8f:36:c5:a7:02:44: 38:80:b9:45:27:cb:96:77:3b:0d:24:ca:d4:b3:86:56:fe:57: c0:f0:27:3d:41:97:63:76:fc:c7:ec:18:98:60:5b:65:cf:68: 3f:ce:7c:82:3c:ec:e0:52:94:46:61:ca:49:d4:53:01:de:66: 2f:6d:95:24:a7:44:32:7a:79:11:f4:f0:f5:93:54:75:d1:fc: 17:b0:65:1e:d0:cf:d5:c6:8a:0b:a1:a0:68:1c:a0:d3:76:0d: fc:f6:7b:66:56:9b:d1:da:90:68:c0:3d:d3:b6:c7:44:1e:cf: 03:dd:60:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzriqofm4sK4B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk OWZjOWM5ODgtNjMyZC00MDg1LTk2MjYtMTJhN2I5Nzk0MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxGAyQUeozJfeiMyEoiLSRo42mPk0Aa1Crdi i0SGesfvb+FJboa73YiUsHUahJAeSbT8UNF5xZtR39i1acBsM2/jeT1dmGLKqQGH +1rkIT3rVLpJECZ1N6itidHPW9d+sW+UAsWFTG59gxM9yhtDhL1hqKH5LkTiJvMp 9ky7TB04ilpYPrGmV49EBwj7xLfHHQcpMQAceH7tr7K4uu0YnqsMWT6TyoJBIAsu rtf7UtK6lhBXYN/Hoe+KWBe/wlhhQB+pO/OMFM7bA0+54fpjkCp//xozTSmxfC1h XIZZZbPkIQlU1dMj11BzWrtHs01oWkxzYDqXPknqG9U+smqkywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPauSykUMhoxfrMcNJd8OoSYR/bvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzIwYmFkZWUtOTA1Ny0z YmQyLTllYWUtNmU0NTJjNGU1NWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAIB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9VNUjR4I0YWDNopLbNJo90dpCIpP85OSfXYXANKuT3K8JTD3sr V2MsDycZfNokiScVMhWNT+aXK3MLeCAiERxmE+xGhkCEB6DxIdvlAcT2WkeQMUN0 GNNf0QyPxf5kaIRkgCuwZmFhQ2bNljyFFPXay2DcB7iZq9wTMDtEgYOnoLvad/+F 17iyBY82xacCRDiAuUUny5Z3Ow0kytSzhlb+V8DwJz1Bl2N2/MfsGJhgW2XPaD/O fII87OBSlEZhyknUUwHeZi9tlSSnRDJ6eRH08PWTVHXR/BewZR7Qz9XGiguhoGgc oNN2Dfz2e2ZWm9HakGjAPdO2x0QezwPdYDw= -----END CERTIFICATE-----Generated at Mon Oct 20 01:10:57 2025 by rpki-client