$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7921f72-1e1e-3023-a70f-6191483e885e.roa File: c7921f72-1e1e-3023-a70f-6191483e885e.roa (raw, json) Hash identifier: KLbzCFbPKFdaaVUryvIHY+q7FXHsHaxdsJGv11lUGAY= Subject key identifier: 0E:AE:B3:AE:9B:56:42:2F:06:50:E3:7D:91:65:3F:94:0A:30:8E:F7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5DD1E393E61D3D67BF13B680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7921f72-1e1e-3023-a70f-6191483e885e.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 852 IP address blocks: 2001:56b:400b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e3:93:e6:1d:3d:67:bf:13:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=7cd41add-9891-4a6b-b883-163d200007f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:30:d0:4d:c5:5f:a7:41:bc:ec:89:53:47:1b: 62:9f:8f:7e:41:23:73:6e:f4:fd:90:4b:60:60:b0: fe:b3:2c:14:ea:f7:c7:1d:41:2f:c8:2e:7f:0f:08: 56:6d:d5:c1:5b:cd:c2:19:60:01:a3:41:57:4b:39: 43:ee:12:1b:b9:1e:f4:d9:44:65:45:d3:64:7e:46: 6f:ed:f1:a1:68:89:ec:1e:5e:d5:09:43:0d:cf:8b: d4:1b:25:cb:12:3f:b6:f2:29:77:6b:9c:94:24:56: 56:c7:da:4f:12:94:4b:aa:24:61:cc:0d:68:79:04: 1e:ba:4c:28:9d:9e:d5:e4:03:ad:4e:2c:45:d7:d5: ce:11:86:fe:82:37:0b:51:36:1a:5c:55:e0:ae:54: 1a:07:ed:07:c1:da:3d:8f:9f:13:fe:fa:25:85:bd: 2b:ee:c5:cd:38:b1:6f:30:50:7c:ee:95:2f:39:41: 31:6f:93:44:37:a4:59:d7:1b:e5:49:5b:9d:c1:c6: e9:70:f4:c4:7c:6e:ba:10:9a:bb:42:f1:15:41:e8: a0:2d:e0:68:7d:11:85:cc:04:27:81:72:8b:66:6c: 46:10:81:a1:fe:bd:1e:12:9a:ad:a7:b0:13:3d:d2: 4b:56:54:7c:1a:01:e3:3d:c6:52:1f:13:31:d4:22: 09:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AE:B3:AE:9B:56:42:2F:06:50:E3:7D:91:65:3F:94:0A:30:8E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7921f72-1e1e-3023-a70f-6191483e885e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:400b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:03:77:5a:61:82:5b:4a:24:83:03:48:50:17:d0:72:3a:e0: 2d:d2:05:03:a8:fd:39:f0:5b:0c:29:87:fc:be:3e:bb:ac:ac: 15:72:6e:0b:02:1e:d0:16:bb:ab:2e:70:a3:48:3a:bc:ae:2d: 51:47:40:7c:51:75:6a:e7:e4:6b:33:ab:3a:53:30:74:ce:a5: 2b:6b:79:85:3d:61:ed:2b:95:fc:70:48:85:c1:bf:1e:70:64: e3:da:5c:75:af:75:02:68:5b:e0:1d:ed:98:1d:22:29:05:62: 40:e9:82:6b:f9:50:0e:f1:02:d2:cb:09:e0:01:a1:2d:3c:a8: 1e:29:63:e8:d2:9f:24:a9:45:f8:e4:62:fd:c6:c1:9c:66:84: 32:4a:e3:00:79:0f:01:a3:7d:84:f6:bb:68:3a:72:b2:95:24: 82:c6:cc:29:c3:34:e0:58:c8:a2:b3:41:b6:f1:a7:3b:7d:3f: d7:19:d5:d9:d0:60:d9:51:e7:fe:3d:b8:b4:2d:aa:2e:8b:e1: 80:c5:3f:70:b4:90:1f:69:44:45:da:bd:18:57:41:12:28:51: 22:ba:b9:58:a5:bb:8f:2f:31:98:4b:e9:e6:6f:03:d1:24:f8: 4c:6e:ec:27:fb:ab:cb:41:89:f6:c9:41:04:2e:c8:5a:11:65: ba:92:7c:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtd0eOT5h09Z78TtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk N2NkNDFhZGQtOTg5MS00YTZiLWI4ODMtMTYzZDIwMDAwN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzDQTcVfp0G87IlTRxtin49+QSNzbvT9kEtg YLD+sywU6vfHHUEvyC5/DwhWbdXBW83CGWABo0FXSzlD7hIbuR702URlRdNkfkZv 7fGhaInsHl7VCUMNz4vUGyXLEj+28il3a5yUJFZWx9pPEpRLqiRhzA1oeQQeukwo nZ7V5AOtTixF19XOEYb+gjcLUTYaXFXgrlQaB+0Hwdo9j58T/volhb0r7sXNOLFv MFB87pUvOUExb5NEN6RZ1xvlSVudwcbpcPTEfG66EJq7QvEVQeigLeBofRGFzAQn gXKLZmxGEIGh/r0eEpqtp7ATPdJLVlR8GgHjPcZSHxMx1CIJAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA6us66bVkIvBlDjfZFlP5QKMI73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzc5MjFmNzItMWUxZS0z MDIzLWE3MGYtNjE5MTQ4M2U4ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFa0AL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM8Dd1phgltKJIMDSFAX0HI64C3SBQOo/TnwWwwph/y+PrusrBVy bgsCHtAWu6sucKNIOryuLVFHQHxRdWrn5GszqzpTMHTOpStreYU9Ye0rlfxwSIXB vx5wZOPaXHWvdQJoW+Ad7ZgdIikFYkDpgmv5UA7xAtLLCeABoS08qB4pY+jSnySp RfjkYv3GwZxmhDJK4wB5DwGjfYT2u2g6crKVJILGzCnDNOBYyKKzQbbxpzt9P9cZ 1dnQYNlR5/49uLQtqi6L4YDFP3C0kB9pREXavRhXQRIoUSK6uVilu48vMZhL6eZv A9Ek+Exu7Cf7q8tBifbJQQQuyFoRZbqSfCE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:29:39 2025 by rpki-client