$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa File: d9d5ced5-8d7a-384e-a047-9db809fa8081.roa (raw, json) Hash identifier: LwiDa20zX/WY2pTiiHe5XDfJkPn2oh9Ijh8LowW3eJI= Subject key identifier: 64:D0:94:75:02:B4:0C:FA:7D:FD:40:2C:C0:5A:21:D8:AE:1B:2A:9F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5DD1DFA4216264313D582AC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 852 IP address blocks: 2001:56a:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:df:a4:21:62:64:31:3d:58:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=7ca876e9-4546-45c9-aa50-a0a4a8a331f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c1:4b:ef:55:57:74:5b:23:c1:be:4d:60:0e: 2b:4f:38:96:41:c1:03:46:12:7e:27:73:dd:d5:c3: c2:30:ee:0b:2c:b0:3d:71:2a:1d:a3:90:0b:62:a0: 43:3d:71:bf:f7:4a:c7:61:e6:dd:dc:14:3f:c8:61: 98:69:c6:9e:61:d3:b9:10:3c:f9:b0:de:6c:60:2a: b8:33:1d:cc:52:5a:2e:05:5b:8a:92:78:1e:5a:32: a0:ee:27:10:d0:5e:ea:81:3d:be:8d:89:c0:fd:1e: 2c:f2:b7:26:98:8c:51:0c:44:13:99:bd:0c:04:2b: fd:5d:19:03:01:e9:21:77:90:81:a0:0e:10:78:58: 3d:57:58:68:05:74:f8:f2:05:13:e8:e3:b6:46:a9: 13:17:96:77:61:1e:9f:ef:16:70:22:d3:de:f1:fe: 57:e8:6e:2a:09:17:68:22:5f:ec:c8:96:f6:e8:62: 3a:c7:1b:d6:e9:6a:6f:47:02:2c:a4:4c:64:4d:c5: 55:df:e5:56:a5:cc:18:40:93:7c:df:cb:4d:c5:f3: 53:cf:61:dc:d3:91:8f:69:be:96:d5:4b:62:f7:19: 33:ef:93:c2:29:3d:11:93:0c:33:7f:72:59:79:40: f3:b0:56:88:fc:98:f1:a6:da:ee:61:21:93:3d:b6: dc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D0:94:75:02:B4:0C:FA:7D:FD:40:2C:C0:5A:21:D8:AE:1B:2A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:42:1e:bd:8b:e8:01:df:c0:44:0e:fb:05:33:4c:5a:22:e1: b8:79:2d:ca:a0:7d:cf:66:65:8c:7d:03:56:27:7a:5d:cc:00: bc:91:ab:f5:e9:fa:f4:f6:05:5c:1f:68:16:ea:c1:99:92:a6: 2a:e8:7e:31:ff:d2:09:65:61:63:a1:8f:b9:e3:5c:cd:18:33: 0a:57:34:5a:9b:13:b8:fe:c7:57:e7:89:e9:c2:b9:b8:ba:ce: a0:7c:66:b3:c0:a7:1e:0a:6c:38:1d:e1:30:a6:de:49:6f:9a: c6:79:b1:e5:ae:b1:13:85:be:6e:42:01:3d:2f:59:dd:83:03: 3c:72:8f:1a:42:c9:7f:c6:c3:d5:95:a8:4b:cc:90:7c:96:ce: 2c:37:2a:2c:33:30:5c:b0:3b:89:44:a9:a6:8d:29:f7:0d:0c: 3a:12:9a:63:51:c6:85:22:ce:16:71:a4:07:9b:dd:96:81:ec: d4:2f:59:73:fe:36:4f:3d:9a:8b:6a:6f:23:c9:ab:b3:60:26: ba:07:a2:fa:70:82:a1:c2:5f:f2:f3:41:b7:b4:4c:a4:bd:46: 09:3b:c5:14:27:74:74:07:d9:9c:cd:bb:7c:d7:6a:05:28:3a: 28:b4:ba:5d:c4:4a:5d:a8:d3:8d:2c:ae:11:28:ac:7f:65:ca: f9:bc:aa:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtd0d+kIWJkMT1YKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk N2NhODc2ZTktNDU0Ni00NWM5LWFhNTAtYTBhNGE4YTMzMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicFL71VXdFsjwb5NYA4rTziWQcEDRhJ+J3Pd 1cPCMO4LLLA9cSodo5ALYqBDPXG/90rHYebd3BQ/yGGYacaeYdO5EDz5sN5sYCq4 Mx3MUlouBVuKkngeWjKg7icQ0F7qgT2+jYnA/R4s8rcmmIxRDEQTmb0MBCv9XRkD Aekhd5CBoA4QeFg9V1hoBXT48gUT6OO2RqkTF5Z3YR6f7xZwItPe8f5X6G4qCRdo Il/syJb26GI6xxvW6WpvRwIspExkTcVV3+VWpcwYQJN838tNxfNTz2Hc05GPab6W 1Uti9xkz75PCKT0Rkwwzf3JZeUDzsFaI/JjxptruYSGTPbbcswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGTQlHUCtAz6ff1ALMBaIdiuGyqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDlkNWNlZDUtOGQ3YS0z ODRlLWEwNDctOWRiODA5ZmE4MDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaoAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKJCHr2L6AHfwEQO+wUzTFoi4bh5Lcqgfc9mZYx9A1Ynel3MALyR q/Xp+vT2BVwfaBbqwZmSpirofjH/0gllYWOhj7njXM0YMwpXNFqbE7j+x1fnienC ubi6zqB8ZrPApx4KbDgd4TCm3klvmsZ5seWusROFvm5CAT0vWd2DAzxyjxpCyX/G w9WVqEvMkHyWziw3KiwzMFywO4lEqaaNKfcNDDoSmmNRxoUizhZxpAeb3ZaB7NQv WXP+Nk89motqbyPJq7NgJroHovpwgqHCX/LzQbe0TKS9Rgk7xRQndHQH2ZzNu3zX agUoOii0ul3ESl2o040srhEorH9lyvm8qnY= -----END CERTIFICATE-----Generated at Mon Oct 20 01:14:16 2025 by rpki-client