$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1970620-a10f-3a27-ad09-03ade55e9519.roa File: f1970620-a10f-3a27-ad09-03ade55e9519.roa (raw, json) Hash identifier: iHnJjOvt1Lp5d70nVXxnZOnM76dhae/IkF9uoTdQfLk= Subject key identifier: A4:ED:4A:49:9A:07:2A:B5:B1:C5:FB:50:04:57:ED:81:38:AA:8B:80 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73833CA935D2B231D7600 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1970620-a10f-3a27-ad09-03ade55e9519.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:56a:dff0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:38:33:ca:93:5d:2b:23:1d:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=fa525d55-51f3-4a60-8166-482bcfe73387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:94:74:3b:19:4c:ff:e1:93:b7:4f:a6:6b: 37:a3:ce:61:26:96:0d:ae:70:c7:f3:bc:e2:56:cf: bb:71:ca:14:29:5b:04:5d:32:a1:33:10:db:47:81: 82:db:74:9c:cf:e3:99:29:db:eb:96:35:94:94:c7: 6f:02:79:12:5a:b9:5b:6b:a6:69:2f:38:0b:63:19: 4a:08:7d:8a:56:f5:ca:f7:eb:16:ea:30:57:f6:da: 36:02:7a:ec:2d:3f:f2:81:93:a0:81:ec:79:cd:ea: 23:85:7b:26:e1:3b:3b:44:47:bf:84:2c:0b:d8:6a: 83:c4:bd:fe:09:fd:6e:58:1d:e2:94:b5:fa:96:b4: c2:b5:b6:ba:a0:4f:7b:76:9c:66:aa:9a:c7:d3:59: 7a:d7:0b:3f:80:0a:dc:66:8f:91:ba:a4:94:c9:79: 10:d2:95:5b:02:ec:23:a5:de:3c:a3:01:a7:fd:44: b7:b6:82:69:a3:35:29:88:38:25:51:a9:3c:9b:42: a6:76:e4:24:27:4b:c7:b5:3d:c5:e0:34:09:5f:c5: 65:0a:f6:31:b9:72:34:8c:1d:27:4d:80:16:24:b2: 17:23:8a:2b:5e:43:91:80:18:1e:6f:51:0b:a3:38: 60:b3:cb:c6:47:5b:bc:9f:2f:b2:80:e7:78:f3:af: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:ED:4A:49:9A:07:2A:B5:B1:C5:FB:50:04:57:ED:81:38:AA:8B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1970620-a10f-3a27-ad09-03ade55e9519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:dff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:cd:dc:3e:2a:9b:0a:31:28:0f:43:e6:fe:e5:28:ce:d6:bc: 93:71:2e:75:21:87:33:39:9d:4e:dd:82:51:02:6c:fd:7b:5b: 3e:72:7e:3b:9e:62:81:2e:b9:b2:50:d0:dd:fb:41:b0:77:ea: 05:cd:4c:b3:78:a5:b0:89:a7:f6:41:6f:37:8d:b1:3f:72:29: 60:92:83:1b:58:8a:0e:d5:cd:6a:6c:6c:74:cb:58:a2:73:39: 51:11:b8:13:18:74:8b:a5:c3:b4:5e:f6:95:0b:39:c8:37:40: cb:3b:3e:d2:57:14:0f:d7:63:04:f1:42:6a:a2:7d:70:48:d8: ac:b1:61:3b:8a:0b:fe:47:38:e3:ff:5a:8e:7f:16:69:ac:31: 3d:11:be:8f:73:4f:f7:d9:cd:1c:4d:ed:52:66:10:9f:cd:16: a1:99:f7:00:6b:5b:38:27:3c:05:72:3d:5f:84:39:9c:0f:6e: b1:2b:d7:70:00:b5:e9:32:a5:1c:2e:ba:2c:70:46:5b:f9:e5: 12:72:fc:04:e3:6e:c1:58:3b:17:ac:d5:08:71:4d:1f:cd:9e: fa:cc:a6:67:a0:1b:ba:96:da:28:36:b8:e4:5b:9a:e1:06:73: 67:1b:d8:cf:1b:20:44:8e:91:f4:51:8a:dd:04:66:c5:09:4f: f3:b9:cf:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzgzypNdKyMddgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZmE1MjVkNTUtNTFmMy00YTYwLTgxNjYtNDgyYmNmZTczMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvCUdDsZTP/hk7dPpms3o85hJpYNrnDH87zi Vs+7ccoUKVsEXTKhMxDbR4GC23Scz+OZKdvrljWUlMdvAnkSWrlba6ZpLzgLYxlK CH2KVvXK9+sW6jBX9to2AnrsLT/ygZOggex5zeojhXsm4Ts7REe/hCwL2GqDxL3+ Cf1uWB3ilLX6lrTCtba6oE97dpxmqprH01l61ws/gArcZo+RuqSUyXkQ0pVbAuwj pd48owGn/US3toJpozUpiDglUak8m0KmduQkJ0vHtT3F4DQJX8VlCvYxuXI0jB0n TYAWJLIXI4orXkORgBgeb1ELozhgs8vGR1u8ny+ygOd4868bVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKTtSkmaByq1scX7UARX7YE4qouAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjE5NzA2MjAtYTEwZi0z YTI3LWFkMDktMDNhZGU1NWU5NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFat/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHvN3D4qmwoxKA9D5v7lKM7WvJNxLnUhhzM5nU7dglECbP17Wz5y fjueYoEuubJQ0N37QbB36gXNTLN4pbCJp/ZBbzeNsT9yKWCSgxtYig7VzWpsbHTL WKJzOVERuBMYdIulw7Re9pULOcg3QMs7PtJXFA/XYwTxQmqifXBI2KyxYTuKC/5H OOP/Wo5/FmmsMT0Rvo9zT/fZzRxN7VJmEJ/NFqGZ9wBrWzgnPAVyPV+EOZwPbrEr 13AAtekypRwuuixwRlv55RJy/ATjbsFYOxes1QhxTR/NnvrMpmegG7qW2ig2uORb muEGc2cb2M8bIESOkfRRit0EZsUJT/O5z84= -----END CERTIFICATE-----Generated at Mon Oct 20 02:16:17 2025 by rpki-client