$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f26ea5c0-06e1-34d6-9e87-ebc51a33126f.roa File: f26ea5c0-06e1-34d6-9e87-ebc51a33126f.roa (raw, json) Hash identifier: DvQz/RBDq46TIwEAtvEgBc2X+p3gHO4hha0HYX39rJk= Subject key identifier: 0A:1E:AC:8F:DA:C3:80:11:9C:ED:3A:5C:C2:BA:34:B8:3D:92:9A:75 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73A937AC157C3F5EF90C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f26ea5c0-06e1-34d6-9e87-ebc51a33126f.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 852 IP address blocks: 2001:569:c007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3a:93:7a:c1:57:c3:f5:ef:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=ba0b4779-be58-488e-bdc1-f06fb2002feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:43:13:26:7d:c4:02:89:c3:f6:ef:c0:fd: 9c:3a:43:bb:5f:a6:d5:d1:db:fc:15:f5:c2:ea:5d: ed:58:6a:74:52:2a:d4:66:3c:f1:63:ac:bd:34:d1: 19:2e:c5:7f:4a:5c:94:5c:65:69:cd:fc:fa:a2:4e: 0c:32:64:5d:1d:33:70:26:f9:a7:c6:8b:e4:e8:6d: 01:38:12:bc:97:5a:ba:e7:e0:6f:77:22:8f:c8:33: 02:ea:82:14:de:87:f6:ac:60:67:d8:d8:fd:c3:a2: a2:31:d2:9a:40:04:10:8a:f7:1a:f8:e4:89:18:92: 8c:d3:16:e4:3b:2c:b8:29:5f:da:88:f6:39:c1:f8: 2a:34:88:68:f6:b7:df:0a:ac:c5:69:d3:e4:6f:01: 80:42:7f:b4:1e:a0:d6:79:c8:ee:22:99:86:03:77: b2:79:ef:6e:f3:27:59:fd:2c:78:e4:d3:81:bb:da: 70:4d:35:5f:c8:d6:59:04:64:e8:04:e1:ef:8d:22: 62:b3:1c:f9:61:df:36:b7:29:3a:0c:f8:61:6f:65: 46:92:45:2c:19:a9:50:82:80:95:84:89:2f:32:6f: ab:bc:f6:cc:4c:78:37:0d:e7:3b:a9:69:49:70:32: 51:30:b5:92:a0:5e:0d:c3:8f:1a:46:7d:da:73:c3: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1E:AC:8F:DA:C3:80:11:9C:ED:3A:5C:C2:BA:34:B8:3D:92:9A:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f26ea5c0-06e1-34d6-9e87-ebc51a33126f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:569:c007::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:9c:a1:c7:c6:a7:d7:85:5b:69:df:74:b1:fc:79:30:29:69: bb:18:bc:bd:14:76:f2:59:3b:96:af:aa:45:49:ca:a9:10:48: 26:76:1a:20:72:a3:32:73:39:33:65:72:f9:b1:70:85:e8:11: d3:69:09:57:d5:b1:63:58:67:50:d1:1f:4a:3c:d7:6f:21:4f: 8e:78:13:7d:f5:22:bb:83:7d:d1:b8:26:07:5c:16:85:bd:86: bb:32:9b:61:13:48:f6:fa:c8:97:d3:ea:74:04:0e:da:12:a1: b5:51:81:20:82:3e:c5:b4:15:42:71:f0:ac:c8:f1:ae:92:db: 2e:f7:50:a4:b2:55:20:ba:5a:55:df:28:e0:ac:0c:6b:2a:74: 48:b5:e2:7f:3c:4b:67:45:21:70:b2:7f:6a:c5:d7:10:54:cd: 00:64:d6:86:04:6e:a1:9d:40:84:42:7c:d6:bd:cc:5e:48:7c: 52:ee:57:31:bb:39:c1:c5:c0:28:4c:0a:73:c0:24:3f:30:7c: 4a:53:8b:5b:75:43:e0:4d:67:6f:b4:cb:ba:03:c9:94:43:58: 6c:ac:64:81:09:e2:82:15:af:dd:23:dc:b2:c2:ad:0b:08:6c: 3f:bf:b9:c5:8e:29:a8:a4:0b:42:db:d7:2c:92:5f:8e:de:48: 0b:dc:c2:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzqTesFXw/XvkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YmEwYjQ3NzktYmU1OC00ODhlLWJkYzEtZjA2ZmIyMDAyZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ahDEyZ9xAKJw/bvwP2cOkO7X6bV0dv8FfXC 6l3tWGp0UirUZjzxY6y9NNEZLsV/SlyUXGVpzfz6ok4MMmRdHTNwJvmnxovk6G0B OBK8l1q65+BvdyKPyDMC6oIU3of2rGBn2Nj9w6KiMdKaQAQQivca+OSJGJKM0xbk Oyy4KV/aiPY5wfgqNIho9rffCqzFadPkbwGAQn+0HqDWecjuIpmGA3eyee9u8ydZ /Sx45NOBu9pwTTVfyNZZBGToBOHvjSJisxz5Yd82tyk6DPhhb2VGkkUsGalQgoCV hIkvMm+rvPbMTHg3Dec7qWlJcDJRMLWSoF4Nw48aRn3ac8O1jQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAoerI/aw4ARnO06XMK6NLg9kpp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjI2ZWE1YzAtMDZlMS0z NGQ2LTllODctZWJjNTFhMzMxMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFacAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANecocfGp9eFW2nfdLH8eTApabsYvL0UdvJZO5avqkVJyqkQSCZ2 GiByozJzOTNlcvmxcIXoEdNpCVfVsWNYZ1DRH0o8128hT454E331IruDfdG4Jgdc FoW9hrsym2ETSPb6yJfT6nQEDtoSobVRgSCCPsW0FUJx8KzI8a6S2y73UKSyVSC6 WlXfKOCsDGsqdEi14n88S2dFIXCyf2rF1xBUzQBk1oYEbqGdQIRCfNa9zF5IfFLu VzG7OcHFwChMCnPAJD8wfEpTi1t1Q+BNZ2+0y7oDyZRDWGysZIEJ4oIVr90j3LLC rQsIbD+/ucWOKaikC0Lb1yySX47eSAvcwjU= -----END CERTIFICATE-----Generated at Sun Oct 19 22:29:19 2025 by rpki-client