$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa File: 4be56354-f558-3bd5-98d1-2a45b275dad7.roa (raw, json) Hash identifier: 8xcRx+kno28ur8Yn1SRDRVvu0u+nFA0oMeHPar4Vm70= Subject key identifier: B0:69:E4:9D:92:42:D7:FF:A2:FB:4B:EB:DB:C8:31:0E:92:B9:E2:E2 Certificate issuer: /CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f Certificate serial: 010D0C9F4328584B4081A3C6F3CE6EE4EA213CC0 Authority key identifier: 56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 18140 IP address blocks: 2620:e6:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a3:c6:f3:ce:6e:e4:ea:21:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=bfbedaf8-83e5-4617-80fb-e38d31ef82ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:ab:db:1e:cd:f9:31:82:87:b1:a0:1e:7e: 49:41:ef:36:b9:3b:a1:00:04:86:e7:90:00:b8:23: ea:2c:30:34:f6:17:cd:74:cb:58:d5:13:74:d7:ff: b3:d6:02:00:cc:95:cd:c5:b6:2b:f9:25:a2:74:80: 3a:bf:4f:1f:f4:b4:bf:4c:2c:df:5a:56:0c:98:29: 02:8f:66:c8:44:a4:94:36:bd:c8:c1:a6:d1:b0:0d: 85:41:45:a0:08:00:10:a1:f8:82:aa:9a:1b:41:3c: 72:f6:56:b2:8c:d7:f9:72:7b:47:7e:09:84:61:b6: 78:b8:ae:c3:b4:fb:69:38:a0:e4:39:8f:40:b0:aa: 90:dc:a0:a2:55:dd:b7:50:63:c8:bb:f6:c9:2f:7f: 53:b0:bd:43:ba:e9:29:4d:b8:a3:8c:54:81:90:19: 29:f2:e7:70:09:86:5f:db:28:b5:e5:dd:e0:a4:81: 78:af:d1:c9:17:d0:7f:c3:2b:0d:d3:6f:9c:5f:8f: fe:05:73:0a:3c:da:43:49:f2:3a:3e:9a:23:0f:43: 99:d7:b3:2e:96:c0:90:9f:00:3c:19:8d:eb:77:5b: b2:13:a9:50:e4:14:0c:79:8f:c1:b7:f0:62:5b:fb: 3e:49:9b:35:85:9f:79:cb:49:0e:81:d2:bb:82:d7: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:69:E4:9D:92:42:D7:FF:A2:FB:4B:EB:DB:C8:31:0E:92:B9:E2:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.crl X509v3 Authority Key Identifier: keyid:56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer sbgp-ipAddrBlock: critical IPv6: 2620:e6:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:28:b9:b7:cc:aa:74:8b:eb:7a:8e:8b:c4:eb:5c:4e:2e:f1: 34:f7:b5:2a:28:11:bf:2f:e5:d7:29:07:19:02:dc:b3:d9:3d: 72:2c:23:5c:c6:b0:24:d0:bb:76:7e:37:be:b6:36:c6:49:0d: 14:c0:12:bc:35:5a:bf:05:9a:9e:04:e0:f7:bd:c1:9d:1f:d1: 5c:ec:47:c5:05:46:58:5d:b5:c6:f0:bc:87:1b:70:4f:d0:fa: d8:a4:ca:63:67:e8:ab:e0:fa:29:c1:c4:b2:95:4c:4b:46:3e: 9a:b6:90:05:9e:00:1d:cd:a9:dc:b6:1c:3c:e5:43:f8:fe:c5: 07:a7:24:87:40:07:b9:53:e1:82:b8:5e:f5:ca:04:6f:85:28: 76:62:5f:f5:34:ff:d7:c7:b8:21:53:e9:2e:60:a0:fc:ce:6f: e8:e5:61:25:d9:69:a1:37:cd:8e:67:32:a7:d1:cc:16:1c:05: 1a:ca:d2:64:84:b8:47:73:d7:1d:e3:3b:6d:c1:bd:72:72:dd: 37:90:1d:a8:7b:46:18:a0:74:4a:fa:00:20:86:d3:1c:f0:6f: c7:7c:4e:92:64:af:05:57:a8:eb:3c:76:c3:7a:04:d9:0b:c2: 18:eb:13:bf:63:b8:81:cb:85:f5:e6:e9:39:0d:2d:0c:e7:f1: d4:f0:9b:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgaPG885u5OohPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZmNDNhYWItYzhjMi00ZjIzLTkxZTUtMzczYmUyNDYy ZTlmMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YmZiZWRhZjgtODNlNS00NjE3LTgwZmItZTM4ZDMxZWY4MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZar2x7N+TGCh7GgHn5JQe82uTuhAASG55AA uCPqLDA09hfNdMtY1RN01/+z1gIAzJXNxbYr+SWidIA6v08f9LS/TCzfWlYMmCkC j2bIRKSUNr3IwabRsA2FQUWgCAAQofiCqpobQTxy9layjNf5cntHfgmEYbZ4uK7D tPtpOKDkOY9AsKqQ3KCiVd23UGPIu/bJL39TsL1DuukpTbijjFSBkBkp8udwCYZf 2yi15d3gpIF4r9HJF9B/wysN02+cX4/+BXMKPNpDSfI6PpojD0OZ17MulsCQnwA8 GY3rd1uyE6lQ5BQMeY/Bt/BiW/s+SZs1hZ95y0kOgdK7gtfg4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLBp5J2SQtf/ovtL69vIMQ6SueLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZmY0 M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNiZTI0NjJlOWYvNGJlNTYzNTQtZjU1OC0z YmQ1LTk4ZDEtMmE0NWIyNzVkYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWZmNDNhYWItYzhjMi00ZjIzLTkx ZTUtMzczYmUyNDYyZTlmLzlmZjQzYWFiLWM4YzItNGYyMy05MWU1LTM3M2JlMjQ2 MmU5Zi5jcmwwHwYDVR0jBBgwFoAUVkV1ptyZORaIvNP+hpr9nOn9dBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZmY0M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNi ZTI0NjJlOWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA5sAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACIoubfMqnSL63qOi8TrXE4u8TT3tSooEb8v5dcpBxkC3LPZPXIs I1zGsCTQu3Z+N762NsZJDRTAErw1Wr8Fmp4E4Pe9wZ0f0VzsR8UFRlhdtcbwvIcb cE/Q+tikymNn6Kvg+inBxLKVTEtGPpq2kAWeAB3Nqdy2HDzlQ/j+xQenJIdAB7lT 4YK4XvXKBG+FKHZiX/U0/9fHuCFT6S5goPzOb+jlYSXZaaE3zY5nMqfRzBYcBRrK 0mSEuEdz1x3jO23BvXJy3TeQHah7RhigdEr6ACCG0xzwb8d8TpJkrwVXqOs8dsN6 BNkLwhjrE79juIHLhfXm6TkNLQzn8dTwm2c= -----END CERTIFICATE-----Generated at Wed Oct 22 00:11:54 2025 by rpki-client