$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa File: 0591e8cc-de15-308a-9274-817e31ffff4e.roa (raw, json) Hash identifier: 8csEjBfpJ2/j0XQcYJLdh7BfsWOW70h6x3UIhrX8dRY= Subject key identifier: 44:BC:0E:B8:61:14:84:29:AA:E6:3D:E8:BD:07:50:A1:35:E3:71:EF Certificate issuer: /CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9 Certificate serial: 010D0C9F4328584B5DD1E52DBCB5E164ADAF5E40 Authority key identifier: F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 8134 IP address blocks: 2001:4a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e5:2d:bc:b5:e1:64:ad:af:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=3e905560-f11a-473f-a639-051fbc8efdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fb:9e:44:07:c0:ee:23:ef:12:0e:4e:40:c6: a8:75:fe:57:5d:71:14:1d:6a:be:c0:5d:53:6a:41: 92:95:ba:a7:c3:49:c5:1a:cb:d3:5a:60:1f:49:fc: 7b:bf:d9:3c:71:1b:67:39:87:4a:91:0d:8c:47:58: 73:09:4f:a8:d2:9b:68:db:86:4e:6e:aa:f5:83:c8: 61:c1:cd:ab:fa:f2:17:3d:f2:e1:c5:36:48:4a:85: c9:77:89:09:02:de:d6:32:c5:7a:17:84:61:70:12: fa:e3:53:bc:27:74:b2:74:b9:93:f2:ea:a8:7a:31: c0:23:a4:a4:6f:04:fe:2b:1d:e9:03:13:e5:33:e0: 3a:09:dd:61:9a:20:57:f7:bb:ad:cc:78:04:a4:56: d6:4a:c3:34:92:e6:05:1a:55:1a:7c:e8:63:1e:96: b0:aa:d5:4d:bf:4e:e8:17:48:88:2f:41:76:83:83: 86:89:13:ed:0b:94:7e:73:21:95:63:83:a5:32:36: 74:a7:0c:fb:df:a3:7a:a5:02:67:55:7f:ad:1b:60: dc:4e:37:ae:f2:1f:e8:0b:89:67:6a:34:de:53:a2: 0c:32:76:2c:e4:39:84:dc:56:f4:c8:f5:8a:3c:f8: 47:6d:0b:1c:7b:89:8e:a6:91:79:94:af:ed:48:8a: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BC:0E:B8:61:14:84:29:AA:E6:3D:E8:BD:07:50:A1:35:E3:71:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl X509v3 Authority Key Identifier: keyid:F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:36:5f:49:5e:79:8f:97:38:d7:3d:fc:d4:c8:a5:90:73:f4: 89:3b:f5:1e:7c:57:5f:f4:0b:b7:8b:00:61:7a:26:c9:c7:a8: 32:56:c5:91:6e:42:93:4a:6c:b6:62:39:34:1c:41:0d:0e:82: 36:3a:d1:90:63:4d:58:cf:25:7a:cc:81:99:21:24:0e:e2:67: 63:df:2a:b4:22:a4:7b:9f:1d:bf:75:17:c5:45:db:58:58:e5: 00:b6:2e:9f:50:94:9f:e4:67:4a:86:7b:93:f5:95:cd:54:e0: 2c:77:fc:13:e8:46:94:42:48:ff:8b:99:9b:da:0d:3e:3b:47: 6e:38:1a:d2:96:5d:49:8a:ec:87:e6:89:d2:ca:3f:f6:77:79: 42:03:dc:c8:59:e8:3d:d3:a9:92:fd:f0:ca:bf:20:da:bc:53: 69:7c:e9:1e:cd:1c:3d:fb:14:49:bf:3a:f0:80:2e:a6:9e:3e: 19:eb:7c:3b:4e:0d:23:01:9c:77:cd:ad:35:c1:d8:40:dc:69: 8a:81:2f:3f:c8:d8:76:10:12:1c:a7:c3:f3:af:16:5d:9f:39: 20:9b:25:3c:b7:51:c6:28:d8:82:5a:c6:d2:02:19:29:49:65: 3d:99:59:01:7c:2b:b4:79:4c:c2:e8:f7:b2:78:9a:be:44:5e: 97:dd:0d:c5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtd0eUtvLXhZK2vXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdhMjZiMTMtYzI5NS00ZjBiLWJlYzUtNDY0NWRkZDFk MGQ5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk M2U5MDU1NjAtZjExYS00NzNmLWE2MzktMDUxZmJjOGVmZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/ueRAfA7iPvEg5OQMaodf5XXXEUHWq+wF1T akGSlbqnw0nFGsvTWmAfSfx7v9k8cRtnOYdKkQ2MR1hzCU+o0pto24ZObqr1g8hh wc2r+vIXPfLhxTZISoXJd4kJAt7WMsV6F4RhcBL641O8J3SydLmT8uqoejHAI6Sk bwT+Kx3pAxPlM+A6Cd1hmiBX97utzHgEpFbWSsM0kuYFGlUafOhjHpawqtVNv07o F0iIL0F2g4OGiRPtC5R+cyGVY4OlMjZ0pwz736N6pQJnVX+tG2DcTjeu8h/oC4ln ajTeU6IMMnYs5DmE3Fb0yPWKPPhHbQsce4mOppF5lK/tSIptjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFES8DrhhFIQpquY96L0HUKE143HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hN2Ey NmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1ZGRkMWQwZDkvMDU5MWU4Y2MtZGUxNS0z MDhhLTkyNzQtODE3ZTMxZmZmZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTdhMjZiMTMtYzI5NS00ZjBiLWJl YzUtNDY0NWRkZDFkMGQ5L2E3YTI2YjEzLWMyOTUtNGYwYi1iZWM1LTQ2NDVkZGQx ZDBkOS5jcmwwHwYDVR0jBBgwFoAU8kCiwttTySyJz6btiRgTJRGu0l0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hN2EyNmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1 ZGRkMWQwZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEEoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMNl9JXnmPlzjXPfzUyKWQc/SJO/UefFdf9Au3iwBheibJx6gyVsWR bkKTSmy2Yjk0HEENDoI2OtGQY01YzyV6zIGZISQO4mdj3yq0IqR7nx2/dRfFRdtY WOUAti6fUJSf5GdKhnuT9ZXNVOAsd/wT6EaUQkj/i5mb2g0+O0duOBrSll1JiuyH 5onSyj/2d3lCA9zIWeg906mS/fDKvyDavFNpfOkezRw9+xRJvzrwgC6mnj4Z63w7 Tg0jAZx3za01wdhA3GmKgS8/yNh2EBIcp8PzrxZdnzkgmyU8t1HGKNiCWsbSAhkp SWU9mVkBfCu0eUzC6PeyeJq+RF6X3Q3F -----END CERTIFICATE-----Generated at Wed Oct 22 00:29:52 2025 by rpki-client