$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f9e46f-552f-352e-8235-467bc77d6f37.roa File: 41f9e46f-552f-352e-8235-467bc77d6f37.roa (raw, json) Hash identifier: 77LA6o6f3NvzK+qg43MVTKHXDC0n5pU3nhFDQ1EKKSI= Subject key identifier: 3B:1D:4B:C3:4E:3B:23:3A:B5:06:42:95:A1:D6:D0:79:CF:98:CB:D4 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5224238AC19ED0EAC23000 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f9e46f-552f-352e-8235-467bc77d6f37.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:8132::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:24:23:8a:c1:9e:d0:ea:c2:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1ec693c5-a8b9-4ac9-92b1-fc27515fc390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:c2:09:73:c7:87:ba:1e:e7:81:ad:16:e3: 4f:71:dd:fb:f8:52:f4:b6:b6:a4:ad:09:1a:36:b4: f4:19:ae:6b:2d:62:de:88:30:ef:38:c2:8a:c7:82: 8d:9f:e1:e8:a8:f0:64:6a:64:ae:81:1e:4e:c9:5d: d1:77:fd:1b:f1:15:0c:18:85:c2:11:5e:22:59:e2: 83:66:03:b2:fe:0f:b7:96:44:9f:a2:bb:51:50:5e: 25:c7:1b:44:8e:c4:54:53:3f:43:fa:c8:9f:08:b7: 64:59:e6:3a:f6:3d:c9:6c:fa:a5:d4:87:4c:26:75: 9b:32:14:83:f9:1f:33:42:37:3b:78:e7:b9:f0:c4: a9:38:bd:01:e6:fb:d7:62:33:39:da:47:c5:60:e0: 52:0e:1a:53:35:49:94:c9:33:08:82:28:cd:9a:ca: 28:28:03:e5:4e:b6:d2:b7:10:6b:50:da:fb:f8:34: f1:26:0c:a1:9d:a3:f9:92:a0:aa:4b:ac:a9:49:18: 94:c7:1d:1d:61:21:86:bd:88:82:ff:d5:02:3c:d1: cf:66:34:7e:bd:a9:8a:d6:0e:b8:6d:85:1a:8f:d5: d5:e1:a6:d5:89:89:07:92:89:8e:bc:cd:c5:08:81: 8a:92:08:34:b1:17:63:df:80:19:7d:61:86:db:40: 92:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1D:4B:C3:4E:3B:23:3A:B5:06:42:95:A1:D6:D0:79:CF:98:CB:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f9e46f-552f-352e-8235-467bc77d6f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8132::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c2:97:94:91:c7:22:16:9b:47:ac:b7:27:27:1c:74:7a:d2: 12:36:29:96:bd:41:36:92:c4:f3:94:c3:af:af:1b:d3:01:fc: f1:74:59:90:08:f8:51:53:24:91:fc:d7:91:47:ea:16:ca:19: 55:c0:d5:5c:7a:29:21:10:35:0e:4c:13:51:14:e7:f9:b7:23: 10:76:ef:eb:a3:49:d5:54:0a:c5:6a:3b:60:5a:b7:21:e8:43: 8d:40:40:bf:ec:c3:d7:f6:4d:be:1a:1e:a6:ee:2c:fc:c7:0e: 37:21:d2:87:38:63:7b:42:dc:9e:2c:f2:c7:cd:91:de:b5:42: eb:9b:96:97:94:66:82:1e:58:b4:b1:bf:05:1b:1e:ca:5b:ba: 3b:0d:c1:74:c5:a1:6d:28:e3:18:c6:9a:ab:4c:17:c2:93:f1: de:c5:0e:25:54:91:e5:ef:37:b2:e5:1d:80:1e:9e:fb:3c:d4: 5a:a2:c1:33:a6:29:ba:a9:a2:24:ab:bd:36:72:66:e5:57:12: 9b:f1:ef:43:9c:3e:46:45:a6:a1:be:b1:6e:2e:ea:3d:7b:4b: 59:a5:bb:04:c5:3f:25:c2:81:18:ef:73:72:5e:4f:d4:d9:83: 8e:05:b8:88:9a:2b:9c:2f:bf:4d:10:08:2c:9e:09:04:c8:04: 0b:38:01:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiQjisGe0OrCMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MWVjNjkzYzUtYThiOS00YWM5LTkyYjEtZmMyNzUxNWZjMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooXCCXPHh7oe54GtFuNPcd37+FL0trakrQka NrT0Ga5rLWLeiDDvOMKKx4KNn+HoqPBkamSugR5OyV3Rd/0b8RUMGIXCEV4iWeKD ZgOy/g+3lkSfortRUF4lxxtEjsRUUz9D+sifCLdkWeY69j3JbPql1IdMJnWbMhSD +R8zQjc7eOe58MSpOL0B5vvXYjM52kfFYOBSDhpTNUmUyTMIgijNmsooKAPlTrbS txBrUNr7+DTxJgyhnaP5kqCqS6ypSRiUxx0dYSGGvYiC/9UCPNHPZjR+vamK1g64 bYUaj9XV4abViYkHkomOvM3FCIGKkgg0sRdj34AZfWGG20CSKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDsdS8NOOyM6tQZClaHW0HnPmMvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNDFmOWU0NmYtNTUyZi0z NTJlLTgyMzUtNDY3YmM3N2Q2ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDCl5SRxyIWm0estycnHHR60hI2KZa9QTaSxPOUw6+vG9MB/PF0 WZAI+FFTJJH815FH6hbKGVXA1Vx6KSEQNQ5ME1EU5/m3IxB27+ujSdVUCsVqO2Ba tyHoQ41AQL/sw9f2Tb4aHqbuLPzHDjch0oc4Y3tC3J4s8sfNkd61QuublpeUZoIe WLSxvwUbHspbujsNwXTFoW0o4xjGmqtMF8KT8d7FDiVUkeXvN7LlHYAenvs81Fqi wTOmKbqpoiSrvTZyZuVXEpvx70OcPkZFpqG+sW4u6j17S1mluwTFPyXCgRjvc3Je T9TZg44FuIiaK5wvv00QCCyeCQTIBAs4AXA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:05 2025 by rpki-client