$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa File: 2523a460-454b-387d-8a94-5c40f8f7d030.roa (raw, json) Hash identifier: 7c14NhYRs1lfO6kXb+dnVM8uS06G2wI2E5ag+2KRJSU= Subject key identifier: F3:26:26:0B:A1:75:43:5B:10:68:C8:60:26:D7:C9:5E:1B:E8:8F:BB Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584B031695A373C548010B8590C0 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 29834 IP address blocks: 2620:1f7:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:95:a3:73:c5:48:01:0b:85:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=dcb154dc-9193-40b9-8c2d-c23be30bb4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:e6:47:8c:57:9c:b6:f2:55:48:8d:54:01: e3:6b:46:f9:9b:57:71:92:d3:bc:84:a1:29:8a:32: 4f:7a:01:be:b6:b4:0a:aa:83:a0:7c:87:e2:6f:df: 08:c0:e6:4b:83:74:cc:30:65:51:20:40:86:79:12: 9a:e6:9d:4a:c6:a8:cc:68:61:63:76:17:b4:47:58: 26:0d:5e:8d:21:d1:78:c7:34:d5:ec:64:c9:8b:da: d3:bd:c8:23:55:8d:47:b9:fa:8b:c9:27:b9:52:c0: 0c:06:f0:82:01:4a:85:1f:ab:7b:f9:b7:cc:a7:62: 8e:5b:d8:55:a0:3c:7f:51:69:fe:db:d0:05:f4:23: c5:74:ce:bb:8b:0e:f5:dd:98:f0:2f:37:ea:1f:71: de:8d:84:1d:2a:d5:b2:03:07:85:7f:07:ef:33:4f: 91:f2:ef:7c:29:8f:72:b0:b5:5a:a4:2a:14:3c:3c: db:71:0e:22:76:c6:29:f3:11:69:a8:ca:7c:84:c5: f5:f4:2c:21:b1:62:76:29:58:e9:2c:fc:c3:1e:0b: a4:81:40:18:44:57:88:30:85:0e:6f:c4:b5:59:47: 2a:4e:cb:a0:b9:47:79:95:4a:e4:9a:d9:32:35:db: 65:5b:b4:b1:c9:f2:54:b2:3f:e1:83:bb:cd:cf:d8: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:26:26:0B:A1:75:43:5B:10:68:C8:60:26:D7:C9:5E:1B:E8:8F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/2523a460-454b-387d-8a94-5c40f8f7d030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1f7:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:47:bc:b2:42:5a:a7:e6:14:95:b3:ef:ea:05:84:2e:f4:af: 06:2b:69:2c:51:4f:2d:24:92:a2:58:a8:92:32:78:e9:ac:7c: 58:66:ad:8e:da:03:7c:1b:90:ab:4a:ae:0e:04:d0:bb:f3:bf: 52:83:9b:a6:a4:66:dd:d7:2d:ce:d8:03:eb:65:37:f9:1e:ec: a9:1c:b0:76:4c:26:6e:8f:29:e3:21:e2:61:9f:41:ec:5b:ea: 0c:e0:03:75:32:89:94:58:d5:f7:f6:c2:09:25:c7:af:88:17: a5:36:96:d7:47:86:84:5d:07:0b:2b:62:1f:fe:be:5c:13:09: ad:d1:8d:d1:60:81:f4:1c:91:b7:c3:5d:84:d2:b5:07:09:f7: 0b:e8:7c:33:ea:cf:18:e4:e7:04:32:80:96:62:c6:27:fe:04: e0:ef:01:a9:66:b5:7e:9d:0f:f6:fe:7b:63:6b:b5:11:07:95: 60:e0:26:d6:66:bc:9d:5d:b6:fc:e0:5d:f3:fd:a2:bc:e5:45: 47:d0:ea:26:b9:3c:7a:f2:9b:b6:01:4f:e0:50:24:14:7e:ac: dc:b0:8c:16:41:bb:6b:6c:8d:e0:ae:66:df:d8:4d:e3:2d:d4: 6f:71:22:a4:fa:ec:5d:ff:c3:a0:82:31:46:a9:95:72:bf:4d: 4c:34:3b:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsDFpWjc8VIAQuFkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk ZGNiMTU0ZGMtOTE5My00MGI5LThjMmQtYzIzYmUzMGJiNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfTmR4xXnLbyVUiNVAHja0b5m1dxktO8hKEp ijJPegG+trQKqoOgfIfib98IwOZLg3TMMGVRIECGeRKa5p1KxqjMaGFjdhe0R1gm DV6NIdF4xzTV7GTJi9rTvcgjVY1HufqLySe5UsAMBvCCAUqFH6t7+bfMp2KOW9hV oDx/UWn+29AF9CPFdM67iw713ZjwLzfqH3HejYQdKtWyAweFfwfvM0+R8u98KY9y sLVapCoUPDzbcQ4idsYp8xFpqMp8hMX19CwhsWJ2KVjpLPzDHgukgUAYRFeIMIUO b8S1WUcqTsuguUd5lUrkmtkyNdtlW7SxyfJUsj/hg7vNz9ibjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPMmJguhdUNbEGjIYCbXyV4b6I+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvMjUyM2E0NjAtNDU0Yi0z ODdkLThhOTQtNWM0MGY4ZjdkMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVHvLJCWqfmFJWz7+oFhC70rwYraSxRTy0kkqJYqJIyeOmsfFhm rY7aA3wbkKtKrg4E0Lvzv1KDm6akZt3XLc7YA+tlN/ke7KkcsHZMJm6PKeMh4mGf Qexb6gzgA3UyiZRY1ff2wgklx6+IF6U2ltdHhoRdBwsrYh/+vlwTCa3RjdFggfQc kbfDXYTStQcJ9wvofDPqzxjk5wQygJZixif+BODvAalmtX6dD/b+e2NrtREHlWDg JtZmvJ1dtvzgXfP9orzlRUfQ6ia5PHrym7YBT+BQJBR+rNywjBZBu2tsjeCuZt/Y TeMt1G9xIqT67F3/w6CCMUaplXK/TUw0OwQ= -----END CERTIFICATE-----Generated at Sun Oct 19 17:53:40 2025 by rpki-client