$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa File: d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa (raw, json) Hash identifier: 3HtJxavxiM88jkl1j3CAAN9tSUi1VJ4PjOdNpgfFew8= Subject key identifier: B7:A6:3E:F1:56:37:A1:5A:49:7F:03:8D:7E:59:41:C8:68:A0:4A:95 Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d Certificate serial: 010D0C9F4328584B84E782C382EB565C26E98660 Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 46632 IP address blocks: 2604:3800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:82:c3:82:eb:56:5c:26:e9:86:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=1e6f709c-16cf-4355-9ccb-5027a5266839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:5c:c6:69:b2:60:d6:b3:a9:9a:89:91:6a: 50:84:c6:18:5e:0f:f0:cf:ad:be:bf:c2:7b:5c:ae: 58:b2:3d:35:0f:26:53:80:46:2e:9c:42:05:7b:79: d1:8e:7f:dd:15:ef:f7:fb:52:7d:90:77:c5:d1:6f: aa:2d:c6:83:31:ae:e8:21:b2:63:f9:57:10:c8:de: 84:fa:0b:86:a4:68:24:7b:e6:36:87:7f:38:0b:55: d6:68:77:a7:dd:b8:6c:8a:dd:46:3a:73:5a:58:85: e6:31:61:c5:52:db:db:2d:5a:38:44:50:da:85:13: 91:8f:78:80:6a:a2:cb:0d:f9:22:a8:55:70:21:aa: 67:be:44:8e:aa:1a:61:78:15:06:82:d7:f9:3c:1c: 90:35:ce:d1:fb:ea:44:62:81:54:ca:f8:79:e5:35: e2:65:20:79:fd:e4:cf:e6:ff:19:ce:42:78:d7:67: c6:70:b7:2b:a6:52:0e:97:1b:ab:3f:06:2d:46:ca: 55:aa:79:d1:3d:4b:0f:46:85:89:36:f7:ad:43:4d: 7a:ff:a0:e9:48:4a:3e:ca:96:23:49:7f:47:7f:5d: 0d:6f:d7:81:6e:8e:fa:54:42:ee:c9:fe:22:6f:c5: a4:f4:a5:34:26:32:b4:1f:f3:f7:7a:1f:01:5c:0e: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A6:3E:F1:56:37:A1:5A:49:7F:03:8D:7E:59:41:C8:68:A0:4A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl X509v3 Authority Key Identifier: keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7f:bd:b8:1f:91:c6:4b:29:03:2d:00:48:7e:61:b2:35:7f: 79:a1:88:10:d4:59:a6:3c:02:2f:35:ef:c9:a8:72:eb:b7:78: 4e:ac:f0:4f:aa:bb:4b:09:13:62:78:59:ef:bb:bb:42:7a:b3: fd:23:15:02:8e:98:44:ad:ed:14:c5:39:3b:e2:21:ae:1b:f5: f0:09:9d:db:38:ed:b5:4b:6a:ce:db:1b:c9:d9:74:52:52:78: 89:4e:52:a6:a4:f0:b2:b0:f8:3d:71:77:38:6f:ef:55:e9:78: 8a:23:91:e8:24:f3:04:51:30:11:8b:f5:6c:0b:cd:24:f6:57: 05:7b:2e:04:68:44:72:62:f3:d1:5b:d2:09:f1:1b:ba:66:14: eb:ae:2d:f2:4f:5c:a9:3a:b6:14:5d:5f:41:fe:58:19:2a:17: 65:b1:f7:7e:e5:30:e4:3f:fe:de:24:a7:73:dc:28:23:3c:55: be:53:c8:98:0c:1f:49:2e:b7:53:91:2e:7f:ee:56:d6:31:7b: 09:9b:ab:af:4c:0d:09:69:19:e9:70:41:f6:db:a1:28:dd:bd: 2a:27:de:ea:06:0b:03:05:44:27:35:d8:8b:cb:c7:cb:ec:bb: 3f:da:11:ff:15:b9:63:6b:28:2b:5f:26:dd:ae:55:02:1e:4c: ad:0b:a2:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuE54LDgutWXCbphmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw OTZkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MWU2ZjcwOWMtMTZjZi00MzU1LTljY2ItNTAyN2E1MjY2ODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+VcxmmyYNazqZqJkWpQhMYYXg/wz62+v8J7 XK5Ysj01DyZTgEYunEIFe3nRjn/dFe/3+1J9kHfF0W+qLcaDMa7oIbJj+VcQyN6E +guGpGgke+Y2h384C1XWaHen3bhsit1GOnNaWIXmMWHFUtvbLVo4RFDahRORj3iA aqLLDfkiqFVwIapnvkSOqhpheBUGgtf5PByQNc7R++pEYoFUyvh55TXiZSB5/eTP 5v8ZzkJ412fGcLcrplIOlxurPwYtRspVqnnRPUsPRoWJNvetQ016/6DpSEo+ypYj SX9Hf10Nb9eBbo76VELuyf4ib8Wk9KU0JjK0H/P3eh8BXA4+jQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLemPvFWN6FaSX8DjX5ZQchooEqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5 NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvZDExMmIwNTUtYzljMi0z YTNjLTg0NGItZmJlYWYwN2M0N2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3 MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw YzQ2NzA5NmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ4ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKf724H5HGSykDLQBIfmGyNX95oYgQ1FmmPAIvNe/JqHLrt3hOrPBP qrtLCRNieFnvu7tCerP9IxUCjphEre0UxTk74iGuG/XwCZ3bOO21S2rO2xvJ2XRS UniJTlKmpPCysPg9cXc4b+9V6XiKI5HoJPMEUTARi/VsC80k9lcFey4EaERyYvPR W9IJ8Ru6ZhTrri3yT1ypOrYUXV9B/lgZKhdlsfd+5TDkP/7eJKdz3CgjPFW+U8iY DB9JLrdTkS5/7lbWMXsJm6uvTA0JaRnpcEH226Eo3b0qJ97qBgsDBUQnNdiLy8fL 7Ls/2hH/FbljaygrXybdrlUCHkytC6LR -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:37 2025 by rpki-client