$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa File: 935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa (raw, json) Hash identifier: vKCGO5dRNW9RiYNW+I06TfC7sipMUcDIUORmFRJoi8s= Subject key identifier: E5:90:4F:12:6B:D2:01:4E:65:98:01:C2:F7:DD:52:A3:40:69:16:25 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584B4D11CE3BC63273833E0C7D00 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 33000 IP address blocks: 2605:fdc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:ce:3b:c6:32:73:83:3e:0c:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=faa7759d-3148-468f-8dce-698e4ceb076d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:27:c4:ea:12:c0:16:40:5a:da:9b:4b:66: e5:8a:7d:0b:d6:18:06:b8:ea:3c:94:a0:43:a5:30: 19:b7:08:68:3d:11:fd:8f:f9:a2:86:61:d8:d6:6a: 29:0a:24:f8:ac:e9:36:97:8f:b1:91:ed:40:b6:4f: cf:12:bb:66:0f:2e:80:a3:d5:8d:8b:c3:f3:97:b1: db:2c:c3:46:e4:fe:80:ac:8a:60:c1:8a:cc:e7:a7: 13:d1:25:6f:09:e2:32:a9:6c:64:4d:6c:62:56:5f: 1d:34:8f:af:16:33:ae:43:7e:1e:2b:25:35:f6:df: 96:b3:ea:f8:e1:06:78:7a:0c:ba:62:f2:8b:e7:73: d3:45:5a:c5:58:f1:09:9a:e9:f3:e7:5d:23:66:8a: fa:cf:a3:84:96:c1:c4:7a:19:be:78:fb:3c:6e:8c: 03:40:c6:a8:85:06:07:a3:77:29:3b:bf:5f:50:b4: 14:da:9f:96:4d:90:0a:b7:a2:63:d4:17:b3:3d:d6: 46:77:04:61:62:3c:60:33:a7:69:24:3b:f9:f3:db: 9c:a5:90:0a:38:0a:e3:bb:95:1f:d8:c5:bb:03:98: 67:ea:55:5b:d8:da:da:20:ad:d3:fd:ef:bf:13:8c: 71:f9:5d:bc:61:81:d7:45:1f:d6:10:d7:e0:1b:51: de:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:90:4F:12:6B:D2:01:4E:65:98:01:C2:F7:DD:52:A3:40:69:16:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv6: 2605:fdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d2:5c:59:8c:84:7d:40:0f:ae:cd:c9:56:f5:1e:46:11:a2: 22:e4:8d:4f:88:a0:81:1e:2c:59:0d:e3:39:ff:45:18:c2:96: 16:a9:20:d5:d6:4b:37:f0:9b:f5:2a:1b:6c:18:fc:c5:30:40: 0a:7c:21:45:46:e5:60:9c:3e:b3:a8:03:6f:34:7c:6e:9a:f4: fa:7f:a9:83:7e:0e:97:4a:02:1a:c7:3c:00:42:dc:67:22:46: 96:13:7c:15:4d:98:cc:05:30:e9:b2:70:92:56:03:99:b7:67: ce:6e:28:ad:a6:31:12:55:80:5f:7b:e0:5a:4e:c4:c8:2c:13: 15:07:46:54:30:cc:18:fb:3f:fe:43:8b:8e:d3:4b:9d:59:8f: 59:85:07:86:09:8a:10:a9:4f:1e:5a:b8:df:77:75:df:56:31: 15:c0:4e:38:20:93:70:80:34:79:fe:30:14:5f:5d:f3:b9:e3: f4:c4:67:46:db:b3:a2:4d:a3:ac:2e:bb:f4:56:61:b4:4c:5a: 30:ba:5d:27:38:1e:f8:0b:a4:d2:15:47:f6:41:7c:44:34:e3: 90:d9:ee:37:a6:d5:e4:eb:8a:31:9a:26:28:83:32:11:e2:8d: e8:70:72:55:c6:69:6b:4b:b4:96:45:02:ac:0b:cc:3c:b4:1d: 4c:f2:7e:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtNEc47xjJzgz4MfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZmFhNzc1OWQtMzE0OC00NjhmLThkY2UtNjk4ZTRjZWIwNzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvusnxOoSwBZAWtqbS2blin0L1hgGuOo8lKBD pTAZtwhoPRH9j/mihmHY1mopCiT4rOk2l4+xke1Atk/PErtmDy6Ao9WNi8Pzl7Hb LMNG5P6ArIpgwYrM56cT0SVvCeIyqWxkTWxiVl8dNI+vFjOuQ34eKyU19t+Ws+r4 4QZ4egy6YvKL53PTRVrFWPEJmunz510jZor6z6OElsHEehm+ePs8bowDQMaohQYH o3cpO79fULQU2p+WTZAKt6Jj1BezPdZGdwRhYjxgM6dpJDv589ucpZAKOArju5Uf 2MW7A5hn6lVb2NraIK3T/e+/E4xx+V28YYHXRR/WENfgG1He1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOWQTxJr0gFOZZgBwvfdUqNAaRYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvOTM1MzkzYTktY2FiOC0z MzRmLWFmZDMtMGVhZjNmZmNiNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX9wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAR0lxZjIR9QA+uzclW9R5GEaIi5I1PiKCBHixZDeM5/0UYwpYWqSDV 1ks38Jv1KhtsGPzFMEAKfCFFRuVgnD6zqANvNHxumvT6f6mDfg6XSgIaxzwAQtxn IkaWE3wVTZjMBTDpsnCSVgOZt2fObiitpjESVYBfe+BaTsTILBMVB0ZUMMwY+z/+ Q4uO00udWY9ZhQeGCYoQqU8eWrjfd3XfVjEVwE44IJNwgDR5/jAUX13zueP0xGdG 27OiTaOsLrv0VmG0TFowul0nOB74C6TSFUf2QXxENOOQ2e43ptXk64oxmiYogzIR 4o3ocHJVxmlrS7SWRQKsC8w8tB1M8n4h -----END CERTIFICATE-----Generated at Tue Oct 21 07:23:56 2025 by rpki-client