$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa File: 3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (raw, json) Hash identifier: 3jlqrjiUSG3zz1kqYCDBCNIKdJbv2H2TXD7b9n7Y+y4= Subject key identifier: BB:FC:78:24:7F:99:F7:5C:13:21:A3:93:BB:97:6F:40:E9:3C:32:24 Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584B434C5BB24E62E1AE2C53AB68 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 14230 IP address blocks: 2607:fb20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5b:b2:4e:62:e1:ae:2c:53:ab:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=b784c9ea-309d-4b49-b8c9-f1d14b46e6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:78:da:18:89:e2:b5:15:08:b4:a7:7f:09: 70:dc:d8:e6:5b:06:e4:01:35:21:aa:0a:83:53:b8: f2:44:e8:dd:d1:f3:76:99:36:8e:d4:06:e9:85:e3: 04:18:b4:77:b3:7c:ec:9f:30:f7:d3:62:37:0f:89: 0f:2d:76:fc:4c:6a:0a:bc:0c:af:20:4c:e0:f1:c3: e9:5a:16:30:f8:91:99:fc:8a:da:b6:1a:17:77:f2: b7:22:36:be:e8:e8:d2:90:de:f0:88:81:40:bb:e3: f6:7c:d6:1d:f0:58:66:3a:44:46:f6:4b:3b:d5:88: f8:64:1e:af:e5:26:4c:2b:41:c8:a9:45:45:c2:4f: 00:ea:99:56:f8:31:7e:62:3f:29:1f:29:65:f6:18: cb:3b:9e:48:a6:28:e8:65:f7:31:0b:5f:b1:67:28: 71:c7:ff:a8:b3:f4:61:90:3d:e8:9d:9c:19:0f:25: 2a:ca:2a:18:a4:43:83:91:0d:79:c8:80:83:b4:4d: 5a:ee:73:02:16:89:13:77:c6:bf:9d:0d:2d:68:bd: f8:b4:fc:3a:0a:d7:88:4a:f7:59:db:86:37:f2:32: 69:36:5c:cc:9e:af:59:52:bc:01:6f:8b:91:98:88: 85:33:16:bd:4c:25:cd:02:00:39:6b:1f:02:d2:ed: 88:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FC:78:24:7F:99:F7:5C:13:21:A3:93:BB:97:6F:40:E9:3C:32:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:14:9e:f9:2d:23:03:42:7c:16:6c:de:dd:03:10:b5:1c:67: 61:07:89:3f:a3:40:67:61:44:f8:7a:20:06:7a:55:1c:03:d5: 44:39:a3:97:2d:13:1d:6e:69:57:62:43:16:b2:1c:94:a9:ce: d8:54:c4:83:a6:9c:47:e0:6b:b3:fe:e0:b6:a1:18:11:32:96: 5d:1d:64:b9:fd:59:33:e7:59:dc:52:72:08:b4:9e:a8:7d:80: 92:77:8c:41:8e:b0:2d:10:b1:5d:cb:0f:b4:ba:6b:b6:0d:30: 8a:48:3f:70:7a:6c:07:0e:ad:84:b8:67:12:7d:aa:24:24:4a: 2e:b3:09:3e:19:a3:8e:41:68:8d:f8:37:66:9a:c4:30:aa:ef: 6a:1c:32:04:f6:5f:8b:f3:7d:71:6f:49:51:f8:e7:a1:25:5e: a3:eb:b5:b1:15:e2:09:66:c8:a0:71:e7:61:79:2b:44:e0:0d: e0:90:37:bc:6c:1f:fb:41:03:3a:a6:ab:35:16:41:03:3a:ee: 06:a0:fb:75:7a:b4:51:92:fb:19:ec:ff:38:32:3c:bb:2a:74: 0e:9e:3b:0f:43:90:90:a9:78:03:b2:ce:89:61:87:2e:45:67: 0d:bc:d3:ab:41:10:9a:e4:4d:84:7c:99:91:5e:6b:06:68:41: bf:12:8f:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtDTFuyTmLhrixTq2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk Yjc4NGM5ZWEtMzA5ZC00YjQ5LWI4YzktZjFkMTRiNDZlNmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ142hiJ4rUVCLSnfwlw3NjmWwbkATUhqgqD U7jyROjd0fN2mTaO1AbpheMEGLR3s3zsnzD302I3D4kPLXb8TGoKvAyvIEzg8cPp WhYw+JGZ/IrathoXd/K3Ija+6OjSkN7wiIFAu+P2fNYd8FhmOkRG9ks71Yj4ZB6v 5SZMK0HIqUVFwk8A6plW+DF+Yj8pHyll9hjLO55IpijoZfcxC1+xZyhxx/+os/Rh kD3onZwZDyUqyioYpEODkQ15yICDtE1a7nMCFokTd8a/nQ0taL34tPw6CteISvdZ 24Y38jJpNlzMnq9ZUrwBb4uRmIiFMxa9TCXNAgA5ax8C0u2IPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLv8eCR/mfdcEyGjk7uXb0DpPDIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvM2RjZjZmNjctOGE0Zi0z ZTNkLWEwMzUtMDgzNzEzZDZjZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALFJ75LSMDQnwWbN7dAxC1HGdhB4k/o0BnYUT4eiAGelUcA9VEOaOX LRMdbmlXYkMWshyUqc7YVMSDppxH4Guz/uC2oRgRMpZdHWS5/Vkz51ncUnIItJ6o fYCSd4xBjrAtELFdyw+0umu2DTCKSD9wemwHDq2EuGcSfaokJEouswk+GaOOQWiN +DdmmsQwqu9qHDIE9l+L831xb0lR+OehJV6j67WxFeIJZsigcedheStE4A3gkDe8 bB/7QQM6pqs1FkEDOu4GoPt1erRRkvsZ7P84Mjy7KnQOnjsPQ5CQqXgDss6JYYcu RWcNvNOrQRCa5E2EfJmRXmsGaEG/Eo+s -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:27 2025 by rpki-client