$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa File: 701df298-19b8-383b-a438-a2b9a42d4aa8.roa (raw, json) Hash identifier: +J56xUZS2mE9xPPdou/o2x0usbt0BwQHzsUjQtMOhXk= Subject key identifier: BB:B0:92:53:63:0F:13:4E:0E:02:66:7C:6C:4B:60:0A:00:83:9A:48 Certificate issuer: /CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Certificate serial: 010D0C9F4328584B4E770839E589B5AAEC0BFE80 Authority key identifier: CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 62668 IP address blocks: 2605:c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:08:39:e5:89:b5:aa:ec:0b:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=4c63790e-109b-4f6c-a4ac-36c7d63c9f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:f1:a3:78:70:ff:23:d2:f5:48:89:68:cf: 71:77:dc:5f:0d:3b:5f:4b:f4:c3:78:c2:7a:c4:31: 4d:3b:91:f9:07:59:96:0c:30:27:73:4a:a7:4d:08: 20:94:7e:a4:a0:d9:e7:f8:fd:eb:8b:a3:94:c0:76: a5:e2:76:9e:12:28:c6:0a:21:73:0d:02:15:51:c3: c9:b0:88:50:fb:a8:92:64:76:63:c9:7f:8a:74:c4: 04:d5:91:be:af:41:6d:41:ca:c9:2a:55:86:71:3c: c5:39:a3:bb:38:91:66:ba:59:fd:98:92:e0:81:03: 6e:b6:10:1e:22:9d:4d:cb:e6:5d:e0:13:85:e3:bc: b4:47:3c:6a:4d:cb:a7:e5:11:77:9e:e8:cb:40:5b: 11:db:73:b3:5d:94:87:66:cb:f0:d8:34:aa:c0:46: 1e:e0:d0:15:9b:f3:04:d6:a6:16:93:ee:49:ef:d3: ed:49:1a:f2:e8:d0:c8:df:0b:93:f6:25:6a:c1:51: 7d:d4:c8:6b:93:c1:a2:9c:8d:64:c5:3b:ba:0c:bf: e2:75:ca:55:65:1f:65:85:2e:9b:a6:4f:11:2d:c5: a6:45:15:12:76:01:da:27:b0:28:db:d6:09:31:27: 94:b0:6c:5c:18:cf:dd:a1:04:ce:72:20:77:6c:58: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:92:53:63:0F:13:4E:0E:02:66:7C:6C:4B:60:0A:00:83:9A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl X509v3 Authority Key Identifier: keyid:CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer sbgp-ipAddrBlock: critical IPv6: 2605:c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e0:68:d1:e2:1d:eb:f7:a8:45:da:e3:0f:a4:d7:db:33:76: 8f:de:64:6c:64:c1:ec:a5:9b:a9:ce:4c:3b:b2:07:30:6c:9d: b6:ce:26:97:e5:d9:a9:f9:ac:ad:69:ca:e2:73:df:d8:54:a4: 6f:04:dc:ef:53:15:27:63:f7:66:4d:e3:c8:11:93:0c:8c:5b: 58:bd:2d:0c:62:35:83:dc:3c:1c:a2:32:4e:00:9c:dc:4f:df: 2c:12:7e:bd:4a:c8:c3:00:bc:51:00:e3:8c:8f:b6:84:5f:6d: a4:16:7d:18:45:af:81:a1:91:a7:39:91:05:09:70:af:ab:2c: 3d:54:84:c8:2b:2e:66:6e:50:3b:e2:29:67:fe:60:e8:44:a8: 9c:f1:1f:43:e3:57:9e:f9:52:04:46:54:02:f5:53:e3:2d:40: ba:de:7c:c6:9f:13:a7:e7:df:ee:2f:82:d6:31:a0:9d:c8:66: f1:09:94:f4:f8:75:ad:77:0c:f9:60:88:17:b4:c0:1d:a6:02: 94:12:cf:80:24:79:8e:f7:f1:35:37:2c:75:19:25:0e:d8:9d: 80:84:e9:ff:6a:30:2d:71:61:5b:58:54:7f:3e:22:6b:6f:3d: 79:e6:8b:08:7a:09:f2:30:b9:e4:85:10:41:aa:a7:ec:df:14: 24:4f:32:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtOdwg55Ym1quwL/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg1NTkyYjktOGU3Yi00Y2NiLTg3ZGMtZTFkZTJlOThi ZDgxMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NGM2Mzc5MGUtMTA5Yi00ZjZjLWE0YWMtMzZjN2Q2M2M5ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ejxo3hw/yPS9UiJaM9xd9xfDTtfS/TDeMJ6 xDFNO5H5B1mWDDAnc0qnTQgglH6koNnn+P3ri6OUwHal4naeEijGCiFzDQIVUcPJ sIhQ+6iSZHZjyX+KdMQE1ZG+r0FtQcrJKlWGcTzFOaO7OJFmuln9mJLggQNuthAe Ip1Ny+Zd4BOF47y0RzxqTcun5RF3nujLQFsR23OzXZSHZsvw2DSqwEYe4NAVm/ME 1qYWk+5J79PtSRry6NDI3wuT9iVqwVF91Mhrk8GinI1kxTu6DL/idcpVZR9lhS6b pk8RLcWmRRUSdgHaJ7Ao29YJMSeUsGxcGM/doQTOciB3bFj7SQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLuwklNjDxNODgJmfGxLYAoAg5pIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODU1 OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5OGJkODEvNzAxZGYyOTgtMTliOC0z ODNiLWE0MzgtYTJiOWE0MmQ0YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTg1NTkyYjktOGU3Yi00Y2NiLTg3 ZGMtZTFkZTJlOThiZDgxLzk4NTU5MmI5LThlN2ItNGNjYi04N2RjLWUxZGUyZTk4 YmQ4MS5jcmwwHwYDVR0jBBgwFoAUy0A2wcrf/oqJS/RLPYQLTYZ/2xYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRl MmU5OGJkODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUMQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA94GjR4h3r96hF2uMPpNfbM3aP3mRsZMHspZupzkw7sgcwbJ22ziaX 5dmp+aytacric9/YVKRvBNzvUxUnY/dmTePIEZMMjFtYvS0MYjWD3DwcojJOAJzc T98sEn69SsjDALxRAOOMj7aEX22kFn0YRa+BoZGnOZEFCXCvqyw9VITIKy5mblA7 4iln/mDoRKic8R9D41ee+VIERlQC9VPjLUC63nzGnxOn59/uL4LWMaCdyGbxCZT0 +HWtdwz5YIgXtMAdpgKUEs+AJHmO9/E1Nyx1GSUO2J2AhOn/ajAtcWFbWFR/PiJr bz155osIegnyMLnkhRBBqqfs3xQkTzLw -----END CERTIFICATE-----Generated at Tue Oct 21 18:01:40 2025 by rpki-client