$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa File: 3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa (raw, json) Hash identifier: +QiUc7yQJXHlB0FmLeVeTfSS6fy2eEfocybDr/QbyMc= Subject key identifier: A1:9C:7D:04:5B:E2:B3:39:81:19:B1:FC:49:CF:72:43:42:F3:C5:C5 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F4328584B477C6C1644C28EC5C42D1940 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 3584 IP address blocks: 2607:2a00:2::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:6c:16:44:c2:8e:c5:c4:2d:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=ee345e60-5a6c-4400-8e2c-a2896fa74063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:55:7f:4d:0b:53:54:f2:2c:c4:87:f1:af: 7c:40:bd:3b:ed:d6:bc:78:70:33:72:96:1b:a2:f4: 73:56:72:97:7a:f9:55:06:0d:55:7c:b6:cc:1d:9c: 9d:42:73:c1:85:0f:41:f4:2f:59:92:f1:e0:eb:69: 22:62:c6:64:44:b0:51:bb:47:48:57:fc:14:03:e7: f7:19:5e:70:53:3b:89:ee:1e:44:60:a9:47:4e:d3: c9:f8:bc:a9:64:b6:59:91:1d:12:5e:1d:80:b0:0b: 22:cf:30:2f:ed:21:88:a4:a3:65:e1:e2:e3:56:fa: 1b:82:01:15:5d:47:85:a9:d3:d7:ff:cf:21:5b:f0: 7d:9f:7b:d5:c8:ee:8f:2b:33:3f:6f:a2:8c:94:41: 66:a5:23:a2:45:73:57:3f:d2:18:45:41:de:ff:b9: 39:62:8e:78:61:9b:41:60:9a:f4:35:c2:df:ab:cd: 98:b4:97:c2:e8:06:5f:c2:55:3d:21:68:75:28:a4: f3:f7:dd:3e:49:1a:0e:52:9c:d3:d8:5b:b3:96:75: 8f:27:ac:ae:9f:01:d3:b0:a4:16:0e:3f:21:60:a6: 1b:d3:d8:11:da:76:a5:77:26:1c:88:24:f1:80:45: f2:84:70:e1:d4:56:3c:1d:01:84:7c:c7:bb:41:17: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9C:7D:04:5B:E2:B3:39:81:19:B1:FC:49:CF:72:43:42:F3:C5:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv6: 2607:2a00:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:6a:a9:9a:6f:41:ab:d6:9d:4b:98:c1:33:d1:98:dd:f5:e7: f7:5b:be:b5:22:9f:50:1b:e6:7f:74:61:56:b7:7d:ed:77:12: 76:13:9e:29:60:77:32:3d:cc:ef:35:6f:a6:6b:e2:e9:28:ce: da:29:1a:1b:33:91:1e:0f:dc:a2:1a:b0:05:0c:48:0c:93:1f: 1f:78:27:7d:bb:34:86:4f:21:4b:04:ea:47:ac:90:9c:ed:b9: bd:e3:25:76:cd:31:3e:79:37:a4:a6:76:38:29:13:d6:d5:c6: 8e:0d:3d:f9:2f:f4:83:d3:1a:19:76:bb:6a:15:91:da:fd:fc: 92:8f:df:df:26:12:11:35:27:90:08:f8:bf:6d:64:bf:f1:ae: 51:f2:9f:fe:16:49:24:29:05:18:52:fd:08:4e:d6:64:d9:20: f2:b9:04:5d:20:4c:f3:d3:94:3d:85:f1:13:8d:b9:fd:d7:21: 98:b0:18:a6:55:22:66:70:be:13:5e:b4:7b:6d:bc:50:0f:57: 3c:83:68:ab:f6:ed:53:6f:5b:1a:c6:fc:45:b2:3f:ee:8b:8a: cf:b2:e3:a1:03:cc:6a:e2:16:02:ce:51:c1:25:f4:bf:cb:de: 21:e2:15:ad:9c:f4:c8:f7:ed:b9:19:80:a5:ed:b5:d5:b6:ef: 36:fa:70:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfGwWRMKOxcQtGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZWUzNDVlNjAtNWE2Yy00NDAwLThlMmMtYTI4OTZmYTc0MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWJVf00LU1TyLMSH8a98QL077da8eHAzcpYb ovRzVnKXevlVBg1VfLbMHZydQnPBhQ9B9C9ZkvHg62kiYsZkRLBRu0dIV/wUA+f3 GV5wUzuJ7h5EYKlHTtPJ+LypZLZZkR0SXh2AsAsizzAv7SGIpKNl4eLjVvobggEV XUeFqdPX/88hW/B9n3vVyO6PKzM/b6KMlEFmpSOiRXNXP9IYRUHe/7k5Yo54YZtB YJr0NcLfq82YtJfC6AZfwlU9IWh1KKTz990+SRoOUpzT2FuzlnWPJ6yunwHTsKQW Dj8hYKYb09gR2naldyYciCTxgEXyhHDh1FY8HQGEfMe7QRe3KwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKGcfQRb4rM5gRmx/EnPckNC88XFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvM2E1NTMyYWMtYzMzMC0z NjBiLTg3YmEtZDM2OGZkZjBiMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcqAAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBqqZpvQavWnUuYwTPRmN315/dbvrUin1Ab5n90YVa3fe13EnYT nilgdzI9zO81b6Zr4ukoztopGhszkR4P3KIasAUMSAyTHx94J327NIZPIUsE6kes kJztub3jJXbNMT55N6SmdjgpE9bVxo4NPfkv9IPTGhl2u2oVkdr9/JKP398mEhE1 J5AI+L9tZL/xrlHyn/4WSSQpBRhS/QhO1mTZIPK5BF0gTPPTlD2F8RONuf3XIZiw GKZVImZwvhNetHttvFAPVzyDaKv27VNvWxrG/EWyP+6Lis+y46EDzGriFgLOUcEl 9L/L3iHiFa2c9Mj37bkZgKXttdW27zb6cPg= -----END CERTIFICATE-----Generated at Tue Oct 21 03:03:04 2025 by rpki-client