$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa File: 3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa (raw, json) Hash identifier: Oilf/Gkpm3fjKA/jhrAzUi7gzZ/0OL6lbJZDAH84uJg= Subject key identifier: 75:24:50:3D:D7:08:8D:7A:AF:58:F5:0F:86:48:E8:60:EF:BC:99:B2 Certificate issuer: /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Certificate serial: 010D0C9F4328584B7F52147C557B2F7F77C19900 Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 160 IP address blocks: 2605:9a00:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:14:7c:55:7b:2f:7f:77:c1:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=68aca6be-e2d7-4a0b-b87b-c6856a28b9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:67:15:85:22:66:79:1b:6e:0e:31:6b:9d: 49:20:0c:8c:59:0e:cc:b0:20:d0:8e:2f:ab:85:4f: 52:f2:1a:61:ed:0f:8d:ed:be:6e:f0:6d:7b:52:c0: ad:ef:b7:db:2b:a3:94:fb:7c:fc:84:99:29:9c:75: ba:50:37:de:a5:0c:50:d5:2c:cc:b7:ba:fd:cb:3c: 11:3a:22:b9:03:cb:fb:75:df:79:73:28:da:3b:8d: 94:52:61:21:2e:86:f5:0b:7e:76:08:22:85:37:fd: 6f:77:fd:cd:d0:e2:d8:c9:a4:d2:1d:ef:b6:b8:de: 65:86:2d:d6:a8:5b:ee:f6:5c:5b:0e:4c:7b:ca:18: 3d:de:b7:85:81:83:ff:72:ae:c0:bf:41:45:c1:20: 3f:d4:d2:c8:18:c7:36:ee:dc:cc:3f:5f:ea:0c:29: e8:ce:41:ed:b6:70:72:60:20:fe:cd:5e:18:40:59: 06:eb:4d:2c:45:fc:d3:50:7a:86:cc:a0:45:40:bb: 29:dd:35:91:a3:69:11:02:e7:1a:02:80:f2:f4:3d: 82:91:3d:fc:26:92:08:7d:57:0b:71:26:5a:21:48: c6:ac:62:f3:ff:f8:4d:b1:dc:23:f7:cf:38:61:47: ff:72:e8:73:a7:b5:57:56:ee:8b:89:06:1f:60:73: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:24:50:3D:D7:08:8D:7A:AF:58:F5:0F:86:48:E8:60:EF:BC:99:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl X509v3 Authority Key Identifier: keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer sbgp-ipAddrBlock: critical IPv6: 2605:9a00:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:7a:6b:e6:e6:7f:b4:f7:97:fa:40:c1:ce:21:df:67:d3:4f: 44:36:9b:70:75:01:ec:64:65:57:01:0e:e3:68:df:28:6e:43: 5f:75:c5:b9:99:2e:cf:f7:22:34:85:ac:df:2c:92:60:c5:f6: 99:88:1b:63:fa:44:fd:c6:d0:19:84:8f:49:97:3f:b6:d0:79: 9e:2a:c4:d4:48:ac:20:a8:99:c7:38:f3:64:c7:5f:67:96:5e: 7d:4c:59:bd:c1:c6:1e:df:69:3d:ca:b8:01:43:a0:24:ef:62: 00:23:e9:4e:77:d3:af:58:5f:cb:73:40:d4:f0:d6:c5:e2:50: 31:4d:98:d7:81:a6:5a:19:14:b0:60:58:4f:c6:84:dd:81:e5: b9:a9:c3:2b:6c:b3:77:92:e9:b4:2e:ed:61:49:4b:9f:85:46: db:c6:38:4d:2d:77:28:be:ad:bf:b5:59:57:76:9b:66:e7:75: 85:5e:f0:93:81:1e:2b:e2:45:a0:f2:9b:70:c5:74:48:52:5d: 20:93:fd:7d:c7:44:f2:d6:93:0f:5b:f2:8e:76:09:85:c2:46: 90:14:f9:dc:5e:95:87:ff:0c:bf:87:74:af:96:0e:01:ca:6d: 67:bc:b7:5f:9f:76:a0:05:28:c0:f5:1c:1d:16:57:30:5d:bc: fe:2b:e5:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UhR8VXsvf3fBmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi MzMzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NjhhY2E2YmUtZTJkNy00YTBiLWI4N2ItYzY4NTZhMjhiOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxVnFYUiZnkbbg4xa51JIAyMWQ7MsCDQji+r hU9S8hph7Q+N7b5u8G17UsCt77fbK6OU+3z8hJkpnHW6UDfepQxQ1SzMt7r9yzwR OiK5A8v7dd95cyjaO42UUmEhLob1C352CCKFN/1vd/3N0OLYyaTSHe+2uN5lhi3W qFvu9lxbDkx7yhg93reFgYP/cq7Av0FFwSA/1NLIGMc27tzMP1/qDCnozkHttnBy YCD+zV4YQFkG600sRfzTUHqGzKBFQLsp3TWRo2kRAucaAoDy9D2CkT38JpIIfVcL cSZaIUjGrGLz//hNsdwj9884YUf/cuhzp7VXVu6LiQYfYHPipQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHUkUD3XCI16r1j1D4ZI6GDvvJmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvM2NjZjQxYjItMDdlMi0z MTljLWE4OGYtNTE1YjlkNjY5Y2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl MDkwM2IzMzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWaAAAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJF6a+bmf7T3l/pAwc4h32fTT0Q2m3B1AexkZVcBDuNo3yhuQ191 xbmZLs/3IjSFrN8skmDF9pmIG2P6RP3G0BmEj0mXP7bQeZ4qxNRIrCComcc482TH X2eWXn1MWb3Bxh7faT3KuAFDoCTvYgAj6U53069YX8tzQNTw1sXiUDFNmNeBploZ FLBgWE/GhN2B5bmpwytss3eS6bQu7WFJS5+FRtvGOE0tdyi+rb+1WVd2m2bndYVe 8JOBHiviRaDym3DFdEhSXSCT/X3HRPLWkw9b8o52CYXCRpAU+dxelYf/DL+HdK+W DgHKbWe8t1+fdqAFKMD1HB0WVzBdvP4r5Xk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:39 2025 by rpki-client