$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/2963c665-992a-3711-97c8-3b7592a72c41.roa File: 2963c665-992a-3711-97c8-3b7592a72c41.roa (raw, json) Hash identifier: 8mUQCq+9aI1rY7BNNHfhSW9J+ChY4qBaAxB1erLM0wk= Subject key identifier: 09:E3:CB:37:5B:A0:07:EB:4D:21:C0:B0:B2:A0:BE:96:20:0D:83:3C Certificate issuer: /CN=9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4 Certificate serial: 010D0C9F4328584B41E717E1EEC97C9EEFC86C00 Authority key identifier: D8:04:99:C3:5D:E6:FD:0F:C1:4C:7F:69:43:0D:E6:05:64:7D:F8:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/2963c665-992a-3711-97c8-3b7592a72c41.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397735 IP address blocks: 2606:37c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:17:e1:ee:c9:7c:9e:ef:c8:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=5c330529-6957-4b5c-9d7f-6963b9b62f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:26:3c:a1:c9:26:f3:2d:9c:d2:48:4a:9f: c6:7a:b6:9e:e9:35:43:53:64:18:90:66:f8:ca:a4: 13:ff:46:e9:ed:22:68:8d:5d:98:b2:ab:94:06:f2: 68:09:8a:7b:8b:9c:c7:73:94:0b:99:91:fe:df:89: 12:14:43:8e:5c:fc:b6:a5:90:e2:a3:99:74:2d:70: 8c:27:85:71:68:d0:67:7b:8a:71:71:0d:a7:18:22: e0:e4:88:e4:8c:58:69:0a:bc:59:c7:b0:97:22:34: 7e:f3:fb:cb:eb:3d:3e:41:f0:b6:cf:fd:23:a1:46: 5e:ff:d7:7b:c8:15:72:01:23:69:e8:e0:b9:95:91: 12:d5:36:35:ea:d5:2c:d4:0a:3f:2c:be:35:6b:c0: 35:bf:0c:15:65:7a:ed:5d:88:da:8a:ff:d0:6b:82: f2:29:f1:fa:9b:52:9d:26:99:30:76:09:82:4a:02: 6d:d7:bd:21:76:85:c8:b6:de:c3:df:ca:de:67:5c: c1:74:4a:68:90:7e:25:07:40:53:ca:6b:e1:c8:9f: d9:d7:1d:08:1d:39:3c:a0:82:9a:18:d1:e5:ae:f2: 51:38:4b:bd:6a:b5:5a:4e:76:66:56:66:57:31:85: 52:4d:59:78:06:11:9e:06:6e:93:4d:f3:a7:c3:d8: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E3:CB:37:5B:A0:07:EB:4D:21:C0:B0:B2:A0:BE:96:20:0D:83:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/2963c665-992a-3711-97c8-3b7592a72c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.crl X509v3 Authority Key Identifier: keyid:D8:04:99:C3:5D:E6:FD:0F:C1:4C:7F:69:43:0D:E6:05:64:7D:F8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer sbgp-ipAddrBlock: critical IPv6: 2606:37c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:37:d7:c6:71:a8:3d:2a:ad:63:66:20:07:32:11:23:2a:81: e2:30:9b:e3:67:f4:57:64:7e:d0:dc:36:40:e6:1d:5d:17:b7: d4:c1:2f:bc:42:08:72:a5:d4:0a:c5:52:71:cb:ca:c6:6f:21: 76:fc:3f:13:89:98:49:ed:6a:0f:ae:6b:c3:e3:e1:11:27:8e: 5f:b3:eb:df:ec:9f:e5:6b:0a:6f:c3:c4:29:ac:ad:b8:e8:e3: c1:e8:61:c3:85:bd:00:23:d3:90:98:f3:3b:7f:92:e6:18:b2: 9a:cf:6e:96:48:32:f1:d8:a0:9a:89:bc:73:37:e9:d5:90:9d: d0:10:87:d8:ce:0b:46:0a:aa:dd:20:1d:07:b4:ce:49:57:04: 89:66:a1:6e:8c:82:ac:ea:6f:c4:f1:a1:d8:c5:52:f5:43:76: 2d:d8:c3:2c:7b:37:e6:54:c5:8d:46:d9:20:87:89:47:99:08: eb:44:69:fc:9a:13:c4:cf:a2:ba:d6:5a:8c:9d:5c:48:92:5c: 9b:30:04:cd:ee:d1:5b:12:89:e4:12:54:e3:a4:c8:65:66:85: c0:29:5d:bc:c6:6b:69:3a:7e:b9:de:f9:73:8c:34:7f:b4:24: be:a6:a6:ad:35:62:e8:68:dc:ed:94:c7:8c:17:e0:dd:f3:db: 96:57:f7:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5xfh7sl8nu/IbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM0OGNkMjUtYzUyOS00NGE5LWE3YWUtZjNlNGJmNzJk OWI0MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NWMzMzA1MjktNjk1Ny00YjVjLTlkN2YtNjk2M2I5YjYyZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnImPKHJJvMtnNJISp/Gerae6TVDU2QYkGb4 yqQT/0bp7SJojV2YsquUBvJoCYp7i5zHc5QLmZH+34kSFEOOXPy2pZDio5l0LXCM J4VxaNBne4pxcQ2nGCLg5IjkjFhpCrxZx7CXIjR+8/vL6z0+QfC2z/0joUZe/9d7 yBVyASNp6OC5lZES1TY16tUs1Ao/LL41a8A1vwwVZXrtXYjaiv/Qa4LyKfH6m1Kd JpkwdgmCSgJt170hdoXItt7D38reZ1zBdEpokH4lB0BTymvhyJ/Z1x0IHTk8oIKa GNHlrvJROEu9arVaTnZmVmZXMYVSTVl4BhGeBm6TTfOnw9hGBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAnjyzdboAfrTSHAsLKgvpYgDYM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzQ4 Y2QyNS1jNTI5LTQ0YTktYTdhZS1mM2U0YmY3MmQ5YjQvMjk2M2M2NjUtOTkyYS0z NzExLTk3YzgtM2I3NTkyYTcyYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWM0OGNkMjUtYzUyOS00NGE5LWE3 YWUtZjNlNGJmNzJkOWI0LzljNDhjZDI1LWM1MjktNDRhOS1hN2FlLWYzZTRiZjcy ZDliNC5jcmwwHwYDVR0jBBgwFoAU2ASZw13m/Q/BTH9pQw3mBWR9+DswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzQ4Y2QyNS1jNTI5LTQ0YTktYTdhZS1mM2U0 YmY3MmQ5YjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY3wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBN9fGcag9Kq1jZiAHMhEjKoHiMJvjZ/RXZH7Q3DZA5h1dF7fUwS+8 QghypdQKxVJxy8rGbyF2/D8TiZhJ7WoPrmvD4+ERJ45fs+vf7J/lawpvw8QprK24 6OPB6GHDhb0AI9OQmPM7f5LmGLKaz26WSDLx2KCaibxzN+nVkJ3QEIfYzgtGCqrd IB0HtM5JVwSJZqFujIKs6m/E8aHYxVL1Q3Yt2MMsezfmVMWNRtkgh4lHmQjrRGn8 mhPEz6K61lqMnVxIklybMATN7tFbEonkElTjpMhlZoXAKV28xmtpOn653vlzjDR/ tCS+pqatNWLoaNztlMeMF+Dd89uWV/fb -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:39 2025 by rpki-client