$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa File: 3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa (raw, json) Hash identifier: 5ULofnWQF5/WTaZabulDCzZa75NV6QkHreVgsPvt+hU= Subject key identifier: EA:2F:9E:95:14:3A:8C:31:4F:01:05:EE:AB:F8:B8:F4:C6:01:6D:74 Certificate issuer: /CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Certificate serial: 010D0C9F4328584B3F8FC53A764826AAC734EE80 Authority key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa Signing time: Fri 19 Sep 2025 16:53:18 +0000 ROA not before: Fri 19 Sep 2025 16:53:18 +0000 ROA not after: Thu 18 Dec 2025 17:53:18 +0000 asID: 63061 IP address blocks: 2620:b7:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:8f:c5:3a:76:48:26:aa:c7:34:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Validity Not Before: Sep 19 16:53:18 2025 GMT Not After : Dec 18 17:53:18 2025 GMT Subject: CN=2b2ada5b-57c1-4a74-9ef3-683bd6738ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:fd:99:ed:14:ea:92:ea:63:b3:45:56:47: 5c:82:7d:eb:0b:25:19:d1:2f:62:b7:0d:7b:2d:e9: 5e:79:b5:b4:ef:fc:02:7f:47:b1:37:41:fd:d9:eb: 64:a7:6e:b6:66:27:11:6f:81:0c:79:b0:4b:b2:02: 67:80:5b:1e:f8:c6:64:17:d6:27:99:5a:11:55:b8: 6d:a7:a4:f0:56:5e:1f:6e:7d:5a:cf:6d:a2:d7:2a: 14:b4:66:2f:0c:43:d1:e5:6d:51:14:cb:e9:47:fe: ed:27:af:48:5c:43:8f:a4:27:96:30:56:87:a0:90: ae:5c:df:ac:f1:ab:a7:31:08:f7:28:c0:9a:2e:0a: ea:f3:3d:b5:84:ca:69:02:89:af:11:c7:5f:47:a8: 50:ef:fd:eb:96:69:10:c4:36:8a:2d:a2:8d:80:48: ba:33:42:7e:f8:9e:9a:93:c1:7f:74:63:04:38:e0: 4c:d0:18:aa:4f:ce:32:5c:7f:ae:25:b9:ca:fc:ce: e0:40:bf:03:91:80:8b:b1:5c:82:4b:60:01:0b:df: a4:05:c7:55:3a:74:c4:ca:1d:a4:1d:1e:dd:8b:4e: e4:22:67:9f:05:bb:bc:d2:19:26:66:ad:67:69:02: ee:bc:70:19:56:09:5c:a9:05:cf:32:03:1e:e4:16: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2F:9E:95:14:3A:8C:31:4F:01:05:EE:AB:F8:B8:F4:C6:01:6D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl X509v3 Authority Key Identifier: keyid:AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer sbgp-ipAddrBlock: critical IPv6: 2620:b7:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6a:ec:73:9f:b8:49:16:4e:b5:0e:1f:6f:33:5b:df:ab:e5: 4c:54:de:16:91:f3:25:1a:30:e2:b5:80:be:ee:4c:9a:18:0c: ee:0c:08:81:c1:eb:5f:b8:1f:45:8e:41:61:02:cb:d0:54:22: ab:60:87:be:85:66:65:e8:6f:be:1b:31:45:a2:4f:9d:4f:e9: aa:0f:64:21:15:91:1f:86:47:6f:59:fd:5d:f0:0d:3a:60:37: f1:56:6c:bd:95:3f:69:97:87:67:dc:7c:10:8e:33:eb:fb:b0: 0a:0b:7f:4b:7d:b7:0e:e5:10:8a:1f:35:af:05:1f:2d:92:ba: e5:7e:56:3d:d5:ca:10:36:d5:79:38:34:42:1a:dd:56:5d:4b: a5:e8:dd:1e:53:f8:39:49:af:0a:64:da:30:d6:0f:85:18:d9: 74:c5:77:95:19:d3:81:05:93:4e:31:be:fc:49:90:3b:f6:2c: da:0f:0f:92:9c:e7:93:3b:38:36:9b:57:d4:ce:d0:fb:c4:1a: 70:8a:40:77:fe:78:51:b4:40:4b:d0:51:13:e1:0f:c1:ad:e9: 94:cc:83:1c:91:a1:d8:6a:6c:a9:f1:29:4d:c8:4c:37:6b:29: 69:a4:29:9d:5e:14:08:d3:f6:39:ae:45:55:fd:b1:6e:fa:d3: fa:d6:9c:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs/j8U6dkgmqsc07oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FhMDViMzEtM2MxZi00MGMxLWEwN2QtZTZhYTdmZjEy MmM4MB4XDTI1MDkxOTE2NTMxOFoXDTI1MTIxODE3NTMxOFowLzEtMCsGA1UEAxMk MmIyYWRhNWItNTdjMS00YTc0LTllZjMtNjgzYmQ2NzM4Y2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUr9me0U6pLqY7NFVkdcgn3rCyUZ0S9itw17 LeleebW07/wCf0exN0H92etkp262ZicRb4EMebBLsgJngFse+MZkF9YnmVoRVbht p6TwVl4fbn1az22i1yoUtGYvDEPR5W1RFMvpR/7tJ69IXEOPpCeWMFaHoJCuXN+s 8aunMQj3KMCaLgrq8z21hMppAomvEcdfR6hQ7/3rlmkQxDaKLaKNgEi6M0J++J6a k8F/dGMEOOBM0BiqT84yXH+uJbnK/M7gQL8DkYCLsVyCS2ABC9+kBcdVOnTEyh2k HR7di07kImefBbu80hkmZq1naQLuvHAZVglcqQXPMgMe5BYSCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOovnpUUOowxTwEF7qv4uPTGAW10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEw NWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFhN2ZmMTIyYzgvM2UxY2U5N2ItYWY0Zi0z MjlkLThmN2ItNDkzYTU4ZTJkMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FhMDViMzEtM2MxZi00MGMxLWEw N2QtZTZhYTdmZjEyMmM4LzNhYTA1YjMxLTNjMWYtNDBjMS1hMDdkLWU2YWE3ZmYx MjJjOC5jcmwwHwYDVR0jBBgwFoAUqwz+o4zFnhsASJ8S1S9XLnoWEkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEwNWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFh N2ZmMTIyYzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAtyAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFNq7HOfuEkWTrUOH28zW9+r5UxU3haR8yUaMOK1gL7uTJoYDO4M CIHB61+4H0WOQWECy9BUIqtgh76FZmXob74bMUWiT51P6aoPZCEVkR+GR29Z/V3w DTpgN/FWbL2VP2mXh2fcfBCOM+v7sAoLf0t9tw7lEIofNa8FHy2SuuV+Vj3VyhA2 1Xk4NEIa3VZdS6Xo3R5T+DlJrwpk2jDWD4UY2XTFd5UZ04EFk04xvvxJkDv2LNoP D5Kc55M7ODabV9TO0PvEGnCKQHf+eFG0QEvQURPhD8Gt6ZTMgxyRodhqbKnxKU3I TDdrKWmkKZ1eFAjT9jmuRVX9sW760/rWnJE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:27 2025 by rpki-client