$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/9ed7d48d-0aeb-3d6f-88a0-f5c19df8f380.roa File: 9ed7d48d-0aeb-3d6f-88a0-f5c19df8f380.roa (raw, json) Hash identifier: gwUFxIeaCfmixlfaY0b8FeCur/laBIE90ZWOsq7FRlU= Subject key identifier: 11:01:F6:30:03:63:A4:9A:A7:EC:0D:8E:D8:31:46:21:2A:7B:06:22 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B3986F8FA5D62C1EA5DEF5A80 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/9ed7d48d-0aeb-3d6f-88a0-f5c19df8f380.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 400097 IP address blocks: 2606:3d40:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:f8:fa:5d:62:c1:ea:5d:ef:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=96a7279d-a6d6-4201-9807-bcd7aee19b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c8:cd:de:57:a1:84:a4:ee:58:52:29:1f:93: 9a:f0:82:44:b3:e9:28:1e:5f:db:0e:4e:cf:92:28: 95:1b:20:3d:5b:82:c8:2c:17:da:a9:da:53:41:45: e1:1a:5d:60:ad:bf:42:f5:a3:f1:9f:99:96:7d:63: 42:1b:28:07:d0:e7:c2:02:89:28:9f:ee:ea:a4:71: 48:dc:36:87:06:2e:44:2f:90:da:27:90:01:c5:53: bc:b0:39:f0:90:f0:7b:78:08:d0:42:75:d3:7b:bd: a4:69:27:c1:00:e2:46:da:9f:24:67:58:16:67:e2: a1:df:cb:c8:0f:42:fb:8b:aa:5e:4d:19:52:3c:0a: 94:35:cf:c6:13:5a:48:55:9a:97:55:5e:15:c0:3d: f9:3b:19:28:85:f1:60:55:aa:a2:b8:b8:81:b6:2a: 3c:16:8c:37:3e:92:43:bd:c9:61:97:08:85:ad:a9: bc:39:a6:55:eb:1e:2c:86:e8:38:ea:aa:72:bd:f1: ed:3a:01:c7:b7:ec:42:3c:67:7c:2e:4f:24:be:f2: 87:6d:e9:36:e8:60:14:93:58:df:cf:bc:bd:3f:5a: 9d:82:52:c9:7a:39:5c:cb:4a:94:54:0e:6a:91:1b: db:bc:9a:b6:ab:21:3f:47:ca:c2:fc:75:d8:17:4a: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:01:F6:30:03:63:A4:9A:A7:EC:0D:8E:D8:31:46:21:2A:7B:06:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/9ed7d48d-0aeb-3d6f-88a0-f5c19df8f380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:14::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:30:0b:82:73:94:c8:fb:f2:39:ed:aa:ec:27:75:a5:55:ba: 44:4f:04:36:fc:f1:9e:cd:e6:c7:3a:0f:4a:57:d2:ae:d1:b0: 9f:2e:70:4e:c7:7e:eb:f2:ee:33:d3:de:64:f6:54:55:18:47: e6:17:95:46:da:51:8f:5e:2f:7c:61:7b:0f:97:80:d4:f2:cf: 19:b1:e0:f0:ea:58:87:db:35:70:d8:51:c3:44:ba:60:e8:0a: c4:6a:50:62:4c:d3:09:67:3d:c6:03:4b:eb:06:5d:f7:91:84: 90:c2:4d:c7:f6:99:ef:30:5d:ab:c5:60:21:b8:b8:b6:06:9d: eb:f5:49:a8:51:74:6a:6d:ce:69:13:8c:89:e6:9c:88:53:30: c0:27:d8:03:fe:72:5e:fb:1e:7f:66:49:74:b4:cf:0d:90:0f: 22:f7:9b:8d:81:f5:48:1c:6e:5c:49:5d:c3:6c:41:89:30:a9: c6:53:7a:2e:83:2f:9e:3e:bd:78:f0:dc:03:00:fe:0d:2e:c0: 1d:d1:40:d4:e3:7e:56:d4:13:d4:bc:5d:0f:f4:f4:08:1e:ab: 22:26:00:06:b9:8a:c8:ec:a9:da:de:36:6c:1a:71:e6:b0:fb: fd:dc:ff:0e:13:0a:d4:44:68:e0:28:88:3f:5c:84:06:ec:6b: 2f:96:c9:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs5hvj6XWLB6l3vWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk OTZhNzI3OWQtYTZkNi00MjAxLTk4MDctYmNkN2FlZTE5YjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcjN3lehhKTuWFIpH5Oa8IJEs+koHl/bDk7P kiiVGyA9W4LILBfaqdpTQUXhGl1grb9C9aPxn5mWfWNCGygH0OfCAokon+7qpHFI 3DaHBi5EL5DaJ5ABxVO8sDnwkPB7eAjQQnXTe72kaSfBAOJG2p8kZ1gWZ+Kh38vI D0L7i6peTRlSPAqUNc/GE1pIVZqXVV4VwD35OxkohfFgVaqiuLiBtio8Fow3PpJD vclhlwiFram8OaZV6x4shug46qpyvfHtOgHHt+xCPGd8Lk8kvvKHbek26GAUk1jf z7y9P1qdglLJejlcy0qUVA5qkRvbvJq2qyE/R8rC/HXYF0rjwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBEB9jADY6Sap+wNjtgxRiEqewYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvOWVkN2Q0OGQtMGFlYi0z ZDZmLTg4YTAtZjVjMTlkZjhmMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKgwC4JzlMj78jntquwndaVVukRPBDb88Z7N5sc6D0pX0q7RsJ8u cE7Hfuvy7jPT3mT2VFUYR+YXlUbaUY9eL3xhew+XgNTyzxmx4PDqWIfbNXDYUcNE umDoCsRqUGJM0wlnPcYDS+sGXfeRhJDCTcf2me8wXavFYCG4uLYGnev1SahRdGpt zmkTjInmnIhTMMAn2AP+cl77Hn9mSXS0zw2QDyL3m42B9UgcblxJXcNsQYkwqcZT ei6DL54+vXjw3AMA/g0uwB3RQNTjflbUE9S8XQ/09AgeqyImAAa5isjsqdreNmwa ceaw+/3c/w4TCtREaOAoiD9chAbsay+Wyec= -----END CERTIFICATE-----Generated at Wed Nov 5 20:00:30 2025 by rpki-client