$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa File: c817559c-60bc-373b-966f-49027ee8f1ab.roa (raw, json) Hash identifier: awbGAPXdx9lrXPdmyxr6j77A4HOpB0dRORJup3rs7rs= Subject key identifier: DB:12:CE:D6:14:BF:52:78:74:D3:58:7A:25:E9:B3:B7:D8:91:45:00 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584B9E07AF63A571E5DCD0F35EF2 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 54282 IP address blocks: 2620:147::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:af:63:a5:71:e5:dc:d0:f3:5e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=bb6fbdf8-8ed3-47e4-b201-c191a510272c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:d7:a1:2a:97:f6:a0:aa:68:de:e5:b0:ca: 14:a3:3b:da:c6:fe:c2:12:d9:e0:9b:60:d1:5c:f0: 0d:29:1f:75:f5:f3:87:33:3f:8a:93:dd:b2:2b:66: 60:e8:a3:13:ee:af:00:e4:7c:74:af:90:af:ac:6d: 68:91:08:b9:b5:0f:34:25:ce:5b:8c:3c:cf:71:f3: 76:d3:d6:b4:d1:cc:ac:af:1a:36:d7:46:7a:45:b6: c2:fd:bc:7c:8e:24:a9:9f:94:d7:d8:9e:dc:33:0c: 0b:7c:de:52:4e:e5:44:f8:69:7c:72:96:c3:92:1b: 75:00:48:19:8e:bb:64:48:b9:51:33:64:ef:88:5f: 73:3c:25:60:0f:12:60:51:ed:ac:7d:81:63:49:d2: 5e:bc:d3:da:e4:d9:98:40:0e:ba:3a:f2:a9:09:1a: 16:20:28:d5:3b:11:a8:7a:39:3b:75:81:53:66:e1: d3:f9:95:c8:e4:ff:97:74:8f:31:ef:24:82:3a:f1: a8:c8:ae:06:d7:68:5b:90:82:16:0a:30:ec:35:49: 3b:0b:e6:e0:d1:e5:53:25:48:52:b8:df:e0:85:ca: aa:12:2d:73:e7:23:b8:4f:1e:dc:57:a7:db:e8:16: 31:d6:74:ee:9d:0c:1b:b6:63:5d:a6:a5:aa:35:1e: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:12:CE:D6:14:BF:52:78:74:D3:58:7A:25:E9:B3:B7:D8:91:45:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:8d:f1:3e:a5:ed:a5:65:72:f4:f8:d1:f2:8a:6c:63:b1:4b: b0:26:03:60:57:43:12:95:d6:15:5f:be:af:b5:2c:5a:3d:51: c1:ff:9c:20:4f:74:9b:9e:89:08:26:b9:1a:7c:eb:e5:21:49: 12:ec:51:8c:2a:d2:b0:68:b1:14:a0:0d:e8:17:e6:aa:7f:85: d7:9a:bc:85:2b:67:71:1c:f8:14:03:5e:f3:e4:48:41:a1:f4: fc:2a:05:01:b3:01:76:cf:14:82:6f:57:68:43:eb:90:84:fb: 51:dd:7c:13:66:7e:62:39:29:97:f0:4b:bd:cf:ae:49:33:1d: af:6b:93:7f:a2:8b:27:55:7d:ba:69:9e:f6:a0:95:f1:7f:bb: 90:5f:ae:48:07:c6:6a:14:87:85:7e:40:27:47:aa:39:fb:6d: e7:63:d4:b3:41:f9:4e:e3:4f:5e:dd:77:0c:be:3e:d7:16:4d: db:83:40:c5:5e:73:8b:cd:72:cb:1c:65:36:21:7b:cf:8f:01: 27:8c:ba:5c:11:60:66:e4:c2:f7:c5:d8:de:0b:1d:23:98:17: 63:fd:90:16:0f:ca:bd:22:07:2f:12:b2:47:69:d4:09:07:2d: 4b:f5:06:f0:4d:ed:24:60:83:6e:d4:73:fe:ba:0b:f9:9e:63: ef:5b:c8:59 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEueB69jpXHl3NDzXvIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YmI2ZmJkZjgtOGVkMy00N2U0LWIyMDEtYzE5MWE1MTAyNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDTXoSqX9qCqaN7lsMoUozvaxv7CEtngm2DR XPANKR919fOHMz+Kk92yK2Zg6KMT7q8A5Hx0r5CvrG1okQi5tQ80Jc5bjDzPcfN2 09a00cysrxo210Z6RbbC/bx8jiSpn5TX2J7cMwwLfN5STuVE+Gl8cpbDkht1AEgZ jrtkSLlRM2TviF9zPCVgDxJgUe2sfYFjSdJevNPa5NmYQA66OvKpCRoWICjVOxGo ejk7dYFTZuHT+ZXI5P+XdI8x7ySCOvGoyK4G12hbkIIWCjDsNUk7C+bg0eVTJUhS uN/ghcqqEi1z5yO4Tx7cV6fb6BYx1nTunQwbtmNdpqWqNR6wewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNsSztYUv1J4dNNYeiXps7fYkUUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYzgxNzU1OWMtNjBiYy0z NzNiLTk2NmYtNDkwMjdlZThmMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABRwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlY3xPqXtpWVy9PjR8opsY7FLsCYDYFdDEpXWFV++r7UsWj1Rwf+c IE90m56JCCa5Gnzr5SFJEuxRjCrSsGixFKAN6Bfmqn+F15q8hStncRz4FANe8+RI QaH0/CoFAbMBds8Ugm9XaEPrkIT7Ud18E2Z+Yjkpl/BLvc+uSTMdr2uTf6KLJ1V9 umme9qCV8X+7kF+uSAfGahSHhX5AJ0eqOftt52PUs0H5TuNPXt13DL4+1xZN24NA xV5zi81yyxxlNiF7z48BJ4y6XBFgZuTC98XY3gsdI5gXY/2QFg/KvSIHLxKyR2nU CQctS/UG8E3tJGCDbtRz/roL+Z5j71vIWQ== -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:39 2025 by rpki-client