$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/c1c6c128-c410-3d3d-acc4-6e8883f42aa6.roa File: c1c6c128-c410-3d3d-acc4-6e8883f42aa6.roa (raw, json) Hash identifier: TeSMS/8MXPBRZV2kAqNBZD+lVPbeDAm5L0AzRV+dvY4= Subject key identifier: 11:80:64:4E:B6:57:AF:4C:B3:34:ED:25:84:01:0E:BE:BD:AC:28:FD Certificate issuer: /CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047 Certificate serial: 010D0C9F4328584B5B0728CB15FE0672DCB2A000 Authority key identifier: B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/c1c6c128-c410-3d3d-acc4-6e8883f42aa6.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 0 IP address blocks: 2620:12f:e0f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:28:cb:15:fe:06:72:dc:b2:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=7498c9e7-baf8-48da-8c9d-6e3b54065ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:8d:41:b6:de:03:c4:f0:75:4f:67:40:c7: d7:de:bc:ec:5e:73:92:0e:bd:59:3d:8b:e8:3e:67: 4e:04:0f:b4:1a:45:88:df:22:88:22:8b:eb:21:dc: d6:89:0e:d8:39:d3:1f:1b:57:cc:10:3b:10:37:52: 43:1f:40:3f:3b:36:55:f5:89:a9:ec:4a:8a:bf:7b: 64:bb:cb:f3:16:d7:2d:3d:82:9c:00:e7:d6:3e:66: 51:c8:b4:8e:51:e6:41:02:80:e7:4b:30:d9:03:89: e2:97:f2:b3:ba:3a:12:47:f5:f2:0d:0f:25:da:f1: 1e:1d:fe:0a:91:d9:0f:58:45:5e:4f:1d:60:8a:1b: 59:7d:11:78:84:c1:b7:52:49:07:cb:88:41:cc:a9: f1:c1:ed:03:72:58:28:58:26:81:b9:8b:d1:67:6f: 17:c9:de:ae:4f:a2:5b:84:ab:9c:c2:fc:82:eb:5c: 05:bb:cb:b2:7c:8b:5f:66:99:1a:ad:ac:f4:45:07: c7:9e:1d:35:0f:75:76:81:ae:ce:5d:5f:b7:eb:7b: ff:24:1e:68:a8:51:93:98:62:c3:ba:ee:e4:b4:28: e2:0a:a2:40:bc:be:a4:12:c9:80:ad:98:56:0b:1d: e8:07:f2:55:7e:fc:18:91:ff:77:3c:e1:b7:fc:6a: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:80:64:4E:B6:57:AF:4C:B3:34:ED:25:84:01:0E:BE:BD:AC:28:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/c1c6c128-c410-3d3d-acc4-6e8883f42aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl X509v3 Authority Key Identifier: keyid:B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer sbgp-ipAddrBlock: critical IPv6: 2620:12f:e0f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:67:22:be:de:fa:c3:f4:4c:dd:4d:66:5c:84:c9:d0:41:03: 97:3b:5e:a8:b7:6f:b7:4c:2d:76:c8:c3:ae:db:5e:e5:d2:1f: 5f:13:1b:d8:cd:a5:1f:c9:38:db:48:81:7c:8f:d3:eb:7e:8e: 09:5d:7b:54:4c:6d:95:0d:2d:58:95:67:74:9b:25:17:bc:65: 5d:eb:32:2c:3c:a8:76:86:21:c4:99:88:f2:2f:70:02:b0:3a: 34:18:4c:20:ec:5f:30:7a:45:96:8d:ee:d2:9a:b7:6e:80:dd: 17:2b:d7:ce:8f:fb:3a:b2:11:73:88:26:18:bd:02:1e:b7:c3: 7d:de:d5:79:25:35:ca:41:17:b0:8a:a8:78:d5:f1:56:00:37: fe:86:58:47:13:69:97:ee:ab:a6:cd:39:f8:2a:c2:77:ba:87: b5:e0:bb:70:75:e1:c6:36:da:d0:21:f2:b3:29:7c:8b:07:8e: f2:c6:d9:a4:a5:9a:cb:15:59:19:80:23:14:bb:1b:bb:f8:59: a2:f8:5c:42:43:90:ee:12:43:53:0c:b8:8c:da:8d:a3:dc:ba: eb:64:97:0e:74:47:d2:93:22:e1:82:85:97:6c:76:ff:3d:43: 0b:b3:26:31:41:ea:bc:2e:79:79:5a:95:95:21:90:47:6b:9b: e7:1a:8f:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtbByjLFf4GctyyoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFiNmVjN2QtY2EyZC00Y2RiLTllMGItOWZjNGE2YjYz MDQ3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NzQ5OGM5ZTctYmFmOC00OGRhLThjOWQtNmUzYjU0MDY1YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo6NQbbeA8TwdU9nQMfX3rzsXnOSDr1ZPYvo PmdOBA+0GkWI3yKIIovrIdzWiQ7YOdMfG1fMEDsQN1JDH0A/OzZV9Ymp7EqKv3tk u8vzFtctPYKcAOfWPmZRyLSOUeZBAoDnSzDZA4nil/KzujoSR/XyDQ8l2vEeHf4K kdkPWEVeTx1gihtZfRF4hMG3UkkHy4hBzKnxwe0DclgoWCaBuYvRZ28Xyd6uT6Jb hKucwvyC61wFu8uyfItfZpkaraz0RQfHnh01D3V2ga7OXV+363v/JB5oqFGTmGLD uu7ktCjiCqJAvL6kEsmArZhWCx3oB/JVfvwYkf93POG3/Gpy1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBGAZE62V69MszTtJYQBDr69rCj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMWI2 ZWM3ZC1jYTJkLTRjZGItOWUwYi05ZmM0YTZiNjMwNDcvYzFjNmMxMjgtYzQxMC0z ZDNkLWFjYzQtNmU4ODgzZjQyYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzFiNmVjN2QtY2EyZC00Y2RiLTll MGItOWZjNGE2YjYzMDQ3LzMxYjZlYzdkLWNhMmQtNGNkYi05ZTBiLTlmYzRhNmI2 MzA0Ny5jcmwwHwYDVR0jBBgwFoAUtdECXlWBNDCKtbOUa/RkFl4E+lYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMWI2ZWM3ZC1jYTJkLTRjZGItOWUwYi05ZmM0 YTZiNjMwNDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABL+Dw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhnIr7e+sP0TN1NZlyEydBBA5c7Xqi3b7dMLXbIw67bXuXSH18T G9jNpR/JONtIgXyP0+t+jglde1RMbZUNLViVZ3SbJRe8ZV3rMiw8qHaGIcSZiPIv cAKwOjQYTCDsXzB6RZaN7tKat26A3Rcr186P+zqyEXOIJhi9Ah63w33e1XklNcpB F7CKqHjV8VYAN/6GWEcTaZfuq6bNOfgqwne6h7Xgu3B14cY22tAh8rMpfIsHjvLG 2aSlmssVWRmAIxS7G7v4WaL4XEJDkO4SQ1MMuIzajaPcuutklw50R9KTIuGChZds dv89QwuzJjFB6rwueXlalZUhkEdrm+caj/g= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:46 2025 by rpki-client