$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9be6fbe0-2a61-327f-b807-5cafaf48ec8a.roa File: 9be6fbe0-2a61-327f-b807-5cafaf48ec8a.roa (raw, json) Hash identifier: +zlWaX2+lrwHMQfIUPkpvyLuhDvN44U6/wCWw2rwe0k= Subject key identifier: C7:E8:F9:7D:0B:A3:44:C3:4D:87:70:BB:3F:16:D9:AD:2F:F5:1B:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5039242328A2E38719C40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9be6fbe0-2a61-327f-b807-5cafaf48ec8a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2601:642:4c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:03:92:42:32:8a:2e:38:71:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=10f99394-ea57-4259-b8f4-c31856ca66c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6c:a6:34:ba:7a:19:3e:c6:35:00:59:58:1d: 88:a1:72:43:73:54:d7:19:29:7c:52:c5:35:0e:dc: 63:26:79:6c:a7:7b:b9:76:0f:0c:83:37:24:f8:54: fd:6d:8a:c6:e1:e1:23:92:c2:98:8b:5b:e2:06:36: 77:28:ba:67:a2:64:60:79:ad:07:7a:f3:6f:60:9a: 8d:6e:cd:e7:66:89:37:a7:f5:a9:13:24:7c:1c:59: 27:cd:70:0c:0f:2a:0a:02:a9:fb:c3:7c:d5:d3:22: a3:01:60:5d:d0:b9:30:58:01:0a:6f:5d:58:32:48: b1:95:c7:24:85:4d:6d:75:d3:4c:0b:0f:c5:bb:7b: e6:21:eb:00:31:24:28:de:08:5c:bf:d3:e7:9f:f8: 5c:eb:1e:cb:eb:c4:83:18:ac:d3:cd:71:aa:fa:38: e9:55:a7:4d:d8:c2:5b:0d:8d:f8:50:76:f0:5a:c7: 97:bf:4e:e6:ec:6f:ec:65:0e:33:e0:ed:dd:87:f9: a0:2e:0c:26:81:c2:bf:7c:f0:ce:47:17:37:cc:97: f8:55:5e:75:80:44:84:41:19:c1:d6:c9:3f:16:79: 9a:dc:a1:b9:38:33:98:5c:c3:ff:8a:4c:da:2e:ae: 85:db:fa:ed:ea:5b:4a:c1:55:8b:f6:9e:d2:ab:87: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E8:F9:7D:0B:A3:44:C3:4D:87:70:BB:3F:16:D9:AD:2F:F5:1B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9be6fbe0-2a61-327f-b807-5cafaf48ec8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:642:4c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:65:21:6e:88:f0:23:22:60:99:51:46:6c:d5:c5:44:7e:f6: 6b:36:b2:61:27:36:0e:c5:db:90:1f:19:5c:b5:27:21:88:9a: 2a:f2:3b:56:50:94:79:9a:99:ef:48:ec:0f:10:ad:56:ed:3e: 88:f0:ce:3e:67:d7:f9:85:52:e4:16:96:ac:a8:e1:3b:ba:84: 9e:c0:10:a9:91:ec:f5:14:b7:c4:53:7e:82:da:6f:3a:b4:d0: 9d:ae:5b:39:14:19:91:04:5c:ea:5a:05:96:6d:34:50:c6:8e: 42:7b:0e:0b:f2:d5:b8:2a:56:28:1d:a0:77:6a:a8:83:7b:5f: 4b:e7:d5:d6:f1:85:55:13:3f:85:55:de:90:9d:fd:d6:aa:50: 98:8a:69:45:74:6e:69:37:12:5b:4c:62:bc:78:b1:49:75:8b: aa:9b:08:13:f5:a0:e7:16:d0:fc:83:ec:a8:ea:2e:b1:c1:39: d1:71:3a:31:cd:a4:15:9a:21:48:57:6e:bc:55:17:0e:0b:e2: 98:77:91:a7:32:ef:32:30:2a:4c:8e:e5:9d:9a:48:2d:e1:7b: 64:ac:d4:b3:93:a9:8a:44:de:cd:6d:a0:21:e6:18:74:d0:33: 29:08:84:b3:f9:ad:ef:96:ed:50:6e:a0:73:71:7d:51:42:a9: 33:4a:8c:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErsxQOSQjKKLjhxnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTBmOTkzOTQtZWE1Ny00MjU5LWI4ZjQtYzMxODU2Y2E2NmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWymNLp6GT7GNQBZWB2IoXJDc1TXGSl8UsU1 DtxjJnlsp3u5dg8Mgzck+FT9bYrG4eEjksKYi1viBjZ3KLpnomRgea0HevNvYJqN bs3nZok3p/WpEyR8HFknzXAMDyoKAqn7w3zV0yKjAWBd0LkwWAEKb11YMkixlcck hU1tddNMCw/Fu3vmIesAMSQo3ghcv9Pnn/hc6x7L68SDGKzTzXGq+jjpVadN2MJb DY34UHbwWseXv07m7G/sZQ4z4O3dh/mgLgwmgcK/fPDORxc3zJf4VV51gESEQRnB 1sk/Fnma3KG5ODOYXMP/ikzaLq6F2/rt6ltKwVWL9p7Sq4ceSwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMfo+X0Lo0TDTYdwuz8W2a0v9RsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWJlNmZiZTAtMmE2MS0z MjdmLWI4MDctNWNhZmFmNDhlYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgEGQkww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVmUhbojwIyJgmVFGbNXFRH72azayYSc2DsXbkB8ZXLUnIYiaKvI7 VlCUeZqZ70jsDxCtVu0+iPDOPmfX+YVS5BaWrKjhO7qEnsAQqZHs9RS3xFN+gtpv OrTQna5bORQZkQRc6loFlm00UMaOQnsOC/LVuCpWKB2gd2qog3tfS+fV1vGFVRM/ hVXekJ391qpQmIppRXRuaTcSW0xivHixSXWLqpsIE/Wg5xbQ/IPsqOouscE50XE6 Mc2kFZohSFduvFUXDgvimHeRpzLvMjAqTI7lnZpILeF7ZKzUs5OpikTezW2gIeYY dNAzKQiEs/mt75btUG6gc3F9UUKpM0qMcA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:54:53 2025 by rpki-client