$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7bce5fe-272f-3560-99fe-888ce3155498.roa File: f7bce5fe-272f-3560-99fe-888ce3155498.roa (raw, json) Hash identifier: G3j+ZVFeRSdcOZID0ye+6xHr6fyxPnhzTJZHmeiXwNk= Subject key identifier: 42:83:9C:1C:70:7F:7C:12:68:DA:D2:7F:5B:61:54:1A:41:6F:B8:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B7B8ED3C9ADB7F664FDC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7bce5fe-272f-3560-99fe-888ce3155498.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 2603:3001:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:7b:8e:d3:c9:ad:b7:f6:64:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=17bf7d3c-b56a-476b-81ad-f5d72ae4dd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:ff:45:df:90:e9:ec:e7:1b:19:f8:7d:90: fc:01:d3:74:32:f1:59:3c:53:06:e5:25:cd:63:ac: 19:4d:14:dc:3d:49:d6:6b:89:f1:6f:8d:0b:e4:87: 29:aa:0e:c3:70:34:3e:92:75:ed:2b:34:3f:0e:99: 2a:3c:24:b4:50:03:2b:7c:83:f4:45:43:e9:c0:a9: f1:36:95:f1:fa:fd:c5:76:23:07:1b:1d:ba:3b:52: 1d:5c:c2:1a:bc:5a:7e:10:c2:39:8f:18:10:e6:d3: 90:74:60:cb:ea:7a:ec:74:83:ab:64:25:f2:30:01: 18:1d:26:3f:60:a8:27:9e:97:41:06:33:f6:3a:9d: 1c:41:fd:06:6a:c9:32:d3:c9:58:2a:0e:74:d6:4e: 89:a8:4c:20:c8:04:04:c3:f5:6e:95:c4:23:23:25: 6d:76:07:71:c0:08:02:c4:14:ef:dc:63:99:33:c8: 53:1a:a0:08:b0:7f:b9:e3:dc:76:a1:63:1f:15:f5: f9:5a:7f:3d:56:b4:c2:b6:93:2f:2f:e5:6e:d7:52: 4d:33:c1:b6:72:32:55:0a:d9:9b:72:1c:8c:db:90: 4d:52:66:2f:f5:d7:46:c1:bb:93:11:86:8c:eb:df: 11:82:bf:55:48:00:e5:72:c0:95:62:d1:76:e3:0c: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:83:9C:1C:70:7F:7C:12:68:DA:D2:7F:5B:61:54:1A:41:6F:B8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7bce5fe-272f-3560-99fe-888ce3155498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3001:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2d:fe:12:5e:cb:4b:50:6b:d1:cb:7d:9b:e6:93:b7:9d:55: 95:30:4c:76:d7:22:cf:27:c8:85:93:67:dc:d1:96:2f:74:07: 7e:1f:c9:54:57:dc:e3:3b:30:56:ce:ce:d8:0e:85:8e:e8:f4: 2e:91:45:2b:22:53:3a:85:fa:a0:e3:23:7f:98:ee:ac:d0:74: fb:8a:19:01:e2:e1:61:a6:d0:41:0f:84:33:96:72:ed:12:e3: f9:8a:9d:aa:e0:6d:4f:92:a8:16:8d:b5:22:7e:4e:24:b8:71: 7e:c7:87:28:1f:1e:21:56:bc:cd:88:09:63:57:18:bf:21:3c: 61:7a:a2:d0:2f:d0:6d:89:7a:b1:86:cb:c5:b0:f1:e9:bc:9c: c6:2a:cf:f7:2a:59:2b:04:4a:b7:57:12:ca:d1:54:fe:a2:0d: cb:26:61:1e:44:f0:2a:3b:82:bc:5b:c3:7d:e1:fe:82:f5:fe: 41:71:e4:ce:40:bd:33:9b:45:a8:93:96:f5:d0:4f:12:97:4f: cf:67:37:8e:56:61:44:a5:b9:54:de:70:cd:cc:3d:b4:1a:0b: 62:d8:b2:7f:d0:1a:99:0f:97:26:8f:96:4a:c0:2f:49:ce:0b: d1:c9:7b:de:8e:08:27:c7:17:70:6f:81:5a:0d:ac:cf:7f:42: 76:44:e1:d5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvBC3uO08mtt/Zk/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MTdiZjdkM2MtYjU2YS00NzZiLTgxYWQtZjVkNzJhZTRkZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfj/Rd+Q6eznGxn4fZD8AdN0MvFZPFMG5SXN Y6wZTRTcPUnWa4nxb40L5Icpqg7DcDQ+knXtKzQ/DpkqPCS0UAMrfIP0RUPpwKnx NpXx+v3FdiMHGx26O1IdXMIavFp+EMI5jxgQ5tOQdGDL6nrsdIOrZCXyMAEYHSY/ YKgnnpdBBjP2Op0cQf0Gasky08lYKg501k6JqEwgyAQEw/VulcQjIyVtdgdxwAgC xBTv3GOZM8hTGqAIsH+549x2oWMfFfX5Wn89VrTCtpMvL+Vu11JNM8G2cjJVCtmb chyM25BNUmYv9ddGwbuTEYaM698Rgr9VSADlcsCVYtF24wyVfQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEKDnBxwf3wSaNrSf1thVBpBb7gaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjdiY2U1ZmUtMjcyZi0z NTYwLTk5ZmUtODg4Y2UzMTU1NDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwAQMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWS3+El7LS1Br0ct9m+aTt51VlTBMdtcizyfIhZNn3NGWL3QHfh/J VFfc4zswVs7O2A6Fjuj0LpFFKyJTOoX6oOMjf5jurNB0+4oZAeLhYabQQQ+EM5Zy 7RLj+YqdquBtT5KoFo21In5OJLhxfseHKB8eIVa8zYgJY1cYvyE8YXqi0C/QbYl6 sYbLxbDx6bycxirP9ypZKwRKt1cSytFU/qINyyZhHkTwKjuCvFvDfeH+gvX+QXHk zkC9M5tFqJOW9dBPEpdPz2c3jlZhRKW5VN5wzcw9tBoLYtiyf9AamQ+XJo+WSsAv Sc4L0cl73o4IJ8cXcG+BWg2sz39CdkTh1Q== -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:24 2025 by rpki-client