$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa File: 43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa (raw, json) Hash identifier: dLKB7W6450VZSN3+ByNVZ/23wFpZ7pn4B0ASqbF7eso= Subject key identifier: 94:BA:61:50:04:1B:5A:5C:15:1C:3E:2D:63:57:23:F0:23:82:26:FA Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584B970D06F15ABE639D50DFCB00 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 2001:504:99::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:06:f1:5a:be:63:9d:50:df:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=b71adf76-75cb-4843-8c16-3697bd60cb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1a:8b:47:9b:19:5c:8d:20:72:46:b1:d8:6c: 94:f9:08:0f:9b:90:ab:4c:49:1e:77:29:a8:f5:1c: 39:b3:ca:7a:64:2c:88:b1:63:a3:a2:09:89:45:8c: 41:e1:0a:2a:a8:ac:1b:fa:56:00:a2:7f:de:70:12: 84:ef:8e:4f:5f:b1:d9:61:33:fd:ae:f3:62:7d:95: 23:0b:bd:da:e3:17:62:79:29:4a:4b:49:96:d7:4a: 59:cb:4b:8f:3d:33:dd:3f:83:ae:2b:ee:2d:1b:a2: c3:21:91:d7:6c:d4:45:1a:d9:e1:41:66:b6:f9:2f: 77:91:26:6e:d3:95:10:2d:e1:48:5e:de:77:a0:82: 85:20:bf:62:ec:1c:c5:0a:ff:7b:42:1b:a4:8b:07: 49:42:6c:6c:62:51:5e:c5:7c:11:df:49:5b:41:e4: 82:f3:bf:b7:90:73:70:00:18:f9:22:1f:fc:da:76: 43:cf:a3:81:98:51:43:f4:a3:13:e5:31:f4:30:a5: 89:55:77:2b:b4:ec:86:33:8c:a8:89:b5:d0:0f:7c: 6a:e6:7b:ea:39:6e:55:5a:0a:e1:fa:a2:30:41:f1: 32:96:41:12:2f:c9:32:8b:52:e6:53:f7:cb:b2:d1: 23:e1:8e:e9:20:b0:58:ae:74:63:16:c2:a9:4b:63: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BA:61:50:04:1B:5A:5C:15:1C:3E:2D:63:57:23:F0:23:82:26:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:99::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:28:27:cf:94:5c:36:70:ce:4b:a1:60:1a:79:f2:7b:2d:66: 88:32:13:c8:01:f9:b2:29:12:7e:46:af:c3:f8:96:e8:e7:19: e5:ac:08:5e:fd:45:63:f8:9a:ae:da:c4:18:26:6c:93:57:b3: f9:b1:95:a9:fb:f7:56:13:2e:8c:ff:7d:4f:8a:72:7d:1c:a1: ad:ab:5e:bf:f9:c3:70:f4:f1:d9:a2:d0:36:6b:5f:bf:f3:af: 8c:b4:43:77:11:d6:f9:4b:c6:25:18:cb:07:8e:a4:09:93:81: 96:fc:ce:5b:fb:98:6b:e7:28:19:38:f6:c5:50:d4:4e:47:72: a4:c4:2b:dd:b6:fe:1a:d5:3d:34:97:4c:12:99:09:d0:2c:83: 67:44:5f:78:f7:23:f4:18:85:78:1c:e1:d0:bc:36:fe:33:96: 2d:5f:53:54:ce:86:eb:69:1b:6f:3f:00:be:f3:a6:f8:7d:d0: 18:9f:e4:be:fa:2b:32:18:a2:03:a5:8e:c2:5b:11:47:ed:f3: 6c:bf:01:9d:9a:57:7b:8d:34:86:2c:4d:74:43:c4:19:3d:4b: 39:58:b0:ed:cb:dd:c8:f2:85:38:bb:99:70:b9:7a:e3:20:02: 38:e7:22:aa:a2:77:83:3f:1c:46:ba:7c:b6:f2:cd:cc:10:5a: 90:f3:7f:ee -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEuXDQbxWr5jnVDfywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YjcxYWRmNzYtNzVjYi00ODQzLThjMTYtMzY5N2JkNjBjYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BqLR5sZXI0gckax2GyU+QgPm5CrTEkedymo 9Rw5s8p6ZCyIsWOjogmJRYxB4QoqqKwb+lYAon/ecBKE745PX7HZYTP9rvNifZUj C73a4xdieSlKS0mW10pZy0uPPTPdP4OuK+4tG6LDIZHXbNRFGtnhQWa2+S93kSZu 05UQLeFIXt53oIKFIL9i7BzFCv97QhukiwdJQmxsYlFexXwR30lbQeSC87+3kHNw ABj5Ih/82nZDz6OBmFFD9KMT5TH0MKWJVXcrtOyGM4yoibXQD3xq5nvqOW5VWgrh +qIwQfEylkESL8kyi1LmU/fLstEj4Y7pILBYrnRjFsKpS2PXuwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJS6YVAEG1pcFRw+LWNXI/Ajgib6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvNDNkM2UxNGMtZWY0YS0z MjgzLWJiNzktYmI3OGFjYzRjOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACZ AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAhCgnz5RcNnDOS6FgGnnyey1miDITyAH5sikSfkavw/iW6OcZ 5awIXv1FY/iartrEGCZsk1ez+bGVqfv3VhMujP99T4pyfRyhratev/nDcPTx2aLQ Nmtfv/OvjLRDdxHW+UvGJRjLB46kCZOBlvzOW/uYa+coGTj2xVDUTkdypMQr3bb+ GtU9NJdMEpkJ0CyDZ0RfePcj9BiFeBzh0Lw2/jOWLV9TVM6G62kbbz8AvvOm+H3Q GJ/kvvorMhiiA6WOwlsRR+3zbL8BnZpXe400hixNdEPEGT1LOViw7cvdyPKFOLuZ cLl64yACOOciqqJ3gz8cRrp8tvLNzBBakPN/7g== -----END CERTIFICATE-----Generated at Wed Nov 5 02:02:52 2025 by rpki-client