$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/634f7e96-8e18-3f93-a960-b6ee83e1a913.roa File: 634f7e96-8e18-3f93-a960-b6ee83e1a913.roa (raw, json) Hash identifier: QQc/djyoQ7gbtSOww7FgbpIoWvxituWzZFpLYRRzpxU= Subject key identifier: 52:72:DE:43:39:DA:3A:42:0C:78:38:B1:9A:09:0B:F1:F3:01:FA:90 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584B970CD0844702C5635AF3B280 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/634f7e96-8e18-3f93-a960-b6ee83e1a913.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 30133 IP address blocks: 2001:500:7a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d0:84:47:02:c5:63:5a:f3:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=38fb19f0-f34c-4bea-8d1a-36bb05bf1b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:27:52:bc:3b:b7:7b:c9:f0:b5:39:1d:0c: eb:62:88:9f:43:38:89:12:a8:0e:5f:2d:14:6c:e4: aa:6a:00:d9:57:81:13:fc:5b:a0:1a:20:7d:33:24: 6e:e1:90:e8:fd:39:1f:b8:10:35:ed:4e:cb:ef:fd: 3a:ff:3d:39:6e:32:c2:87:05:e6:06:41:f4:6d:32: a0:9c:e1:ef:09:06:7e:da:d9:fc:ca:f7:83:29:17: c3:5d:5a:1d:84:f6:47:00:2b:7f:68:0c:16:67:60: 73:f2:44:2b:bf:a3:20:35:51:8a:3b:20:04:f2:4e: cc:0b:e3:74:14:67:a8:c3:c5:be:90:09:94:7c:87: 2e:34:03:ec:9c:0d:92:27:5f:20:66:c0:63:e9:89: 0b:5a:70:54:fe:9f:1f:0d:70:c7:1a:95:0c:a1:00: 17:82:02:64:a5:f9:57:d0:ab:f1:f8:f2:b4:9e:8b: 9f:16:e0:85:f1:4c:b6:5a:ac:85:e8:02:65:7e:9e: e8:98:56:ed:14:20:b9:4b:ac:14:98:5f:83:0a:8b: ad:d2:2c:f2:30:9f:47:0e:fe:bd:a1:23:55:32:b2: f7:43:59:ad:4d:19:79:1b:48:e8:1e:2b:f2:2f:ca: c9:64:4b:8c:b9:42:c1:71:40:6b:13:e2:01:0f:5a: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:72:DE:43:39:DA:3A:42:0C:78:38:B1:9A:09:0B:F1:F3:01:FA:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/634f7e96-8e18-3f93-a960-b6ee83e1a913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:4b:b9:d3:25:b9:30:75:08:e0:a7:d0:3c:f5:2b:7e:b0:c3: 22:cf:fb:5e:13:e8:5b:17:72:aa:fa:a5:9f:a7:bd:b2:26:ef: 9e:06:32:be:7c:d2:f5:df:fd:b3:e0:e6:a9:c9:f5:16:a5:ef: 1a:2f:04:40:9d:ff:39:2a:83:6e:f0:4d:d0:45:ba:64:1e:99: 96:07:73:ca:17:6d:a1:5a:bb:2f:36:76:e7:8a:8e:24:f5:1e: 06:88:fa:ff:77:f4:72:17:0f:9b:4f:02:90:b2:97:bb:b3:9d: fb:2b:e4:a3:de:fa:f1:05:da:7b:36:62:4a:ab:2d:34:fb:2d: 2c:b8:cb:d6:ec:d4:b2:bd:c4:25:d8:20:d3:0a:f2:b7:cb:b5: f1:31:b0:4d:f1:55:bf:18:49:be:a5:4b:82:dc:28:a7:bc:24: a8:bd:dd:66:c0:85:d9:01:20:65:db:85:cd:4b:29:84:3f:a7: 47:5c:f4:84:14:2e:b7:3a:61:b8:cd:fd:4d:74:70:64:93:ed: d3:6c:ce:eb:84:f3:81:a8:a7:13:df:1b:3f:72:27:b6:3f:11: 80:c9:c7:0d:19:ee:50:02:eb:f2:4d:05:22:a6:f0:70:c2:c0: 6a:40:75:93:11:14:08:1d:d2:4f:10:15:5c:83:07:1e:fd:00: 5a:2a:b2:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDNCERwLFY1rzsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MzhmYjE5ZjAtZjM0Yy00YmVhLThkMWEtMzZiYjA1YmYxYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh68nUrw7t3vJ8LU5HQzrYoifQziJEqgOXy0U bOSqagDZV4ET/FugGiB9MyRu4ZDo/TkfuBA17U7L7/06/z05bjLChwXmBkH0bTKg nOHvCQZ+2tn8yveDKRfDXVodhPZHACt/aAwWZ2Bz8kQrv6MgNVGKOyAE8k7MC+N0 FGeow8W+kAmUfIcuNAPsnA2SJ18gZsBj6YkLWnBU/p8fDXDHGpUMoQAXggJkpflX 0Kvx+PK0noufFuCF8Uy2WqyF6AJlfp7omFbtFCC5S6wUmF+DCout0izyMJ9HDv69 oSNVMrL3Q1mtTRl5G0joHivyL8rJZEuMuULBcUBrE+IBD1qqeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJy3kM52jpCDHg4sZoJC/HzAfqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvNjM0ZjdlOTYtOGUxOC0z ZjkzLWE5NjAtYjZlZTgzZTFhOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAB6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNLudMluTB1COCn0Dz1K36wwyLP+14T6FsXcqr6pZ+nvbIm754G Mr580vXf/bPg5qnJ9Ral7xovBECd/zkqg27wTdBFumQemZYHc8oXbaFauy82dueK jiT1HgaI+v939HIXD5tPApCyl7uznfsr5KPe+vEF2ns2YkqrLTT7LSy4y9bs1LK9 xCXYINMK8rfLtfExsE3xVb8YSb6lS4LcKKe8JKi93WbAhdkBIGXbhc1LKYQ/p0dc 9IQULrc6YbjN/U10cGST7dNszuuE84GopxPfGz9yJ7Y/EYDJxw0Z7lAC6/JNBSKm 8HDCwGpAdZMRFAgd0k8QFVyDBx79AFoqsjI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:09 2025 by rpki-client