$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa File: 294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa (raw, json) Hash identifier: Xx5FZxMoPDKZTsIvtuH3nkXwX3TVxWFfam/GlFXblPk= Subject key identifier: B3:FD:D2:EB:4D:A9:57:6E:4D:5C:77:6D:25:25:F5:3C:A6:C7:2D:D7 Certificate issuer: /CN=3299f656-5665-469b-8729-13b669bb2153 Certificate serial: 010D0C9F4328584AFC1C201C849BC10C3E3FD480 Authority key identifier: 19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 23294 IP address blocks: 2620:0:1a70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:20:1c:84:9b:c1:0c:3e:3f:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3299f656-5665-469b-8729-13b669bb2153 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=dd8478c7-5c91-4af5-9d66-aa227a6bb325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:72:5e:20:ea:91:94:c0:70:b3:bb:c1:a0: 6d:1c:ef:ad:c4:75:7b:aa:3a:de:4a:62:6a:f3:f2: cb:ad:30:89:50:58:ac:01:56:67:5d:ec:67:8f:45: c9:2b:e5:81:11:39:41:4f:1c:0f:d8:fa:9d:9c:59: c5:6d:b7:7a:94:7f:0e:54:cb:ce:b8:a2:c0:2a:48: 48:b0:4a:1b:e9:60:1b:de:bd:71:79:1c:31:38:7d: 9c:4d:21:56:87:2c:44:2e:57:12:f9:03:92:e3:d3: 42:78:66:a7:14:d8:b5:18:3b:94:97:c5:cd:8c:11: b3:69:97:8f:e7:da:22:a0:66:e9:bf:d8:f5:eb:60: 8d:f7:37:32:b6:15:d3:2e:ec:66:2c:1a:01:bc:2b: 51:66:46:eb:e5:1d:7e:d1:2a:d7:f0:9b:a2:2a:97: fc:37:74:4b:dd:25:e6:c5:4b:75:b9:23:24:d2:ea: 3f:7e:2d:9e:6a:47:5d:48:15:ba:ac:f0:f5:71:8f: 41:5c:73:b7:12:d5:d7:0b:82:96:82:67:d5:a3:ba: 95:83:b3:c5:32:fb:96:f2:70:f8:20:cc:e0:4e:10: 75:6d:c2:8d:93:46:88:75:82:cc:7c:73:02:d1:5f: ef:a4:c4:9e:c9:fa:b7:86:fa:f4:65:3c:e4:a4:46: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FD:D2:EB:4D:A9:57:6E:4D:5C:77:6D:25:25:F5:3C:A6:C7:2D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.crl X509v3 Authority Key Identifier: keyid:19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:1a70::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c6:b0:05:04:38:3a:e9:cb:78:69:8b:bd:ae:13:a6:11:79: cb:0e:88:60:1b:67:f1:0a:22:74:54:32:b2:39:40:b1:ba:21: 27:a4:74:a4:37:6c:3b:1d:a2:a8:06:67:2f:76:48:70:39:3c: 8e:6c:bc:4f:e8:2e:a6:84:10:11:07:b2:81:81:92:04:2f:a3: cf:68:92:78:3c:a4:73:af:d5:e7:04:3d:cb:80:b6:75:ec:77: ba:e1:c8:4d:49:90:fb:39:d2:05:ee:87:a1:4c:b7:3f:3e:fd: 3b:c9:73:04:73:35:91:03:60:dd:94:94:1a:0b:b7:3a:45:2b: 9b:84:c5:20:76:0e:96:e3:39:a4:83:ae:92:65:55:b3:e1:9e: d8:a8:ce:86:13:f5:14:c0:e4:f1:fb:b6:a2:1a:ca:3d:40:1a: e3:52:a6:29:7d:0b:07:e3:69:c5:20:86:34:a9:17:b0:b7:af: b6:59:84:32:1a:60:ae:7c:51:51:c7:b2:0b:ba:24:e2:8d:0c: fa:d5:98:f2:85:cf:3a:d7:4a:00:e3:12:1a:2b:90:e1:74:e4: b0:7e:ee:3e:f3:19:06:37:62:df:30:e5:5f:54:17:dc:7f:f7: 59:92:8f:dd:85:0f:b7:3a:7f:72:fe:03:78:66:4a:12:4a:25: 61:7f:ff:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8HCAchJvBDD4/1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5OWY2NTYtNTY2NS00NjliLTg3MjktMTNiNjY5YmIy MTUzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGQ4NDc4YzctNWM5MS00YWY1LTlkNjYtYWEyMjdhNmJiMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxJyXiDqkZTAcLO7waBtHO+txHV7qjreSmJq 8/LLrTCJUFisAVZnXexnj0XJK+WBETlBTxwP2PqdnFnFbbd6lH8OVMvOuKLAKkhI sEob6WAb3r1xeRwxOH2cTSFWhyxELlcS+QOS49NCeGanFNi1GDuUl8XNjBGzaZeP 59oioGbpv9j162CN9zcythXTLuxmLBoBvCtRZkbr5R1+0SrX8JuiKpf8N3RL3SXm xUt1uSMk0uo/fi2eakddSBW6rPD1cY9BXHO3EtXXC4KWgmfVo7qVg7PFMvuW8nD4 IMzgThB1bcKNk0aIdYLMfHMC0V/vpMSeyfq3hvr0ZTzkpEZm/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLP90utNqVduTVx3bSUl9Tymxy3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjk5 ZjY1Ni01NjY1LTQ2OWItODcyOS0xM2I2NjliYjIxNTMvMjk0YmEwN2MtMjcwMS0z MGQzLWExZTMtZDYyYWZlN2FjZGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI5OWY2NTYtNTY2NS00NjliLTg3 MjktMTNiNjY5YmIyMTUzLzMyOTlmNjU2LTU2NjUtNDY5Yi04NzI5LTEzYjY2OWJi MjE1My5jcmwwHwYDVR0jBBgwFoAUGRM7HR1eZ5k1QsfcC6zSG4kLdGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjk5ZjY1Ni01NjY1LTQ2OWItODcyOS0xM2I2 NjliYjIxNTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAABpw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAInGsAUEODrpy3hpi72uE6YRecsOiGAbZ/EKInRUMrI5QLG6ISek dKQ3bDsdoqgGZy92SHA5PI5svE/oLqaEEBEHsoGBkgQvo89okng8pHOv1ecEPcuA tnXsd7rhyE1JkPs50gXuh6FMtz8+/TvJcwRzNZEDYN2UlBoLtzpFK5uExSB2Dpbj OaSDrpJlVbPhntiozoYT9RTA5PH7tqIayj1AGuNSpil9CwfjacUghjSpF7C3r7ZZ hDIaYK58UVHHsgu6JOKNDPrVmPKFzzrXSgDjEhorkOF05LB+7j7zGQY3Yt8w5V9U F9x/91mSj92FD7c6f3L+A3hmShJKJWF//4Q= -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:59 2025 by rpki-client