$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa File: 1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa (raw, json) Hash identifier: UC7uJCa3IB5SNQ3DlXTTB2hb/CvrmCPgc+A7h/6hwAo= Subject key identifier: C4:B3:A4:7D:F9:DD:DD:6D:C0:57:5D:0E:11:69:77:ED:FC:0B:98:E4 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B0CDC0D4A126681642D454D80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 21947 IP address blocks: 2001:1940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0d:4a:12:66:81:64:2d:45:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=f119b8c0-e64b-41b7-a01a-69bc169bc5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:15:e4:b4:53:d3:d5:37:60:ba:af:0a:9d:53: c1:19:59:a6:6e:e4:b7:0f:ae:d4:85:72:b0:9c:6a: a8:68:f3:d1:c0:ba:bf:7f:3c:23:4f:8d:84:80:7d: 6a:b7:05:af:f5:1c:6f:46:39:91:d7:52:b7:ec:32: 82:c8:57:6d:b8:f1:eb:a0:67:fc:15:ca:58:df:84: 52:43:e7:17:02:a8:a6:da:94:f0:56:c9:60:8d:1c: 8d:61:d9:79:64:59:64:63:39:6b:be:c2:1a:ef:04: 2e:e0:80:a1:dd:54:f3:a1:90:74:6b:10:bc:b7:44: 5a:99:dc:32:a6:dc:6e:31:3c:28:4f:b7:80:18:89: c5:42:a6:57:30:cc:8f:ac:f6:e8:bb:06:e2:54:90: 69:2a:69:cf:ca:02:77:35:c5:b5:a2:8f:27:da:5e: 88:37:29:ef:1d:1c:11:21:71:57:4a:46:a4:59:c7: 4b:69:f3:3c:45:97:d7:77:51:6c:d7:a5:7e:f5:b5: 93:d1:e5:67:91:73:f8:39:fc:e6:30:e7:65:5a:b7: ac:42:09:1a:aa:fe:8e:46:ce:38:e1:67:e4:39:42: b6:a1:41:46:e5:07:f8:61:7c:38:0f:58:d9:69:57: 6b:74:61:de:48:2c:a0:85:7a:87:73:4c:45:03:68: f0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B3:A4:7D:F9:DD:DD:6D:C0:57:5D:0E:11:69:77:ED:FC:0B:98:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2001:1940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:73:bd:c8:09:76:d7:3a:52:fc:0a:e0:65:ed:32:7f:5e:31: c9:ea:96:c0:ab:7b:ff:ef:c6:da:ba:24:3a:8b:4b:1f:88:99: 7b:b7:91:a3:76:60:ae:89:c8:7a:ca:e5:cf:dd:fb:9e:a9:18: 21:bc:56:17:be:b0:24:db:18:93:a5:dd:2f:71:d7:1e:df:35: 48:d7:1b:8c:ef:52:3e:a9:53:1c:c8:ef:2a:05:2a:b3:72:8d: 59:5d:d0:23:b2:07:1b:3e:a0:83:ee:d4:3c:9b:a3:90:e9:60: 5c:40:ec:20:fc:2d:e0:a5:1a:e0:88:1b:c2:e2:c2:4e:25:3d: ec:57:12:18:c2:d0:a9:dd:f1:db:fa:60:f4:20:4e:2d:6b:c3: f5:60:17:37:49:73:a4:ab:ce:8d:02:3e:ed:aa:52:20:9c:47: dc:35:93:1f:29:4b:1f:40:13:21:f8:26:22:78:0c:05:d7:89: ba:c8:a9:eb:52:2d:63:76:39:8f:6a:d2:ad:43:ea:89:33:25: 60:21:c5:f5:1c:3b:c7:35:53:d9:c9:b0:1f:ac:95:8f:36:f4: 82:8b:77:c5:c2:ce:8b:69:42:45:68:f1:5b:48:9d:b3:51:71: 8a:35:4e:da:80:ba:a7:f5:b0:db:24:08:5d:66:2e:46:38:6c: 41:5d:3d:7d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsM3A1KEmaBZC1FTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZjExOWI4YzAtZTY0Yi00MWI3LWEwMWEtNjliYzE2OWJjNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBXktFPT1Tdguq8KnVPBGVmmbuS3D67UhXKw nGqoaPPRwLq/fzwjT42EgH1qtwWv9RxvRjmR11K37DKCyFdtuPHroGf8FcpY34RS Q+cXAqim2pTwVslgjRyNYdl5ZFlkYzlrvsIa7wQu4ICh3VTzoZB0axC8t0Ramdwy ptxuMTwoT7eAGInFQqZXMMyPrPbouwbiVJBpKmnPygJ3NcW1oo8n2l6INynvHRwR IXFXSkakWcdLafM8RZfXd1Fs16V+9bWT0eVnkXP4OfzmMOdlWresQgkaqv6ORs44 4WfkOUK2oUFG5Qf4YXw4D1jZaVdrdGHeSCyghXqHc0xFA2jwVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMSzpH353d1twFddDhFpd+38C5jkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMWFjYjQ1ZTYtYTIwYy0z YzhiLTk3ZDItOTE5MGQwYmQ3NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBfc73ICXbXOlL8CuBl7TJ/XjHJ6pbAq3v/78bauiQ6i0sfiJl7t5Gj dmCuich6yuXP3fueqRghvFYXvrAk2xiTpd0vcdce3zVI1xuM71I+qVMcyO8qBSqz co1ZXdAjsgcbPqCD7tQ8m6OQ6WBcQOwg/C3gpRrgiBvC4sJOJT3sVxIYwtCp3fHb +mD0IE4ta8P1YBc3SXOkq86NAj7tqlIgnEfcNZMfKUsfQBMh+CYieAwF14m6yKnr Ui1jdjmPatKtQ+qJMyVgIcX1HDvHNVPZybAfrJWPNvSCi3fFws6LaUJFaPFbSJ2z UXGKNU7agLqn9bDbJAhdZi5GOGxBXT19 -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:20 2025 by rpki-client