$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa File: afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa (raw, json) Hash identifier: daHfZASiiD1qxk/2Ky4HFIb77cFDYQOQtSshAnHKO2s= Subject key identifier: 2E:36:34:C2:71:50:BB:D6:FF:AE:8E:23:8E:80:8A:FB:08:B8:B0:D7 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584B4FDC7C0F7A45A4C9FAFA6280 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 5769 IP address blocks: 2605:d6c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7c:0f:7a:45:a4:c9:fa:fa:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=76b24dc2-561d-4843-9e0a-4b6af95a04f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1f:9b:ec:ef:4c:3e:b4:8c:51:ea:a9:a0:9c: 80:09:24:6f:bc:7b:db:cf:17:6a:f7:7b:c1:b1:ae: 5e:89:9a:ff:30:dd:56:26:38:2b:f9:93:f5:70:cf: c3:47:1c:fc:a5:b3:90:13:5e:08:2d:a0:62:65:30: 07:55:1b:79:88:cb:b0:8f:ea:a0:7f:a6:ab:c6:8b: 87:36:64:90:2b:1c:1a:6e:ba:8a:19:28:32:d1:3e: 8b:47:4f:5a:c6:09:73:49:8a:8c:fa:ff:79:51:fa: 84:1a:a9:b4:a8:09:36:a8:4b:f9:15:ad:c0:b3:c3: 92:19:03:ed:79:37:c8:9d:0c:6e:78:65:4a:03:e0: 2b:1f:48:c2:89:1a:4d:a0:5c:26:b5:32:b4:89:30: de:9a:40:18:12:15:2a:ee:3a:12:7f:39:73:ff:bd: e9:35:59:7b:ae:52:38:f5:c7:95:00:92:35:46:7a: 2e:e0:aa:fd:f0:0c:9d:99:c4:ab:84:47:42:84:54: 2f:cf:0e:f9:96:47:68:24:ba:aa:11:b9:1b:f6:e4: d8:db:a7:13:26:75:24:f4:32:6c:49:ac:98:76:5f: a1:c8:60:b3:a0:fe:3d:bc:84:d6:2e:9e:fd:f2:fd: 5b:6d:76:90:77:33:da:45:ac:ed:e5:a0:2c:04:59: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:36:34:C2:71:50:BB:D6:FF:AE:8E:23:8E:80:8A:FB:08:B8:B0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv6: 2605:d6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:de:10:ae:b3:4d:8b:06:93:b6:f8:35:f3:08:9c:20:59:e1: 4c:53:c4:d2:3b:64:7b:c6:40:6c:7f:30:9c:78:f7:4d:b1:0a: 68:05:c6:19:47:58:63:ab:46:48:b8:f6:8a:37:e2:b3:0b:82: 67:08:97:ad:ad:7f:d7:25:b9:09:1c:62:66:56:8d:95:e6:60: e8:73:41:53:d2:85:03:32:16:f3:f0:9e:44:68:53:68:67:af: 16:88:c2:76:8f:ea:17:3c:0a:94:e2:73:e6:d1:fd:fd:b5:35: d7:a3:6d:58:97:e4:e5:9e:7f:f7:7f:72:05:c4:e1:0a:cc:b6: e0:11:ef:6b:e4:1e:69:86:9f:3d:48:8b:cb:55:a0:20:1e:81: 39:91:ca:3f:ba:f9:cf:9d:b5:f8:66:a3:d6:20:0f:71:12:96: 14:9a:f9:b4:4e:a2:20:fe:b0:ef:a3:02:d4:fb:87:ea:3a:9d: 28:72:f5:8f:46:f8:06:c3:8d:a6:e7:e9:46:50:04:45:ec:74: 00:9b:5f:28:09:a2:c3:69:d3:bc:ef:24:cd:87:84:08:ad:79: 6f:96:b6:24:7d:3f:5f:2f:11:04:50:84:ca:f4:da:e9:d3:fc: 20:b9:ec:1d:eb:b2:24:a1:24:75:cd:66:e2:c2:54:d1:7f:82: a5:b1:89:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtP3HwPekWkyfr6YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk NzZiMjRkYzItNTYxZC00ODQzLTllMGEtNGI2YWY5NWEwNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih+b7O9MPrSMUeqpoJyACSRvvHvbzxdq93vB sa5eiZr/MN1WJjgr+ZP1cM/DRxz8pbOQE14ILaBiZTAHVRt5iMuwj+qgf6arxouH NmSQKxwabrqKGSgy0T6LR09axglzSYqM+v95UfqEGqm0qAk2qEv5Fa3As8OSGQPt eTfInQxueGVKA+ArH0jCiRpNoFwmtTK0iTDemkAYEhUq7joSfzlz/73pNVl7rlI4 9ceVAJI1Rnou4Kr98AydmcSrhEdChFQvzw75lkdoJLqqEbkb9uTY26cTJnUk9DJs SayYdl+hyGCzoP49vITWLp798v1bbXaQdzPaRazt5aAsBFn8bQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC42NMJxULvW/66OI46AivsIuLDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYWZiYjljYWUtNmIyYy0z ZDhjLTk2NDMtY2MwYzcwNTNiNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXWwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBM3hCus02LBpO2+DXzCJwgWeFMU8TSO2R7xkBsfzCcePdNsQpoBcYZ R1hjq0ZIuPaKN+KzC4JnCJetrX/XJbkJHGJmVo2V5mDoc0FT0oUDMhbz8J5EaFNo Z68WiMJ2j+oXPAqU4nPm0f39tTXXo21Yl+Tlnn/3f3IFxOEKzLbgEe9r5B5php89 SIvLVaAgHoE5kco/uvnPnbX4ZqPWIA9xEpYUmvm0TqIg/rDvowLU+4fqOp0ocvWP RvgGw42m5+lGUARF7HQAm18oCaLDadO87yTNh4QIrXlvlrYkfT9fLxEEUITK9Nrp 0/wguewd67IkoSR1zWbiwlTRf4KlsYkR -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:34 2025 by rpki-client