$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb98b859-f0bf-32d0-9c7a-feca9aef6cfa.roa File: cb98b859-f0bf-32d0-9c7a-feca9aef6cfa.roa (raw, json) Hash identifier: M+EhY0N1Zw2dneMNQjFGupj0KWOOUAoM6iZ0q9Nlg/I= Subject key identifier: 21:43:D0:F0:F1:E3:71:C7:91:7C:BD:D9:33:51:7F:1A:0C:38:79:C5 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B891784C12BA630F28AD02B00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb98b859-f0bf-32d0-9c7a-feca9aef6cfa.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 19148 IP address blocks: 2601:2010::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:84:c1:2b:a6:30:f2:8a:d0:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=ed591626-6fd6-404f-b3d3-418e1efa72e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:56:1e:fb:9c:b9:38:02:d4:89:24:55:09: 2c:ad:7a:bb:02:0e:a0:2f:0d:f0:4a:ae:fb:ca:5a: 63:40:21:cd:5d:9e:e9:29:e2:b9:3f:71:1d:68:91: e7:84:39:86:a4:cf:10:86:48:56:d8:4f:1c:f1:3e: bf:4f:7d:84:68:28:d1:7c:03:6f:a9:82:27:8a:76: fc:c4:88:b0:4f:81:55:16:6c:16:a3:c0:bb:89:e5: 3d:4c:9b:5e:11:26:8a:e8:f8:e7:c5:04:32:ea:86: 90:51:64:35:57:0a:3c:a1:db:c1:56:79:a0:98:8f: c7:32:78:f3:ac:1e:e2:85:f5:b4:b4:6f:ad:a8:84: cb:1d:7e:9d:1e:5a:0b:23:b9:24:db:b2:3a:5c:8d: ca:ac:d1:39:8f:9f:e2:65:3d:c1:1a:64:b2:7c:5e: b3:85:09:e7:d6:5b:b6:69:f6:10:2a:b1:45:4e:6d: 9b:d0:18:8a:df:a2:4d:d9:89:de:13:35:77:8d:85: 26:08:5a:83:1a:35:fe:b3:f6:ff:55:49:fd:ba:2b: bb:87:2b:78:eb:80:8f:2b:66:04:f3:5b:6d:c5:bf: 17:ab:61:2c:71:7b:0f:4e:ee:8d:3e:dc:1b:38:59: 14:da:63:ce:8d:f1:8f:78:2d:94:e6:ab:ab:2d:24: 5f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:43:D0:F0:F1:E3:71:C7:91:7C:BD:D9:33:51:7F:1A:0C:38:79:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/cb98b859-f0bf-32d0-9c7a-feca9aef6cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:2010::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6c:e5:bc:9c:19:ba:42:d5:73:dc:2e:00:4f:24:f4:d4:dd: cc:55:35:f9:cd:2f:03:af:a6:f6:c2:14:78:73:a0:e9:3d:55: 94:c7:2c:c4:bd:63:c9:6f:0c:c9:71:4c:dc:05:a5:68:56:7e: 80:8f:2e:39:7a:1a:dc:4b:8d:2e:39:23:ed:9f:9d:8f:76:59: 35:9b:e1:98:6c:f7:56:42:8d:44:42:28:b9:21:b1:ef:c0:1b: 8b:ab:e8:f0:cc:48:ed:66:67:15:c6:89:7e:b6:9f:5f:84:84: 2f:ef:d2:65:7b:bd:cd:72:58:7b:0c:1a:46:3c:6a:88:0a:80: 8d:08:34:77:56:dd:00:05:ac:66:ea:96:9c:60:19:2d:aa:27: d2:b3:49:62:19:c5:45:95:f6:9d:e9:69:f4:10:fb:60:95:fd: e7:d0:03:1a:4b:47:a3:03:b2:ed:c0:b5:6f:fc:07:ee:bd:83: 1c:33:25:51:e8:57:5a:f9:41:f8:36:dc:30:72:08:41:95:f3: 32:76:27:74:b5:08:65:42:7e:ff:cd:97:75:a0:d5:c4:04:33: aa:02:12:a3:33:f5:28:ed:63:82:f2:a4:ad:c5:a2:6e:d9:20: 7c:86:15:b4:5a:25:c1:d0:46:23:e3:18:4a:0a:46:f6:3f:42: d5:3a:9f:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuJF4TBK6Yw8orQKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZWQ1OTE2MjYtNmZkNi00MDRmLWIzZDMtNDE4ZTFlZmE3MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPhWHvucuTgC1IkkVQksrXq7Ag6gLw3wSq77 ylpjQCHNXZ7pKeK5P3EdaJHnhDmGpM8QhkhW2E8c8T6/T32EaCjRfANvqYIninb8 xIiwT4FVFmwWo8C7ieU9TJteESaK6PjnxQQy6oaQUWQ1Vwo8odvBVnmgmI/HMnjz rB7ihfW0tG+tqITLHX6dHloLI7kk27I6XI3KrNE5j5/iZT3BGmSyfF6zhQnn1lu2 afYQKrFFTm2b0BiK36JN2YneEzV3jYUmCFqDGjX+s/b/VUn9uiu7hyt464CPK2YE 81ttxb8Xq2EscXsPTu6NPtwbOFkU2mPOjfGPeC2U5qurLSRf2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCFD0PDx43HHkXy92TNRfxoMOHnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvY2I5OGI4NTktZjBiZi0z MmQwLTljN2EtZmVjYTlhZWY2Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgEgEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrbOW8nBm6QtVz3C4ATyT01N3MVTX5zS8Dr6b2whR4c6DpPVWUxyzE vWPJbwzJcUzcBaVoVn6Ajy45ehrcS40uOSPtn52Pdlk1m+GYbPdWQo1EQii5IbHv wBuLq+jwzEjtZmcVxol+tp9fhIQv79Jle73Nclh7DBpGPGqICoCNCDR3Vt0ABaxm 6pacYBktqifSs0liGcVFlfad6Wn0EPtglf3n0AMaS0ejA7LtwLVv/AfuvYMcMyVR 6Fda+UH4NtwwcghBlfMydid0tQhlQn7/zZd1oNXEBDOqAhKjM/Uo7WOC8qStxaJu 2SB8hhW0WiXB0EYj4xhKCkb2P0LVOp89 -----END CERTIFICATE-----Generated at Sun Oct 19 20:19:47 2025 by rpki-client