$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/5ec91f7d-562b-385f-beb7-d8819c9a22a4.roa File: 5ec91f7d-562b-385f-beb7-d8819c9a22a4.roa (raw, json) Hash identifier: klr6NEnsOMc4LFI/vH6wP208UoQvgXbhoNXGv0xJY9s= Subject key identifier: A8:12:7E:3B:2B:96:DF:B6:F7:62:FC:9C:D8:02:59:F0:F7:48:24:88 Certificate issuer: /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Certificate serial: 010D0C9F4328584B84E77653C048253D8C9E0100 Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/5ec91f7d-562b-385f-beb7-d8819c9a22a4.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397457 IP address blocks: 2620:128:2010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:76:53:c0:48:25:3d:8c:9e:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=7cce0803-35ad-4e16-b84d-5e1e2da8f22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:0d:ab:b2:cb:13:d0:46:51:b0:ce:45:44: ea:da:86:ba:87:7b:39:65:b4:8e:dc:e9:24:7d:42: b5:0a:58:bb:ac:4b:86:39:8a:55:7d:d5:f1:9e:3f: 36:2d:98:65:87:d5:2b:cd:1d:93:ba:64:a1:99:e2: 81:ff:6e:c3:12:94:a2:98:ca:ce:9a:31:35:4f:03: 37:2e:e8:e3:7e:af:47:64:66:ed:a1:47:30:a0:18: ca:7d:e0:60:0a:f9:a1:c4:07:0d:81:06:34:81:db: b3:11:5f:62:52:27:45:10:d6:10:dc:f5:29:1e:dc: 67:bd:da:e0:30:4c:88:3a:e3:1b:51:c1:96:85:64: dd:5a:62:6e:27:93:d8:ab:36:aa:54:78:91:2f:c1: 48:8b:22:a1:d5:e1:e0:9f:a1:3e:a3:25:c6:30:e9: fe:da:cb:4f:22:9b:e7:f0:17:ea:56:0b:6b:7b:db: e6:72:bc:28:af:c7:fc:55:da:97:1e:71:f1:46:b0: 1d:be:a9:c7:9b:be:90:c0:3c:23:97:ea:68:a8:f2: be:3e:f0:01:a7:3a:c0:1e:42:20:d4:f5:bd:e7:e0: a5:3a:f9:49:1e:8b:5f:c2:c9:15:aa:af:d2:85:0f: 3a:19:37:d1:9d:f1:ed:25:7c:a3:09:76:3b:c9:21: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:12:7E:3B:2B:96:DF:B6:F7:62:FC:9C:D8:02:59:F0:F7:48:24:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/5ec91f7d-562b-385f-beb7-d8819c9a22a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl X509v3 Authority Key Identifier: keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer sbgp-ipAddrBlock: critical IPv6: 2620:128:2010::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e0:c0:fe:10:44:9b:67:35:81:92:d1:63:ba:c0:1b:3e:a2: ba:1c:3d:ff:92:88:82:39:06:52:d4:6a:f0:a2:63:8e:76:69: 5e:e3:e1:71:97:11:f6:1a:85:50:d6:93:0d:b4:13:81:2c:10: e6:e2:ec:44:59:0f:c7:eb:b9:43:71:97:bf:c7:e5:95:c3:8a: 9a:d5:92:f1:3e:ea:7a:ee:ec:84:52:80:3b:1b:f9:7d:51:2c: f9:a1:90:8c:e8:ea:8b:3d:33:39:c0:f4:46:ed:ae:a8:12:3c: c1:5c:a4:b8:43:ef:c2:e0:fb:eb:88:2e:58:89:0e:14:49:c2: 82:7d:d1:8f:80:65:72:a3:72:4b:5d:b3:c1:0f:4d:74:92:28: 7b:ea:7d:64:58:e9:52:87:79:f8:56:48:5b:0f:0d:ae:07:e5: 7f:64:97:c3:44:a4:fb:4d:fc:d8:a2:73:5c:cd:23:cf:97:d3: e6:07:7b:3e:82:6a:56:37:6e:f1:79:cd:53:ce:a5:47:50:00: 26:60:64:12:a4:ad:85:06:78:fe:17:ff:58:1c:75:8b:fb:3e: 49:8a:06:90:f3:c7:3a:30:05:e3:12:28:e4:c8:41:5f:96:7b: ce:04:73:51:db:df:44:f9:fd:a7:95:26:5a:4c:df:cf:05:6c: 6c:f0:80:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuE53ZTwEglPYyeAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzZGExY2EtYTMwMi00MzZhLWJkNWYtMGE1Yjc1YmFl YWRkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk N2NjZTA4MDMtMzVhZC00ZTE2LWI4NGQtNWUxZTJkYThmMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/sNq7LLE9BGUbDORUTq2oa6h3s5ZbSO3Okk fUK1Cli7rEuGOYpVfdXxnj82LZhlh9UrzR2TumShmeKB/27DEpSimMrOmjE1TwM3 Lujjfq9HZGbtoUcwoBjKfeBgCvmhxAcNgQY0gduzEV9iUidFENYQ3PUpHtxnvdrg MEyIOuMbUcGWhWTdWmJuJ5PYqzaqVHiRL8FIiyKh1eHgn6E+oyXGMOn+2stPIpvn 8BfqVgtre9vmcrwor8f8VdqXHnHxRrAdvqnHm76QwDwjl+poqPK+PvABpzrAHkIg 1PW95+ClOvlJHotfwskVqq/ShQ86GTfRnfHtJXyjCXY7ySFt3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKgSfjsrlt+292L8nNgCWfD3SCSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNk YTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTViNzViYWVhZGQvNWVjOTFmN2QtNTYyYi0z ODVmLWJlYjctZDg4MTljOWEyMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWIzZGExY2EtYTMwMi00MzZhLWJk NWYtMGE1Yjc1YmFlYWRkL2FiM2RhMWNhLWEzMDItNDM2YS1iZDVmLTBhNWI3NWJh ZWFkZC5jcmwwHwYDVR0jBBgwFoAUMV8Eih+UqKCCJUdeQgChhx+oiTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNkYTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTVi NzViYWVhZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKCAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABjgwP4QRJtnNYGS0WO6wBs+orocPf+SiII5BlLUavCiY452aV7j 4XGXEfYahVDWkw20E4EsEObi7ERZD8fruUNxl7/H5ZXDiprVkvE+6nru7IRSgDsb +X1RLPmhkIzo6os9MznA9EbtrqgSPMFcpLhD78Lg++uILliJDhRJwoJ90Y+AZXKj cktds8EPTXSSKHvqfWRY6VKHefhWSFsPDa4H5X9kl8NEpPtN/Niic1zNI8+X0+YH ez6CalY3bvF5zVPOpUdQACZgZBKkrYUGeP4X/1gcdYv7PkmKBpDzxzowBeMSKOTI QV+We84Ec1Hb30T5/aeVJlpM388FbGzwgIc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:02 2025 by rpki-client