$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa File: 2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa (raw, json) Hash identifier: v2G1rJFUi8HyUIxfIOTXfPzUd8ZgsauuaOnAk0g0P9A= Subject key identifier: D4:34:F2:12:34:33:67:35:58:79:56:2D:8B:25:01:5E:5C:D8:B6:34 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584B84E77F7AB5F1B3A53F780FC0 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 35847 IP address blocks: 2606:a300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7f:7a:b5:f1:b3:a5:3f:78:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=7fa40731-a17b-47f3-96a1-cb96703f1383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:b1:20:ca:6e:03:98:d3:db:4a:9e:48:93: 5d:2c:c7:39:57:40:87:ec:b4:cc:d3:50:b8:8e:e4: 2b:2c:a8:da:13:01:c1:cd:56:75:4d:55:18:94:80: 3a:ef:20:af:b9:73:5c:2a:cb:5e:47:d1:0b:61:27: ec:47:ec:71:42:c3:e6:76:07:21:ce:dc:d9:a6:06: 60:e2:e5:42:f6:44:f3:a7:eb:a8:d5:1f:8a:b9:c9: ad:a7:93:18:b6:b0:22:8c:a8:dc:7f:be:6d:3a:26: d5:cd:35:f8:a8:02:11:08:f0:fc:b3:88:b9:9f:0d: 0f:79:91:ab:b0:27:75:78:ee:d4:96:5b:31:3f:5b: 89:02:e4:ab:74:7f:c5:99:20:11:44:a8:3f:31:f5: d2:ed:63:8f:8c:e3:42:a7:73:59:6d:7a:7c:af:cf: cb:d9:0d:e3:46:12:55:e0:ed:8a:54:a1:54:4e:17: 44:3f:4b:7a:36:d0:78:2a:c0:36:ea:e0:bd:cc:69: 86:6b:e1:b0:48:f7:a6:98:a8:f9:d4:f8:ed:09:e0: dd:2b:a6:fe:fc:cc:52:b4:15:f8:4c:7b:96:27:89: 96:34:0e:a8:d2:f2:78:72:ce:3c:b7:a9:a0:7b:4c: 53:a4:b8:b6:15:eb:2b:90:94:47:13:63:d0:a2:a7: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:34:F2:12:34:33:67:35:58:79:56:2D:8B:25:01:5E:5C:D8:B6:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv6: 2606:a300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:5b:16:5d:38:4e:96:59:a9:fb:69:dc:b2:9d:6d:0b:9d:01: de:8c:13:9f:81:9b:6d:7c:32:dd:b5:4a:e3:06:47:48:38:5b: 2e:2a:dc:ad:8c:82:a8:11:51:82:28:ef:85:0a:6e:0b:33:3f: 5f:08:ad:6a:06:c5:03:66:f8:88:ea:42:e5:2c:11:e1:8d:8d: 2b:8d:e2:aa:ee:22:73:c4:01:5a:c6:9b:b0:60:4c:e4:3c:b4: 85:1a:56:65:0a:78:2e:25:8d:cb:4a:d0:84:50:0e:cc:32:76: 07:72:74:8a:5b:12:08:f6:5a:c3:38:d8:41:bd:97:73:49:ee: ad:af:50:2a:ba:df:72:2f:03:62:ad:96:74:10:f0:2a:ed:3d: 26:70:90:8a:c9:1b:3b:33:e1:ac:23:74:98:3c:ec:3d:c7:fd: e2:ae:49:f4:98:86:b4:ac:cc:ed:d8:a3:60:bc:66:66:9d:fd: 9a:93:5e:cd:68:4e:57:91:fa:4c:a0:80:da:bd:59:e9:48:0f: 6e:a7:a4:f0:22:50:0b:04:f7:3a:86:a7:5d:9a:2b:c1:f1:8a: a3:dc:d0:02:3c:1c:63:51:dc:2a:7c:1c:fe:e4:ca:3f:b9:c4: b0:65:c3:56:bf:4e:4e:2a:38:d3:94:ac:17:57:2d:36:cd:9d: 69:c0:30:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuE5396tfGzpT94D8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk N2ZhNDA3MzEtYTE3Yi00N2YzLTk2YTEtY2I5NjcwM2YxMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfixIMpuA5jT20qeSJNdLMc5V0CH7LTM01C4 juQrLKjaEwHBzVZ1TVUYlIA67yCvuXNcKsteR9ELYSfsR+xxQsPmdgchztzZpgZg 4uVC9kTzp+uo1R+Kucmtp5MYtrAijKjcf75tOibVzTX4qAIRCPD8s4i5nw0PeZGr sCd1eO7UllsxP1uJAuSrdH/FmSARRKg/MfXS7WOPjONCp3NZbXp8r8/L2Q3jRhJV 4O2KVKFUThdEP0t6NtB4KsA26uC9zGmGa+GwSPemmKj51PjtCeDdK6b+/MxStBX4 THuWJ4mWNA6o0vJ4cs48t6mge0xTpLi2FesrkJRHE2PQoqe1kwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNQ08hI0M2c1WHlWLYslAV5c2LY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvMmFlOGM3MmItZDVlNy0z NDA1LWJjNzAtODNkZTAwZGJjYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgajADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCVWxZdOE6WWan7adyynW0LnQHejBOfgZttfDLdtUrjBkdIOFsuKtyt jIKoEVGCKO+FCm4LMz9fCK1qBsUDZviI6kLlLBHhjY0rjeKq7iJzxAFaxpuwYEzk PLSFGlZlCnguJY3LStCEUA7MMnYHcnSKWxII9lrDONhBvZdzSe6tr1Aqut9yLwNi rZZ0EPAq7T0mcJCKyRs7M+GsI3SYPOw9x/3irkn0mIa0rMzt2KNgvGZmnf2ak17N aE5XkfpMoIDavVnpSA9up6TwIlALBPc6hqddmivB8Yqj3NACPBxjUdwqfBz+5Mo/ ucSwZcNWv05OKjjTlKwXVy02zZ1pwDCm -----END CERTIFICATE-----Generated at Tue Oct 21 11:28:07 2025 by rpki-client