$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/1eff8eed-22a9-3177-be69-f9ba2d3b032c.roa File: 1eff8eed-22a9-3177-be69-f9ba2d3b032c.roa (raw, json) Hash identifier: lvMGkl4s25MC+ptq9dm7IICuz8hIbAaYazSVeSO5bRY= Subject key identifier: 32:B3:F8:1A:91:72:E0:8D:6D:A3:C0:EA:89:C9:1B:5F:DE:EC:A1:BD Certificate issuer: /CN=e6a005bc-3dfa-42c0-9245-4fcaaaddb155 Certificate serial: 010D0C9F4328584B6A61EBF0DC9D04B0F45A7AD4 Authority key identifier: F9:5E:32:46:C2:2E:98:7B:4B:CC:FD:95:F0:EB:D6:E3:40:C7:6C:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/1eff8eed-22a9-3177-be69-f9ba2d3b032c.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 393523 IP address blocks: 2620:4b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:eb:f0:dc:9d:04:b0:f4:5a:7a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a005bc-3dfa-42c0-9245-4fcaaaddb155 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=44e097d3-8629-4b4c-a148-bab9217c3879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cd:89:1a:da:c9:58:c6:92:6d:0d:19:bb:b5: f9:2e:3c:88:35:71:c9:de:bf:8b:fb:0c:9c:ba:61: a7:98:29:e6:f9:6e:cc:f9:2b:f1:7c:db:8e:1c:b3: 57:5a:e4:ae:c6:9b:24:b3:55:01:20:a9:cb:c3:2c: 3c:2d:13:55:a1:bb:ec:93:79:1a:bb:d7:68:02:e3: 20:9c:60:a5:97:2c:b1:90:69:b3:0e:0e:44:c6:f1: c8:ee:d1:6d:cc:c4:5d:c7:aa:d4:32:5e:af:e3:6b: e1:7c:73:45:0f:94:da:cf:7a:54:a6:51:ae:43:25: 61:15:61:bd:9e:08:b8:7b:a7:01:c8:ed:f9:ad:91: b7:f3:d9:58:24:c4:e8:ea:84:d5:f3:97:be:ed:05: 28:66:bc:b8:50:a5:a7:f5:28:d2:e9:d0:1a:fe:69: 51:5d:07:0e:b4:74:ff:4a:25:c5:81:5f:10:ee:dc: 1a:09:0b:5e:6d:65:9d:b8:75:af:be:9f:bf:8d:b7: 84:d7:e2:28:c8:df:04:4d:ab:d7:6d:cf:5f:e3:0d: fd:ee:81:73:60:b5:1c:82:a3:7f:67:58:43:14:f2: 3f:a2:21:f1:2e:90:e3:8d:35:71:12:10:5a:61:e1: 93:ee:b9:83:ec:66:1a:ee:80:5f:5b:23:fe:22:16: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B3:F8:1A:91:72:E0:8D:6D:A3:C0:EA:89:C9:1B:5F:DE:EC:A1:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/1eff8eed-22a9-3177-be69-f9ba2d3b032c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.crl X509v3 Authority Key Identifier: keyid:F9:5E:32:46:C2:2E:98:7B:4B:CC:FD:95:F0:EB:D6:E3:40:C7:6C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e6a005bc-3dfa-42c0-9245-4fcaaaddb155.cer sbgp-ipAddrBlock: critical IPv6: 2620:4b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8e:6d:95:c6:78:98:f2:69:f2:5f:7f:5c:5a:fc:36:23:9c: 65:e5:7b:47:32:d1:81:40:81:1a:72:1b:01:b2:fe:25:6f:bc: 6c:91:4f:4f:bb:3f:95:af:b2:3a:da:54:4e:f0:82:ba:87:8d: 23:41:48:80:82:53:8d:32:9e:ff:24:0b:b0:6c:f7:5c:2e:28: f9:9b:84:b2:b7:12:60:af:37:b3:e7:a7:14:f6:a7:4b:1b:d6: 1b:34:84:e1:c7:44:2d:40:ee:53:30:86:c9:8d:2a:62:52:e2: d9:24:29:52:99:ea:8a:4a:38:81:6b:21:ac:d9:9b:59:b9:23: 57:91:ab:7c:13:f9:5c:7c:9f:ce:87:7d:6f:0a:36:ce:b5:a3: 68:f3:14:d3:d8:e2:a8:c7:73:2c:d1:3f:db:d9:aa:ff:d0:db: e9:93:12:ac:19:a9:47:d5:ab:e8:22:04:35:00:4e:fc:b4:9f: 3a:27:6a:8a:53:30:7d:ba:ef:22:67:13:00:db:7b:97:8c:83: 57:72:c4:9d:d6:1e:ba:3d:02:0c:05:68:d5:8d:37:fb:ad:0c: a6:b4:c7:6c:3b:00:11:f7:b9:bd:54:8b:6c:fc:d5:b5:24:e5: 0c:81:d3:26:02:d3:c6:29:ad:15:d2:e7:d2:32:cf:86:c8:1a: 10:63:44:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtqYevw3J0EsPRaetQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhMDA1YmMtM2RmYS00MmMwLTkyNDUtNGZjYWFhZGRi MTU1MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NDRlMDk3ZDMtODYyOS00YjRjLWExNDgtYmFiOTIxN2MzODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA282JGtrJWMaSbQ0Zu7X5LjyINXHJ3r+L+wyc umGnmCnm+W7M+SvxfNuOHLNXWuSuxpsks1UBIKnLwyw8LRNVobvsk3kau9doAuMg nGCllyyxkGmzDg5ExvHI7tFtzMRdx6rUMl6v42vhfHNFD5Taz3pUplGuQyVhFWG9 ngi4e6cByO35rZG389lYJMTo6oTV85e+7QUoZry4UKWn9SjS6dAa/mlRXQcOtHT/ SiXFgV8Q7twaCQtebWWduHWvvp+/jbeE1+IoyN8ETavXbc9f4w397oFzYLUcgqN/ Z1hDFPI/oiHxLpDjjTVxEhBaYeGT7rmD7GYa7oBfWyP+IhanqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDKz+BqRcuCNbaPA6onJG1/e7KG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lNmEw MDViYy0zZGZhLTQyYzAtOTI0NS00ZmNhYWFkZGIxNTUvMWVmZjhlZWQtMjJhOS0z MTc3LWJlNjktZjliYTJkM2IwMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTZhMDA1YmMtM2RmYS00MmMwLTky NDUtNGZjYWFhZGRiMTU1L2U2YTAwNWJjLTNkZmEtNDJjMC05MjQ1LTRmY2FhYWRk YjE1NS5jcmwwHwYDVR0jBBgwFoAU+V4yRsIumHtLzP2V8OvW40DHbLAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lNmEwMDViYy0zZGZhLTQyYzAtOTI0NS00ZmNh YWFkZGIxNTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGeObZXGeJjyafJff1xa/DYjnGXle0cy0YFAgRpyGwGy/iVvvGyR T0+7P5WvsjraVE7wgrqHjSNBSICCU40ynv8kC7Bs91wuKPmbhLK3EmCvN7PnpxT2 p0sb1hs0hOHHRC1A7lMwhsmNKmJS4tkkKVKZ6opKOIFrIazZm1m5I1eRq3wT+Vx8 n86HfW8KNs61o2jzFNPY4qjHcyzRP9vZqv/Q2+mTEqwZqUfVq+giBDUATvy0nzon aopTMH267yJnEwDbe5eMg1dyxJ3WHro9AgwFaNWNN/utDKa0x2w7ABH3ub1Ui2z8 1bUk5QyB0yYC08YprRXS59Iyz4bIGhBjRMg= -----END CERTIFICATE-----Generated at Wed Oct 22 00:40:14 2025 by rpki-client