$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa File: acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa (raw, json) Hash identifier: 0/lwAPlPUInNvI5reA+VVy3r2JJkgmhe8ofRfQ8RlfI= Subject key identifier: C9:7C:0A:2A:99:99:34:E2:21:98:50:21:2E:92:5C:A9:FC:26:EC:6D Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584B6367403C4EEEF3FA8E20F000 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 394002 IP address blocks: 2604:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:40:3c:4e:ee:f3:fa:8e:20:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=c8b4cad6-a183-49ac-ab95-e449340622ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:d9:92:7b:de:98:99:85:4d:19:f8:b1:48: 28:1c:38:8a:e3:0e:fb:35:26:ec:14:79:2c:a0:a7: cd:a5:c2:6c:3e:62:76:60:9f:5e:0a:3e:16:a3:32: 53:22:f5:77:d8:d1:8d:01:44:b1:b1:98:1b:f6:77: fb:dc:d4:e5:57:87:f9:f5:4e:69:76:a7:37:f8:9d: 32:12:a0:95:7e:ee:22:d4:d3:90:be:eb:0b:5b:af: f1:0c:9e:7c:c7:74:40:8b:b9:78:b5:04:59:23:9c: 68:80:62:94:fe:28:41:c2:51:96:ea:a0:16:68:06: 29:1e:67:3d:94:ed:42:55:c6:20:07:04:ee:f6:d3: d8:82:be:ca:fb:ac:48:9a:2b:3b:5f:66:9c:68:17: 11:53:7d:31:94:d5:b9:c5:e7:15:dc:02:f8:9a:50: 89:a6:a7:48:3c:7f:e3:c9:82:0f:11:78:e8:dc:e6: 24:95:e7:1b:8e:6f:7a:b2:d9:99:86:b7:a7:6d:c7: b2:28:fd:39:34:5f:02:95:36:d6:0e:a0:32:d8:04: 4f:11:b2:06:46:27:b1:3f:96:7e:ab:9f:3e:70:c5: 58:2b:90:39:67:c4:6f:85:fb:cb:5f:8d:1e:23:90: 5e:bd:37:75:a7:7c:e8:38:6c:2e:d1:f6:1d:b0:cf: 0e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7C:0A:2A:99:99:34:E2:21:98:50:21:2E:92:5C:A9:FC:26:EC:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv6: 2604:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8a:db:27:65:20:64:aa:84:91:5a:cf:78:ce:38:8f:d9:b0: 2d:6e:04:b0:8e:f8:30:40:53:49:45:75:ab:03:a2:f7:55:62: 00:a1:b5:7c:84:aa:43:d8:1a:0f:c7:aa:b8:d6:7d:b7:fc:d3: 92:57:97:b2:58:fd:53:c3:c5:dc:40:98:ee:fa:e5:d7:7e:5b: 67:65:e5:5a:96:78:7a:cb:29:89:b0:0c:2d:73:cb:f8:59:02: b2:91:29:36:30:70:92:ea:73:0e:ac:98:6f:04:46:bb:63:d4: 34:eb:c4:34:d5:55:10:ef:81:20:8d:95:be:4c:25:38:f4:93: f0:66:1b:9e:52:1e:10:42:d4:80:60:f7:cd:86:83:e8:38:41: 86:a6:e2:66:9c:c5:5d:53:8b:4a:fb:c2:d2:98:6b:62:da:1d: f4:04:e0:b7:bc:66:ca:12:41:7e:a5:f6:78:3a:da:83:e9:24: 80:24:a2:98:b8:c2:06:16:d3:b9:7a:8c:0b:0b:0a:6b:aa:73: cb:58:ab:21:33:d0:d3:01:ae:65:d6:29:57:49:33:17:0a:1e: f3:e3:be:41:78:99:3d:1d:b4:a7:db:f8:07:a2:52:d5:dd:4a: 06:37:5e:05:3a:b8:a8:b4:9b:7d:1e:db:ab:2d:3f:18:48:b8: e3:e2:62:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtjZ0A8Tu7z+o4g8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YzhiNGNhZDYtYTE4My00OWFjLWFiOTUtZTQ0OTM0MDYyMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptbZknvemJmFTRn4sUgoHDiK4w77NSbsFHks oKfNpcJsPmJ2YJ9eCj4WozJTIvV32NGNAUSxsZgb9nf73NTlV4f59U5pdqc3+J0y EqCVfu4i1NOQvusLW6/xDJ58x3RAi7l4tQRZI5xogGKU/ihBwlGW6qAWaAYpHmc9 lO1CVcYgBwTu9tPYgr7K+6xImis7X2acaBcRU30xlNW5xecV3AL4mlCJpqdIPH/j yYIPEXjo3OYklecbjm96stmZhrenbceyKP05NF8ClTbWDqAy2ARPEbIGRiexP5Z+ q58+cMVYK5A5Z8RvhfvLX40eI5BevTd1p3zoOGwu0fYdsM8ODQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMl8CiqZmTTiIZhQIS6SXKn8JuxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYWNjOTVmMGYtYzliMi0z NmYxLTlmZDEtZDI4YTZjYjkyOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRzQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUitsnZSBkqoSRWs94zjiP2bAtbgSwjvgwQFNJRXWrA6L3VWIAobV8 hKpD2BoPx6q41n23/NOSV5eyWP1Tw8XcQJju+uXXfltnZeValnh6yymJsAwtc8v4 WQKykSk2MHCS6nMOrJhvBEa7Y9Q068Q01VUQ74EgjZW+TCU49JPwZhueUh4QQtSA YPfNhoPoOEGGpuJmnMVdU4tK+8LSmGti2h30BOC3vGbKEkF+pfZ4OtqD6SSAJKKY uMIGFtO5eowLCwprqnPLWKshM9DTAa5l1ilXSTMXCh7z475BeJk9HbSn2/gHolLV 3UoGN14FOriotJt9HturLT8YSLjj4mIb -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:07 2025 by rpki-client