$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/058152a1-3891-368d-8027-9c6237fb76c5.roa File: 058152a1-3891-368d-8027-9c6237fb76c5.roa (raw, json) Hash identifier: yypIDaVr8N5Jbm1rBU6BQBMsTFwL0AuvaTjYBgBfKv8= Subject key identifier: 60:27:E6:6F:97:53:C7:9D:8D:A1:3E:97:DE:31:5B:CE:37:2A:09:AC Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584B434CA05EB11457DEBBFC3E00 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/058152a1-3891-368d-8027-9c6237fb76c5.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 19165 IP address blocks: 2604:5500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a0:5e:b1:14:57:de:bb:fc:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=4bc42f5f-6e9a-4f91-95d4-0bc2e87e5dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:37:48:c0:c5:3e:78:dd:b4:8e:18:e6:9c: 93:1d:de:b5:51:2e:22:d0:1d:2a:c2:c1:71:40:22: ed:35:3b:5a:92:18:45:f4:35:30:b4:00:22:37:8a: 14:22:48:9c:c7:65:ac:77:3d:ca:1b:23:f7:ef:f0: df:05:f9:dd:fc:3b:36:04:8d:92:9c:d4:df:58:16: 36:77:9d:e5:89:d5:e9:4b:c7:d9:0c:c5:84:48:a5: 0e:bd:72:ec:c3:a7:d5:86:64:18:d5:e5:2a:37:f0: b3:6b:ca:67:09:1e:79:a6:01:89:50:16:73:1a:5b: 48:9a:45:07:cb:34:32:5a:29:c7:a5:65:2c:b0:18: 99:57:b1:35:e2:fd:89:d0:6c:eb:a9:4e:f0:18:97: 0a:2b:5d:da:28:1e:82:c1:31:83:d2:a7:d5:44:4e: 39:a1:1e:93:f6:d7:71:f9:5d:93:e1:3e:f7:92:61: b1:7a:dd:0e:18:15:2f:16:be:22:03:1c:6c:b9:68: 93:7f:35:48:37:4e:53:95:35:d3:d5:1e:40:51:f3: 0a:80:6c:ab:c1:ed:80:8b:de:74:2f:36:62:54:d9: 0c:f9:23:af:90:ca:8a:a3:c6:2b:2f:0a:a6:4e:cd: eb:50:20:80:a2:c5:d8:de:17:24:69:4c:3c:d3:29: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:27:E6:6F:97:53:C7:9D:8D:A1:3E:97:DE:31:5B:CE:37:2A:09:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/058152a1-3891-368d-8027-9c6237fb76c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv6: 2604:5500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:32:c0:af:05:d6:c8:42:18:aa:19:3b:a5:f3:63:80:b6:3c: c4:51:15:d8:a4:fa:61:33:db:45:2f:91:05:2d:86:07:61:7c: 0a:95:21:e4:87:5d:24:06:f0:36:af:68:46:31:5a:86:b8:59: 7b:9f:8c:ef:fe:e5:d5:6d:71:17:a2:28:a7:16:40:bb:c2:b7: ae:6d:e5:69:0d:24:d6:82:91:59:8f:63:3d:20:8e:d2:17:cb: 6d:1a:6e:15:84:b8:c0:f3:63:8e:79:e8:4f:3d:e5:45:92:be: 2c:54:db:6d:f3:11:37:11:60:cd:33:8f:7d:5c:65:aa:c8:36: 2d:8b:08:1f:fd:72:40:e7:40:4b:b8:ac:5a:07:a5:ac:31:c3: 22:fd:a0:70:67:dc:0f:b5:1d:05:62:95:11:eb:c0:e2:eb:2d: d7:bd:97:66:cb:88:0c:a1:3a:e1:56:b2:04:80:5a:da:bc:38: dd:b3:0d:00:d9:84:4a:d9:1c:99:cb:57:64:c8:52:ce:c9:b4: 71:57:af:3b:5b:d2:02:27:f3:f3:dc:58:a8:de:ba:29:a8:18: 66:c5:9e:95:a9:74:a6:15:de:43:f2:52:37:87:d0:b8:0a:35: 3b:dd:74:c5:c1:bb:d1:a2:8c:16:40:a8:a3:21:ef:94:e6:a3: e6:44:f7:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtDTKBesRRX3rv8PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NGJjNDJmNWYtNmU5YS00ZjkxLTk1ZDQtMGJjMmU4N2U1ZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljs3SMDFPnjdtI4Y5pyTHd61US4i0B0qwsFx QCLtNTtakhhF9DUwtAAiN4oUIkicx2Wsdz3KGyP37/DfBfnd/Ds2BI2SnNTfWBY2 d53lidXpS8fZDMWESKUOvXLsw6fVhmQY1eUqN/Cza8pnCR55pgGJUBZzGltImkUH yzQyWinHpWUssBiZV7E14v2J0GzrqU7wGJcKK13aKB6CwTGD0qfVRE45oR6T9tdx +V2T4T73kmGxet0OGBUvFr4iAxxsuWiTfzVIN05TlTXT1R5AUfMKgGyrwe2Ai950 LzZiVNkM+SOvkMqKo8YrLwqmTs3rUCCAosXY3hckaUw80ylvdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGAn5m+XU8edjaE+l94xW843KgmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvMDU4MTUyYTEtMzg5MS0z NjhkLTgwMjctOWM2MjM3ZmI3NmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRVADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCqMsCvBdbIQhiqGTul82OAtjzEURXYpPphM9tFL5EFLYYHYXwKlSHk h10kBvA2r2hGMVqGuFl7n4zv/uXVbXEXoiinFkC7wreubeVpDSTWgpFZj2M9II7S F8ttGm4VhLjA82OOeehPPeVFkr4sVNtt8xE3EWDNM499XGWqyDYtiwgf/XJA50BL uKxaB6WsMcMi/aBwZ9wPtR0FYpUR68Di6y3XvZdmy4gMoTrhVrIEgFravDjdsw0A 2YRK2RyZy1dkyFLOybRxV687W9ICJ/Pz3Fio3ropqBhmxZ6VqXSmFd5D8lI3h9C4 CjU73XTFwbvRoowWQKijIe+U5qPmRPeH -----END CERTIFICATE-----Generated at Tue Oct 21 16:22:36 2025 by rpki-client