$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa File: 1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa (raw, json) Hash identifier: lSFuemvtj12MMGeplrcrznoclV7xJX08JR0illgL8OE= Subject key identifier: D5:2F:54:FD:68:14:8D:A6:20:56:B7:F1:B1:AB:D5:40:B4:16:43:83 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584B8BE239818A79F27C5F837EA0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 2604:ba80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:39:81:8a:79:f2:7c:5f:83:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=0d19c073-f83d-4658-b0cf-b410b4b85058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:53:8f:58:b8:51:b7:f4:de:4d:51:b8:36: e9:85:bb:43:e4:cb:ea:db:86:36:bc:ae:92:6a:56: 6a:88:55:f8:d0:9e:e4:fb:6c:d3:23:db:6f:ea:94: 4a:58:70:e6:68:01:6a:82:57:48:9e:71:21:24:8e: 58:f5:39:81:15:d1:df:c7:60:18:91:8b:85:24:11: ef:40:e7:38:e5:b7:f7:47:bd:6d:fd:1c:fd:da:a7: 20:ce:36:5a:d9:01:b5:08:fc:e8:e1:59:5d:8c:31: b1:c7:cb:00:5f:34:9f:33:4e:28:4c:f2:09:4b:64: df:90:91:0f:34:c4:8c:d5:ba:ac:b2:7b:0a:9b:33: 6d:05:80:fc:d1:31:fa:99:8e:32:64:b8:dc:e5:47: 98:63:81:ff:d4:86:de:8a:fd:dd:c3:83:d4:71:ce: 04:b8:a1:9c:94:68:d3:31:2d:ef:ba:c2:45:14:b9: 8c:05:a6:d7:97:4e:fc:9e:a6:6e:32:93:4d:19:c9: 45:ed:9a:5e:f8:2b:07:69:b5:73:57:64:82:82:48: cb:09:f1:1f:c5:d3:b9:f4:35:69:63:14:f9:1b:03: 99:d0:31:d7:c7:c6:5e:7f:7e:ae:a0:89:3b:01:4b: 7b:56:95:f8:e0:2b:c5:eb:7c:04:a6:fc:81:3d:4e: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2F:54:FD:68:14:8D:A6:20:56:B7:F1:B1:AB:D5:40:B4:16:43:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv6: 2604:ba80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a1:69:cf:75:50:2f:ba:fe:ce:c0:19:21:59:4f:7c:cf:93: 1f:b0:e9:c5:e8:3e:62:6f:e1:5c:5b:24:f6:fc:6e:6d:c7:e4: a0:2c:bc:19:ab:d6:d0:ca:4c:d8:73:b5:9c:1a:45:56:cd:9a: 37:3a:83:46:3d:c1:19:0b:4b:a6:9b:e9:ca:db:bb:2a:f6:82: 2a:e6:0c:a2:c6:09:fb:7a:a6:1e:88:9d:24:0a:05:b6:4b:5c: 52:9b:09:36:f4:39:ef:36:22:30:66:bc:43:da:13:e3:69:bb: 15:58:25:7e:55:72:a3:26:06:6c:c5:c2:fd:cb:72:74:78:7e: 0a:8b:94:e2:85:fc:55:de:f3:27:93:9d:2d:0d:b7:a8:8f:5c: f8:7f:ed:e3:0a:e2:9f:14:44:a3:ce:f6:fd:f5:5c:07:5e:b8: 9b:26:4b:01:fc:03:9a:e2:3b:cf:5b:8a:e2:42:19:65:98:b2: b7:43:4a:b7:c2:ba:64:49:fc:b7:d2:40:f6:8a:50:fa:87:1b: f5:20:cf:7b:82:68:f7:f1:fc:4f:10:ca:be:80:04:3c:0c:7c: f1:66:2c:ca:9b:18:b4:ac:f8:02:b8:9c:de:ca:19:b3:4b:a8: 35:fd:13:69:18:c3:fc:7e:57:e9:77:5e:ef:28:74:f8:6c:09: b3:92:ca:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuL4jmBinnyfF+DfqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MGQxOWMwNzMtZjgzZC00NjU4LWIwY2YtYjQxMGI0Yjg1MDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBNTj1i4Ubf03k1RuDbphbtD5Mvq24Y2vK6S alZqiFX40J7k+2zTI9tv6pRKWHDmaAFqgldInnEhJI5Y9TmBFdHfx2AYkYuFJBHv QOc45bf3R71t/Rz92qcgzjZa2QG1CPzo4VldjDGxx8sAXzSfM04oTPIJS2TfkJEP NMSM1bqssnsKmzNtBYD80TH6mY4yZLjc5UeYY4H/1Ibeiv3dw4PUcc4EuKGclGjT MS3vusJFFLmMBabXl078nqZuMpNNGclF7Zpe+CsHabVzV2SCgkjLCfEfxdO59DVp YxT5GwOZ0DHXx8Zef36uoIk7AUt7VpX44CvF63wEpvyBPU4MIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNUvVP1oFI2mIFa38bGr1UC0FkODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMWRiYjQzYWYtOTIwNi0z YzFkLWIyOTItZjhkMjhjMWQ0ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgS6gAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEChac91UC+6/s7AGSFZT3zPkx+w6cXoPmJv4VxbJPb8bm3H5KAs vBmr1tDKTNhztZwaRVbNmjc6g0Y9wRkLS6ab6crbuyr2girmDKLGCft6ph6InSQK BbZLXFKbCTb0Oe82IjBmvEPaE+NpuxVYJX5VcqMmBmzFwv3LcnR4fgqLlOKF/FXe 8yeTnS0Nt6iPXPh/7eMK4p8URKPO9v31XAdeuJsmSwH8A5riO89biuJCGWWYsrdD SrfCumRJ/LfSQPaKUPqHG/Ugz3uCaPfx/E8Qyr6ABDwMfPFmLMqbGLSs+AK4nN7K GbNLqDX9E2kYw/x+V+l3Xu8odPhsCbOSyiA= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:01 2025 by rpki-client