$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa File: 856571e3-0844-3aaf-b208-47df360ac0b7.roa (raw, json) Hash identifier: YHjqhDgj4yd7oNrZs5tN7z0u9MZpOvKAnjP1F0m3zxo= Subject key identifier: 06:EA:98:22:AE:61:D1:04:22:2F:34:2A:75:67:8E:E1:85:6F:1C:42 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F4328584B477C67B6CD21D87D20D8F3F1 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 54874 IP address blocks: 2605:f440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:67:b6:cd:21:d8:7d:20:d8:f3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=d931582d-1331-4e9f-aec0-3cbeb1de9bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3c:99:f2:b5:0f:fe:39:10:80:a9:b1:3f:a2: ce:ab:2a:92:57:2c:08:1d:fc:a0:8b:1d:00:fb:13: af:41:37:cf:54:97:0b:3b:4e:af:d3:84:f4:96:06: be:6a:16:c6:c6:df:0e:58:f9:7d:e0:4e:54:5e:f7: 53:4e:5f:a9:61:b0:29:21:e1:a8:77:a5:f4:27:de: f1:c3:52:72:e0:d8:45:b9:12:57:b0:c3:34:d4:1b: ee:f4:7f:14:76:b5:5b:0a:00:4d:2e:5f:cf:b1:b0: d4:dc:ec:77:77:1d:b8:b0:46:52:9a:9c:81:25:41: 5b:1c:0b:ef:60:d2:54:e3:73:25:58:a2:44:13:dc: f4:07:e6:e5:ee:dc:c9:42:0d:59:4e:61:6a:ad:15: 7e:73:e0:1c:99:d5:5e:0c:da:a2:35:1f:b6:9d:6d: e2:0f:83:71:1a:c1:bf:c7:68:24:27:44:07:06:4e: a5:3f:81:6d:de:83:c6:6a:d5:62:fa:1d:c8:6a:c3: f8:3a:e7:e7:f3:b5:53:70:23:04:16:37:b1:d8:26: 9e:5b:9b:0b:2b:ed:84:cf:01:18:0d:7c:07:bd:33: 05:7c:a2:2e:8b:86:34:ea:38:a1:8e:77:a0:28:1d: 3f:63:0b:96:46:b4:44:b1:c6:3c:c8:17:e8:f6:e6: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EA:98:22:AE:61:D1:04:22:2F:34:2A:75:67:8E:E1:85:6F:1C:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv6: 2605:f440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:23:7f:c2:75:45:d2:09:7b:84:47:62:c7:e0:ab:fd:4c:d2: 94:e2:de:9b:01:4d:c1:6f:01:24:f9:76:54:07:02:88:6f:d3: d8:a7:67:b5:5a:d2:2e:09:ba:08:df:f4:ae:30:c7:4f:c7:43: e9:75:0e:60:5e:99:f7:90:21:f8:0b:af:7c:a0:61:fb:18:82: 40:71:11:53:a0:1a:94:39:73:c5:0c:db:0d:ee:e5:95:bf:49: 10:de:84:af:bb:09:2c:06:3f:0e:16:8e:df:0d:18:0f:8a:e6: a5:e3:31:59:7f:80:f4:82:d1:41:a6:20:2e:55:7c:e4:ef:7f: 8d:d9:82:bb:40:fc:41:3c:d6:8d:4d:69:7d:5b:58:7a:70:3f: 02:e4:e9:da:93:9e:22:62:98:0e:50:eb:c4:5e:b7:38:49:42: aa:ef:e9:55:ba:f8:bf:1b:aa:5d:7c:99:4b:8b:34:3e:ef:05: c5:5b:6c:d5:42:df:30:7c:6f:58:f6:d4:71:a2:a6:44:a7:15: a2:ee:4e:be:3a:a3:26:f1:da:6e:e7:34:51:60:3b:99:cd:74: 08:f1:47:45:85:84:c3:a6:2b:19:1f:ae:d6:76:21:3d:6e:6d: 0b:6c:ef:38:20:fa:93:c5:29:f1:2a:f1:ff:ed:06:f9:8f:76: 39:e1:31:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfGe2zSHYfSDY8/EwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZDkzMTU4MmQtMTMzMS00ZTlmLWFlYzAtM2NiZWIxZGU5YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzyZ8rUP/jkQgKmxP6LOqyqSVywIHfygix0A +xOvQTfPVJcLO06v04T0lga+ahbGxt8OWPl94E5UXvdTTl+pYbApIeGod6X0J97x w1Jy4NhFuRJXsMM01Bvu9H8UdrVbCgBNLl/PsbDU3Ox3dx24sEZSmpyBJUFbHAvv YNJU43MlWKJEE9z0B+bl7tzJQg1ZTmFqrRV+c+AcmdVeDNqiNR+2nW3iD4NxGsG/ x2gkJ0QHBk6lP4Ft3oPGatVi+h3IasP4Oufn87VTcCMEFjex2CaeW5sLK+2EzwEY DXwHvTMFfKIui4Y06jihjnegKB0/YwuWRrREscY8yBfo9uYswQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAbqmCKuYdEEIi80KnVnjuGFbxxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvODU2NTcxZTMtMDg0NC0z YWFmLWIyMDgtNDdkZjM2MGFjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX0QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArI3/CdUXSCXuER2LH4Kv9TNKU4t6bAU3BbwEk+XZUBwKIb9PYp2e1 WtIuCboI3/SuMMdPx0PpdQ5gXpn3kCH4C698oGH7GIJAcRFToBqUOXPFDNsN7uWV v0kQ3oSvuwksBj8OFo7fDRgPiual4zFZf4D0gtFBpiAuVXzk73+N2YK7QPxBPNaN TWl9W1h6cD8C5Onak54iYpgOUOvEXrc4SUKq7+lVuvi/G6pdfJlLizQ+7wXFW2zV Qt8wfG9Y9tRxoqZEpxWi7k6+OqMm8dpu5zRRYDuZzXQI8UdFhYTDpisZH67WdiE9 bm0LbO84IPqTxSnxKvH/7Qb5j3Y54TED -----END CERTIFICATE-----Generated at Tue Oct 21 00:07:51 2025 by rpki-client