$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa File: 5cf65140-1fa6-3025-943f-30f9ab0055c6.roa (raw, json) Hash identifier: KSyPYIrS8gyNZH8kfsciR9g2FnkiBZ59GaU+UtPQ8Ws= Subject key identifier: A5:E0:1D:06:B0:FE:C1:27:69:34:9F:7E:08:E5:6D:F3:78:2E:8D:C2 Certificate issuer: /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a Certificate serial: 010D0C9F4328584B80B77FD0494221D0F7679D10 Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 134963 IP address blocks: 2600:3100::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7f:d0:49:42:21:d0:f7:67:9d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=cb77cf3e-10c7-414c-b428-9a80d8fa0759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:4b:e8:05:b9:17:76:02:f5:2d:af:ba:74: 66:32:95:c9:76:bd:32:df:f7:a1:8c:41:43:2e:58: 18:c9:38:d6:7e:56:fe:62:de:45:29:08:b4:a5:ca: 62:ed:a2:af:a5:ec:56:16:84:a2:52:92:d9:4b:31: 1c:2f:73:84:34:dc:81:37:ed:ff:e0:67:b6:08:56: 66:5e:1a:d1:9b:64:3c:85:b3:62:7d:84:a9:04:82: 9d:32:61:f3:c6:b8:46:0e:ea:4e:92:21:15:47:56: c8:91:33:dc:94:6e:7b:a3:63:82:48:9c:a3:4a:7f: fe:ca:67:39:43:33:c5:17:9c:63:2d:28:ce:b3:18: b2:e9:de:90:ed:d1:0f:7c:86:f1:95:b1:71:1a:ce: 17:27:b3:08:3f:e4:f7:06:b9:f1:b5:fb:e0:92:d8: a0:32:72:f0:9e:a0:50:82:fb:ff:1f:99:02:67:ab: fb:ab:72:1c:fb:ed:7d:be:72:13:79:6d:32:0a:6d: 27:8e:01:b0:2a:f3:19:26:6e:d0:8d:20:3e:d5:58: f8:3a:fe:b4:48:4a:9a:f3:6d:b3:20:6a:a7:b7:36: 18:44:33:bd:02:e1:44:bc:c7:cc:e0:2e:6f:9f:f8: 6e:da:26:34:70:d6:59:19:61:eb:93:e6:48:5f:57: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:1D:06:B0:FE:C1:27:69:34:9F:7E:08:E5:6D:F3:78:2E:8D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl X509v3 Authority Key Identifier: keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer sbgp-ipAddrBlock: critical IPv6: 2600:3100::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8a:73:5e:93:89:06:85:63:68:25:e5:be:6b:ca:b2:df:9e: a6:9a:5e:e8:23:de:0f:16:e1:04:b8:39:fe:10:c0:3b:a7:50: 4b:e1:68:44:fe:80:05:3b:ab:8c:6c:61:28:74:4f:35:04:a6: 8b:17:38:00:87:2a:97:ee:10:c4:d5:8e:c7:06:fe:1d:6a:a4: 82:3c:9d:c2:92:b1:f8:9b:0c:a8:d2:01:be:ea:3f:3c:51:92: 81:9c:e8:dc:2c:e4:fd:25:c0:59:19:0f:9f:38:93:33:f4:f4: 6f:f5:e9:87:f4:0b:5c:0c:25:9d:dc:f4:bb:ed:66:4e:01:71: f4:b8:1e:4f:f2:ba:76:51:72:11:84:13:9d:de:34:92:36:f3: b5:a2:a0:f7:cb:ee:ae:10:52:f8:5a:33:e0:af:a2:00:66:e6: 28:55:00:09:d9:49:ae:63:74:8a:f1:ac:a9:59:43:11:1a:47: be:34:d4:00:14:4f:94:a3:46:d0:ca:85:f7:13:8e:e7:76:55: e5:7f:59:a0:a7:c7:11:be:cb:af:76:12:78:5d:e8:b7:a1:4d: a9:8f:16:05:c1:94:a3:1c:0c:cc:bd:b2:2c:2a:84:81:65:d2: 17:16:f6:e7:81:d3:8b:be:cd:f2:c3:b1:b3:a9:fd:4a:0e:3c: 28:0b:37:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3/QSUIh0PdnnRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQzMTYxZTQtZGFjMS00MDdiLThmMTYtNTVlNmVmMTAw ZDBhMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk Y2I3N2NmM2UtMTBjNy00MTRjLWI0MjgtOWE4MGQ4ZmEwNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcRL6AW5F3YC9S2vunRmMpXJdr0y3/ehjEFD LlgYyTjWflb+Yt5FKQi0pcpi7aKvpexWFoSiUpLZSzEcL3OENNyBN+3/4Ge2CFZm XhrRm2Q8hbNifYSpBIKdMmHzxrhGDupOkiEVR1bIkTPclG57o2OCSJyjSn/+ymc5 QzPFF5xjLSjOsxiy6d6Q7dEPfIbxlbFxGs4XJ7MIP+T3BrnxtfvgktigMnLwnqBQ gvv/H5kCZ6v7q3Ic++19vnITeW0yCm0njgGwKvMZJm7QjSA+1Vj4Ov60SEqa822z IGqntzYYRDO9AuFEvMfM4C5vn/hu2iY0cNZZGWHrk+ZIX1eBvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKXgHQaw/sEnaTSffgjlbfN4Lo3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDMx NjFlNC1kYWMxLTQwN2ItOGYxNi01NWU2ZWYxMDBkMGEvNWNmNjUxNDAtMWZhNi0z MDI1LTk0M2YtMzBmOWFiMDA1NWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQzMTYxZTQtZGFjMS00MDdiLThm MTYtNTVlNmVmMTAwZDBhL2Q0MzE2MWU0LWRhYzEtNDA3Yi04ZjE2LTU1ZTZlZjEw MGQwYS5jcmwwHwYDVR0jBBgwFoAUD636QCJrXbrLDTg1NoyGIMzZXrMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDMxNjFlNC1kYWMxLTQwN2ItOGYxNi01NWU2 ZWYxMDBkMGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAxADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBainNek4kGhWNoJeW+a8qy356mml7oI94PFuEEuDn+EMA7p1BL4WhE /oAFO6uMbGEodE81BKaLFzgAhyqX7hDE1Y7HBv4daqSCPJ3CkrH4mwyo0gG+6j88 UZKBnOjcLOT9JcBZGQ+fOJMz9PRv9emH9AtcDCWd3PS77WZOAXH0uB5P8rp2UXIR hBOd3jSSNvO1oqD3y+6uEFL4WjPgr6IAZuYoVQAJ2UmuY3SK8aypWUMRGke+NNQA FE+Uo0bQyoX3E47ndlXlf1mgp8cRvsuvdhJ4Xei3oU2pjxYFwZSjHAzMvbIsKoSB ZdIXFvbngdOLvs3yw7Gzqf1KDjwoCzcT -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:01 2025 by rpki-client