$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/898fc129-a8c3-3759-8a3b-c6b6c109c074.roa File: 898fc129-a8c3-3759-8a3b-c6b6c109c074.roa (raw, json) Hash identifier: S6VV0NiglVFH7Ty50ZSbvOTkpvFFdRY9/ovDtOC4Th8= Subject key identifier: 5E:62:24:52:8E:92:8C:47:D7:67:BD:51:ED:CD:FD:3C:D0:9F:E9:DE Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5250B6C71D392F2FDDE780 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/898fc129-a8c3-3759-8a3b-c6b6c109c074.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:8065::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:50:b6:c7:1d:39:2f:2f:dd:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=462c9fee-4f2f-43b9-b220-606a320999c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:7d:32:d8:9e:77:ee:c0:f3:39:e4:7f:08: dc:aa:10:80:51:66:65:6f:3c:04:c4:db:15:dd:56: 76:15:9d:51:86:22:54:2a:16:24:12:b2:80:f3:8e: 19:1f:7d:5a:43:ca:42:b1:e3:55:e2:1e:e0:e9:9e: 75:7b:db:65:eb:cb:d1:02:2d:db:e1:41:de:fe:57: 0a:8c:17:26:61:4a:42:0d:85:fd:ac:56:5c:93:d9: 6c:dd:d8:bf:78:a1:e6:67:76:67:22:50:f0:b4:6c: a5:8f:a8:1e:c0:c6:28:67:a6:5a:0d:dd:0d:cc:8d: 6a:e9:57:56:1f:59:fa:65:ce:4a:6b:1b:dc:9b:da: b8:f1:a2:ab:32:cd:bd:27:80:80:39:82:16:1d:30: 83:5c:fa:04:19:71:62:1f:70:14:36:79:82:b1:d6: 62:f2:dc:53:a0:07:7b:f9:d7:08:b8:ae:23:56:7a: 0e:59:6b:78:02:74:96:86:9f:ad:0c:f0:9f:19:5f: 1e:10:5a:4c:48:a9:3e:3a:95:a3:a6:3b:aa:da:30: 4b:6b:eb:f9:1d:50:dc:85:d6:9e:a2:d0:15:c2:f0: 24:04:22:06:8a:b2:d1:37:9b:25:4b:57:5d:85:38: 4b:b9:d6:17:5d:6c:93:94:80:71:5c:5a:f5:69:b9: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:62:24:52:8E:92:8C:47:D7:67:BD:51:ED:CD:FD:3C:D0:9F:E9:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/898fc129-a8c3-3759-8a3b-c6b6c109c074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8065::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:46:75:9f:cb:25:e7:c7:94:5e:2c:f9:9f:58:c1:07:72:bf: f5:5a:e8:1a:c9:0f:5c:00:c5:5d:81:75:9b:01:4a:03:35:b3: 5e:92:aa:67:cb:82:01:c1:83:cd:b5:26:7a:77:be:20:e5:74: f6:04:98:13:bf:b3:13:c8:60:8e:c7:e2:2a:55:22:c2:f3:15: 59:a6:a1:22:93:1b:19:5f:9b:a4:aa:fc:54:b9:cb:24:f8:93: d9:0f:76:9b:13:e4:5d:2f:34:10:c3:4e:0a:c1:2d:bf:a9:f8: 36:d9:89:3c:3a:a9:29:c6:ce:1a:8d:b4:5c:fa:1f:44:eb:b4: 7b:c5:1d:58:c4:aa:d7:4b:83:bc:fc:04:3a:b9:6e:b1:05:5f: 33:d0:5a:10:3c:e7:af:38:a3:58:e2:51:1c:e9:90:38:95:ca: ed:a0:03:ee:e1:77:60:bc:0b:72:f7:74:b5:b1:72:26:61:54: 1a:ff:6c:a8:d2:13:bf:41:2f:51:56:46:db:b5:02:34:09:40: 21:74:f8:21:fe:1f:f4:c4:7c:8f:90:ed:6c:d9:b1:9d:a4:e2: 9b:0f:c3:22:00:11:84:25:1d:3e:31:aa:27:ca:98:c8:f6:38: 42:69:99:ce:03:3d:88:67:58:4f:58:51:de:fd:2a:18:82:aa: 6e:d8:d7:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UlC2xx05Ly/d54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NDYyYzlmZWUtNGYyZi00M2I5LWIyMjAtNjA2YTMyMDk5OWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJB9Mtied+7A8znkfwjcqhCAUWZlbzwExNsV 3VZ2FZ1RhiJUKhYkErKA844ZH31aQ8pCseNV4h7g6Z51e9tl68vRAi3b4UHe/lcK jBcmYUpCDYX9rFZck9ls3di/eKHmZ3ZnIlDwtGylj6gewMYoZ6ZaDd0NzI1q6VdW H1n6Zc5Kaxvcm9q48aKrMs29J4CAOYIWHTCDXPoEGXFiH3AUNnmCsdZi8txToAd7 +dcIuK4jVnoOWWt4AnSWhp+tDPCfGV8eEFpMSKk+OpWjpjuq2jBLa+v5HVDchdae otAVwvAkBCIGirLRN5slS1ddhThLudYXXWyTlIBxXFr1ablQTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF5iJFKOkoxH12e9Ue3N/TzQn+neMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODk4ZmMxMjktYThjMy0z NzU5LThhM2ItYzZiNmMxMDljMDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYBl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG9GdZ/LJefHlF4s+Z9YwQdyv/Va6BrJD1wAxV2BdZsBSgM1s16S qmfLggHBg821Jnp3viDldPYEmBO/sxPIYI7H4ipVIsLzFVmmoSKTGxlfm6Sq/FS5 yyT4k9kPdpsT5F0vNBDDTgrBLb+p+DbZiTw6qSnGzhqNtFz6H0TrtHvFHVjEqtdL g7z8BDq5brEFXzPQWhA85684o1jiURzpkDiVyu2gA+7hd2C8C3L3dLWxciZhVBr/ bKjSE79BL1FWRtu1AjQJQCF0+CH+H/TEfI+Q7WzZsZ2k4psPwyIAEYQlHT4xqifK mMj2OEJpmc4DPYhnWE9YUd79KhiCqm7Y1/Y= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:49 2025 by rpki-client