$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ad4798a0-b865-3094-9439-c153ddea64bc.roa File: ad4798a0-b865-3094-9439-c153ddea64bc.roa (raw, json) Hash identifier: kyXWrVQuxXoxWGPJIq13mrBEW0bH5H29P6IqX+Sm5Qk= Subject key identifier: 71:84:9D:1C:64:B8:FA:C6:D9:29:70:A7:EC:C4:D2:34:75:EA:F8:8D Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5227EB31428BED1E187680 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ad4798a0-b865-3094-9439-c153ddea64bc.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:8038::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:27:eb:31:42:8b:ed:1e:18:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d2bb2bb2-37de-46a0-9b57-ad7a0fcd243a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c8:27:de:69:d6:9b:46:02:6d:a0:61:e7:e9: 01:d0:a0:da:cc:b3:ec:fe:23:eb:d9:04:81:63:9f: e2:89:f5:65:91:e3:c9:a9:9a:ea:8c:ac:7a:bf:de: b2:cd:12:56:ec:5a:b9:8e:c8:9e:29:f8:9c:35:e5: c4:d5:52:ee:76:09:53:ef:71:5d:c9:30:52:3f:86: 65:60:5a:91:fc:78:a0:ed:5e:b3:47:b0:9f:78:59: 4e:1f:e9:08:87:27:ea:8e:62:30:39:c7:d8:0d:d5: c6:1b:f4:eb:47:1e:79:8f:f6:cf:f6:a1:a2:38:30: 36:94:e0:b8:27:84:73:eb:41:87:1a:93:bb:2c:15: 2e:56:c9:f3:a0:a2:f7:29:b7:78:41:c8:4c:62:7a: 42:48:ff:20:94:41:8c:cb:bb:d7:cc:d5:f6:76:3d: 0d:40:40:9d:8a:ab:ec:42:d5:b6:47:32:cb:8c:4a: 42:f0:f9:d2:8b:43:19:ab:ba:5c:db:56:6e:e5:d3: 96:f8:e2:35:25:55:26:fa:31:da:4f:06:7e:3a:47: e4:ef:f4:b1:f2:05:5c:11:24:94:12:c6:a6:26:03: a1:f9:7c:30:fb:b3:a4:c3:cd:40:16:d9:ed:37:49: 43:05:6b:a1:35:90:f5:0d:97:09:e1:54:a9:5f:71: 3e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:84:9D:1C:64:B8:FA:C6:D9:29:70:A7:EC:C4:D2:34:75:EA:F8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ad4798a0-b865-3094-9439-c153ddea64bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8038::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6a:03:ac:c0:c7:35:14:e6:48:1a:04:22:12:72:f2:56:3b: 02:93:56:75:bd:84:be:6f:c3:54:e0:d7:97:59:06:ae:be:54: 69:4f:e4:e5:c0:24:e5:fe:07:42:eb:51:75:0c:14:92:fe:d7: fe:d4:01:d5:7e:42:36:da:da:00:16:df:a5:7f:19:ad:41:85: 5c:10:89:ec:f3:52:9e:cf:87:ea:b3:48:c4:e0:d9:89:50:9b: a1:76:47:a8:00:9c:36:d8:3e:c1:a7:f5:d6:3a:8b:b8:9b:fc: 6a:31:96:3d:85:ac:90:83:1a:d1:92:71:b7:94:11:0e:a6:93: 5b:4e:1a:36:c3:85:42:09:6d:14:e6:47:51:49:10:77:d4:63: ab:cb:0c:6c:fc:3c:36:1e:3b:3e:db:7c:79:a7:c2:99:83:34: cd:3d:0e:fe:65:4d:a6:05:0b:10:28:3e:46:2f:42:ca:d7:5f: a0:30:1d:c9:3a:08:c2:6a:2a:6a:10:7b:62:7a:7d:32:5f:57: 26:da:99:08:c0:18:d5:ab:cf:e8:87:0a:bf:c2:7c:a5:b1:94: c8:c0:02:40:75:d2:a3:25:1b:5e:28:7e:5a:83:3d:cc:ea:ba: a3:60:22:45:6e:14:5b:1b:8d:29:17:be:c3:b1:59:43:49:28: ed:2c:41:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UifrMUKL7R4YdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDJiYjJiYjItMzdkZS00NmEwLTliNTctYWQ3YTBmY2QyNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8gn3mnWm0YCbaBh5+kB0KDazLPs/iPr2QSB Y5/iifVlkePJqZrqjKx6v96yzRJW7Fq5jsieKficNeXE1VLudglT73FdyTBSP4Zl YFqR/Hig7V6zR7CfeFlOH+kIhyfqjmIwOcfYDdXGG/TrRx55j/bP9qGiODA2lOC4 J4Rz60GHGpO7LBUuVsnzoKL3Kbd4QchMYnpCSP8glEGMy7vXzNX2dj0NQECdiqvs QtW2RzLLjEpC8PnSi0MZq7pc21Zu5dOW+OI1JVUm+jHaTwZ+Okfk7/Sx8gVcESSU EsamJgOh+Xww+7Okw81AFtntN0lDBWuhNZD1DZcJ4VSpX3E+PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHGEnRxkuPrG2Slwp+zE0jR16viNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWQ0Nzk4YTAtYjg2NS0z MDk0LTk0MzktYzE1M2RkZWE2NGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACFqA6zAxzUU5kgaBCIScvJWOwKTVnW9hL5vw1Tg15dZBq6+VGlP 5OXAJOX+B0LrUXUMFJL+1/7UAdV+Qjba2gAW36V/Ga1BhVwQiezzUp7Ph+qzSMTg 2YlQm6F2R6gAnDbYPsGn9dY6i7ib/Goxlj2FrJCDGtGScbeUEQ6mk1tOGjbDhUIJ bRTmR1FJEHfUY6vLDGz8PDYeOz7bfHmnwpmDNM09Dv5lTaYFCxAoPkYvQsrXX6Aw Hck6CMJqKmoQe2J6fTJfVybamQjAGNWrz+iHCr/CfKWxlMjAAkB10qMlG14oflqD PczquqNgIkVuFFsbjSkXvsOxWUNJKO0sQeo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:56 2025 by rpki-client