$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ca04eaad-cdc7-364a-a13b-5bd3c1b366b2.roa File: ca04eaad-cdc7-364a-a13b-5bd3c1b366b2.roa (raw, json) Hash identifier: 9BJepDG49+A/WfzpyDWMR6vEA4GNIELoBachGR+dlA0= Subject key identifier: 38:24:40:FC:61:5E:F3:6F:5F:05:DA:11:5B:3C:22:A4:31:90:FF:2A Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5226F9F19AD4E4281BA500 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ca04eaad-cdc7-364a-a13b-5bd3c1b366b2.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:8594::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:26:f9:f1:9a:d4:e4:28:1b:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1f397d0c-eb82-4818-88d0-35beed307397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:99:56:05:a6:25:a1:88:03:f2:ce:46:33:7a: 7c:46:49:f9:4d:84:43:5b:38:dd:ad:0b:bf:0b:a0: ec:0c:7a:81:2a:a5:92:fd:99:de:1f:93:3e:83:bb: 92:0a:02:08:62:61:97:19:f5:c3:79:aa:e5:d6:69: 31:6d:dd:31:0a:5a:c3:2d:ef:4e:1b:2e:f1:89:36: ef:4b:cc:92:8d:36:f9:e6:98:ae:39:8a:c5:5a:f7: 4d:30:4b:51:bf:c7:f2:e9:a1:43:30:28:86:8b:d1: dc:2f:d2:83:91:b0:df:a5:ef:0a:49:c3:eb:ae:6c: 20:39:2b:82:73:5c:07:5e:04:47:8c:95:a9:20:ca: e8:18:5c:66:68:50:39:c4:e8:7d:b0:c3:bf:63:02: c7:97:d3:3b:58:67:58:d8:82:bb:a2:ed:80:12:59: cb:78:3a:0e:f0:ec:01:e0:ff:d0:8a:c1:c5:20:e5: c8:91:67:f1:f1:87:55:33:10:73:e7:37:cb:0e:ad: 03:8b:9a:bd:2d:28:dc:77:9f:33:73:4e:03:f5:7d: 6c:2f:ce:f9:95:b5:a0:0a:0f:8e:b5:10:98:3e:ba: 21:1a:bd:33:2a:5c:7b:84:52:25:66:4d:9c:f8:b2: 86:1e:0f:c0:8c:a0:68:63:41:41:d2:9d:25:1b:59: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:24:40:FC:61:5E:F3:6F:5F:05:DA:11:5B:3C:22:A4:31:90:FF:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ca04eaad-cdc7-364a-a13b-5bd3c1b366b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8594::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e3:96:27:64:2e:2a:85:71:81:63:eb:62:20:bf:05:bb:83: 9f:3b:10:fc:8b:ba:f1:c8:90:ba:d1:7c:9e:47:f6:0a:27:d2: 18:29:f2:bc:6a:86:64:f1:7d:0c:ee:87:a5:0f:8e:0f:ab:3b: 74:a8:fd:b0:92:d7:09:e9:c0:ba:36:20:38:73:ee:62:56:9e: 8b:1e:51:62:23:45:5d:46:78:36:5b:6c:f9:46:01:cf:41:92: ca:6a:5f:f5:e7:e4:70:fb:9e:db:1d:54:6d:d0:70:a0:fa:ac: f3:54:a5:06:02:61:ab:f1:42:af:a1:b1:86:6c:10:e8:26:fc: 70:32:7f:d0:53:7a:fb:4a:cd:45:41:81:84:98:f0:00:b2:24: df:d2:22:dc:6c:bb:3d:91:b0:e2:e4:60:d5:0d:b3:d4:63:e9: 7e:34:ca:31:55:6d:4c:22:14:73:fa:cd:93:03:63:41:db:b3: f8:c7:23:0e:9c:14:f2:3d:1e:4c:70:86:54:55:e0:02:db:4d: 78:b9:d9:71:83:39:2a:0b:a3:a0:37:2c:ea:ed:29:77:64:20: b3:cf:6e:db:b2:63:29:67:d8:8f:d1:b2:ea:d5:03:d5:dc:ac: fc:34:e6:4a:f2:ec:a7:ce:30:94:4d:dd:b5:37:8a:6c:47:25: ab:2c:c1:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Uib58ZrU5CgbpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MWYzOTdkMGMtZWI4Mi00ODE4LTg4ZDAtMzViZWVkMzA3Mzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmplWBaYloYgD8s5GM3p8Rkn5TYRDWzjdrQu/ C6DsDHqBKqWS/ZneH5M+g7uSCgIIYmGXGfXDearl1mkxbd0xClrDLe9OGy7xiTbv S8ySjTb55piuOYrFWvdNMEtRv8fy6aFDMCiGi9HcL9KDkbDfpe8KScPrrmwgOSuC c1wHXgRHjJWpIMroGFxmaFA5xOh9sMO/YwLHl9M7WGdY2IK7ou2AElnLeDoO8OwB 4P/QisHFIOXIkWfx8YdVMxBz5zfLDq0Di5q9LSjcd58zc04D9X1sL875lbWgCg+O tRCYProhGr0zKlx7hFIlZk2c+LKGHg/AjKBoY0FB0p0lG1lLLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDgkQPxhXvNvXwXaEVs8IqQxkP8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2EwNGVhYWQtY2RjNy0z NjRhLWExM2ItNWJkM2MxYjM2NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYWU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF/jlidkLiqFcYFj62IgvwW7g587EPyLuvHIkLrRfJ5H9gon0hgp 8rxqhmTxfQzuh6UPjg+rO3So/bCS1wnpwLo2IDhz7mJWnoseUWIjRV1GeDZbbPlG Ac9BkspqX/Xn5HD7ntsdVG3QcKD6rPNUpQYCYavxQq+hsYZsEOgm/HAyf9BTevtK zUVBgYSY8ACyJN/SItxsuz2RsOLkYNUNs9Rj6X40yjFVbUwiFHP6zZMDY0Hbs/jH Iw6cFPI9HkxwhlRV4ALbTXi52XGDOSoLo6A3LOrtKXdkILPPbtuyYyln2I/RsurV A9XcrPw05kry7KfOMJRN3bU3imxHJasswR8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:20:52 2025 by rpki-client