$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd98a871-a841-3c5a-9ed5-265e6cafe1ad.roa File: cd98a871-a841-3c5a-9ed5-265e6cafe1ad.roa (raw, json) Hash identifier: Lh3u7h0s/U5ZTeENAb4vcofM/V9eO3jxosY40xPk41w= Subject key identifier: AF:FF:F6:85:FE:03:8F:1C:3A:CD:1D:0A:12:11:E3:A8:74:9B:09:16 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F522A9A0BFE04D9DB8A5C00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd98a871-a841-3c5a-9ed5-265e6cafe1ad.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:811f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:2a:9a:0b:fe:04:d9:db:8a:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=96fd91fe-c03e-4c2f-bfe3-304a2298f86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:1b:2c:03:ab:78:3b:48:64:5c:9d:d1:fd: f1:8b:86:e4:7e:6b:a6:93:e1:ea:ca:f7:91:4e:47: 90:99:bb:88:7b:fd:09:c4:99:70:09:02:a6:25:5c: 3c:c5:25:44:ba:de:7b:11:ba:36:cf:2b:51:6f:f7: 90:d4:20:c3:29:72:8a:4a:60:bc:e8:cd:0e:87:fa: 52:c8:e2:50:74:11:17:89:2b:33:19:37:c8:c6:46: a0:63:5e:5c:35:c8:ee:66:58:f3:70:6f:75:b9:53: 82:87:2c:b9:52:c4:80:1c:a7:68:ab:58:ed:14:c2: 6e:0e:80:99:9b:28:be:fe:90:ce:b9:44:4a:ab:ad: e0:7e:7b:37:03:58:21:4d:06:42:ab:85:1d:56:df: 9d:8d:87:c1:d3:2a:47:b4:34:e3:e3:f9:8e:07:17: ab:91:53:25:f4:e9:66:0f:0a:97:17:b8:20:77:48: 86:12:86:ee:18:c1:28:aa:11:b7:80:12:ae:dd:25: 13:4c:cf:21:5b:40:a8:d9:c9:3f:99:75:25:43:b3: 96:1a:eb:30:ab:8a:08:c5:f5:f9:30:b8:31:ad:da: 1d:07:16:1f:bb:cc:dc:dd:5c:e9:ea:7b:fa:3c:28: 89:22:92:5d:62:43:71:32:d5:ae:c9:7b:ed:c4:35: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FF:F6:85:FE:03:8F:1C:3A:CD:1D:0A:12:11:E3:A8:74:9B:09:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd98a871-a841-3c5a-9ed5-265e6cafe1ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:811f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c4:c7:c4:4c:2d:8c:18:57:48:bb:49:2d:e5:f6:8e:bd:fe: 30:e7:cc:e8:f6:63:2e:12:e1:09:20:c8:45:a8:fd:9d:6d:45: 4d:dd:30:41:4a:dc:9d:09:2b:ec:bc:7e:74:4f:2f:a0:d1:76: 8f:b2:34:1c:82:c2:ee:b7:d4:c0:bf:d2:11:2b:49:61:b5:0c: f0:90:29:a8:48:dc:11:d8:87:82:7f:69:fc:3f:04:fa:93:22: b3:0d:e2:1c:cd:30:9f:7d:35:75:0b:45:47:a4:64:ba:66:38: 55:47:eb:c9:59:56:82:ac:b7:70:da:e4:62:c0:e6:77:95:49: a7:14:93:11:95:f6:08:53:5a:c6:2d:d7:dd:ea:a0:ba:e7:37: c0:49:e9:7e:49:cb:27:89:aa:19:fd:3d:f8:a2:5d:d3:94:bf: 11:39:79:14:45:30:7e:ea:cf:8d:b0:db:3c:b6:80:d9:77:d9: 79:37:e8:a8:65:87:fd:f7:b7:5c:95:44:cc:2a:b3:c8:ad:e3: c5:1f:cf:6c:2f:3c:48:63:2b:6e:3b:6b:00:96:0b:d1:c8:ab: 05:83:d2:33:2f:b2:af:e8:ca:bd:3d:c3:26:cc:a3:80:8f:83: e9:0a:85:62:30:77:ce:62:99:03:7b:4c:c4:ea:b6:f0:bb:c1: 25:ab:cb:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiqaC/4E2duKXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OTZmZDkxZmUtYzAzZS00YzJmLWJmZTMtMzA0YTIyOThmODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld8bLAOreDtIZFyd0f3xi4bkfmumk+HqyveR TkeQmbuIe/0JxJlwCQKmJVw8xSVEut57Ebo2zytRb/eQ1CDDKXKKSmC86M0Oh/pS yOJQdBEXiSszGTfIxkagY15cNcjuZljzcG91uVOChyy5UsSAHKdoq1jtFMJuDoCZ myi+/pDOuURKq63gfns3A1ghTQZCq4UdVt+djYfB0ypHtDTj4/mOBxerkVMl9Olm DwqXF7ggd0iGEobuGMEoqhG3gBKu3SUTTM8hW0Co2ck/mXUlQ7OWGuswq4oIxfX5 MLgxrdodBxYfu8zc3Vzp6nv6PCiJIpJdYkNxMtWuyXvtxDWitQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK//9oX+A48cOs0dChIR46h0mwkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2Q5OGE4NzEtYTg0MS0z YzVhLTllZDUtMjY1ZTZjYWZlMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD3Ex8RMLYwYV0i7SS3l9o69/jDnzOj2Yy4S4QkgyEWo/Z1tRU3d MEFK3J0JK+y8fnRPL6DRdo+yNByCwu631MC/0hErSWG1DPCQKahI3BHYh4J/afw/ BPqTIrMN4hzNMJ99NXULRUekZLpmOFVH68lZVoKst3Da5GLA5neVSacUkxGV9ghT WsYt193qoLrnN8BJ6X5JyyeJqhn9PfiiXdOUvxE5eRRFMH7qz42w2zy2gNl32Xk3 6Khlh/33t1yVRMwqs8it48Ufz2wvPEhjK247awCWC9HIqwWD0jMvsq/oyr09wybM o4CPg+kKhWIwd85imQN7TMTqtvC7wSWry5Q= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:52 2025 by rpki-client