$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddc03415-dfab-3100-ad31-48a0c54fab8e.roa File: ddc03415-dfab-3100-ad31-48a0c54fab8e.roa (raw, json) Hash identifier: H0aA79YC4UMwd/0liEZ/qD8ZDCZZ5P92XejH6nFB7Uw= Subject key identifier: 70:CF:60:CA:8A:32:6B:EA:9C:2D:FC:89:D1:B6:86:52:FB:95:DA:5B Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5221EEB01E2EE7E31D2480 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddc03415-dfab-3100-ad31-48a0c54fab8e.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:8063::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:21:ee:b0:1e:2e:e7:e3:1d:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=cee951ad-c989-4bb4-a1bc-e04fa735d019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ab:16:76:65:6f:03:20:a0:10:93:33:95:74: 7b:c7:66:41:a3:85:34:25:b6:5f:f2:96:95:f6:9f: 80:64:5b:ec:8a:67:ab:b1:61:f9:80:95:de:c8:7d: 1d:eb:58:3b:31:95:98:c3:5d:9c:14:9d:e4:3c:80: 74:2b:d8:0e:8a:fd:d7:b5:46:85:a3:ab:83:9c:61: 06:65:54:50:96:fa:01:a3:6f:fa:87:5a:28:35:5c: 2b:b9:9c:86:5e:53:f5:d4:e0:97:f9:af:01:70:38: de:1c:22:f7:bb:38:0d:01:5b:74:71:c5:80:80:10: eb:0a:4c:f6:02:1a:41:6a:1a:b3:17:d0:45:e5:06: d3:75:bd:59:0d:d4:ba:48:59:20:18:74:6f:57:6e: d7:b0:8d:84:90:20:fd:40:aa:5d:6b:a4:77:d4:13: 3b:95:2e:8c:88:e7:62:12:f7:96:33:42:d5:b7:51: 14:26:05:b0:8b:56:8f:5c:fd:64:48:3e:6a:4b:8e: 91:6f:f5:d0:17:84:ce:ff:8f:7c:08:33:8e:e6:40: 2b:f2:3e:74:d6:40:ea:a2:46:e8:f8:c2:d4:ac:81: ab:9a:e2:e6:ef:b0:ab:ed:a8:de:fd:0f:72:bc:62: 80:44:98:f2:e1:c4:9c:15:ea:fb:b5:c3:43:6c:58: 0f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:60:CA:8A:32:6B:EA:9C:2D:FC:89:D1:B6:86:52:FB:95:DA:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddc03415-dfab-3100-ad31-48a0c54fab8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8063::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f3:88:3c:38:3e:51:08:56:2e:9d:32:db:4b:6a:55:46:9f: 40:f9:35:2d:25:c9:c1:40:15:3a:55:aa:6b:2d:a4:1e:b1:15: d1:da:a3:aa:91:65:17:a0:64:4f:c0:5d:9f:d3:98:f5:d5:f0: fe:aa:c1:7d:82:6d:cf:d6:d8:a3:2f:70:43:66:a0:35:6c:58: 09:63:50:19:fb:14:73:a1:4e:4f:40:0c:0b:4c:21:d1:83:a9: 33:ef:bf:6a:06:c6:95:03:f3:14:ee:21:49:d9:56:fc:01:b1: af:ee:27:4a:5b:d6:30:7a:13:4b:7c:44:11:bf:1e:06:4f:f8: 09:16:26:d7:6c:86:60:26:ff:25:c4:89:0f:2d:d6:64:d1:8b: 07:79:11:b7:a8:d9:d8:87:c2:b3:fe:73:9a:d1:ed:4c:a1:5e: 98:fd:e9:c6:b9:55:51:72:9e:1e:a7:8b:c3:46:52:f3:ec:e7: e3:c6:a9:9f:35:5a:2c:a0:d2:df:fa:54:dc:01:17:8c:40:dc: bc:20:bb:93:f1:b0:4c:cd:41:19:77:32:1d:2a:2c:6f:01:06: 81:66:5d:80:d2:c7:a8:36:8d:8a:73:58:30:1a:ae:b1:4e:73: 54:a0:15:5f:5e:e8:24:bd:e4:ed:20:da:4b:19:24:f5:04:8d: e8:07:e0:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiHusB4u5+MdJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Y2VlOTUxYWQtYzk4OS00YmI0LWExYmMtZTA0ZmE3MzVkMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhasWdmVvAyCgEJMzlXR7x2ZBo4U0JbZf8paV 9p+AZFvsimersWH5gJXeyH0d61g7MZWYw12cFJ3kPIB0K9gOiv3XtUaFo6uDnGEG ZVRQlvoBo2/6h1ooNVwruZyGXlP11OCX+a8BcDjeHCL3uzgNAVt0ccWAgBDrCkz2 AhpBahqzF9BF5QbTdb1ZDdS6SFkgGHRvV27XsI2EkCD9QKpda6R31BM7lS6MiOdi EveWM0LVt1EUJgWwi1aPXP1kSD5qS46Rb/XQF4TO/498CDOO5kAr8j501kDqokbo +MLUrIGrmuLm77Cr7aje/Q9yvGKARJjy4cScFer7tcNDbFgPGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHDPYMqKMmvqnC38idG2hlL7ldpbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGRjMDM0MTUtZGZhYi0z MTAwLWFkMzEtNDhhMGM1NGZhYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYBj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADnziDw4PlEIVi6dMttLalVGn0D5NS0lycFAFTpVqmstpB6xFdHa o6qRZRegZE/AXZ/TmPXV8P6qwX2Cbc/W2KMvcENmoDVsWAljUBn7FHOhTk9ADAtM IdGDqTPvv2oGxpUD8xTuIUnZVvwBsa/uJ0pb1jB6E0t8RBG/HgZP+AkWJtdshmAm /yXEiQ8t1mTRiwd5Ebeo2diHwrP+c5rR7UyhXpj96ca5VVFynh6ni8NGUvPs5+PG qZ81Wiyg0t/6VNwBF4xA3Lwgu5PxsEzNQRl3Mh0qLG8BBoFmXYDSx6g2jYpzWDAa rrFOc1SgFV9e6CS95O0g2ksZJPUEjegH4Es= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:12 2025 by rpki-client