$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/35ac175d-d37d-3848-97bf-95b3456aee02.roa File: 35ac175d-d37d-3848-97bf-95b3456aee02.roa (raw, json) Hash identifier: Z+ATHTXv0LUlw9/cOyYDoxQrzzKNci7iBg14L0gglCA= Subject key identifier: D2:5F:92:A9:08:58:D5:6F:0B:02:21:DE:C9:AC:2F:65:D2:5A:F7:F0 Certificate issuer: /CN=1c8f0fea-4d37-4154-9909-d7fb16d78856 Certificate serial: 010D0C9F4328584B80B74E3E42DCEEEFA12707C0 Authority key identifier: 99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/35ac175d-d37d-3848-97bf-95b3456aee02.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 401478 IP address blocks: 2604:3a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:4e:3e:42:dc:ee:ef:a1:27:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8f0fea-4d37-4154-9909-d7fb16d78856 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=5a7ce2ff-ecce-4ca3-aeef-773a90df2f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:68:4a:e9:f9:ee:e3:26:3e:5c:55:b8:d7:1a: 02:4f:5c:9c:62:56:ce:ac:eb:21:b4:dc:88:18:f1: 07:be:0b:17:9d:38:ea:d3:49:0f:a6:5b:01:ca:76: db:67:08:1f:db:a2:98:17:34:36:b3:48:69:da:f9: 37:18:49:97:d9:c7:7a:d1:e9:77:92:d4:b8:38:6b: ff:c6:64:42:64:d0:97:bc:9e:a8:cd:4c:b7:a8:85: 9d:f2:5a:d0:f1:b6:ce:fd:b9:64:47:8d:5b:5a:eb: da:86:8b:6a:77:af:d2:10:ef:c1:40:40:5b:7c:41: 38:25:42:e8:db:99:d2:54:51:1b:47:a8:80:9c:61: 47:ca:ae:45:4c:ba:63:85:ec:3f:04:29:ba:08:82: 4f:15:e3:b2:2c:5e:8a:ec:6e:5e:38:4d:fe:24:99: c1:ca:44:ee:29:25:0f:b7:e2:e3:39:a8:65:5f:4b: d2:eb:83:3c:49:68:39:9b:d3:90:69:e9:99:fe:29: b8:2e:c1:29:96:57:7d:70:82:4e:1c:0c:43:9a:d4: 56:c0:24:9c:4f:ef:ad:fd:6b:fe:87:ba:c1:77:e6: 3b:a5:83:9b:db:39:e3:49:97:9a:e3:ef:33:80:47: 26:83:e0:dd:d9:87:d6:08:1f:4b:52:da:7d:c0:93: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5F:92:A9:08:58:D5:6F:0B:02:21:DE:C9:AC:2F:65:D2:5A:F7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/35ac175d-d37d-3848-97bf-95b3456aee02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl X509v3 Authority Key Identifier: keyid:99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer sbgp-ipAddrBlock: critical IPv6: 2604:3a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e7:2c:b3:68:f1:2e:5e:c9:bf:c7:d3:97:de:f0:60:c2:ce: ef:32:77:1d:40:46:58:f0:29:20:6c:2f:cd:95:51:96:40:5c: 4a:e8:a7:21:68:ad:5e:f8:05:ba:32:ca:47:1b:86:a9:6f:0b: 51:c0:ee:e7:84:53:ed:1a:ad:ac:38:43:90:6a:cb:44:71:3a: 05:53:d1:30:a6:d4:56:5c:22:84:17:e0:a7:93:da:fb:a0:6c: 05:c7:d2:c2:f7:df:12:77:11:36:78:41:61:aa:1a:e3:2a:ac: ae:2f:c5:18:cc:fa:7b:ab:01:f2:35:36:97:42:1e:0c:ce:13: 5e:76:73:4f:b3:b6:53:21:7f:65:6b:84:b2:fc:37:de:fd:ff: 0c:e8:bc:a3:dc:31:82:78:5a:ec:e6:2b:d4:2e:08:b3:3d:77: f7:4c:44:df:49:ec:b1:8a:7f:f1:78:56:3c:a9:69:47:3e:9c: e0:59:29:07:97:18:f1:ce:e1:c0:c0:7c:23:66:15:c3:de:42: 3d:2c:18:3e:55:1c:ae:d9:da:4a:4e:f4:89:6a:7e:2b:46:1d: 5a:e3:c5:6b:05:e8:2c:33:79:ee:27:3b:f5:4f:61:1f:c5:d1: 09:8f:5e:b5:81:e4:9b:6c:7f:9a:f9:d6:d7:14:56:69:8c:6c: 7a:a3:c4:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt04+Qtzu76EnB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM4ZjBmZWEtNGQzNy00MTU0LTk5MDktZDdmYjE2ZDc4 ODU2MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NWE3Y2UyZmYtZWNjZS00Y2EzLWFlZWYtNzczYTkwZGYyZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGhK6fnu4yY+XFW41xoCT1ycYlbOrOshtNyI GPEHvgsXnTjq00kPplsBynbbZwgf26KYFzQ2s0hp2vk3GEmX2cd60el3ktS4OGv/ xmRCZNCXvJ6ozUy3qIWd8lrQ8bbO/blkR41bWuvahotqd6/SEO/BQEBbfEE4JULo 25nSVFEbR6iAnGFHyq5FTLpjhew/BCm6CIJPFeOyLF6K7G5eOE3+JJnBykTuKSUP t+LjOahlX0vS64M8SWg5m9OQaemZ/im4LsEplld9cIJOHAxDmtRWwCScT++t/Wv+ h7rBd+Y7pYOb2znjSZea4+8zgEcmg+Dd2YfWCB9LUtp9wJOB0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNJfkqkIWNVvCwIh3smsL2XSWvfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzhm MGZlYS00ZDM3LTQxNTQtOTkwOS1kN2ZiMTZkNzg4NTYvMzVhYzE3NWQtZDM3ZC0z ODQ4LTk3YmYtOTViMzQ1NmFlZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM4ZjBmZWEtNGQzNy00MTU0LTk5 MDktZDdmYjE2ZDc4ODU2LzFjOGYwZmVhLTRkMzctNDE1NC05OTA5LWQ3ZmIxNmQ3 ODg1Ni5jcmwwHwYDVR0jBBgwFoAUmbHNPC3VXnALETGq017gYgdqFFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzhmMGZlYS00ZDM3LTQxNTQtOTkwOS1kN2Zi MTZkNzg4NTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQDoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAE5yyzaPEuXsm/x9OX3vBgws7vMncdQEZY8CkgbC/NlVGWQFxK6Kch aK1e+AW6MspHG4apbwtRwO7nhFPtGq2sOEOQastEcToFU9EwptRWXCKEF+Cnk9r7 oGwFx9LC998SdxE2eEFhqhrjKqyuL8UYzPp7qwHyNTaXQh4MzhNednNPs7ZTIX9l a4Sy/Dfe/f8M6Lyj3DGCeFrs5ivULgizPXf3TETfSeyxin/xeFY8qWlHPpzgWSkH lxjxzuHAwHwjZhXD3kI9LBg+VRyu2dpKTvSJan4rRh1a48VrBegsM3nuJzv1T2Ef xdEJj161geSbbH+a+dbXFFZpjGx6o8R6 -----END CERTIFICATE-----Generated at Sun Oct 19 18:00:58 2025 by rpki-client