$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa File: f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa (raw, json) Hash identifier: 1KMcbgq5tOYiqEO5citXdpD0MVCCmLGnGPaafI8BHto= Subject key identifier: BC:B7:1D:2B:7B:72:DB:42:12:AB:2A:29:C2:32:38:85:0D:C1:79:E6 Certificate issuer: /CN=a04b5188-7d31-4ad3-8474-090b809c8408 Certificate serial: 010D0C9F4328584B7B21F742B5C129CDA933DC40 Authority key identifier: B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 54235 IP address blocks: 2604:d980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f7:42:b5:c1:29:cd:a9:33:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04b5188-7d31-4ad3-8474-090b809c8408 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=d87323c0-696f-467f-a8d8-c9a0bf4f0075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cb:34:a4:fd:a9:6a:72:c8:10:20:67:c6:02: b6:22:c5:79:50:ec:26:92:d2:cc:99:ce:98:23:c0: 00:bd:c8:89:6f:fc:ab:d2:67:3b:72:36:6f:fb:56: fd:30:9d:38:2a:97:02:ff:ec:0d:5f:96:ad:2a:09: f5:f1:a4:4f:57:a7:57:d2:7b:88:9c:9d:3b:90:1b: 82:d4:d6:ed:0b:51:31:ef:bc:0e:2a:4f:58:08:cf: d6:b0:0d:1a:a8:a7:2d:5f:6c:48:3d:c3:0e:0b:af: 69:4d:be:b2:dd:6b:18:2f:b5:c4:e3:76:2c:c1:9d: 24:c4:92:54:61:4a:8c:dc:75:37:cc:1f:00:a9:e3: cb:59:ec:56:65:b0:8e:13:7d:bc:03:52:2e:5c:47: 4e:e4:dd:7f:72:ea:57:4f:b6:b8:01:2f:19:85:3c: a6:c1:89:66:e3:ff:ff:14:8b:00:f6:cd:dd:81:91: 09:6b:eb:4a:63:92:3d:25:2d:5c:b0:6a:bd:78:45: eb:4a:a7:5b:c1:42:ec:1e:3f:07:56:a6:80:33:0a: 77:0f:5f:3f:44:a8:c9:b0:38:f2:2f:28:8e:e2:ab: e2:10:d2:34:38:1e:4d:63:31:b6:77:fd:35:24:80: 86:8c:0c:30:4b:93:82:20:4b:9e:70:ae:e3:40:22: 5b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B7:1D:2B:7B:72:DB:42:12:AB:2A:29:C2:32:38:85:0D:C1:79:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl X509v3 Authority Key Identifier: keyid:B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer sbgp-ipAddrBlock: critical IPv6: 2604:d980::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:bb:f5:9a:77:21:41:1a:00:9c:ca:73:be:47:be:f2:4f:c3: 0a:b0:65:9f:c5:71:47:b8:b6:ff:77:47:ff:03:46:16:a6:1b: f4:88:89:cf:dc:60:a4:63:c1:cc:b9:5c:56:08:e5:e0:b1:45: c4:00:f7:0c:a8:b1:2c:a4:c6:56:55:1e:d6:3f:f4:aa:d9:6d: f8:86:29:10:83:8f:22:23:65:a3:8d:0c:9e:65:56:37:5e:a6: b6:6b:ca:13:13:69:82:d5:28:7a:68:3d:6e:c7:8c:af:c1:be: 08:5c:a9:14:ff:77:2f:aa:e0:5e:be:35:ed:e2:81:22:59:53: ae:1a:5b:46:c1:e4:8e:9b:c2:74:56:37:c6:58:e2:a1:d5:2d: 0b:a5:d7:f3:4f:12:c5:a3:b8:91:f7:83:dc:78:a7:53:38:42: 26:91:22:32:47:1a:be:43:d4:02:6d:b3:a7:19:36:dd:f7:4c: b4:f0:fb:2b:e1:d7:d0:2c:06:9b:60:07:1e:a8:ce:e8:b7:d6: fe:f0:78:32:78:d5:e2:63:f6:6b:aa:1a:1f:38:c1:b3:0e:a4: 10:d8:af:ae:f9:53:9a:a0:69:f6:3a:73:88:95:af:78:d1:a9: 77:9c:61:98:ba:22:13:e3:86:2a:ef:bd:c7:05:ef:d8:53:52: 19:66:2f:ae -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt7IfdCtcEpzakz3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA0YjUxODgtN2QzMS00YWQzLTg0NzQtMDkwYjgwOWM4 NDA4MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZDg3MzIzYzAtNjk2Zi00NjdmLWE4ZDgtYzlhMGJmNGYwMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMs0pP2panLIECBnxgK2IsV5UOwmktLMmc6Y I8AAvciJb/yr0mc7cjZv+1b9MJ04KpcC/+wNX5atKgn18aRPV6dX0nuInJ07kBuC 1NbtC1Ex77wOKk9YCM/WsA0aqKctX2xIPcMOC69pTb6y3WsYL7XE43YswZ0kxJJU YUqM3HU3zB8AqePLWexWZbCOE328A1IuXEdO5N1/cupXT7a4AS8ZhTymwYlm4/// FIsA9s3dgZEJa+tKY5I9JS1csGq9eEXrSqdbwULsHj8HVqaAMwp3D18/RKjJsDjy LyiO4qviENI0OB5NYzG2d/01JICGjAwwS5OCIEuecK7jQCJbPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLy3HSt7cttCEqsqKcIyOIUNwXnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMDRi NTE4OC03ZDMxLTRhZDMtODQ3NC0wOTBiODA5Yzg0MDgvZjJkMzdiNmMtMDFkYi0z OGYyLWE3ZDYtYzJlMTNmN2MzY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTA0YjUxODgtN2QzMS00YWQzLTg0 NzQtMDkwYjgwOWM4NDA4L2EwNGI1MTg4LTdkMzEtNGFkMy04NDc0LTA5MGI4MDlj ODQwOC5jcmwwHwYDVR0jBBgwFoAUsBhgLgFx2lIbU9PBAiEKyUM8+LAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMDRiNTE4OC03ZDMxLTRhZDMtODQ3NC0wOTBi ODA5Yzg0MDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTZgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRu/WadyFBGgCcynO+R77yT8MKsGWfxXFHuLb/d0f/A0YWphv0iInP 3GCkY8HMuVxWCOXgsUXEAPcMqLEspMZWVR7WP/Sq2W34hikQg48iI2WjjQyeZVY3 Xqa2a8oTE2mC1Sh6aD1ux4yvwb4IXKkU/3cvquBevjXt4oEiWVOuGltGweSOm8J0 VjfGWOKh1S0LpdfzTxLFo7iR94PceKdTOEImkSIyRxq+Q9QCbbOnGTbd90y08Psr 4dfQLAabYAceqM7ot9b+8HgyeNXiY/ZrqhofOMGzDqQQ2K+u+VOaoGn2OnOIla94 0al3nGGYuiIT44Yq773HBe/YU1IZZi+u -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:40 2025 by rpki-client